$ rpki-client -vvf repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft File: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft (raw, json) Hash identifier: WUXhz+YGCbRjQ2Ih7HdEZE4uuZAG479F+71G5mUv/TU= Subject key identifier: 45:F1:D9:29:22:DD:2E:D7:2A:20:18:5D:04:F7:64:1D:3D:8D:81:B0 Authority key identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 Certificate issuer: /CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Certificate serial: 291E6629556514AFBED5ED3CED95C727A0F59A65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft Manifest number: 016F Signing time: Sat 06 Sep 2025 07:51:19 +0000 Manifest this update: Sat 06 Sep 2025 07:46:19 +0000 Manifest next update: Tue 09 Sep 2025 09:33:19 +0000 Files and hashes: 1: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl (hash: WXoQpunruG1zrfaIjNUivKlILCy+fuzOCU1RVk//7Ks=) 2: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: 6LXlbR4cNb7e/a5cj5XOa29IvaWvdwclgoGKyPVr99g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 09:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1e:66:29:55:65:14:af:be:d5:ed:3c:ed:95:c7:27:a0:f5:9a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Validity Not Before: Sep 6 07:46:19 2025 GMT Not After : Sep 9 09:33:19 2025 GMT Subject: CN=45F1D92922DD2ED72A20185D04F7641D3D8D81B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d6:15:79:8a:d4:27:62:7d:33:ba:ed:a9:a1: be:0c:f2:56:ad:17:73:6f:40:1c:fd:bf:19:77:22: de:26:36:97:87:1f:9b:59:48:cd:5d:6d:ce:fc:1a: 62:22:17:49:7f:7e:23:05:79:72:40:db:ef:b2:00: 79:72:40:3f:e0:e7:51:a3:60:a9:cb:d3:51:aa:97: 81:e5:83:2f:cc:5c:43:f4:ab:5a:eb:eb:83:e0:88: 17:79:0e:44:f9:f3:eb:bf:ca:49:d5:94:ac:40:6b: 52:82:fd:5d:ad:a7:32:43:d4:08:e7:ec:75:e8:74: 2f:85:37:bf:3b:db:c3:b1:9c:86:76:4d:01:86:2b: c4:3e:18:52:79:5a:1d:c0:64:0a:76:17:94:99:0b: 82:57:53:e4:97:12:85:17:e6:d1:ad:0c:2a:09:6e: c4:33:59:bd:0d:49:34:4b:fa:56:d9:f5:fc:94:03: 0d:f4:e4:6b:bc:4a:e7:84:67:cc:84:27:15:be:12: e8:7d:19:82:9f:39:f0:9a:1e:de:98:52:7c:04:52: 6a:cb:cb:b8:02:3c:8e:f1:b9:48:03:85:4a:3f:a4: a6:37:ee:b3:87:96:97:4b:a9:23:3e:ba:74:01:71: 8e:f8:c5:70:a3:32:bd:69:70:3e:4f:eb:a4:55:15: 5e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F1:D9:29:22:DD:2E:D7:2A:20:18:5D:04:F7:64:1D:3D:8D:81:B0 X509v3 Authority Key Identifier: keyid:27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d6:63:73:dd:09:f5:5c:2a:3a:94:6e:07:81:1f:fc:94:80: fb:9e:85:bb:ff:03:a9:3a:0d:04:0a:30:51:c1:62:09:76:85: 2a:b6:c2:5e:f8:30:17:49:1e:73:d5:90:a3:c9:3a:9e:9f:74: 35:1d:65:ae:e9:e9:13:8f:95:cd:37:6f:bf:c7:a4:94:78:53: d6:9e:92:22:96:61:42:6c:a8:bc:23:9e:41:fa:d8:7f:c7:98: cc:0a:8c:b4:0e:25:a9:54:f7:ea:31:99:52:9d:44:a0:e3:20: 07:01:a8:6c:63:bd:5f:33:cf:a5:ec:a3:2a:c1:56:09:fc:ed: 8b:33:d3:3f:f3:06:d7:0c:aa:61:26:ca:9e:55:2d:37:ba:31: c7:2e:2f:0f:d9:09:cb:92:7b:2f:74:5e:44:8b:7f:29:66:f7: 09:a8:b3:40:32:0d:6f:73:54:9f:46:44:99:47:f4:f1:d2:80: c4:9c:56:d5:1e:32:0d:d1:b8:23:b6:3a:30:3d:39:c6:3a:0a: b4:78:d4:02:87:15:2a:e2:6c:6b:06:c2:57:b1:21:0d:6e:4e: b6:fe:cc:a1:c4:b5:0c:8b:b0:0b:2b:7b:49:2e:77:d8:df:bf: 73:77:f3:45:e6:4c:a6:5a:a6:61:8f:53:62:3a:b2:82:dc:48: ba:87:d6:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKR5mKVVlFK++1e087ZXHJ6D1mmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFBQkQy RDEzN0Q1MTAeFw0yNTA5MDYwNzQ2MTlaFw0yNTA5MDkwOTMzMTlaMDMxMTAvBgNV BAMTKDQ1RjFEOTI5MjJERDJFRDcyQTIwMTg1RDA0Rjc2NDFEM0Q4RDgxQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX1hV5itQnYn0zuu2pob4M8lat F3NvQBz9vxl3It4mNpeHH5tZSM1dbc78GmIiF0l/fiMFeXJA2++yAHlyQD/g51Gj YKnL01Gql4Hlgy/MXEP0q1rr64PgiBd5DkT58+u/yknVlKxAa1KC/V2tpzJD1Ajn 7HXodC+FN78728OxnIZ2TQGGK8Q+GFJ5Wh3AZAp2F5SZC4JXU+SXEoUX5tGtDCoJ bsQzWb0NSTRL+lbZ9fyUAw305Gu8SueEZ8yEJxW+Euh9GYKfOfCaHt6YUnwEUmrL y7gCPI7xuUgDhUo/pKY37rOHlpdLqSM+unQBcY74xXCjMr1pcD5P66RVFV7fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURfHZKSLdLtcqIBhdBPdkHT2NgbAwHwYDVR0j BBgwFoAUJ8aohBdkGFGS07fj/G0avS0TfVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTMwYWM2NC0wZjEzLTQxNjItOTY4Zi1hZmU1Y2M3MTRjZjYvMC8yN0M2QTg4NDE3 NjQxODUxOTJEM0I3RTNGQzZEMUFCRDJEMTM3RDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFBQkQyRDEz N0Q1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUzMGFjNjQtMGYxMy00MTYyLTk2 OGYtYWZlNWNjNzE0Y2Y2LzAvMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFB QkQyRDEzN0Q1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHWY3PdCfVcKjqUbgeBH/yUgPuehbv/A6k6 DQQKMFHBYgl2hSq2wl74MBdJHnPVkKPJOp6fdDUdZa7p6ROPlc03b7/HpJR4U9ae kiKWYUJsqLwjnkH62H/HmMwKjLQOJalU9+oxmVKdRKDjIAcBqGxjvV8zz6XsoyrB Vgn87Ysz0z/zBtcMqmEmyp5VLTe6MccuLw/ZCcuSey90XkSLfylm9wmos0AyDW9z VJ9GRJlH9PHSgMScVtUeMg3RuCO2OjA9OcY6CrR41AKHFSribGsGwlexIQ1uTrb+ zKHEtQyLsAsre0kud9jfv3N380XmTKZapmGPU2I6soLcSLqH1tc= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:50 2025 by rpki-client