$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft File: 27992B841C717A90B3FDBD81B476F3FF9045212D.mft (raw, json) Hash identifier: AljpB1K7Ew8+LhcsLxFpT3U4BbN63pbSa5DHwTOxLrA= Subject key identifier: BF:57:DC:61:85:D4:D6:7F:D4:79:5D:E7:D3:C1:BA:7F:8C:19:FF:4E Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D Certificate serial: 61D69332A066BFDBBAA35A89360B5B6C1A1AB3B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft Manifest number: 011B Signing time: Fri 05 Sep 2025 09:10:05 +0000 Manifest this update: Fri 05 Sep 2025 09:05:05 +0000 Manifest next update: Mon 08 Sep 2025 15:22:05 +0000 Files and hashes: 1: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: M98dO/m+ycrBeg1CtOIteFJftV3RCXQ2eLl/At2g8+Q=) 2: 27992B841C717A90B3FDBD81B476F3FF9045212D.crl (hash: LvLBf2zMm2j5bOT357VSzTMZi2aGQNExxmrNCDBSoVw=) 3: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: chZgSebYL3AyASorKFgZxAtVxsXGef1bjWlqKc1bcs8=) 4: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: Cf8zuOBPe5ne4FbCX/nB71vXdpt4+lQ9NgMPpci6uTA=) 5: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: Ywn1UEJnpT1UpuAh2VB4UnPn+99/TPlQAq9uS4gdn7I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d6:93:32:a0:66:bf:db:ba:a3:5a:89:36:0b:5b:6c:1a:1a:b3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D Validity Not Before: Sep 5 09:05:05 2025 GMT Not After : Sep 8 15:22:05 2025 GMT Subject: CN=BF57DC6185D4D67FD4795DE7D3C1BA7F8C19FF4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:0c:13:bd:c4:12:5d:09:28:59:3c:22:0d: 6a:81:6d:0e:5c:b8:9e:f9:ed:a1:60:9c:85:9a:c7: 04:6d:11:86:fd:37:9c:8c:2f:03:f7:df:63:cb:0f: a4:aa:a1:bf:e9:aa:15:d6:a9:cc:31:56:33:76:c1: 14:8a:e9:7a:96:bc:e3:bf:e0:5e:43:dd:de:84:1b: e2:01:dd:81:aa:d4:26:f2:4a:ff:c9:c9:c3:d9:33: f3:2f:2d:b9:02:19:aa:39:5f:e6:6d:0c:3f:93:35: d1:da:8d:30:94:1c:00:0f:1c:19:c8:39:8d:ed:70: c1:ed:a8:e4:3b:fe:09:b3:04:be:95:b2:cf:aa:6c: bc:5e:21:bc:c9:1a:0c:ba:b2:f6:e6:b3:59:2f:d8: 64:c5:ce:f1:79:1c:34:97:a6:c5:cc:fe:2d:b9:45: 1b:4b:d5:72:80:10:fb:73:86:39:bd:7d:e6:ea:ef: 38:32:fb:5b:b5:b1:95:80:98:37:8f:e4:04:cc:c4: 4f:40:9f:92:f0:30:83:13:08:81:35:0c:82:0d:f7: ca:5a:68:fc:50:9e:0e:ff:75:53:86:64:45:66:0b: b5:5b:9a:37:f9:f6:85:73:f5:c8:9e:9d:b8:a4:96: d1:f5:a6:37:6e:90:b3:b6:69:b0:2c:4a:82:d0:b6: af:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:57:DC:61:85:D4:D6:7F:D4:79:5D:E7:D3:C1:BA:7F:8C:19:FF:4E X509v3 Authority Key Identifier: keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:35:41:84:a7:02:64:8c:25:45:b0:b0:2e:e4:c0:1b:21:be: 57:23:cf:f5:96:4d:41:a3:e1:49:20:6a:0d:de:e1:4d:cc:35: fc:26:e5:f9:78:8e:07:f3:dc:bb:8f:cb:cd:bf:87:6e:c0:7e: 59:61:d6:38:b2:06:f2:fd:72:6a:d2:ee:5a:e7:7e:8c:02:1b: 92:6f:8a:09:c4:43:92:98:9d:74:a3:d6:b5:b2:90:59:1a:cc: 2d:9e:7b:1a:ce:11:df:75:b4:9f:86:93:8a:9f:77:9a:9e:b4: 84:68:38:6e:0e:d8:9b:02:fe:9a:5c:15:72:5a:e0:25:f7:1a: 94:e2:32:49:c7:46:62:53:e3:b0:38:8d:56:6a:62:5c:c5:fe: 18:a1:93:64:e3:5c:8a:9b:25:91:10:c5:39:d2:30:4e:b6:15: 3c:4d:10:95:02:93:e2:78:b7:9b:67:32:be:33:d2:4c:5c:cb: 20:da:e0:0d:8f:fe:a0:3a:c2:53:0c:08:4c:12:7c:e9:89:05: d1:f6:f9:a9:bf:bd:59:6a:0a:9b:47:b8:12:54:d4:e5:4b:d4: 1f:32:fb:e0:72:ce:58:cc:bc:4f:74:a0:cd:2f:01:32:51:8f: 4b:ee:e2:31:7e:78:18:08:a6:2b:ca:76:85:2a:a6:c3:9e:5f: 19:e8:7f:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYdaTMqBmv9u6o1qJNgtbbBoas7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5 MDQ1MjEyRDAeFw0yNTA5MDUwOTA1MDVaFw0yNTA5MDgxNTIyMDVaMDMxMTAvBgNV BAMTKEJGNTdEQzYxODVENEQ2N0ZENDc5NURFN0QzQzFCQTdGOEMxOUZGNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjgwTvcQSXQkoWTwiDWqBbQ5c uJ757aFgnIWaxwRtEYb9N5yMLwP332PLD6Sqob/pqhXWqcwxVjN2wRSK6XqWvOO/ 4F5D3d6EG+IB3YGq1CbySv/JycPZM/MvLbkCGao5X+ZtDD+TNdHajTCUHAAPHBnI OY3tcMHtqOQ7/gmzBL6Vss+qbLxeIbzJGgy6svbms1kv2GTFzvF5HDSXpsXM/i25 RRtL1XKAEPtzhjm9febq7zgy+1u1sZWAmDeP5ATMxE9An5LwMIMTCIE1DIIN98pa aPxQng7/dVOGZEVmC7Vbmjf59oVz9cienbikltH1pjdukLO2abAsSoLQtq8xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv1fcYYXU1n/UeV3n08G6f4wZ/04wHwYDVR0j BBgwFoAUJ5krhBxxepCz/b2BtHbz/5BFIS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC8yNzk5MkI4NDFD NzE3QTkwQjNGREJEODFCNDc2RjNGRjkwNDUyMTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5MDQ1 MjEyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZlM2RkOTUtMmE4NS00MzllLTg0 ZjItOTcyYTIzZTMyNzFlLzAvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYz RkY5MDQ1MjEyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIA1QYSnAmSMJUWwsC7kwBshvlcjz/WWTUGj 4Ukgag3e4U3MNfwm5fl4jgfz3LuPy82/h27Afllh1jiyBvL9cmrS7lrnfowCG5Jv ignEQ5KYnXSj1rWykFkazC2eexrOEd91tJ+Gk4qfd5qetIRoOG4O2JsC/ppcFXJa 4CX3GpTiMknHRmJT47A4jVZqYlzF/hihk2TjXIqbJZEQxTnSME62FTxNEJUCk+J4 t5tnMr4z0kxcyyDa4A2P/qA6wlMMCEwSfOmJBdH2+am/vVlqCptHuBJU1OVL1B8y ++ByzljMvE90oM0vATJRj0vu4jF+eBgIpivKdoUqpsOeXxnof/c= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:42 2025 by rpki-client