$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft File: 27575AEBC443417C31FDF4A1DDFE016557A835F4.mft (raw, json) Hash identifier: 8ZtT5wewU9YpNsYuvHnt+cL3G1YGpaKDncD9AkrVwnA= Subject key identifier: 09:00:04:F0:3F:B0:17:EB:A4:6D:75:28:E7:16:10:77:92:F4:AB:AB Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Certificate serial: 068E795620D06EAF8886C5A0AA1FBA260A6830BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft Manifest number: 01CA Signing time: Fri 05 Sep 2025 15:51:32 +0000 Manifest this update: Fri 05 Sep 2025 15:46:32 +0000 Manifest next update: Mon 08 Sep 2025 19:18:32 +0000 Files and hashes: 1: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: WQermmKrjmkRkTYr0aG0+hIvHneRLS+rGSH7EGxbhwM=) 2: 27575AEBC443417C31FDF4A1DDFE016557A835F4.crl (hash: lkVd17zatTu9qMlkgr8vlDcSigI+PsAJHA8RC+WwsGg=) 3: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: Qxvz6cLTsvkF/5QoPFib9ZcEBwW2jqzLdFAQealXxXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 19:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:8e:79:56:20:d0:6e:af:88:86:c5:a0:aa:1f:ba:26:0a:68:30:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Validity Not Before: Sep 5 15:46:32 2025 GMT Not After : Sep 8 19:18:32 2025 GMT Subject: CN=090004F03FB017EBA46D7528E716107792F4ABAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:33:c8:dc:07:16:6c:5a:e2:0a:b3:f4:0e: 43:40:e8:2d:0b:9c:94:d2:53:26:1e:8a:7b:5f:3e: 4b:30:18:ea:11:07:e3:e2:3e:a5:ab:e9:65:6c:98: 79:fb:e8:46:ec:b5:33:24:6d:eb:f0:ed:7b:1c:2f: ee:34:f3:f1:ca:44:5c:2f:14:a6:94:84:97:c0:ea: ee:12:dd:16:b5:63:56:12:8e:f9:99:b2:4c:49:a1: 64:bb:33:bb:0f:d3:fc:a7:a0:d3:6e:2b:30:29:6e: e7:af:98:72:bd:0d:a7:9d:6b:ce:75:8e:9b:60:42: 35:16:79:e4:79:6f:54:90:5d:54:e2:5a:59:7b:25: cd:14:bc:58:3e:a0:23:17:7b:79:32:0f:a4:92:83: 22:ca:08:26:13:79:04:aa:70:63:16:28:f3:e6:9b: 9f:bf:c3:a6:64:e2:bc:9e:c9:9d:f6:b9:f2:68:0b: f3:f5:2e:61:95:5d:3c:b3:8b:7e:e1:9b:9c:e8:9b: c5:d4:55:bf:07:4b:fe:d7:8f:66:4d:48:9f:47:8f: 8c:47:2f:aa:b3:1f:62:78:08:ab:b1:d0:1a:6f:4a: 23:c7:66:15:ba:c6:f7:27:fa:cb:66:24:63:cc:46: 77:33:fc:fa:16:03:e2:1d:1d:3a:43:0f:06:12:bf: f6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:00:04:F0:3F:B0:17:EB:A4:6D:75:28:E7:16:10:77:92:F4:AB:AB X509v3 Authority Key Identifier: keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:35:87:c1:e4:77:41:d6:4d:c2:34:81:72:66:b6:8c:a5:91: 8b:a2:13:ab:fb:5f:c7:98:7c:03:db:38:6c:f6:83:13:01:a8: 1a:b2:64:9f:d9:eb:26:f8:c9:3d:d0:86:18:57:63:7f:ce:52: 7c:2f:2c:ae:f6:17:4b:7d:9b:af:c4:bf:d2:9c:d7:94:85:b1: cc:ee:61:c0:a7:4a:53:98:ed:6c:7e:8f:68:a9:a9:2d:1f:10: f0:5c:79:d6:40:28:c6:6f:7f:f9:72:50:40:be:3f:64:3c:bd: 53:60:56:11:65:41:ec:20:b7:64:02:21:42:3d:b9:2b:e8:fd: 50:a6:90:ac:63:ce:ea:90:c2:6a:7d:2e:85:cd:a3:b9:ce:c3: af:1d:55:cb:70:54:1a:a5:d3:a8:7a:68:b1:ed:26:e9:34:f1: 39:d2:1f:3c:3f:58:88:99:5f:00:5a:3f:61:f4:fb:4d:87:69: e4:0c:49:c7:c8:7c:6b:1d:3b:78:cd:24:77:f0:68:bf:a2:33: 8e:d1:8c:63:e8:5e:bc:00:cf:14:81:86:72:24:3e:ad:15:bb: 95:cc:8d:98:b1:03:c4:23:88:07:33:e9:e5:a1:27:f1:e9:68: 83:ea:40:63:a4:79:9d:bc:a4:78:0a:74:e0:17:41:73:31:65: a8:c9:7b:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBo55ViDQbq+IhsWgqh+6JgpoMLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1 N0E4MzVGNDAeFw0yNTA5MDUxNTQ2MzJaFw0yNTA5MDgxOTE4MzJaMDMxMTAvBgNV BAMTKDA5MDAwNEYwM0ZCMDE3RUJBNDZENzUyOEU3MTYxMDc3OTJGNEFCQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79zPI3AcWbFriCrP0DkNA6C0L nJTSUyYeintfPkswGOoRB+PiPqWr6WVsmHn76EbstTMkbevw7XscL+408/HKRFwv FKaUhJfA6u4S3Ra1Y1YSjvmZskxJoWS7M7sP0/ynoNNuKzApbuevmHK9Daeda851 jptgQjUWeeR5b1SQXVTiWll7Jc0UvFg+oCMXe3kyD6SSgyLKCCYTeQSqcGMWKPPm m5+/w6Zk4ryeyZ32ufJoC/P1LmGVXTyzi37hm5zom8XUVb8HS/7Xj2ZNSJ9Hj4xH L6qzH2J4CKux0BpvSiPHZhW6xvcn+stmJGPMRncz/PoWA+IdHTpDDwYSv/bjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCQAE8D+wF+ukbXUo5xYQd5L0q6swHwYDVR0j BBgwFoAUJ1da68RDQXwx/fSh3f4BZVeoNfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMC8yNzU3NUFFQkM0 NDM0MTdDMzFGREY0QTFEREZFMDE2NTU3QTgzNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1N0E4 MzVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM2YjU5N2MtOTU0Ny00YzFlLWFj ODctM2E0MzRhMzAwYTY3LzAvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAx NjU1N0E4MzVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA41h8Hkd0HWTcI0gXJmtoylkYuiE6v7X8eY fAPbOGz2gxMBqBqyZJ/Z6yb4yT3QhhhXY3/OUnwvLK72F0t9m6/Ev9Kc15SFsczu YcCnSlOY7Wx+j2ipqS0fEPBcedZAKMZvf/lyUEC+P2Q8vVNgVhFlQewgt2QCIUI9 uSvo/VCmkKxjzuqQwmp9LoXNo7nOw68dVctwVBql06h6aLHtJuk08TnSHzw/WIiZ XwBaP2H0+02HaeQMScfIfGsdO3jNJHfwaL+iM47RjGPoXrwAzxSBhnIkPq0Vu5XM jZixA8QjiAcz6eWhJ/HpaIPqQGOkeZ28pHgKdOAXQXMxZajJe4A= -----END CERTIFICATE-----Generated at Sun Sep 7 15:29:13 2025 by rpki-client