
$ rpki-client -vvf repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
File:                     027DBEC91021154263BB0CF1565833705023D987.mft (raw, json)
Hash identifier:          EvngfUUUCAyladOFJQbYYDUc5/PYLh7+2YlSR7JqdCc=
Subject key identifier:   9B:E6:DB:46:B0:C3:76:98:22:ED:03:E5:54:6A:C6:35:C9:89:0C:D5
Authority key identifier: 02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87
Certificate issuer:       /CN=027DBEC91021154263BB0CF1565833705023D987
Certificate serial:       698CA8421DBC2839A340DF482E62F87AC2948234
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
Manifest number:          01A1
Signing time:             Sun 02 Nov 2025 05:21:34 +0000
Manifest this update:     Sun 02 Nov 2025 05:16:34 +0000
Manifest next update:     Wed 05 Nov 2025 15:51:34 +0000
Files and hashes:         1: 323430333a653338303a313030333a3a2f34382d3438203d3e20313334363337.roa (hash: +8j/+dJRSTef74GymJkmGO/MtwJTWy9qHlKrlCS2oR4=)
                          2: 3230322e3136302e3133392e302f32342d3234203d3e20313334363337.roa (hash: yivIGajIGBwCERemZ/qApItbcLMFzhrw+o0muoO7pyo=)
                          3: 323430333a653338303a313030323a3a2f34382d3438203d3e20313334363337.roa (hash: 2BQG0lP9Zs1EjExB89HW6Zq7y6r/wXETmMZ3S/1VixI=)
                          4: 027DBEC91021154263BB0CF1565833705023D987.crl (hash: HQm9kxBiElsHxSd1ctrMoXqBrijylaynimYiVcXUlJc=)
                          5: 323430333a653338303a3a2f33322d3332203d3e20313334363337.roa (hash: U7L8CMVLZEavXmnK/mp5PFEjMg9cgSL8vuQSoK3hk4M=)
                          6: 323430333a653338303a313030313a3a2f34382d3438203d3e20313334363337.roa (hash: r6mE1hwqe5AJWkOHIz2I388PWuZTnmkeKpmw8+YPM38=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl
                          rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 15:51:34 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8c:a8:42:1d:bc:28:39:a3:40:df:48:2e:62:f8:7a:c2:94:82:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027DBEC91021154263BB0CF1565833705023D987
        Validity
            Not Before: Nov  2 05:16:34 2025 GMT
            Not After : Nov  5 15:51:34 2025 GMT
        Subject: CN=9BE6DB46B0C3769822ED03E5546AC635C9890CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:10:6c:a5:4b:37:2f:c0:7e:41:dd:c1:ff:
                    4f:b5:4e:e3:40:0d:b5:dd:f8:8c:a1:27:27:7c:a1:
                    b2:f2:2d:dc:98:cb:59:1f:d9:73:4b:4a:15:e1:0e:
                    86:f5:c2:c5:b5:83:5c:62:d2:2e:31:0e:b3:45:73:
                    4b:9d:30:2c:c8:7b:16:36:5a:67:75:dd:60:65:c4:
                    42:55:fa:d1:9a:6e:af:ec:21:23:fc:bf:29:35:78:
                    f6:f7:fc:44:46:4f:c8:2f:27:e8:28:f6:95:a7:3d:
                    e1:95:fd:f1:c8:c1:d6:7d:b6:9d:b8:90:0e:78:88:
                    85:7a:b7:c8:c8:47:d5:6e:d2:a1:b4:9c:17:10:27:
                    c8:98:3c:fd:67:bc:68:3e:b1:18:bb:d4:83:1e:bd:
                    55:e1:10:13:05:3b:c1:21:e0:47:cd:5f:21:44:67:
                    1b:bf:31:bc:b3:e1:8c:43:61:c0:42:e5:de:e2:36:
                    6e:42:9f:24:99:56:4c:66:78:8b:cc:cf:76:9d:2b:
                    a7:5f:9c:2b:c7:5f:91:dc:66:45:88:fd:53:67:57:
                    21:b3:66:4e:09:64:73:07:b8:d9:1d:91:f7:97:6c:
                    bb:9e:40:d5:8d:c8:a1:11:74:db:a3:f0:17:24:de:
                    b4:db:85:75:9d:95:e2:f8:46:18:ee:99:b1:f8:92:
                    9c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E6:DB:46:B0:C3:76:98:22:ED:03:E5:54:6A:C6:35:C9:89:0C:D5
            X509v3 Authority Key Identifier:
                keyid:02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         53:8d:9f:6b:10:55:3e:bd:83:37:4a:33:16:1e:fe:c4:eb:03:
         50:1a:43:5c:12:fa:fa:4a:34:33:20:eb:1c:40:59:ee:57:6a:
         c0:1b:27:29:10:de:3f:72:0f:96:b6:d3:6a:a4:49:0e:3e:f0:
         69:49:59:6d:a2:67:ca:57:c8:cd:9c:39:9e:18:cb:d5:b2:25:
         68:a8:a5:5f:2f:16:96:16:39:48:02:02:b8:b6:f4:fe:3a:94:
         ef:9d:af:67:15:77:7e:a1:f0:31:9e:8d:9d:e5:18:3c:93:d5:
         5f:86:2f:d8:2a:89:11:a4:01:81:1a:ee:3f:d6:91:8b:fe:ab:
         0d:59:56:15:e7:82:bf:b4:6a:3a:57:bd:a7:ea:1b:d6:e2:2d:
         02:3b:be:71:5b:0a:78:04:73:9a:22:39:94:9d:97:91:79:7e:
         d6:fd:4c:42:7d:9e:71:51:02:68:33:65:e4:2d:71:8f:85:50:
         76:25:74:0c:08:6b:72:aa:cf:08:77:c4:96:ca:24:d2:6b:dd:
         82:5b:10:a3:17:f8:f8:e3:ea:ba:7d:05:a1:1c:12:74:7c:87:
         1d:d0:28:54:bd:06:d7:1b:6f:0f:3d:26:78:8a:01:16:21:e7:
         d1:77:aa:b3:5f:f8:7e:bd:6c:ae:40:9b:1a:69:48:a2:51:76:
         ae:d1:02:ce
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaYyoQh28KDmjQN9ILmL4esKUgjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMzNzA1
MDIzRDk4NzAeFw0yNTExMDIwNTE2MzRaFw0yNTExMDUxNTUxMzRaMDMxMTAvBgNV
BAMTKDlCRTZEQjQ2QjBDMzc2OTgyMkVEMDNFNTU0NkFDNjM1Qzk4OTBDRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNdxBspUs3L8B+Qd3B/0+1TuNA
DbXd+IyhJyd8obLyLdyYy1kf2XNLShXhDob1wsW1g1xi0i4xDrNFc0udMCzIexY2
Wmd13WBlxEJV+tGabq/sISP8vyk1ePb3/ERGT8gvJ+go9pWnPeGV/fHIwdZ9tp24
kA54iIV6t8jIR9Vu0qG0nBcQJ8iYPP1nvGg+sRi71IMevVXhEBMFO8Eh4EfNXyFE
Zxu/Mbyz4YxDYcBC5d7iNm5CnySZVkxmeIvMz3adK6dfnCvHX5HcZkWI/VNnVyGz
Zk4JZHMHuNkdkfeXbLueQNWNyKERdNuj8Bck3rTbhXWdleL4RhjumbH4kpxrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUm+bbRrDDdpgi7QPlVGrGNcmJDNUwHwYDVR0j
BBgwFoAUAn2+yRAhFUJjuwzxVlgzcFAj2YcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NzRmMjE0YS1iZjU1LTQwNDgtODQ1ZC0yMDY3NWZiNWYyYTQvMC8wMjdEQkVDOTEw
MjExNTQyNjNCQjBDRjE1NjU4MzM3MDUwMjNEOTg3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMzNzA1MDIz
RDk4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDc0ZjIxNGEtYmY1NS00MDQ4LTg0
NWQtMjA2NzVmYjVmMmE0LzAvMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMz
NzA1MDIzRDk4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFONn2sQVT69gzdKMxYe/sTrA1AaQ1wS+vpK
NDMg6xxAWe5XasAbJykQ3j9yD5a202qkSQ4+8GlJWW2iZ8pXyM2cOZ4Yy9WyJWio
pV8vFpYWOUgCAri29P46lO+dr2cVd36h8DGejZ3lGDyT1V+GL9gqiRGkAYEa7j/W
kYv+qw1ZVhXngr+0ajpXvafqG9biLQI7vnFbCngEc5oiOZSdl5F5ftb9TEJ9nnFR
AmgzZeQtcY+FUHYldAwIa3Kqzwh3xJbKJNJr3YJbEKMX+Pjj6rp9BaEcEnR8hx3Q
KFS9Btcbbw89JniKARYh59F3qrNf+H69bK5AmxppSKJRdq7RAs4=
-----END CERTIFICATE-----
Generated at Tue Nov  4 12:46:32 2025 by rpki-client