$ rpki-client -vvf repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft File: 27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft (raw, json) Hash identifier: 22GmmnYeXZ+tcD4iGMF70k/Piz776+y4czJjpLIxVK4= Subject key identifier: 5D:18:5F:4F:50:2B:FD:84:10:9C:CE:77:F6:FC:AD:96:77:FD:40:BC Authority key identifier: 27:B2:CE:96:FA:E8:E1:76:3A:3C:30:DB:33:C3:BB:D8:F0:51:83:8B Certificate issuer: /CN=27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B Certificate serial: 4A032A7E71C7FF7406704FA4A5F200F0C3882007 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft Manifest number: 0145 Signing time: Tue 04 Nov 2025 01:10:41 +0000 Manifest this update: Tue 04 Nov 2025 01:05:41 +0000 Manifest next update: Fri 07 Nov 2025 08:26:41 +0000 Files and hashes: 1: 3137352e3131312e39362e302f32342d3234203d3e20313531393935.roa (hash: xQP0pjDgC0pPyWEl2qOcCOaX00jzJQQKAN2sTOVKJqE=) 2: 27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.crl (hash: wpKIYVL5EubmV8XM5HwM4rtH9Kv7/H0z6guDBYW7Lz4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.crl rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:03:2a:7e:71:c7:ff:74:06:70:4f:a4:a5:f2:00:f0:c3:88:20:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B Validity Not Before: Nov 4 01:05:41 2025 GMT Not After : Nov 7 08:26:41 2025 GMT Subject: CN=5D185F4F502BFD84109CCE77F6FCAD9677FD40BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:36:5a:6b:6a:af:6d:d3:14:e8:23:9e:6d: 59:44:69:02:00:ea:d7:8f:b6:4a:4a:64:7e:5c:7d: 19:7f:f7:09:14:02:13:e2:01:63:75:b6:be:f9:ac: 84:d4:bc:73:b3:16:4a:d2:61:79:71:b6:96:76:86: 3a:db:f6:ed:46:e2:d5:ec:3d:06:e0:f1:13:f5:60: fc:67:94:d9:f0:6a:77:f2:77:54:90:da:32:68:5d: 9e:60:5c:40:1e:2a:db:37:22:cb:dc:12:ec:61:21: 11:83:0a:88:98:f0:7b:18:79:ce:63:f8:52:b3:4c: c2:7b:71:11:8f:ae:3c:be:fc:1b:e0:e2:75:0d:a7: fa:df:11:8e:7e:e0:9e:57:47:57:82:c5:f4:ac:37: 03:2d:6a:b9:ca:cf:4d:8a:eb:9d:8e:6b:31:33:e2: fc:f2:27:de:f6:e9:99:3e:7d:c3:e4:82:0e:0a:4f: cc:4f:33:11:77:df:57:7a:2a:49:66:fd:c2:8f:fd: 69:e6:ff:97:e9:0c:aa:c9:96:e8:21:d7:a4:7d:93: 88:ae:21:36:ff:97:36:09:d1:50:4d:93:e7:f2:44: bf:2b:2b:ea:0c:3c:1c:04:8e:c7:5d:4c:b3:2e:f8: d9:cb:c7:ec:74:4a:ce:34:b4:03:c7:f9:e6:8a:c2: 98:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:18:5F:4F:50:2B:FD:84:10:9C:CE:77:F6:FC:AD:96:77:FD:40:BC X509v3 Authority Key Identifier: keyid:27:B2:CE:96:FA:E8:E1:76:3A:3C:30:DB:33:C3:BB:D8:F0:51:83:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:c2:bb:67:a4:d4:95:0a:64:c8:6e:94:33:25:66:cd:fb:8c: 0f:ef:f7:88:be:55:71:6c:f6:fe:13:70:47:c3:b4:be:7b:4f: 7d:a3:29:7a:f1:7e:79:f2:42:37:d7:ae:2d:dc:1e:41:1c:f0: 86:38:e7:a0:47:93:33:fd:65:a0:32:f7:2e:7b:d1:93:55:27: e3:e8:0d:e1:85:8b:ba:d6:a6:00:0e:27:85:60:6d:0b:7f:5e: 2e:8b:51:94:22:bd:73:ee:6e:55:e6:ee:8f:2c:f8:38:c5:3e: bc:58:00:f7:ba:d9:c1:54:68:77:8b:aa:5c:85:76:bd:07:19: c5:b9:f3:26:68:0f:bc:45:8e:1f:5b:d0:3d:f3:67:d9:70:d0: 2e:9e:96:b6:79:f1:1f:26:79:66:23:b7:0e:4b:23:d0:9b:bd: c3:d8:f3:4f:8e:7c:ab:31:21:4f:1b:17:b7:b9:d3:ee:28:f0: 4d:ed:ad:bb:56:58:1b:21:2c:45:9b:1a:61:03:14:f6:0f:7b: d1:d7:ea:b9:43:6d:9e:a7:7e:61:84:97:28:46:01:2c:d8:c0: 0b:78:00:52:1c:bb:c0:19:89:6f:4b:30:ce:85:08:20:fb:ae: 24:55:ca:18:0c:30:6b:12:4e:44:46:39:41:b5:53:c4:29:58: eb:b4:95:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSgMqfnHH/3QGcE+kpfIA8MOIIAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdCMkNFOTZGQUU4RTE3NjNBM0MzMERCMzNDM0JCRDhG MDUxODM4QjAeFw0yNTExMDQwMTA1NDFaFw0yNTExMDcwODI2NDFaMDMxMTAvBgNV BAMTKDVEMTg1RjRGNTAyQkZEODQxMDlDQ0U3N0Y2RkNBRDk2NzdGRDQwQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9dDZaa2qvbdMU6COebVlEaQIA 6tePtkpKZH5cfRl/9wkUAhPiAWN1tr75rITUvHOzFkrSYXlxtpZ2hjrb9u1G4tXs PQbg8RP1YPxnlNnwanfyd1SQ2jJoXZ5gXEAeKts3IsvcEuxhIRGDCoiY8HsYec5j +FKzTMJ7cRGPrjy+/Bvg4nUNp/rfEY5+4J5XR1eCxfSsNwMtarnKz02K652OazEz 4vzyJ9726Zk+fcPkgg4KT8xPMxF331d6Kklm/cKP/Wnm/5fpDKrJlugh16R9k4iu ITb/lzYJ0VBNk+fyRL8rK+oMPBwEjsddTLMu+NnLx+x0Ss40tAPH+eaKwpjHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXRhfT1Ar/YQQnM539vytlnf9QLwwHwYDVR0j BBgwFoAUJ7LOlvro4XY6PDDbM8O72PBRg4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTUxMWE4YS0zMGRhLTQ2NzAtYTAxMC03OTI2ZDdjZDUxMGIvMC8yN0IyQ0U5NkZB RThFMTc2M0EzQzMwREIzM0MzQkJEOEYwNTE4MzhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdCMkNFOTZGQUU4RTE3NjNBM0MzMERCMzNDM0JCRDhGMDUx ODM4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU1MTFhOGEtMzBkYS00NjcwLWEw MTAtNzkyNmQ3Y2Q1MTBiLzAvMjdCMkNFOTZGQUU4RTE3NjNBM0MzMERCMzNDM0JC RDhGMDUxODM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATCu2ek1JUKZMhulDMlZs37jA/v94i+VXFs 9v4TcEfDtL57T32jKXrxfnnyQjfXri3cHkEc8IY456BHkzP9ZaAy9y570ZNVJ+Po DeGFi7rWpgAOJ4VgbQt/Xi6LUZQivXPublXm7o8s+DjFPrxYAPe62cFUaHeLqlyF dr0HGcW58yZoD7xFjh9b0D3zZ9lw0C6elrZ58R8meWYjtw5LI9CbvcPY80+OfKsx IU8bF7e50+4o8E3trbtWWBshLEWbGmEDFPYPe9HX6rlDbZ6nfmGElyhGASzYwAt4 AFIcu8AZiW9LMM6FCCD7riRVyhgMMGsSTkRGOUG1U8QpWOu0leU= -----END CERTIFICATE-----Generated at Tue Nov 4 12:40:16 2025 by rpki-client