$ rpki-client -vvf repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft File: E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft (raw, json) Hash identifier: 2u4uKGjQgKg63Lm1jAr1D+rjAUW6WfXgjh07tTBRohE= Subject key identifier: 5B:E1:31:06:E4:BF:86:DA:BB:6F:B2:2A:D5:32:1C:9D:0D:8D:34:15 Authority key identifier: E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD Certificate issuer: /CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD Certificate serial: 3B75F38FD4A4FDC2633C69918018C3E09AD83079 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft Manifest number: 0551 Signing time: Sun 01 Mar 2026 21:51:42 +0000 Manifest this update: Sun 01 Mar 2026 21:46:42 +0000 Manifest next update: Wed 04 Mar 2026 22:17:42 +0000 Files and hashes: 1: 3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa (hash: miixVejqadzJoJUmMD6XBggcBXEaUqaEEMBzMvAqTNc=) 2: 3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa (hash: IzC9oagOHS4dTtSBILXnwVll7fkLpQc9RpoCIiKjX8I=) 3: 3130332e3132392e3232302e302f32342d3234203d3e20313338303632.roa (hash: Mn5S3vv0y8H86n0LvhDe7TG0qE+zI4uaMffW/k9fqwM=) 4: E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl (hash: ifE+2uehJGMi9X2OcufE0X4npQCgT76jnbPO0eJscHQ=) 5: 3130332e3132392e3232312e302f32342d3234203d3e20313338303632.roa (hash: 3vA9Os0MWzKrIxrdLvYkOp/ZA589dKUhNYNySSQbRyE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:75:f3:8f:d4:a4:fd:c2:63:3c:69:91:80:18:c3:e0:9a:d8:30:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD Validity Not Before: Mar 1 21:46:42 2026 GMT Not After : Mar 4 22:17:42 2026 GMT Subject: CN=5BE13106E4BF86DABB6FB22AD5321C9D0D8D3415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:82:18:d7:df:41:10:96:72:56:ef:cd:5e: 35:54:c5:e2:bc:15:e1:28:53:84:42:12:ed:bc:df: 3b:75:52:76:40:2e:c3:e4:43:21:b5:1a:97:a6:45: 09:4a:11:1c:ba:78:f3:6b:7d:0b:11:cf:36:7a:8d: e3:3a:c8:14:e2:23:ba:7a:eb:5d:2c:25:ca:92:42: 50:41:76:11:13:93:40:0b:cc:fe:0a:00:95:f9:b2: 41:c3:7d:ba:6f:a5:75:49:17:87:9c:75:0c:e4:6d: fa:a8:0d:9e:d2:bc:f6:06:09:53:e0:4b:33:bb:11: f7:8c:8c:04:7d:c1:e8:8d:78:39:54:74:a3:84:49: df:a6:79:71:6c:7e:27:8c:d9:4e:4f:34:2d:ad:72: 69:03:ca:e1:68:48:bd:48:84:cf:97:9f:6f:40:9e: c6:bc:e5:25:bb:7d:f7:6e:6f:81:6b:3f:94:75:5a: 49:85:b9:5a:a6:15:0b:6f:10:8c:d2:cc:4a:4a:bc: f2:b9:43:93:09:c3:d0:3b:76:95:b8:72:e8:66:6b: 7b:19:97:b4:cc:df:72:41:fb:5f:5a:8c:5a:41:55: 59:89:ce:7e:40:2e:33:80:ec:57:e9:fb:7b:35:a8: 9a:08:e1:09:48:60:e7:2a:16:e5:0c:36:c8:73:3e: 72:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E1:31:06:E4:BF:86:DA:BB:6F:B2:2A:D5:32:1C:9D:0D:8D:34:15 X509v3 Authority Key Identifier: keyid:E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d4:7f:b2:03:33:32:28:86:03:d2:61:6d:f3:16:f4:77:88: ed:31:a6:80:88:ee:23:1d:eb:25:b6:57:6f:5f:ed:70:cd:0e: 5a:a5:73:aa:25:30:1e:4f:b1:8b:f0:77:09:43:e7:1d:a7:c3: 3c:0e:46:07:d3:1f:a7:72:89:5d:47:1c:73:65:d4:a0:da:4c: 1d:46:8b:8d:2b:63:ad:35:f4:0f:b5:eb:5f:90:61:7f:11:75: 5b:ad:e6:9a:a6:78:4c:ab:c6:72:64:2f:47:b5:68:04:3d:83: f8:cf:13:cf:f1:73:8a:60:7e:0b:18:8c:87:56:80:1f:6b:59: 1f:03:73:d2:da:98:91:82:39:f1:ed:28:42:15:5e:df:d7:7c: 31:c8:58:56:6b:3d:51:ae:f2:aa:95:12:6e:9b:5e:36:1e:b3: 3d:99:b5:ba:56:4c:2d:59:5e:72:a3:d3:cd:b8:37:5e:4d:5a: c0:70:97:7f:3f:62:5a:e9:25:b9:27:8f:5f:94:2e:bd:b6:72: 60:02:9b:f4:f2:e4:34:1b:78:b2:8d:f5:ab:25:d8:bb:95:28: 7b:06:b6:21:09:77:30:f7:93:dd:ad:98:c2:09:7f:f0:d5:8f: c8:8e:3d:7a:eb:14:c2:2d:75:75:12:de:c0:de:22:f5:58:83: 2d:b5:6e:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3Xzj9Sk/cJjPGmRgBjD4JrYMHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI3RjA3MEIyN0VBQjA5NkUyQjM1MjNGMUExQUNEN0Qw MThEMEFERDAeFw0yNjAzMDEyMTQ2NDJaFw0yNjAzMDQyMjE3NDJaMDMxMTAvBgNV BAMTKDVCRTEzMTA2RTRCRjg2REFCQjZGQjIyQUQ1MzIxQzlEMEQ4RDM0MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6poIY199BEJZyVu/NXjVUxeK8 FeEoU4RCEu283zt1UnZALsPkQyG1GpemRQlKERy6ePNrfQsRzzZ6jeM6yBTiI7p6 610sJcqSQlBBdhETk0ALzP4KAJX5skHDfbpvpXVJF4ecdQzkbfqoDZ7SvPYGCVPg SzO7EfeMjAR9weiNeDlUdKOESd+meXFsfieM2U5PNC2tcmkDyuFoSL1IhM+Xn29A nsa85SW7ffdub4FrP5R1WkmFuVqmFQtvEIzSzEpKvPK5Q5MJw9A7dpW4cuhma3sZ l7TM33JB+19ajFpBVVmJzn5ALjOA7Ffp+3s1qJoI4QlIYOcqFuUMNshzPnKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW+ExBuS/htq7b7Iq1TIcnQ2NNBUwHwYDVR0j BBgwFoAU4n8HCyfqsJbis1I/GhrNfQGNCt0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmEwMDJkZS0wY2RlLTQ2MmUtOTQwNC00NmJjNjI3MGUwNGYvMC9FMjdGMDcwQjI3 RUFCMDk2RTJCMzUyM0YxQTFBQ0Q3RDAxOEQwQURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI3RjA3MEIyN0VBQjA5NkUyQjM1MjNGMUExQUNEN0QwMThE MEFERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZhMDAyZGUtMGNkZS00NjJlLTk0 MDQtNDZiYzYyNzBlMDRmLzAvRTI3RjA3MEIyN0VBQjA5NkUyQjM1MjNGMUExQUNE N0QwMThEMEFERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDUf7IDMzIohgPSYW3zFvR3iO0xpoCI7iMd 6yW2V29f7XDNDlqlc6olMB5PsYvwdwlD5x2nwzwORgfTH6dyiV1HHHNl1KDaTB1G i40rY6019A+161+QYX8RdVut5pqmeEyrxnJkL0e1aAQ9g/jPE8/xc4pgfgsYjIdW gB9rWR8Dc9LamJGCOfHtKEIVXt/XfDHIWFZrPVGu8qqVEm6bXjYesz2ZtbpWTC1Z XnKj0824N15NWsBwl38/YlrpJbknj1+ULr22cmACm/Ty5DQbeLKN9asl2LuVKHsG tiEJdzD3k92tmMIJf/DVj8iOPXrrFMItdXUS3sDeIvVYgy21bsw= -----END CERTIFICATE-----Generated at Mon Mar 2 09:23:55 2026 by rpki-client