$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft File: 27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft (raw, json) Hash identifier: FFKrfjwvXzg+OlfsFkNpCSzAQyLTXQzk2K0y9yYMO/0= Subject key identifier: A2:09:BF:AB:8A:AB:18:A2:25:31:B1:EB:58:3E:41:C4:78:D0:91:8C Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC Certificate issuer: /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Certificate serial: 7C4B1C7E129025002A8149D6E28DA2A321688844 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft Manifest number: 01DE Signing time: Sun 01 Mar 2026 12:21:25 +0000 Manifest this update: Sun 01 Mar 2026 12:16:25 +0000 Manifest next update: Wed 04 Mar 2026 13:23:25 +0000 Files and hashes: 1: 3130332e37302e31392e302f32342d3234203d3e20313335343632.roa (hash: AXguxGCyMmqijzUfDJ6sW4bhnWRijiQgcsQ13oNgZs4=) 2: 27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl (hash: gYFRpsi93eUBhn5yo9Wdk+b5iSUZO4SUOchaj7htP7I=) 3: 3130332e37302e31362e302f32322d3232203d3e20313335343632.roa (hash: 1OEa/bsOORulkyfivOT1LWE6Ar5F7pwDFWbnAlkWMec=) 4: 3130332e37302e31382e302f32342d3234203d3e20313335343632.roa (hash: BDEKh8gnBvlltX9WR1GmG6qKqh+pe65R6Xx0+s/IyP8=) 5: 3130332e37302e31372e302f32342d3234203d3e20313335343632.roa (hash: a77WyK1qTdgIRkUuNKGD5zyWCvIAGB4ZwYU+fJ2Gtpw=) 6: 3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (hash: r8NqRUCsHtvXIJ0/QDdvuNRC6uOu98LXcwUGX23wEMs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:4b:1c:7e:12:90:25:00:2a:81:49:d6:e2:8d:a2:a3:21:68:88:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Validity Not Before: Mar 1 12:16:25 2026 GMT Not After : Mar 4 13:23:25 2026 GMT Subject: CN=A209BFAB8AAB18A22531B1EB583E41C478D0918C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:b1:43:cb:70:ad:1b:4f:dc:a5:12:91:7f: f7:96:11:aa:bf:3d:9d:10:6b:7a:7d:55:7e:2e:d0: d0:e2:d2:2a:c8:8d:be:8e:56:c3:99:76:03:dc:e9: be:1c:aa:ba:02:20:b3:a5:8a:6f:20:e2:64:9a:56: 9b:65:4b:fd:2b:91:10:eb:e4:2d:ae:ea:c4:b8:3a: 73:a4:92:81:77:b1:fe:7e:db:8f:fb:d0:98:ce:79: 62:83:c7:a9:78:c6:4d:99:f6:2b:88:1d:d4:b7:b7: 53:bb:74:fc:82:18:46:b8:8b:fb:11:4a:1f:3a:63: a3:f3:a8:28:40:9b:f7:cd:ac:73:5d:fc:01:92:63: f6:6a:56:f5:6d:61:24:ed:e7:78:6d:cb:e3:35:b6: b4:9e:e9:9a:18:52:ac:9a:72:fb:c7:1d:10:30:75: 9d:84:e6:09:f8:86:b8:fa:4f:61:0b:5c:f8:af:65: 35:36:09:d8:6c:e7:34:a6:37:c8:a6:23:9b:46:91: c8:dd:ba:2c:23:51:dd:fc:0a:6b:7a:b9:a5:52:cb: 97:05:37:78:b4:14:3e:30:eb:62:80:7a:58:ea:22: e9:d0:57:cd:76:bc:be:54:27:c4:72:90:78:f7:e0: 78:86:d6:61:b5:07:b7:a4:38:57:ee:39:a6:8b:34: ff:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:09:BF:AB:8A:AB:18:A2:25:31:B1:EB:58:3E:41:C4:78:D0:91:8C X509v3 Authority Key Identifier: keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:61:ab:fa:09:f7:3f:fa:9e:53:57:36:ee:06:2c:e0:13:22: fd:ef:99:e6:5d:5e:e7:a5:03:a2:2d:3a:99:39:72:ab:71:dc: 0a:b9:1c:4f:4a:a2:43:c2:38:0a:4b:27:76:8d:33:3f:3f:ce: e3:8c:fe:28:ff:48:4c:3f:20:19:98:77:5c:62:72:a8:eb:29: b8:fb:41:25:b4:8a:ba:b2:93:cb:8c:34:b5:12:6b:fb:bd:90: 53:80:7c:59:f0:7f:eb:a4:cb:98:e5:d8:88:18:c7:27:6f:df: 16:b6:89:4d:ee:22:29:c7:48:2e:48:eb:48:87:16:21:57:30: ce:55:50:3c:8f:34:5d:10:49:51:8c:b0:0f:57:02:02:e9:22: 9e:ab:51:c7:42:91:f8:a3:64:b0:87:32:34:32:0b:f6:4d:54: 60:e3:0d:7e:7a:39:ee:06:2e:31:16:8f:46:d7:96:fb:35:32: 99:10:c4:d4:d2:3b:2a:c8:26:d5:83:af:c5:26:8d:80:e5:3c: 5a:49:f6:39:3b:14:1f:b2:f6:b7:ec:53:f4:79:55:7d:8a:09: fd:10:08:09:35:1f:37:03:4f:cd:bb:91:51:74:f9:ee:d2:3a: 5d:b0:7d:70:f7:44:78:41:7b:d2:41:54:bf:60:88:da:39:5a: 2c:fb:e3:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfEscfhKQJQAqgUnW4o2ioyFoiEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlC NTM2OTVGQzAeFw0yNjAzMDExMjE2MjVaFw0yNjAzMDQxMzIzMjVaMDMxMTAvBgNV BAMTKEEyMDlCRkFCOEFBQjE4QTIyNTMxQjFFQjU4M0U0MUM0NzhEMDkxOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOrFDy3CtG0/cpRKRf/eWEaq/ PZ0Qa3p9VX4u0NDi0irIjb6OVsOZdgPc6b4cqroCILOlim8g4mSaVptlS/0rkRDr 5C2u6sS4OnOkkoF3sf5+24/70JjOeWKDx6l4xk2Z9iuIHdS3t1O7dPyCGEa4i/sR Sh86Y6PzqChAm/fNrHNd/AGSY/ZqVvVtYSTt53hty+M1trSe6ZoYUqyacvvHHRAw dZ2E5gn4hrj6T2ELXPivZTU2Cdhs5zSmN8imI5tGkcjduiwjUd38Cmt6uaVSy5cF N3i0FD4w62KAeljqIunQV812vL5UJ8RykHj34HiG1mG1B7ekOFfuOaaLNP9jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUogm/q4qrGKIlMbHrWD5BxHjQkYwwHwYDVR0j BBgwFoAUJ7dzoXPgQA+8DX/t/P94CbU2lfwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmY0ZDRmMS1iMzZjLTRhNDYtODg0NC00ZTZjN2EzYzk3ZDkvMC8yN0I3NzNBMTcz RTA0MDBGQkMwRDdGRURGQ0ZGNzgwOUI1MzY5NUZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlCNTM2 OTVGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4 NDQtNGU2YzdhM2M5N2Q5LzAvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4 MDlCNTM2OTVGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFphq/oJ9z/6nlNXNu4GLOATIv3vmeZdXuel A6ItOpk5cqtx3Aq5HE9KokPCOApLJ3aNMz8/zuOM/ij/SEw/IBmYd1xicqjrKbj7 QSW0irqyk8uMNLUSa/u9kFOAfFnwf+uky5jl2IgYxydv3xa2iU3uIinHSC5I60iH FiFXMM5VUDyPNF0QSVGMsA9XAgLpIp6rUcdCkfijZLCHMjQyC/ZNVGDjDX56Oe4G LjEWj0bXlvs1MpkQxNTSOyrIJtWDr8UmjYDlPFpJ9jk7FB+y9rfsU/R5VX2KCf0Q CAk1HzcDT827kVF0+e7SOl2wfXD3RHhBe9JBVL9giNo5Wiz74/g= -----END CERTIFICATE-----Generated at Mon Mar 2 06:32:25 2026 by rpki-client