$ rpki-client -vvf repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft File: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft (raw, json) Hash identifier: WzlGFgvDuebFMr6JgLFYPzR5WF6J08nX78UYudfDDtk= Subject key identifier: 46:1A:61:0F:8E:A6:C0:F4:65:B0:37:0F:8E:D4:CF:74:77:1D:0D:A7 Authority key identifier: 2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E Certificate issuer: /CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Certificate serial: 35B11928DAF45173F256A7670F4DACA39B3B17C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft Manifest number: 0E Signing time: Thu 07 Aug 2025 09:52:00 +0000 Manifest this update: Thu 07 Aug 2025 09:47:00 +0000 Manifest next update: Sun 10 Aug 2025 12:47:00 +0000 Files and hashes: 1: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl (hash: MaeOchbfkXwdFxU9FFif/X+MvZ+BBt2QIAh68C5X6us=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 12:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b1:19:28:da:f4:51:73:f2:56:a7:67:0f:4d:ac:a3:9b:3b:17:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Validity Not Before: Aug 7 09:47:00 2025 GMT Not After : Aug 10 12:47:00 2025 GMT Subject: CN=461A610F8EA6C0F465B0370F8ED4CF74771D0DA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a8:37:e9:02:b2:ec:7f:7e:3a:3a:f8:47:10: 58:5d:c3:f0:a7:b6:39:b0:f6:91:e7:34:f9:52:57: a1:be:ea:30:c4:18:90:c6:55:1a:1b:4a:af:b2:d1: 1d:4d:fc:20:01:1c:8c:a0:d0:9a:26:6c:65:76:bd: 84:06:1b:49:4f:e1:83:0d:bc:38:1e:bc:91:3c:e1: 59:51:f4:d3:a8:e5:43:16:d7:08:45:6f:0e:fd:5c: 1b:06:76:d5:e5:4e:5e:cb:c6:75:1e:9e:94:bd:df: 6a:3d:b3:ab:30:e8:7d:d4:19:d9:df:9f:b0:bb:53: d0:54:a4:0f:6e:d6:ff:f4:a7:45:d8:c2:e7:33:1e: 8a:35:ef:8d:ad:0f:8f:db:6d:04:39:f5:b2:57:23: 30:8c:f9:83:21:ea:bf:76:ed:86:e2:d0:8b:19:9a: 78:4d:f9:0c:0c:bc:c4:87:d0:93:4b:24:1c:c5:25: f4:7e:d3:77:41:df:ca:51:31:2e:2a:81:3a:be:9c: 4d:72:45:3f:b6:80:bd:c0:4e:e1:ee:1e:2f:7c:dc: 28:5b:5e:b2:d6:f6:a6:65:0a:b5:19:2b:2b:6d:88: 64:7b:a3:c6:db:80:d4:6d:24:8e:94:14:df:f4:53: 6d:c3:a5:c7:4b:25:01:10:be:4d:85:a5:f8:c5:0c: 49:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1A:61:0F:8E:A6:C0:F4:65:B0:37:0F:8E:D4:CF:74:77:1D:0D:A7 X509v3 Authority Key Identifier: keyid:2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:0b:68:1b:56:f7:97:4a:05:52:d2:cd:45:a8:67:2b:0c:0a: 51:44:04:98:f5:d6:71:08:3e:bd:a7:c5:46:fc:a4:25:b3:96: a4:0f:01:a7:50:73:b1:59:fa:f8:ad:25:af:60:ed:ef:49:4a: 16:f3:3e:2b:40:5b:85:b5:42:60:7c:e0:00:55:10:33:d9:d8: 0f:11:51:f4:09:88:66:5d:78:bb:7f:e4:11:55:13:42:a0:0f: 6c:8f:cf:74:2b:36:58:ae:bc:48:21:d2:be:b1:5f:6e:7b:32: 2a:0a:03:59:e3:85:d5:74:14:05:f6:e6:04:d3:b8:59:24:31: ed:74:82:d4:88:3b:0b:24:96:d3:3e:13:af:73:5e:e8:22:bc: 7e:8a:06:31:f9:6c:ce:1c:d6:82:e3:34:7d:7a:c6:6a:f8:09: 55:43:19:b8:3e:5c:36:de:ee:93:7b:d2:3b:b5:48:53:80:5c: 2b:86:ee:09:1a:8e:48:89:9c:ac:83:f4:88:e2:b0:a2:6d:b9: 3f:d8:9e:34:b2:06:58:cf:eb:65:c9:37:14:8a:35:69:6f:41: d9:bb:7a:f8:50:e0:f3:78:e1:c7:ef:9f:54:de:75:b5:36:f7: 16:f2:44:b8:3d:8f:36:0b:c4:1d:09:a0:0e:f8:fe:4e:64:f9: 6a:6b:f1:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNbEZKNr0UXPyVqdnD02so5s7F8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VC MjFDNDk4RTAeFw0yNTA4MDcwOTQ3MDBaFw0yNTA4MTAxMjQ3MDBaMDMxMTAvBgNV BAMTKDQ2MUE2MTBGOEVBNkMwRjQ2NUIwMzcwRjhFRDRDRjc0NzcxRDBEQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbqDfpArLsf346OvhHEFhdw/Cn tjmw9pHnNPlSV6G+6jDEGJDGVRobSq+y0R1N/CABHIyg0JombGV2vYQGG0lP4YMN vDgevJE84VlR9NOo5UMW1whFbw79XBsGdtXlTl7LxnUenpS932o9s6sw6H3UGdnf n7C7U9BUpA9u1v/0p0XYwuczHoo1742tD4/bbQQ59bJXIzCM+YMh6r927Ybi0IsZ mnhN+QwMvMSH0JNLJBzFJfR+03dB38pRMS4qgTq+nE1yRT+2gL3ATuHuHi983Chb XrLW9qZlCrUZKyttiGR7o8bbgNRtJI6UFN/0U23DpcdLJQEQvk2FpfjFDElVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURhphD46mwPRlsDcPjtTPdHcdDacwHwYDVR0j BBgwFoAULCeg2d0lMevvHi7FasvLzrIcSY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmYwOTU4NC05MTEwLTRiMGQtOGY2ZC0yY2U1MjU4ZTg0NmIvMC8yQzI3QTBEOURE MjUzMUVCRUYxRTJFQzU2QUNCQ0JDRUIyMUM0OThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VCMjFD NDk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNC Q0VCMjFDNDk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYLaBtW95dKBVLSzUWoZysMClFEBJj11nEI Pr2nxUb8pCWzlqQPAadQc7FZ+vitJa9g7e9JShbzPitAW4W1QmB84ABVEDPZ2A8R UfQJiGZdeLt/5BFVE0KgD2yPz3QrNliuvEgh0r6xX257MioKA1njhdV0FAX25gTT uFkkMe10gtSIOwskltM+E69zXugivH6KBjH5bM4c1oLjNH16xmr4CVVDGbg+XDbe 7pN70ju1SFOAXCuG7gkajkiJnKyD9IjisKJtuT/YnjSyBljP62XJNxSKNWlvQdm7 evhQ4PN44cfvn1TedbU29xbyRLg9jzYLxB0JoA74/k5k+Wpr8cg= -----END CERTIFICATE-----Generated at Thu Aug 7 11:22:27 2025 by rpki-client