$ rpki-client -vvf repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft File: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft (raw, json) Hash identifier: s1MfdoPwPimDcLWxWX+IN1w7kpoOJbnCInB2nrSH1y4= Subject key identifier: 8A:FE:24:B0:F7:EA:77:78:43:BB:60:86:1E:65:81:95:78:EB:A8:6A Authority key identifier: 2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E Certificate issuer: /CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Certificate serial: 66B01082579B0F5BBDBD4F3C15CA98FDA4616C20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft Manifest number: 6C Signing time: Sun 01 Mar 2026 07:42:10 +0000 Manifest this update: Sun 01 Mar 2026 07:37:10 +0000 Manifest next update: Wed 04 Mar 2026 07:50:10 +0000 Files and hashes: 1: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl (hash: S5ndN1x9bj7icumYtCqLx7SqCRjvPJ4z86IL7yLiys8=) 2: 3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa (hash: 6F2YD7bfpsvy9ZCzb1NRXMUO3qP13tF9eyDHsH0IzEg=) 3: 3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa (hash: 745SbMdhMmIVd9+YwllDATXoMHy8b7XWNJsce0BNxUE=) 4: 3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa (hash: 4LokQzzFwf4xC5LYRIdk1nOZ26P5gcvOND0Okjnr1uo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b0:10:82:57:9b:0f:5b:bd:bd:4f:3c:15:ca:98:fd:a4:61:6c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Validity Not Before: Mar 1 07:37:10 2026 GMT Not After : Mar 4 07:50:10 2026 GMT Subject: CN=8AFE24B0F7EA777843BB60861E65819578EBA86A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:b4:f0:85:f6:f7:20:d2:75:c1:86:14:4a: 0f:6d:ef:b8:67:8b:58:7d:3e:96:3a:a7:37:74:cd: 13:71:1f:f3:5e:71:99:5c:0c:14:d4:49:a0:dd:2d: 27:be:fe:20:b6:4a:4e:70:f4:32:4d:bc:4e:9f:79: 01:08:f1:a0:c4:22:0f:04:8e:5b:7d:7b:14:b1:04: d9:84:c2:86:63:c2:aa:a8:e7:58:ac:d1:e2:ea:1d: 6e:cc:b5:9a:3b:b1:8e:1d:31:07:00:fd:1c:73:75: 83:4a:fa:fc:53:9a:64:df:d7:02:82:40:8b:89:89: fb:48:83:e9:b2:a0:4c:e5:73:eb:27:e4:91:11:79: ef:eb:5a:d1:a3:36:fb:b5:05:6d:5e:46:45:63:91: 3b:6c:cd:30:fb:b0:6a:49:69:a6:44:37:30:00:17: cb:47:85:fd:09:7f:0a:69:27:e1:25:47:e0:8f:c4: 29:56:bd:4c:f8:04:70:39:49:3c:48:e4:ae:b2:e7: e2:ac:d4:4d:2b:b6:c5:ee:b5:da:05:2a:24:62:39: 60:5e:b7:10:10:d5:1e:63:6e:0b:26:c7:d8:d9:4f: 13:1f:11:fe:eb:e1:31:e6:1b:d4:5b:55:14:37:f2: 41:3b:17:4c:7b:1f:bf:cc:14:5d:33:2d:70:99:47: 73:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FE:24:B0:F7:EA:77:78:43:BB:60:86:1E:65:81:95:78:EB:A8:6A X509v3 Authority Key Identifier: keyid:2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:21:b4:ce:9b:58:96:ac:2b:68:09:ff:9f:bd:37:95:13:b4: 7a:6e:a3:3c:19:1e:00:27:5d:17:36:8d:f4:de:32:5d:68:0e: ce:98:fd:67:e8:33:d4:02:94:f0:07:a6:0f:8c:7d:98:d5:16: ab:69:27:65:66:f8:ac:95:c7:e4:df:3d:e9:e5:ee:43:43:9c: 30:3b:5c:c5:6c:d4:4a:81:19:a0:8b:c2:ab:c4:21:1c:94:f6: 3e:0f:f4:9b:28:3a:50:b8:00:76:17:42:f6:3f:b0:39:30:d5: f4:6a:5b:eb:29:c1:30:a5:38:6c:39:3d:e6:83:7e:82:8d:4b: e4:33:b5:96:da:75:d3:6b:87:a1:f8:87:6d:2c:56:32:75:19: 60:6b:bd:a0:19:a3:d9:f3:ad:fe:52:02:18:12:19:bd:37:27: 33:e2:4f:ae:63:f4:d6:05:2d:3d:1a:a1:e9:10:f5:43:2d:65: 82:34:7b:45:3f:28:52:9f:0d:c6:be:cd:6f:49:d5:89:5b:48: 85:05:5f:31:fd:ab:e4:84:45:10:f7:8f:11:89:08:ae:9c:97: 99:f2:35:62:76:f2:b8:3b:3f:e7:20:33:43:fc:05:82:bf:b9: 2c:93:09:62:66:e4:57:1a:2c:ac:78:85:b8:a1:b8:15:d5:40: 02:7f:c2:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZrAQglebD1u9vU88FcqY/aRhbCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VC MjFDNDk4RTAeFw0yNjAzMDEwNzM3MTBaFw0yNjAzMDQwNzUwMTBaMDMxMTAvBgNV BAMTKDhBRkUyNEIwRjdFQTc3Nzg0M0JCNjA4NjFFNjU4MTk1NzhFQkE4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwXrTwhfb3INJ1wYYUSg9t77hn i1h9PpY6pzd0zRNxH/NecZlcDBTUSaDdLSe+/iC2Sk5w9DJNvE6feQEI8aDEIg8E jlt9exSxBNmEwoZjwqqo51is0eLqHW7MtZo7sY4dMQcA/RxzdYNK+vxTmmTf1wKC QIuJiftIg+myoEzlc+sn5JERee/rWtGjNvu1BW1eRkVjkTtszTD7sGpJaaZENzAA F8tHhf0JfwppJ+ElR+CPxClWvUz4BHA5STxI5K6y5+Ks1E0rtsXutdoFKiRiOWBe txAQ1R5jbgsmx9jZTxMfEf7r4THmG9RbVRQ38kE7F0x7H7/MFF0zLXCZR3PvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiv4ksPfqd3hDu2CGHmWBlXjrqGowHwYDVR0j BBgwFoAULCeg2d0lMevvHi7FasvLzrIcSY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmYwOTU4NC05MTEwLTRiMGQtOGY2ZC0yY2U1MjU4ZTg0NmIvMC8yQzI3QTBEOURE MjUzMUVCRUYxRTJFQzU2QUNCQ0JDRUIyMUM0OThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VCMjFD NDk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNC Q0VCMjFDNDk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkhtM6bWJasK2gJ/5+9N5UTtHpuozwZHgAn XRc2jfTeMl1oDs6Y/WfoM9QClPAHpg+MfZjVFqtpJ2Vm+KyVx+TfPenl7kNDnDA7 XMVs1EqBGaCLwqvEIRyU9j4P9JsoOlC4AHYXQvY/sDkw1fRqW+spwTClOGw5PeaD foKNS+QztZbaddNrh6H4h20sVjJ1GWBrvaAZo9nzrf5SAhgSGb03JzPiT65j9NYF LT0aoekQ9UMtZYI0e0U/KFKfDca+zW9J1YlbSIUFXzH9q+SERRD3jxGJCK6cl5ny NWJ28rg7P+cgM0P8BYK/uSyTCWJm5FcaLKx4hbihuBXVQAJ/wn8= -----END CERTIFICATE-----Generated at Mon Mar 2 00:47:23 2026 by rpki-client