$ rpki-client -vvf repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft File: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft (raw, json) Hash identifier: +6cpMeBO72Q7Wc/7bna/MRdKlhjB+GVvuNYfSj80CFo= Subject key identifier: 0B:A9:E0:37:33:A8:93:D0:D8:5B:76:5A:95:BB:6B:C3:8E:5F:F0:AA Authority key identifier: 2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E Certificate issuer: /CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Certificate serial: 0FA4A6166CE2433E3A23B4992829E89B124F9B6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft Manifest number: 37 Signing time: Mon 03 Nov 2025 03:01:58 +0000 Manifest this update: Mon 03 Nov 2025 02:56:58 +0000 Manifest next update: Thu 06 Nov 2025 04:00:58 +0000 Files and hashes: 1: 3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa (hash: 745SbMdhMmIVd9+YwllDATXoMHy8b7XWNJsce0BNxUE=) 2: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl (hash: 7MtKQ9NN5ZAjKmmMmOCSPlyrvwXjJ+Z70pPfgjSBSys=) 3: 3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa (hash: 6F2YD7bfpsvy9ZCzb1NRXMUO3qP13tF9eyDHsH0IzEg=) 4: 3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa (hash: 4LokQzzFwf4xC5LYRIdk1nOZ26P5gcvOND0Okjnr1uo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a4:a6:16:6c:e2:43:3e:3a:23:b4:99:28:29:e8:9b:12:4f:9b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Validity Not Before: Nov 3 02:56:58 2025 GMT Not After : Nov 6 04:00:58 2025 GMT Subject: CN=0BA9E03733A893D0D85B765A95BB6BC38E5FF0AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:04:ca:b9:62:75:76:6a:dd:f3:70:fd:d3:f5: 4a:10:60:75:65:f7:7f:da:db:8e:12:54:a6:65:51: a6:d0:eb:13:28:46:a8:3c:5c:c4:50:7d:71:25:1f: 4a:b9:73:40:6e:ea:ee:b1:df:3c:9d:48:34:32:57: 8c:33:66:2d:4f:40:21:0e:07:27:d5:1f:e4:a6:c1: c8:25:87:4f:d7:ee:7f:55:a4:93:00:87:80:d4:38: 19:07:bf:7e:86:04:71:1a:8d:36:f6:d3:7a:58:f2: 6c:48:b6:62:a6:a3:5c:89:39:83:2c:54:db:71:a6: 84:5f:49:f4:39:a6:55:e1:37:d2:6f:f4:1b:60:b9: 67:28:eb:fe:02:1d:18:01:e6:10:c7:e2:52:a4:3d: f1:e5:93:7e:1d:27:6c:29:08:62:b5:08:43:83:69: 02:29:5f:bc:fe:5b:cb:0b:ce:f1:d0:e9:58:a4:db: 31:12:9b:63:59:df:c8:eb:08:05:34:49:66:f6:58: e5:e6:6f:48:1e:1a:33:b0:0c:b6:77:13:e6:d2:82: 3a:c2:cf:c5:6f:ea:83:e2:e3:65:d3:a1:90:19:fc: 3b:df:e0:08:fc:22:2e:74:1a:00:95:21:bd:33:72: df:92:78:38:33:c1:07:12:97:c7:79:1f:d0:6e:57: 43:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A9:E0:37:33:A8:93:D0:D8:5B:76:5A:95:BB:6B:C3:8E:5F:F0:AA X509v3 Authority Key Identifier: keyid:2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b2:83:42:94:bd:c0:cf:5b:ce:99:f6:b3:7b:50:d2:c4:49: c6:3f:3d:7e:76:e0:2c:2c:96:2e:a0:cb:35:e6:5c:fb:05:1b: 08:b3:87:94:95:35:35:f0:8d:0e:54:ed:19:cf:38:ea:4e:91: 50:02:05:3f:e6:c0:06:66:00:d7:ac:4c:fd:87:ac:c1:52:31: 55:c7:ec:a2:e7:5d:91:dc:e0:ad:92:ee:58:23:7c:fd:ed:70: 64:fb:ed:f3:e8:f4:83:2c:8b:01:28:d6:a9:5a:c0:c6:b4:43: 5e:8b:5d:22:91:b0:b4:ea:9b:f6:df:68:a3:57:33:0a:ea:6d: 2a:52:79:70:2d:8b:34:42:76:04:a4:b3:ea:5d:71:65:7a:9a: 66:c7:5c:fd:c8:d7:7f:42:72:c6:d3:11:f7:23:60:33:4b:2c: 5a:81:53:fe:2d:4d:bb:24:a7:15:44:17:4f:24:7c:70:1a:b4: f0:0f:53:21:0d:67:8b:a5:ac:b1:b8:36:ac:70:ac:67:f6:c1: 35:32:ea:99:68:a3:e0:23:85:66:73:f3:be:08:f0:ba:71:8e: 87:5c:a2:fe:04:50:d8:c4:fc:e6:7f:a2:58:d7:73:e1:b1:1c: 59:f5:ff:9b:83:cb:8e:42:b9:4b:eb:44:e0:16:c1:43:ed:d6: 9e:9d:d0:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD6SmFmziQz46I7SZKCnomxJPm20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VC MjFDNDk4RTAeFw0yNTExMDMwMjU2NThaFw0yNTExMDYwNDAwNThaMDMxMTAvBgNV BAMTKDBCQTlFMDM3MzNBODkzRDBEODVCNzY1QTk1QkI2QkMzOEU1RkYwQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuBMq5YnV2at3zcP3T9UoQYHVl 93/a244SVKZlUabQ6xMoRqg8XMRQfXElH0q5c0Bu6u6x3zydSDQyV4wzZi1PQCEO ByfVH+Smwcglh0/X7n9VpJMAh4DUOBkHv36GBHEajTb203pY8mxItmKmo1yJOYMs VNtxpoRfSfQ5plXhN9Jv9BtguWco6/4CHRgB5hDH4lKkPfHlk34dJ2wpCGK1CEOD aQIpX7z+W8sLzvHQ6Vik2zESm2NZ38jrCAU0SWb2WOXmb0geGjOwDLZ3E+bSgjrC z8Vv6oPi42XToZAZ/Dvf4Aj8Ii50GgCVIb0zct+SeDgzwQcSl8d5H9BuV0O1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC6ngNzOok9DYW3Zalbtrw45f8KowHwYDVR0j BBgwFoAULCeg2d0lMevvHi7FasvLzrIcSY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmYwOTU4NC05MTEwLTRiMGQtOGY2ZC0yY2U1MjU4ZTg0NmIvMC8yQzI3QTBEOURE MjUzMUVCRUYxRTJFQzU2QUNCQ0JDRUIyMUM0OThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VCMjFD NDk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNC Q0VCMjFDNDk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWyg0KUvcDPW86Z9rN7UNLEScY/PX524Cws li6gyzXmXPsFGwizh5SVNTXwjQ5U7RnPOOpOkVACBT/mwAZmANesTP2HrMFSMVXH 7KLnXZHc4K2S7lgjfP3tcGT77fPo9IMsiwEo1qlawMa0Q16LXSKRsLTqm/bfaKNX MwrqbSpSeXAtizRCdgSks+pdcWV6mmbHXP3I139CcsbTEfcjYDNLLFqBU/4tTbsk pxVEF08kfHAatPAPUyENZ4ulrLG4NqxwrGf2wTUy6ploo+AjhWZz874I8Lpxjodc ov4EUNjE/OZ/oljXc+GxHFn1/5uDy45CuUvrROAWwUPt1p6d0Kw= -----END CERTIFICATE-----Generated at Tue Nov 4 18:52:47 2025 by rpki-client