$ rpki-client -vvf repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft File: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft (raw, json) Hash identifier: rDCh/1KHEl4NCXnGHsg6JWuiKAtLnGbhnQ8yh8wiJhw= Subject key identifier: C7:A3:DD:C4:49:2D:6E:3C:40:8B:9A:95:FC:EB:09:0A:3F:49:5A:D8 Authority key identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 Certificate issuer: /CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Certificate serial: 165EE8EA7EC99C51E89A78AE9C9D3526521A66B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft Manifest number: 01D3 Signing time: Fri 17 Apr 2026 15:51:32 +0000 Manifest this update: Fri 17 Apr 2026 15:46:32 +0000 Manifest next update: Mon 20 Apr 2026 20:05:32 +0000 Files and hashes: 1: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl (hash: hChyoEibusPw8rrfqIQjeFAq08tqhlkBH36M5vq4UXM=) 2: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: M0fQVaA9y/GHUN4D73xJHIZQVfNSjhrhi+C2OP+xS7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:5e:e8:ea:7e:c9:9c:51:e8:9a:78:ae:9c:9d:35:26:52:1a:66:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Validity Not Before: Apr 17 15:46:32 2026 GMT Not After : Apr 20 20:05:32 2026 GMT Subject: CN=C7A3DDC4492D6E3C408B9A95FCEB090A3F495AD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:61:24:bd:ba:fa:c2:89:d4:7c:c0:e9:3f:12: d6:3e:2f:b6:1e:49:bf:17:ab:c0:e3:1d:1f:97:d2: 89:e1:5f:a6:46:be:0d:fd:ee:a9:5d:9d:53:04:43: f9:72:d9:d3:73:27:8c:ee:26:85:21:32:8a:c3:bb: da:7f:97:91:4c:4d:61:68:02:42:f9:1a:a3:47:c6: 80:e6:5c:78:aa:2d:93:4e:96:b9:06:d8:1d:39:26: 39:8f:0e:3a:4e:0f:f0:19:21:88:64:72:dc:a7:cd: f4:d1:bb:3a:01:4b:b8:a9:48:54:c7:6d:ff:2c:fd: 5e:c1:52:4f:56:67:84:73:d0:93:4d:7e:ec:66:83: ff:cf:fc:a0:b2:aa:f8:bf:82:84:f7:df:ca:1d:65: 05:d9:7f:c9:2e:f6:b3:16:8c:ff:2e:e2:c4:7a:57: 92:fe:98:1f:60:2c:51:0d:b4:f4:5b:9a:6f:6d:9d: 1e:ce:2f:2c:a3:86:9c:80:bc:73:49:f9:c4:f4:a1: cf:48:bb:38:61:5a:f2:2d:06:25:d7:f5:7c:ef:c9: 3e:e9:fc:96:d5:e8:49:0a:dd:1e:a1:b4:78:cb:81: 7b:45:42:26:de:4d:c8:03:ba:06:8b:7f:11:9a:89: 22:49:c1:4f:a7:05:ce:c8:2f:8e:57:61:cd:49:cd: 04:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A3:DD:C4:49:2D:6E:3C:40:8B:9A:95:FC:EB:09:0A:3F:49:5A:D8 X509v3 Authority Key Identifier: keyid:27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b2:02:ba:a2:55:76:cf:cc:8e:5f:b5:ae:d7:11:ac:99:14: da:84:3f:9f:d3:f8:e9:9e:33:10:2c:5c:46:24:b9:0d:99:4d: c4:8e:1c:c6:32:e8:b5:55:6c:84:3b:e1:bf:8c:76:6f:8b:41: fd:44:38:c2:41:85:44:85:ac:5a:ef:20:2c:ea:82:70:07:72: bd:eb:8b:be:57:3e:1f:6e:b2:2a:4a:16:7a:94:da:bd:51:f1: b4:95:fd:4a:bf:74:92:89:3d:ca:c0:d7:c8:6f:77:df:7c:b1: 8c:34:7a:32:9f:5f:9e:c9:9e:78:76:74:b2:f9:8e:56:23:94: 2b:19:7e:2e:79:71:27:90:29:a3:61:39:1f:ec:0a:b4:2f:ec: a8:62:63:a4:d6:ba:12:13:83:77:4f:3b:fd:5f:80:11:45:0b: 86:0a:7c:13:f2:78:28:75:3c:d6:95:a7:6f:cb:8f:a1:58:5a: 23:0e:2e:09:01:73:7c:e3:51:dd:f9:01:69:e2:ae:5f:d4:b3: ca:28:d8:7c:db:d8:1f:be:7f:20:a7:d5:ca:08:71:47:ba:70: e5:23:e3:f5:06:2a:5a:c2:f1:f5:ad:ef:ca:40:5e:48:b7:b7: 69:c5:0e:42:cf:61:fa:f6:11:f9:25:97:67:13:77:70:59:1f: 4a:ac:01:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFl7o6n7JnFHomniunJ01JlIaZrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFBQkQy RDEzN0Q1MTAeFw0yNjA0MTcxNTQ2MzJaFw0yNjA0MjAyMDA1MzJaMDMxMTAvBgNV BAMTKEM3QTNEREM0NDkyRDZFM0M0MDhCOUE5NUZDRUIwOTBBM0Y0OTVBRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJYSS9uvrCidR8wOk/EtY+L7Ye Sb8Xq8DjHR+X0onhX6ZGvg397qldnVMEQ/ly2dNzJ4zuJoUhMorDu9p/l5FMTWFo AkL5GqNHxoDmXHiqLZNOlrkG2B05JjmPDjpOD/AZIYhkctynzfTRuzoBS7ipSFTH bf8s/V7BUk9WZ4Rz0JNNfuxmg//P/KCyqvi/goT338odZQXZf8ku9rMWjP8u4sR6 V5L+mB9gLFENtPRbmm9tnR7OLyyjhpyAvHNJ+cT0oc9IuzhhWvItBiXX9XzvyT7p /JbV6EkK3R6htHjLgXtFQibeTcgDugaLfxGaiSJJwU+nBc7IL45XYc1JzQTRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx6PdxEktbjxAi5qV/OsJCj9JWtgwHwYDVR0j BBgwFoAUJ8aohBdkGFGS07fj/G0avS0TfVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTMwYWM2NC0wZjEzLTQxNjItOTY4Zi1hZmU1Y2M3MTRjZjYvMC8yN0M2QTg4NDE3 NjQxODUxOTJEM0I3RTNGQzZEMUFCRDJEMTM3RDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFBQkQyRDEz N0Q1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUzMGFjNjQtMGYxMy00MTYyLTk2 OGYtYWZlNWNjNzE0Y2Y2LzAvMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFB QkQyRDEzN0Q1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuyArqiVXbPzI5fta7XEayZFNqEP5/T+Ome MxAsXEYkuQ2ZTcSOHMYy6LVVbIQ74b+Mdm+LQf1EOMJBhUSFrFrvICzqgnAHcr3r i75XPh9usipKFnqU2r1R8bSV/Uq/dJKJPcrA18hvd998sYw0ejKfX57Jnnh2dLL5 jlYjlCsZfi55cSeQKaNhOR/sCrQv7KhiY6TWuhITg3dPO/1fgBFFC4YKfBPyeCh1 PNaVp2/Lj6FYWiMOLgkBc3zjUd35AWnirl/Us8oo2Hzb2B++fyCn1coIcUe6cOUj 4/UGKlrC8fWt78pAXki3t2nFDkLPYfr2Efkll2cTd3BZH0qsAeE= -----END CERTIFICATE-----Generated at Fri Apr 17 18:05:50 2026 by rpki-client