$ rpki-client -vvf repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft File: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft (raw, json) Hash identifier: rCra2eXAI6N7cIx9AlvQg7+Jeyf2BWz8/QfOloE3jJI= Subject key identifier: AD:C4:FB:27:CC:1A:A8:50:61:16:56:F3:FC:CA:BF:D7:71:38:7D:45 Authority key identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 Certificate issuer: /CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Certificate serial: 39DC29E7EBBCB902CD71E94FEF87234E5A5D0F68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft Manifest number: 01BE Signing time: Sun 01 Mar 2026 20:21:30 +0000 Manifest this update: Sun 01 Mar 2026 20:16:30 +0000 Manifest next update: Thu 05 Mar 2026 02:20:30 +0000 Files and hashes: 1: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: 6LXlbR4cNb7e/a5cj5XOa29IvaWvdwclgoGKyPVr99g=) 2: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl (hash: YJ4ggLyuTs57PW201bJm619MhaB9n0P8M+eiqmkZMcA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:dc:29:e7:eb:bc:b9:02:cd:71:e9:4f:ef:87:23:4e:5a:5d:0f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Validity Not Before: Mar 1 20:16:30 2026 GMT Not After : Mar 5 02:20:30 2026 GMT Subject: CN=ADC4FB27CC1AA850611656F3FCCABFD771387D45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fa:b3:79:0a:b9:7b:e0:4d:44:3d:44:96:24: ea:1c:e6:83:16:22:d6:2e:2e:e7:b2:60:03:19:85: c0:e3:54:14:36:01:78:44:b4:1e:1b:ba:69:dc:38: 80:4e:67:0b:21:88:f2:7b:10:5e:52:a1:7b:0a:54: 41:65:22:1b:13:76:ae:a8:30:5f:04:30:c6:45:96: 6f:58:7e:a9:72:8d:94:b8:68:8d:01:b9:81:65:8d: 26:8f:08:64:05:9e:25:0d:b8:95:91:c1:12:aa:01: 5e:46:52:48:6a:da:14:df:c0:eb:d3:39:ba:4d:bd: b6:37:b6:d9:1c:6b:33:6b:fc:43:46:e2:4d:79:b2: 38:d5:98:1f:04:8a:b7:06:eb:f2:77:f5:52:75:ab: d9:c7:16:fb:c4:f4:a2:1c:11:24:29:aa:5e:64:cf: a2:a5:fa:24:b4:7a:12:54:4f:6f:bf:50:6c:34:19: ae:86:ea:b5:e1:32:8f:fe:a3:32:bf:f2:1f:24:9b: f5:c2:8d:28:37:64:53:4b:91:00:82:69:c5:a7:bd: 14:67:72:a8:bd:02:94:72:8e:cc:75:bc:06:f4:b2: 0b:ed:79:58:14:84:41:c1:d1:74:be:d4:1a:3c:f5: 87:d8:e4:56:df:3f:f3:6f:00:f5:bc:11:5d:17:31: 93:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C4:FB:27:CC:1A:A8:50:61:16:56:F3:FC:CA:BF:D7:71:38:7D:45 X509v3 Authority Key Identifier: keyid:27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:10:72:a5:e9:2f:70:a2:ec:69:9d:9e:63:80:be:a8:a5:d9: 1d:59:8e:a2:18:69:cf:33:2e:f3:72:05:9c:e2:ae:c0:5c:16: 67:88:46:1c:5e:d8:30:b6:2d:bd:62:a4:6c:42:f6:52:07:38: 56:e6:77:5b:d0:c6:b9:61:56:a2:74:d6:f6:69:b1:f8:2b:e9: 49:fa:8a:06:93:97:a2:c3:b9:35:e9:fb:df:65:23:82:c1:7c: 30:35:dd:a5:19:93:af:2f:a0:64:3e:72:35:f1:03:8c:25:4f: 26:f1:af:4a:35:f7:93:d2:6f:f6:b3:a3:2b:75:06:c5:2e:95: f2:46:e8:20:0c:4a:f7:d0:9c:a7:a1:7f:20:ba:87:da:64:40: 70:77:2f:b4:79:cb:8d:87:85:9e:2c:79:9d:3b:12:cf:a2:8a: 8e:10:cf:cf:4c:c5:52:16:2f:b3:22:b3:1e:cd:99:c6:f0:76: ce:ad:9b:b4:bb:65:d2:0c:a7:3b:e4:4d:db:01:ec:5e:0d:7c: 61:3c:51:1b:0b:69:2f:fd:53:5c:44:c5:41:de:5d:3c:30:37: bf:53:c2:a6:1f:9d:c7:fb:e6:38:06:2f:33:26:e2:3a:88:a7: d9:9c:a0:e9:53:0a:6d:15:b0:5f:36:0e:ef:68:6b:62:24:6c: d7:65:80:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOdwp5+u8uQLNcelP74cjTlpdD2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFBQkQy RDEzN0Q1MTAeFw0yNjAzMDEyMDE2MzBaFw0yNjAzMDUwMjIwMzBaMDMxMTAvBgNV BAMTKEFEQzRGQjI3Q0MxQUE4NTA2MTE2NTZGM0ZDQ0FCRkQ3NzEzODdENDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+rN5Crl74E1EPUSWJOoc5oMW ItYuLueyYAMZhcDjVBQ2AXhEtB4bumncOIBOZwshiPJ7EF5SoXsKVEFlIhsTdq6o MF8EMMZFlm9YfqlyjZS4aI0BuYFljSaPCGQFniUNuJWRwRKqAV5GUkhq2hTfwOvT ObpNvbY3ttkcazNr/ENG4k15sjjVmB8EircG6/J39VJ1q9nHFvvE9KIcESQpql5k z6Kl+iS0ehJUT2+/UGw0Ga6G6rXhMo/+ozK/8h8km/XCjSg3ZFNLkQCCacWnvRRn cqi9ApRyjsx1vAb0sgvteVgUhEHB0XS+1Bo89YfY5FbfP/NvAPW8EV0XMZMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrcT7J8waqFBhFlbz/Mq/13E4fUUwHwYDVR0j BBgwFoAUJ8aohBdkGFGS07fj/G0avS0TfVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTMwYWM2NC0wZjEzLTQxNjItOTY4Zi1hZmU1Y2M3MTRjZjYvMC8yN0M2QTg4NDE3 NjQxODUxOTJEM0I3RTNGQzZEMUFCRDJEMTM3RDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFBQkQyRDEz N0Q1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUzMGFjNjQtMGYxMy00MTYyLTk2 OGYtYWZlNWNjNzE0Y2Y2LzAvMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFB QkQyRDEzN0Q1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0QcqXpL3Ci7GmdnmOAvqil2R1ZjqIYac8z LvNyBZzirsBcFmeIRhxe2DC2Lb1ipGxC9lIHOFbmd1vQxrlhVqJ01vZpsfgr6Un6 igaTl6LDuTXp+99lI4LBfDA13aUZk68voGQ+cjXxA4wlTybxr0o195PSb/azoyt1 BsUulfJG6CAMSvfQnKehfyC6h9pkQHB3L7R5y42HhZ4seZ07Es+iio4Qz89MxVIW L7Misx7Nmcbwds6tm7S7ZdIMpzvkTdsB7F4NfGE8URsLaS/9U1xExUHeXTwwN79T wqYfncf75jgGLzMm4jqIp9mcoOlTCm0VsF82Du9oa2IkbNdlgK0= -----END CERTIFICATE-----Generated at Mon Mar 2 12:18:54 2026 by rpki-client