$ rpki-client -vvf repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft File: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft (raw, json) Hash identifier: 1QoTwTrZqll1MkVP6sz8wLiSvdqQl7OEtF/Qz3Xw6Y8= Subject key identifier: 30:93:E6:FF:48:C2:C0:33:E2:9E:72:E1:B4:E4:B2:8B:32:89:93:11 Authority key identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 Certificate issuer: /CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Certificate serial: 2CA5F0B7D74DA7B7CC5A2A00443353673B5CBD78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft Manifest number: 0189 Signing time: Sun 02 Nov 2025 12:51:21 +0000 Manifest this update: Sun 02 Nov 2025 12:46:21 +0000 Manifest next update: Wed 05 Nov 2025 19:29:21 +0000 Files and hashes: 1: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl (hash: yO2PJpBKVqKTul6s5eYgfEvv8dkIaj9x8l/+85xPu5A=) 2: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: 6LXlbR4cNb7e/a5cj5XOa29IvaWvdwclgoGKyPVr99g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a5:f0:b7:d7:4d:a7:b7:cc:5a:2a:00:44:33:53:67:3b:5c:bd:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Validity Not Before: Nov 2 12:46:21 2025 GMT Not After : Nov 5 19:29:21 2025 GMT Subject: CN=3093E6FF48C2C033E29E72E1B4E4B28B32899311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d2:de:6a:33:70:52:77:58:a2:29:3d:88:65: 55:79:e6:09:ef:10:2b:c5:8c:95:08:4e:86:a9:7e: f6:5b:1c:f4:e9:79:96:9c:fa:54:dc:ae:a3:20:99: 9c:25:86:a5:27:be:33:d5:21:fe:fd:da:6f:83:7d: b7:65:c4:31:a0:0b:bb:c2:00:dc:63:55:f1:9c:d5: 6b:a5:3e:8d:8c:a4:a3:40:8a:c2:95:43:ec:4a:da: e2:aa:6d:1d:66:a4:33:03:b3:07:06:a6:5d:a6:7b: 08:fa:5b:ae:7d:02:ef:aa:ac:87:0d:f2:f9:f8:db: 8b:c4:f9:b1:cd:2d:fa:2e:f6:92:60:23:05:1d:5c: 70:dd:48:fb:ae:6e:f8:30:c8:fd:9c:45:c8:d1:3c: 85:f1:35:a4:a5:81:3b:44:ac:bc:c7:3e:64:0b:ec: 9c:d1:93:e3:de:3a:d9:4c:e9:80:d5:da:fb:06:a6: 72:59:ff:12:e1:6a:f7:05:7c:04:f6:28:0f:1d:34: 42:da:ad:5c:ea:ea:c3:c9:1d:22:7a:3f:a5:e7:70: ed:ee:15:af:68:25:df:6b:0b:0a:40:28:88:c6:45: 90:3d:9a:3e:c2:95:d1:9d:2f:f5:e3:6a:46:39:a4: 10:3e:2c:e3:fa:30:73:04:69:77:87:f8:93:bd:7b: ff:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:93:E6:FF:48:C2:C0:33:E2:9E:72:E1:B4:E4:B2:8B:32:89:93:11 X509v3 Authority Key Identifier: keyid:27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c5:16:29:4a:9d:a6:ad:fb:67:40:bc:7b:ae:eb:ba:d7:bf: 56:66:39:41:42:95:55:c2:1e:49:a8:93:c3:b3:4e:34:4d:d5: e9:8e:75:d3:91:66:ff:3b:7d:29:dc:7a:56:c4:af:99:a4:7b: 27:3f:a5:28:24:4e:9a:d5:36:81:f1:63:9f:fb:a6:bd:39:2a: 57:a6:33:69:a3:46:7d:40:e9:a7:d8:bb:4d:70:3a:31:83:a4: a0:77:6a:48:64:20:61:5f:da:c0:ca:ab:b6:f4:84:bc:bd:ce: 0f:80:41:40:0e:e0:56:7a:de:10:99:39:0c:4d:e6:c8:42:33: 4c:76:59:fc:83:16:1f:e3:ac:a6:ea:a0:c4:d4:00:02:a8:d8: c0:d5:d8:6f:9c:b7:27:9a:13:96:4c:b8:8d:50:e9:8b:92:61: 31:53:c2:20:7e:40:72:9f:81:a5:ee:84:ff:0e:8c:a5:c3:b0: 92:80:57:ea:bc:66:88:e5:80:ea:4a:df:9c:b3:1c:fb:c7:d4: a6:cc:5c:3b:29:6e:d7:95:1e:8d:05:97:a4:35:b1:32:1a:c8: f2:c6:d1:63:8e:d6:ff:b4:d0:48:00:aa:b2:36:f5:4d:98:29: 97:09:71:4a:e1:c2:72:11:55:f1:fa:bd:a2:cc:fa:54:7c:69: e4:90:4f:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULKXwt9dNp7fMWioARDNTZztcvXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFBQkQy RDEzN0Q1MTAeFw0yNTExMDIxMjQ2MjFaFw0yNTExMDUxOTI5MjFaMDMxMTAvBgNV BAMTKDMwOTNFNkZGNDhDMkMwMzNFMjlFNzJFMUI0RTRCMjhCMzI4OTkzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg0t5qM3BSd1iiKT2IZVV55gnv ECvFjJUIToapfvZbHPTpeZac+lTcrqMgmZwlhqUnvjPVIf792m+DfbdlxDGgC7vC ANxjVfGc1WulPo2MpKNAisKVQ+xK2uKqbR1mpDMDswcGpl2mewj6W659Au+qrIcN 8vn424vE+bHNLfou9pJgIwUdXHDdSPuubvgwyP2cRcjRPIXxNaSlgTtErLzHPmQL 7JzRk+PeOtlM6YDV2vsGpnJZ/xLhavcFfAT2KA8dNELarVzq6sPJHSJ6P6XncO3u Fa9oJd9rCwpAKIjGRZA9mj7CldGdL/XjakY5pBA+LOP6MHMEaXeH+JO9e/9vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMJPm/0jCwDPinnLhtOSyizKJkxEwHwYDVR0j BBgwFoAUJ8aohBdkGFGS07fj/G0avS0TfVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTMwYWM2NC0wZjEzLTQxNjItOTY4Zi1hZmU1Y2M3MTRjZjYvMC8yN0M2QTg4NDE3 NjQxODUxOTJEM0I3RTNGQzZEMUFCRDJEMTM3RDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFBQkQyRDEz N0Q1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUzMGFjNjQtMGYxMy00MTYyLTk2 OGYtYWZlNWNjNzE0Y2Y2LzAvMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFB QkQyRDEzN0Q1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzFFilKnaat+2dAvHuu67rXv1ZmOUFClVXC Hkmok8OzTjRN1emOddORZv87fSncelbEr5mkeyc/pSgkTprVNoHxY5/7pr05Klem M2mjRn1A6afYu01wOjGDpKB3akhkIGFf2sDKq7b0hLy9zg+AQUAO4FZ63hCZOQxN 5shCM0x2WfyDFh/jrKbqoMTUAAKo2MDV2G+ctyeaE5ZMuI1Q6YuSYTFTwiB+QHKf gaXuhP8OjKXDsJKAV+q8ZojlgOpK35yzHPvH1KbMXDspbteVHo0Fl6Q1sTIayPLG 0WOO1v+00EgAqrI29U2YKZcJcUrhwnIRVfH6vaLM+lR8aeSQT/8= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:28 2025 by rpki-client