$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft File: 27992B841C717A90B3FDBD81B476F3FF9045212D.mft (raw, json) Hash identifier: klUZ+5gFU5vRfIy+TI/dGudMxLWy3Ov1CEgu5yrQS3s= Subject key identifier: 9A:88:E0:1C:AD:ED:87:78:4E:83:55:30:2A:FA:E9:1E:EC:0C:9C:08 Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D Certificate serial: 4461EF4AD51068C92AA3EFE9E6DCE623C45490F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft Manifest number: 016B Signing time: Sun 01 Mar 2026 14:20:05 +0000 Manifest this update: Sun 01 Mar 2026 14:15:05 +0000 Manifest next update: Wed 04 Mar 2026 22:52:05 +0000 Files and hashes: 1: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: Ox4ZTFR07e7JY/PWDRkVjaGrsYWVREjNDM/zRhbDUOE=) 2: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: VwvC8FnFaqPY+qV2Yf8a0j5PamatjQpNJvumx1aC9c4=) 3: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: 2fll4NIrlBtRmSI1B/XfRZt07eji5vB7yU1I6L4xwaU=) 4: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: zJ4dPhpKTwfxjBM9r05t0oUe6ezn1Aa8OjhsYGhldqw=) 5: 27992B841C717A90B3FDBD81B476F3FF9045212D.crl (hash: V48sKFFOChJ4o+alXiwHqsTknL1DlN5fq8Oxsdtvy3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:61:ef:4a:d5:10:68:c9:2a:a3:ef:e9:e6:dc:e6:23:c4:54:90:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D Validity Not Before: Mar 1 14:15:05 2026 GMT Not After : Mar 4 22:52:05 2026 GMT Subject: CN=9A88E01CADED87784E8355302AFAE91EEC0C9C08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2d:a0:ea:3c:7a:d3:0a:51:e7:ee:dd:64:e2: cc:2d:ff:9d:82:81:de:b0:18:d1:df:9d:c8:87:97: 35:21:29:de:b3:d3:ce:d0:c6:20:85:53:08:af:c4: bf:e8:6f:2b:1d:38:c1:3d:4c:e5:b7:f8:51:ab:24: 46:0e:33:a2:a1:ca:98:55:6e:27:19:0c:3c:85:31: 96:d9:8a:87:ad:87:48:c1:28:eb:2f:b3:7b:87:24: 4d:3d:6f:91:64:10:5e:57:d6:e3:87:db:24:6c:0a: 9d:6d:1d:af:8e:15:28:bc:25:07:e2:55:d7:cf:ec: 75:b8:b9:59:b7:4a:22:55:25:4d:fb:67:fe:a4:3b: 6c:92:7c:fd:75:12:d9:ae:25:b1:1f:49:9f:a4:a8: 0b:21:01:5d:ab:ba:4e:60:98:56:8a:04:d1:de:da: 0b:5a:29:f5:6f:88:da:66:47:ad:f6:ec:f8:56:ee: 89:fb:15:9d:e1:02:85:e1:25:d4:7f:23:e3:41:01: c6:c9:2b:ef:aa:64:f5:ba:56:14:2f:30:42:2b:4a: d5:2f:b9:f2:55:67:8d:fd:d2:2f:a5:d8:b5:e5:ad: b6:e7:56:36:94:00:f2:89:bc:dd:7b:fb:23:d9:c7: 51:8a:94:a8:12:70:3b:97:88:82:f9:35:53:ad:be: 95:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:88:E0:1C:AD:ED:87:78:4E:83:55:30:2A:FA:E9:1E:EC:0C:9C:08 X509v3 Authority Key Identifier: keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:83:48:6b:e2:50:b4:81:20:39:ae:f0:b4:95:72:0a:7f:29: 5d:4c:3e:bb:72:6e:24:1f:18:36:00:1f:5c:db:e5:12:77:b1: a1:7d:c2:e2:05:9d:42:93:97:d2:69:b0:a1:98:0c:86:29:2d: af:f8:1f:61:02:7f:39:44:b5:08:3f:d5:95:99:64:08:c8:9c: 40:c7:ad:1d:9e:a0:9a:65:7b:91:9b:fb:00:5f:e2:b3:c2:79: 3f:d0:df:3f:60:39:99:26:39:93:d8:1d:87:a2:26:cd:37:89: 49:62:a7:08:6c:2e:da:25:07:e9:07:3b:3d:82:40:86:3f:9e: f3:d5:cf:fb:75:04:41:c8:9a:e7:f5:f7:3e:80:46:19:65:ac: c2:81:b7:d8:4f:9b:1e:56:8c:1f:38:44:7a:72:31:f8:41:6d: 2a:c2:4b:69:85:07:a1:6e:df:6d:12:f2:ab:40:58:1b:08:df: 72:2b:f6:b6:00:ed:39:48:18:d3:f7:1f:56:50:8c:c2:9e:3a: 84:34:9c:85:40:66:68:d4:e0:85:76:af:f8:55:f2:94:c3:7e: 47:b9:14:02:bb:f2:13:29:6c:87:4d:d7:52:a9:fd:16:5a:da: 41:90:ce:1d:16:9a:21:01:2c:1b:fa:99:db:60:f8:c2:0b:52: a1:19:fc:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURGHvStUQaMkqo+/p5tzmI8RUkPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5 MDQ1MjEyRDAeFw0yNjAzMDExNDE1MDVaFw0yNjAzMDQyMjUyMDVaMDMxMTAvBgNV BAMTKDlBODhFMDFDQURFRDg3Nzg0RTgzNTUzMDJBRkFFOTFFRUMwQzlDMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLLaDqPHrTClHn7t1k4swt/52C gd6wGNHfnciHlzUhKd6z087QxiCFUwivxL/obysdOME9TOW3+FGrJEYOM6KhyphV bicZDDyFMZbZioeth0jBKOsvs3uHJE09b5FkEF5X1uOH2yRsCp1tHa+OFSi8JQfi VdfP7HW4uVm3SiJVJU37Z/6kO2ySfP11EtmuJbEfSZ+kqAshAV2ruk5gmFaKBNHe 2gtaKfVviNpmR6327PhW7on7FZ3hAoXhJdR/I+NBAcbJK++qZPW6VhQvMEIrStUv ufJVZ4390i+l2LXlrbbnVjaUAPKJvN17+yPZx1GKlKgScDuXiIL5NVOtvpVTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmojgHK3th3hOg1UwKvrpHuwMnAgwHwYDVR0j BBgwFoAUJ5krhBxxepCz/b2BtHbz/5BFIS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC8yNzk5MkI4NDFD NzE3QTkwQjNGREJEODFCNDc2RjNGRjkwNDUyMTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5MDQ1 MjEyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZlM2RkOTUtMmE4NS00MzllLTg0 ZjItOTcyYTIzZTMyNzFlLzAvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYz RkY5MDQ1MjEyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKDSGviULSBIDmu8LSVcgp/KV1MPrtybiQf GDYAH1zb5RJ3saF9wuIFnUKTl9JpsKGYDIYpLa/4H2ECfzlEtQg/1ZWZZAjInEDH rR2eoJple5Gb+wBf4rPCeT/Q3z9gOZkmOZPYHYeiJs03iUlipwhsLtolB+kHOz2C QIY/nvPVz/t1BEHImuf19z6ARhllrMKBt9hPmx5WjB84RHpyMfhBbSrCS2mFB6Fu 320S8qtAWBsI33Ir9rYA7TlIGNP3H1ZQjMKeOoQ0nIVAZmjU4IV2r/hV8pTDfke5 FAK78hMpbIdN11Kp/RZa2kGQzh0WmiEBLBv6mdtg+MILUqEZ/BY= -----END CERTIFICATE-----Generated at Mon Mar 2 09:23:18 2026 by rpki-client