$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft File: 27992B841C717A90B3FDBD81B476F3FF9045212D.mft (raw, json) Hash identifier: EmV0XHZfAbk++n2K4wm0UApRUdgGaXwSZXwCKK42hrM= Subject key identifier: 97:DA:F8:86:5F:CA:0A:FC:BD:F5:4B:B8:D1:52:F5:9F:FF:C4:F8:FC Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D Certificate serial: 6C16EC2AAE878CDBA5E138E6A8CF9A7B5EE6E1B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft Manifest number: 0137 Signing time: Tue 04 Nov 2025 10:30:04 +0000 Manifest this update: Tue 04 Nov 2025 10:25:04 +0000 Manifest next update: Fri 07 Nov 2025 18:28:04 +0000 Files and hashes: 1: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: 2fll4NIrlBtRmSI1B/XfRZt07eji5vB7yU1I6L4xwaU=) 2: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: zJ4dPhpKTwfxjBM9r05t0oUe6ezn1Aa8OjhsYGhldqw=) 3: 27992B841C717A90B3FDBD81B476F3FF9045212D.crl (hash: 3/xnmnVyZWh2d90EFqwEGoZB2P6U1v+V4P15AjAob1I=) 4: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: VwvC8FnFaqPY+qV2Yf8a0j5PamatjQpNJvumx1aC9c4=) 5: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: Ox4ZTFR07e7JY/PWDRkVjaGrsYWVREjNDM/zRhbDUOE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:16:ec:2a:ae:87:8c:db:a5:e1:38:e6:a8:cf:9a:7b:5e:e6:e1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D Validity Not Before: Nov 4 10:25:04 2025 GMT Not After : Nov 7 18:28:04 2025 GMT Subject: CN=97DAF8865FCA0AFCBDF54BB8D152F59FFFC4F8FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:11:d3:c6:d1:0c:47:ab:a2:9c:fe:e8:f9:a3: 65:45:28:d4:c6:0b:8f:f7:be:fe:d4:14:90:e0:92: b6:2d:8b:56:0d:ae:c2:6d:a5:66:30:e2:d2:0c:66: 0b:80:20:39:dc:79:29:4d:f3:b8:04:76:b1:3b:a7: 91:2c:07:26:61:7c:d9:4c:28:b5:e4:2e:3e:7d:99: 44:b1:ff:b9:ed:96:c4:6b:68:94:5a:3b:a5:e8:7b: 30:69:04:e7:db:e7:2b:ef:38:47:ca:2b:55:ae:07: 3d:30:26:67:c7:e9:87:9b:21:bf:29:20:86:a2:e5: 54:89:64:ab:86:9a:a0:ea:71:dc:7f:65:f1:9b:00: 5f:4c:92:a5:93:f3:0e:5d:03:37:76:8f:8a:cf:5b: 6d:c5:8b:16:b9:bb:f8:f7:81:36:68:c9:68:83:a0: 53:3f:d9:15:4b:ef:50:62:0b:95:0c:32:ad:71:5e: ba:50:e4:83:fb:dd:d1:db:cb:a2:8c:d7:df:4b:b7: ae:d1:a9:05:39:a4:76:ec:e5:3b:39:22:94:f6:b3: 99:41:0d:bc:cb:b1:7a:ce:98:48:82:ea:ec:ab:e6: a1:c8:17:d8:c3:aa:85:aa:31:d0:27:7a:e9:bd:a0: cc:45:93:c3:a1:10:b0:cc:cf:3d:8e:43:84:91:a5: 2e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DA:F8:86:5F:CA:0A:FC:BD:F5:4B:B8:D1:52:F5:9F:FF:C4:F8:FC X509v3 Authority Key Identifier: keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:82:12:59:15:93:f6:35:53:23:45:f0:ec:4e:c7:f9:54:c4: 8e:6f:ef:d8:1d:32:16:9b:bc:02:ad:f9:ac:90:5e:2f:c6:84: d7:ca:37:59:d4:92:01:ec:94:c3:f7:cf:1c:a4:0e:f7:1b:ee: db:47:86:ca:2f:ac:df:5c:bb:25:40:f7:74:50:e1:ef:55:7e: 94:b7:7a:aa:60:dc:f0:77:f6:6c:8f:c9:70:a7:65:e1:29:3a: d8:88:e4:7b:70:0e:08:3c:b0:5f:a8:0c:dd:bf:74:ec:ba:5b: bc:ea:4a:86:68:0e:8d:81:54:4a:b3:ac:93:2d:8f:83:ab:08: ee:9c:12:cc:73:20:a2:2d:f0:4d:bd:8e:ec:37:1d:e6:a5:02: 8f:a9:09:7c:ca:de:90:c4:09:46:4d:d2:19:ea:3c:b8:91:60: 5d:ea:b5:c5:f5:b0:39:b1:d6:1a:1f:2b:36:8d:5d:14:dc:9e: 95:e3:fe:d7:a9:76:6b:0b:62:56:17:4a:1b:fa:c5:f3:cb:5f: 4e:4e:f9:ed:0a:9a:a7:97:42:31:90:57:e4:1d:91:f7:f4:c5: a1:99:5c:40:dd:e2:bc:50:ce:ef:e0:15:45:ef:75:8e:a8:b0: 06:55:1b:df:5a:1c:cb:cb:ce:92:88:c0:e4:c0:14:d7:6e:6f: f3:20:4f:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbBbsKq6HjNul4TjmqM+ae17m4bQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5 MDQ1MjEyRDAeFw0yNTExMDQxMDI1MDRaFw0yNTExMDcxODI4MDRaMDMxMTAvBgNV BAMTKDk3REFGODg2NUZDQTBBRkNCREY1NEJCOEQxNTJGNTlGRkZDNEY4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfEdPG0QxHq6Kc/uj5o2VFKNTG C4/3vv7UFJDgkrYti1YNrsJtpWYw4tIMZguAIDnceSlN87gEdrE7p5EsByZhfNlM KLXkLj59mUSx/7ntlsRraJRaO6XoezBpBOfb5yvvOEfKK1WuBz0wJmfH6YebIb8p IIai5VSJZKuGmqDqcdx/ZfGbAF9MkqWT8w5dAzd2j4rPW23Fixa5u/j3gTZoyWiD oFM/2RVL71BiC5UMMq1xXrpQ5IP73dHby6KM199Lt67RqQU5pHbs5Ts5IpT2s5lB DbzLsXrOmEiC6uyr5qHIF9jDqoWqMdAneum9oMxFk8OhELDMzz2OQ4SRpS4rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl9r4hl/KCvy99Uu40VL1n//E+PwwHwYDVR0j BBgwFoAUJ5krhBxxepCz/b2BtHbz/5BFIS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC8yNzk5MkI4NDFD NzE3QTkwQjNGREJEODFCNDc2RjNGRjkwNDUyMTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5MDQ1 MjEyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZlM2RkOTUtMmE4NS00MzllLTg0 ZjItOTcyYTIzZTMyNzFlLzAvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYz RkY5MDQ1MjEyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiCElkVk/Y1UyNF8OxOx/lUxI5v79gdMhab vAKt+ayQXi/GhNfKN1nUkgHslMP3zxykDvcb7ttHhsovrN9cuyVA93RQ4e9VfpS3 eqpg3PB39myPyXCnZeEpOtiI5HtwDgg8sF+oDN2/dOy6W7zqSoZoDo2BVEqzrJMt j4OrCO6cEsxzIKIt8E29juw3HealAo+pCXzK3pDECUZN0hnqPLiRYF3qtcX1sDmx 1hofKzaNXRTcnpXj/tepdmsLYlYXShv6xfPLX05O+e0KmqeXQjGQV+Qdkff0xaGZ XEDd4rxQzu/gFUXvdY6osAZVG99aHMvLzpKIwOTAFNdub/MgT7Y= -----END CERTIFICATE-----Generated at Wed Nov 5 23:02:48 2025 by rpki-client