$ rpki-client -vvf repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft File: 27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft (raw, json) Hash identifier: Xge5wn/S5CITsEqDzHNgj8PWU7oXPGVVPtJBK9f33F8= Subject key identifier: 63:68:4D:27:29:0F:BC:F1:D3:28:D9:93:11:E7:B3:95:25:20:0F:D0 Authority key identifier: 27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1 Certificate issuer: /CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1 Certificate serial: 1A6ABB951A9027C532B4162BEABBF143AD0D92E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft Manifest number: 021D Signing time: Thu 16 Apr 2026 15:21:11 +0000 Manifest this update: Thu 16 Apr 2026 15:16:11 +0000 Manifest next update: Sun 19 Apr 2026 17:29:11 +0000 Files and hashes: 1: 3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa (hash: n5pDNX/VGS6AiUSXackAqMHnsF6+3nXN2svM9swor8M=) 2: 3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa (hash: BAiFeUHCTKKVIDcPoWOZ3Xb7HazuROwsLCkUKw6ZY04=) 3: 27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl (hash: mo/iFr4uM9dcRqqqj7rMjiyqV+c2ln8sJRGfDGsFRN8=) 4: 3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa (hash: Lqk7sZKV0+hi1szgYX9YILOG01YWWyBiUC0FX+79Zro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 17:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:6a:bb:95:1a:90:27:c5:32:b4:16:2b:ea:bb:f1:43:ad:0d:92:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1 Validity Not Before: Apr 16 15:16:11 2026 GMT Not After : Apr 19 17:29:11 2026 GMT Subject: CN=63684D27290FBCF1D328D99311E7B39525200FD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a1:f7:16:4c:30:d3:96:9d:ad:86:8c:9b:a4: 51:55:b0:f8:00:64:14:04:25:a6:67:4b:54:26:06: c8:9c:f4:03:a8:4a:57:a4:be:62:19:8f:4a:cf:ed: 46:6c:be:50:d1:e6:e7:62:d1:ce:01:87:dd:30:fa: 46:1f:70:15:4a:1a:50:f1:88:f7:62:6e:6d:35:b2: c8:fa:de:57:c0:c4:85:c7:3b:c5:25:d3:7d:ee:58: 0b:20:22:e0:44:c2:c1:14:b8:c9:3a:45:5d:e6:e4: 15:cf:44:45:f5:e6:cd:b1:30:85:75:75:1b:83:c8: 44:ec:94:c6:34:b1:94:52:8c:33:20:67:54:2b:8d: 1d:72:00:64:95:24:cf:bf:fe:ed:44:5b:7e:91:51: 78:0f:56:43:10:03:d7:49:16:85:e8:4c:22:e5:3e: 2c:fe:75:7b:b3:b3:05:bc:1a:4c:d9:f8:57:30:07: be:8f:48:67:a3:63:a8:e1:72:dd:8b:fd:c1:b1:28: dd:ea:ff:6e:ca:0d:b9:1f:80:64:a1:37:12:d9:73: 87:a0:77:78:92:6e:21:ef:9c:f9:8f:46:f1:ab:99: d3:40:c2:2a:21:c5:41:40:e4:12:e2:aa:a3:00:eb: 4c:0d:30:0e:d1:4d:18:6f:f5:05:29:d4:b3:fb:6a: 33:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:68:4D:27:29:0F:BC:F1:D3:28:D9:93:11:E7:B3:95:25:20:0F:D0 X509v3 Authority Key Identifier: keyid:27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:92:0f:10:8e:e5:a8:87:71:a6:7e:0b:59:bd:41:4b:6e:be: 9e:ac:43:65:80:b1:d3:68:5e:69:ad:83:e3:ca:14:9b:af:86: e3:2b:24:b2:98:78:be:e8:66:96:a8:a3:e7:e6:a0:fc:eb:0c: 1a:5f:b5:fe:eb:70:ac:97:09:f4:ea:23:ad:4e:96:5c:02:86: 93:97:c8:7f:e5:bd:63:e9:49:48:81:4d:bf:89:59:a4:5a:8f: 8e:41:fb:df:e7:1f:35:0d:01:d2:af:01:1e:59:82:e9:bc:50: 10:af:7a:3d:fd:cb:b2:18:55:fc:5e:2c:b3:fa:e7:22:7b:e0: d5:70:22:a0:24:95:00:9a:76:e6:58:b0:0c:22:5a:0d:b6:a5: 55:3a:df:d4:ae:08:47:ae:b1:a7:f7:e6:ee:f9:db:61:cd:18: c7:fb:f2:45:b5:03:78:82:0d:02:f9:30:4a:6f:62:90:09:be: 96:ec:86:6f:45:c5:51:d2:bb:30:b4:05:70:a9:a5:41:c4:3a: b0:33:70:27:51:1a:36:4d:54:1f:30:5a:9a:4e:1c:5e:77:56: 0f:19:90:68:b9:47:15:23:8a:16:cd:da:22:17:1b:58:ff:0a: 05:ae:34:ab:71:8a:46:87:89:64:1c:f3:ca:17:40:89:6d:0a: aa:fd:78:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGmq7lRqQJ8UytBYr6rvxQ60NkuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2NkMz MTk0OTJGMTAeFw0yNjA0MTYxNTE2MTFaFw0yNjA0MTkxNzI5MTFaMDMxMTAvBgNV BAMTKDYzNjg0RDI3MjkwRkJDRjFEMzI4RDk5MzExRTdCMzk1MjUyMDBGRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMofcWTDDTlp2thoybpFFVsPgA ZBQEJaZnS1QmBsic9AOoSlekvmIZj0rP7UZsvlDR5udi0c4Bh90w+kYfcBVKGlDx iPdibm01ssj63lfAxIXHO8Ul033uWAsgIuBEwsEUuMk6RV3m5BXPREX15s2xMIV1 dRuDyETslMY0sZRSjDMgZ1QrjR1yAGSVJM+//u1EW36RUXgPVkMQA9dJFoXoTCLl Piz+dXuzswW8GkzZ+FcwB76PSGejY6jhct2L/cGxKN3q/27KDbkfgGShNxLZc4eg d3iSbiHvnPmPRvGrmdNAwiohxUFA5BLiqqMA60wNMA7RTRhv9QUp1LP7ajMNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY2hNJykPvPHTKNmTEeezlSUgD9AwHwYDVR0j BBgwFoAUJxFM/FhcXbLgrF2nTwTGbDGUkvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWM4YjllMy1iNDRmLTQ5MGItYmY1MS05OWYyZGQyYTEzNjQvMC8yNzExNENGQzU4 NUM1REIyRTBBQzVEQTc0RjA0QzY2QzMxOTQ5MkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2NkMzMTk0 OTJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTVjOGI5ZTMtYjQ0Zi00OTBiLWJm NTEtOTlmMmRkMmExMzY0LzAvMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2 NkMzMTk0OTJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeSDxCO5aiHcaZ+C1m9QUtuvp6sQ2WAsdNo Xmmtg+PKFJuvhuMrJLKYeL7oZpaoo+fmoPzrDBpftf7rcKyXCfTqI61OllwChpOX yH/lvWPpSUiBTb+JWaRaj45B+9/nHzUNAdKvAR5Zgum8UBCvej39y7IYVfxeLLP6 5yJ74NVwIqAklQCaduZYsAwiWg22pVU639SuCEeusaf35u7522HNGMf78kW1A3iC DQL5MEpvYpAJvpbshm9FxVHSuzC0BXCppUHEOrAzcCdRGjZNVB8wWppOHF53Vg8Z kGi5RxUjihbN2iIXG1j/CgWuNKtxikaHiWQc88oXQIltCqr9eIc= -----END CERTIFICATE-----Generated at Sat Apr 18 11:25:48 2026 by rpki-client