$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft File: 27575AEBC443417C31FDF4A1DDFE016557A835F4.mft (raw, json) Hash identifier: C94HPwKsOeT5Pf4lavIl9PnB9uzia//3dyC66IVQajw= Subject key identifier: 2D:CD:23:38:48:C7:BF:2D:9E:D0:50:C1:16:3F:73:B3:27:DA:1F:94 Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Certificate serial: 2930CA66AE43356C20C2B52B8442C3962886057A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft Manifest number: 022F Signing time: Sat 18 Apr 2026 16:31:46 +0000 Manifest this update: Sat 18 Apr 2026 16:26:46 +0000 Manifest next update: Wed 22 Apr 2026 02:56:46 +0000 Files and hashes: 1: 27575AEBC443417C31FDF4A1DDFE016557A835F4.crl (hash: UU+BE2zFHDwobSgvJiOlH2zqiRFN8zSmxl2LYkCqcEo=) 2: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: iVmYuqrywXHq070b2b6b1AVyJeKdilvifyJRDNtlsDw=) 3: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: 11KNXlbV6XDV6e1jADYaW+1r6VvI4ginelDqZNH0poo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:30:ca:66:ae:43:35:6c:20:c2:b5:2b:84:42:c3:96:28:86:05:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Validity Not Before: Apr 18 16:26:46 2026 GMT Not After : Apr 22 02:56:46 2026 GMT Subject: CN=2DCD233848C7BF2D9ED050C1163F73B327DA1F94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:79:09:de:d7:33:1c:63:4f:fa:54:7a:f7:62: 01:7e:ec:57:4d:90:1f:50:94:e0:2d:a3:d4:87:07: 42:10:67:14:0b:1a:d0:29:d7:4f:55:34:31:f4:4a: b8:81:2a:07:7a:07:75:ef:de:71:28:3d:99:a9:d4: 92:7e:cc:be:46:cf:eb:5d:0b:fa:c5:17:30:95:5a: 6c:9d:3d:e6:69:6e:2e:20:7a:23:88:ac:0a:66:65: fd:c2:b4:78:ec:ed:3f:d6:db:4b:82:44:f4:40:eb: d4:01:71:fe:8d:f9:ce:88:ed:87:7f:d0:da:1f:dc: d3:26:25:05:f5:4d:4e:7b:c4:04:10:61:a0:30:c6: 6f:f4:44:fc:09:77:5b:dd:4f:c9:17:6f:b0:62:fa: af:9d:79:71:d0:20:ed:36:4e:14:ee:f7:fd:ae:9d: 95:3f:c6:3b:da:2b:1d:80:58:a3:4d:aa:ff:7d:3e: d0:9e:a9:01:23:45:3b:52:55:b8:b7:fd:09:76:9b: ae:56:8a:04:4a:3b:f5:5e:a2:19:7f:e7:5e:20:84: 12:91:4b:8f:d9:57:45:f3:89:3f:85:62:43:fc:07: 61:dd:31:bd:da:9d:03:f5:e5:a3:81:f9:40:44:78: a6:2f:e3:1a:76:e3:03:65:b1:8f:90:10:8a:a9:ed: c9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CD:23:38:48:C7:BF:2D:9E:D0:50:C1:16:3F:73:B3:27:DA:1F:94 X509v3 Authority Key Identifier: keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:99:ec:eb:c3:3d:cc:a8:e7:da:fe:c9:b3:8f:4e:fa:be:18: 75:62:ae:f7:fa:5a:ac:71:14:ea:12:eb:48:7d:17:31:c2:3b: d9:00:c6:29:e0:b8:d2:6a:90:30:26:4c:30:e6:56:c3:d5:f2: ca:47:86:16:5f:f1:7b:5d:10:ac:98:23:9a:ca:3d:14:77:92: be:cc:7e:a8:12:8f:3e:96:a1:f1:5f:3b:fb:2e:24:b1:70:29: a9:e5:c3:2a:91:82:94:3b:2d:f4:61:e5:83:49:d5:41:55:36: b8:98:be:81:3c:8f:83:33:85:d0:4b:f8:cf:e6:b7:e8:6c:40: 32:85:2c:9e:2d:62:61:48:a2:a4:ee:f3:a6:24:19:0c:7e:43: 37:ad:ea:f8:5b:bc:0a:f7:dd:b1:84:75:34:8b:13:28:ae:8c: 34:04:b6:6f:74:dc:6d:d1:e6:2f:3a:14:e7:b7:2f:8e:3c:42: 45:05:02:f3:bf:58:52:7b:2c:23:1c:27:b1:3f:03:4a:89:e1: f2:1d:41:e1:02:88:00:37:1a:39:48:cc:21:9f:8e:21:5b:b2: b2:8d:76:f1:93:4c:31:c6:e0:16:cc:e6:5d:43:bd:3a:84:28: a5:7e:e7:8f:b6:fa:2e:b8:e1:12:87:9f:f1:95:e2:27:40:35: aa:0b:38:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKTDKZq5DNWwgwrUrhELDliiGBXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1 N0E4MzVGNDAeFw0yNjA0MTgxNjI2NDZaFw0yNjA0MjIwMjU2NDZaMDMxMTAvBgNV BAMTKDJEQ0QyMzM4NDhDN0JGMkQ5RUQwNTBDMTE2M0Y3M0IzMjdEQTFGOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxeQne1zMcY0/6VHr3YgF+7FdN kB9QlOAto9SHB0IQZxQLGtAp109VNDH0SriBKgd6B3Xv3nEoPZmp1JJ+zL5Gz+td C/rFFzCVWmydPeZpbi4geiOIrApmZf3CtHjs7T/W20uCRPRA69QBcf6N+c6I7Yd/ 0Nof3NMmJQX1TU57xAQQYaAwxm/0RPwJd1vdT8kXb7Bi+q+deXHQIO02ThTu9/2u nZU/xjvaKx2AWKNNqv99PtCeqQEjRTtSVbi3/Ql2m65WigRKO/Veohl/514ghBKR S4/ZV0XziT+FYkP8B2HdMb3anQP15aOB+UBEeKYv4xp24wNlsY+QEIqp7cntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULc0jOEjHvy2e0FDBFj9zsyfaH5QwHwYDVR0j BBgwFoAUJ1da68RDQXwx/fSh3f4BZVeoNfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMC8yNzU3NUFFQkM0 NDM0MTdDMzFGREY0QTFEREZFMDE2NTU3QTgzNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1N0E4 MzVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM2YjU5N2MtOTU0Ny00YzFlLWFj ODctM2E0MzRhMzAwYTY3LzAvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAx NjU1N0E4MzVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCZ7OvDPcyo59r+ybOPTvq+GHVirvf6Wqxx FOoS60h9FzHCO9kAxinguNJqkDAmTDDmVsPV8spHhhZf8XtdEKyYI5rKPRR3kr7M fqgSjz6WofFfO/suJLFwKanlwyqRgpQ7LfRh5YNJ1UFVNriYvoE8j4MzhdBL+M/m t+hsQDKFLJ4tYmFIoqTu86YkGQx+Qzet6vhbvAr33bGEdTSLEyiujDQEtm903G3R 5i86FOe3L448QkUFAvO/WFJ7LCMcJ7E/A0qJ4fIdQeECiAA3GjlIzCGfjiFbsrKN dvGTTDHG4BbM5l1DvTqEKKV+54+2+i644RKHn/GV4idANaoLOFo= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:35 2026 by rpki-client