$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft File: 27575AEBC443417C31FDF4A1DDFE016557A835F4.mft (raw, json) Hash identifier: akObT53rHyYpY5B36JGhj4ogU9Foe5jSG5CsIB3ob6E= Subject key identifier: 10:C8:39:1C:42:56:A8:C6:F2:36:42:7A:4B:98:61:48:C4:90:19:8C Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Certificate serial: 1085995C94BC3F9733C57176686B30F7CF070FB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft Manifest number: 021A Signing time: Mon 02 Mar 2026 04:11:45 +0000 Manifest this update: Mon 02 Mar 2026 04:06:45 +0000 Manifest next update: Thu 05 Mar 2026 13:23:45 +0000 Files and hashes: 1: 27575AEBC443417C31FDF4A1DDFE016557A835F4.crl (hash: bKUjHNiLuSjKK98G5sxW2U+AmPeD51IjkSJjTXsRWJU=) 2: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: iVmYuqrywXHq070b2b6b1AVyJeKdilvifyJRDNtlsDw=) 3: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: 11KNXlbV6XDV6e1jADYaW+1r6VvI4ginelDqZNH0poo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:85:99:5c:94:bc:3f:97:33:c5:71:76:68:6b:30:f7:cf:07:0f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Validity Not Before: Mar 2 04:06:45 2026 GMT Not After : Mar 5 13:23:45 2026 GMT Subject: CN=10C8391C4256A8C6F236427A4B986148C490198C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:c2:90:d7:1a:ad:ab:1b:8b:76:1c:70:60: 4e:74:fd:a5:37:86:a4:dc:9f:9a:0a:3f:96:45:d8: 66:04:e4:3d:20:3f:d7:02:c5:8a:ca:16:a9:01:73: 57:72:4d:b3:d9:a8:28:4f:cb:bd:93:ad:91:df:c3: 87:a5:fc:10:b3:16:16:af:77:53:67:e9:bb:8f:47: e4:3d:40:1a:66:48:5a:5f:23:6d:02:d5:bc:27:8e: fd:bf:7b:54:b8:9f:85:f1:c4:ef:f7:0b:db:0f:0c: de:f7:0f:2d:e7:08:7d:5d:b6:a7:d0:3e:60:73:c2: 41:25:75:cc:0b:3d:1e:43:29:ab:f2:5f:ad:57:56: 0b:4c:d3:38:26:6a:29:46:af:a9:aa:21:1c:b7:48: d0:09:8a:79:23:52:32:a1:60:b7:5c:38:cd:7f:e0: d1:87:15:b5:75:97:24:a3:f6:cb:e9:1d:49:68:01: 89:6d:74:53:29:a7:7c:03:7b:7f:ee:a7:ac:6d:12: e2:2f:ab:e4:32:f8:6f:b0:c7:01:98:e5:a7:60:d7: 8d:6a:1c:e2:0e:6d:3e:ce:7d:74:49:50:be:71:52: 9a:14:d5:4b:e9:f6:11:2b:81:9c:56:26:67:90:69: ff:72:ba:b4:5a:a3:9f:d1:0a:41:8d:1e:f8:4d:7e: 4e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C8:39:1C:42:56:A8:C6:F2:36:42:7A:4B:98:61:48:C4:90:19:8C X509v3 Authority Key Identifier: keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:aa:ab:6a:38:78:a3:11:5a:d2:32:92:39:19:e1:cb:c7:44: 4b:f2:92:80:22:8c:11:5a:7e:ee:bd:97:04:73:8c:70:97:2f: fa:27:c0:c8:6d:72:58:c4:43:ea:f1:06:06:f8:bf:db:8e:fe: 36:2f:90:e2:67:0f:48:9f:34:82:34:7d:23:5f:a1:ff:48:ee: 5b:8c:7d:3f:2d:24:99:7c:92:ef:85:47:12:f1:24:4a:9b:24: fa:b4:54:38:89:d0:89:95:96:5f:5b:90:80:e5:d9:46:25:24: a3:8f:8a:c8:2e:da:e9:94:6a:cf:78:82:fd:e9:38:3a:49:1d: 8c:1e:3c:fd:c9:7e:08:6c:c2:7f:40:a5:3c:69:f3:e3:37:cc: 87:82:42:e8:61:65:d6:6c:d6:25:1d:d0:8b:c6:78:75:05:d5: 64:fd:5c:e3:5b:a9:e8:8b:4b:bd:34:d2:c9:bb:be:0d:0e:4a: f4:d0:58:c4:b0:f6:71:82:96:a2:af:e8:a2:b3:4b:a1:ae:7a: 81:21:78:cf:dd:2b:6c:f8:74:79:27:5b:96:23:eb:8b:d1:57: 2e:82:63:f3:39:14:f0:57:ed:ee:4f:8d:c3:17:22:0c:32:98: b0:01:65:ab:68:d6:18:76:43:63:8d:47:55:3f:64:2c:83:c1: e5:33:97:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEIWZXJS8P5czxXF2aGsw988HD7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1 N0E4MzVGNDAeFw0yNjAzMDIwNDA2NDVaFw0yNjAzMDUxMzIzNDVaMDMxMTAvBgNV BAMTKDEwQzgzOTFDNDI1NkE4QzZGMjM2NDI3QTRCOTg2MTQ4QzQ5MDE5OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yMKQ1xqtqxuLdhxwYE50/aU3 hqTcn5oKP5ZF2GYE5D0gP9cCxYrKFqkBc1dyTbPZqChPy72TrZHfw4el/BCzFhav d1Nn6buPR+Q9QBpmSFpfI20C1bwnjv2/e1S4n4XxxO/3C9sPDN73Dy3nCH1dtqfQ PmBzwkEldcwLPR5DKavyX61XVgtM0zgmailGr6mqIRy3SNAJinkjUjKhYLdcOM1/ 4NGHFbV1lySj9svpHUloAYltdFMpp3wDe3/up6xtEuIvq+Qy+G+wxwGY5adg141q HOIObT7OfXRJUL5xUpoU1Uvp9hErgZxWJmeQaf9yurRao5/RCkGNHvhNfk4bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEMg5HEJWqMbyNkJ6S5hhSMSQGYwwHwYDVR0j BBgwFoAUJ1da68RDQXwx/fSh3f4BZVeoNfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMC8yNzU3NUFFQkM0 NDM0MTdDMzFGREY0QTFEREZFMDE2NTU3QTgzNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1N0E4 MzVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM2YjU5N2MtOTU0Ny00YzFlLWFj ODctM2E0MzRhMzAwYTY3LzAvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAx NjU1N0E4MzVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSqq2o4eKMRWtIykjkZ4cvHREvykoAijBFa fu69lwRzjHCXL/onwMhtcljEQ+rxBgb4v9uO/jYvkOJnD0ifNII0fSNfof9I7luM fT8tJJl8ku+FRxLxJEqbJPq0VDiJ0ImVll9bkIDl2UYlJKOPisgu2umUas94gv3p ODpJHYwePP3Jfghswn9ApTxp8+M3zIeCQuhhZdZs1iUd0IvGeHUF1WT9XONbqeiL S7000sm7vg0OSvTQWMSw9nGClqKv6KKzS6GueoEheM/dK2z4dHknW5Yj64vRVy6C Y/M5FPBX7e5PjcMXIgwymLABZato1hh2Q2ONR1U/ZCyDweUzl24= -----END CERTIFICATE-----Generated at Mon Mar 2 09:51:13 2026 by rpki-client