$ rpki-client -vvf repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft File: 27A3131BB606D93657151019C1A9735DF861C9D4.mft (raw, json) Hash identifier: 34gfQNaNiYNdxsKEsbN5ySqesy7ZzxiFm/SAyEB2hyQ= Subject key identifier: A9:E9:1E:FB:54:EA:28:15:01:0E:08:8E:EE:3C:88:D2:41:A4:3E:79 Authority key identifier: 27:A3:13:1B:B6:06:D9:36:57:15:10:19:C1:A9:73:5D:F8:61:C9:D4 Certificate issuer: /CN=27A3131BB606D93657151019C1A9735DF861C9D4 Certificate serial: 7AD6789E665082510CDD210D4A0DE1B8C641042E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft Manifest number: 0302 Signing time: Sun 19 Oct 2025 20:11:03 +0000 Manifest this update: Sun 19 Oct 2025 20:06:03 +0000 Manifest next update: Wed 22 Oct 2025 22:34:03 +0000 Files and hashes: 1: 27A3131BB606D93657151019C1A9735DF861C9D4.crl (hash: fdWOwEWquPGMItPb+QMvE319gGGCcY5YwcT1DIb/aK8=) 2: 3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa (hash: encpHXfOglU+n5zC00TevMjvjDMOpcW1MtPZsrVdOCI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.crl rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d6:78:9e:66:50:82:51:0c:dd:21:0d:4a:0d:e1:b8:c6:41:04:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27A3131BB606D93657151019C1A9735DF861C9D4 Validity Not Before: Oct 19 20:06:03 2025 GMT Not After : Oct 22 22:34:03 2025 GMT Subject: CN=A9E91EFB54EA2815010E088EEE3C88D241A43E79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5a:62:23:e7:f0:7e:8a:5b:69:95:0a:09:25: c5:ba:11:96:38:e8:c7:fd:4c:8c:06:c0:38:f0:f6: 7b:a7:12:b7:78:fe:6a:04:31:04:2f:9f:4d:17:9c: b7:03:21:42:ec:f5:06:db:76:d7:5c:6c:e0:08:01: 79:df:8a:e4:2a:57:6a:e1:3b:0d:7b:b2:c3:a4:c5: 3b:a3:36:9a:28:b6:dc:02:d3:1e:87:f6:c4:ea:14: 4a:3b:b7:e2:15:b4:51:6f:b0:2b:56:73:23:99:71: d6:d1:24:57:3c:e4:48:03:3b:62:f5:9f:8d:e0:23: 74:38:ee:ee:69:6f:bd:fc:7f:ee:e3:b5:4d:ff:30: 9f:e8:df:9b:3e:8f:af:c8:20:40:68:e1:25:70:45: 6c:73:fd:85:6a:42:b1:57:c7:77:ed:bf:0e:80:ba: a0:3a:e0:fa:fe:6a:26:ed:cf:15:a6:eb:8f:7f:bd: 35:4f:d4:94:d7:bf:db:c7:57:ce:32:7d:53:67:f8: d6:18:0c:ab:e9:37:9d:4b:c8:44:ad:24:2a:dc:9e: f8:34:89:13:db:f2:ba:6a:6d:d0:8e:35:64:9b:eb: a3:75:39:1f:9e:fd:04:8d:8b:fe:bb:07:a3:13:c7: e1:c3:25:f6:81:22:0e:95:ca:10:d5:d7:ed:51:7f: ad:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E9:1E:FB:54:EA:28:15:01:0E:08:8E:EE:3C:88:D2:41:A4:3E:79 X509v3 Authority Key Identifier: keyid:27:A3:13:1B:B6:06:D9:36:57:15:10:19:C1:A9:73:5D:F8:61:C9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8c:d5:ae:31:a8:9b:70:6d:c4:cc:42:77:8b:ee:4c:cc:8e: f1:48:fe:63:34:92:cf:1f:95:23:20:05:b6:8f:37:35:97:26: f9:c0:c3:04:cb:21:2b:68:f0:f2:9e:cb:84:d5:35:ae:97:18: 3d:85:87:44:44:8e:46:54:7f:97:a5:6f:04:85:fe:9a:4c:b2: cd:68:13:18:5c:c5:fa:d7:2a:3a:19:40:1c:63:cb:69:7d:80: 17:41:60:ac:67:5e:9c:12:fc:0d:6f:1e:98:7b:b5:e3:05:26: 32:a2:10:06:4d:e9:0a:ec:fd:56:24:5f:e2:d5:dd:ea:fb:1b: 9c:67:0e:2b:53:67:19:57:7a:46:f6:b4:72:ea:22:b3:c8:39: 96:a7:16:a3:92:b1:3b:4f:08:29:99:1a:5b:2b:44:29:f3:fc: 1c:bd:b3:c7:13:ed:a4:b2:7e:30:7f:d5:c7:b9:1d:6f:ef:61: 48:e8:86:71:01:71:b3:c4:84:2e:10:f7:fd:f9:a4:cf:2b:94: ee:df:4a:57:7e:f2:aa:a9:71:6f:39:2c:d9:bd:24:3c:21:ad: a9:a6:ea:e5:ad:47:61:81:b7:18:c0:df:b2:7c:04:ef:d3:d2: ed:5b:ae:21:b8:7d:d0:f4:51:42:3a:63:d2:89:88:7d:0c:14: 5b:5f:b4:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUetZ4nmZQglEM3SENSg3huMZBBC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdBMzEzMUJCNjA2RDkzNjU3MTUxMDE5QzFBOTczNURG ODYxQzlENDAeFw0yNTEwMTkyMDA2MDNaFw0yNTEwMjIyMjM0MDNaMDMxMTAvBgNV BAMTKEE5RTkxRUZCNTRFQTI4MTUwMTBFMDg4RUVFM0M4OEQyNDFBNDNFNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1WmIj5/B+iltplQoJJcW6EZY4 6Mf9TIwGwDjw9nunErd4/moEMQQvn00XnLcDIULs9QbbdtdcbOAIAXnfiuQqV2rh Ow17ssOkxTujNpoottwC0x6H9sTqFEo7t+IVtFFvsCtWcyOZcdbRJFc85EgDO2L1 n43gI3Q47u5pb738f+7jtU3/MJ/o35s+j6/IIEBo4SVwRWxz/YVqQrFXx3ftvw6A uqA64Pr+aibtzxWm649/vTVP1JTXv9vHV84yfVNn+NYYDKvpN51LyEStJCrcnvg0 iRPb8rpqbdCONWSb66N1OR+e/QSNi/67B6MTx+HDJfaBIg6VyhDV1+1Rf63jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqeke+1TqKBUBDgiO7jyI0kGkPnkwHwYDVR0j BBgwFoAUJ6MTG7YG2TZXFRAZwalzXfhhydQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTQ0ZTk1MS0zZDA4LTQ1OGEtYTQ0YS01MjlkMzg3ZDI2YjEvMC8yN0EzMTMxQkI2 MDZEOTM2NTcxNTEwMTlDMUE5NzM1REY4NjFDOUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdBMzEzMUJCNjA2RDkzNjU3MTUxMDE5QzFBOTczNURGODYx QzlENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDU0NGU5NTEtM2QwOC00NThhLWE0 NGEtNTI5ZDM4N2QyNmIxLzAvMjdBMzEzMUJCNjA2RDkzNjU3MTUxMDE5QzFBOTcz NURGODYxQzlENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6M1a4xqJtwbcTMQneL7kzMjvFI/mM0ks8f lSMgBbaPNzWXJvnAwwTLISto8PKey4TVNa6XGD2Fh0REjkZUf5elbwSF/ppMss1o ExhcxfrXKjoZQBxjy2l9gBdBYKxnXpwS/A1vHph7teMFJjKiEAZN6Qrs/VYkX+LV 3er7G5xnDitTZxlXekb2tHLqIrPIOZanFqOSsTtPCCmZGlsrRCnz/By9s8cT7aSy fjB/1ce5HW/vYUjohnEBcbPEhC4Q9/35pM8rlO7fSld+8qqpcW85LNm9JDwhramm 6uWtR2GBtxjA37J8BO/T0u1briG4fdD0UUI6Y9KJiH0MFFtftJQ= -----END CERTIFICATE-----Generated at Mon Oct 20 14:35:49 2025 by rpki-client