$ rpki-client -vvf repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft File: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft (raw, json) Hash identifier: KE9lBtIo4EiBbAID3k2BfKKL0uaIRTVOxlZALAHIzzo= Subject key identifier: 4F:CD:4B:AB:DB:34:37:3D:35:F7:F5:B9:18:71:05:A1:9D:A3:5F:8D Authority key identifier: BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA Certificate issuer: /CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Certificate serial: 422427171F5CC71BE4EE7566BD5C8E1BAFB3C1AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft Manifest number: 033E Signing time: Tue 24 Mar 2026 16:32:15 +0000 Manifest this update: Tue 24 Mar 2026 16:27:15 +0000 Manifest next update: Sat 28 Mar 2026 00:55:15 +0000 Files and hashes: 1: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl (hash: uObEisqdsU6nN0KJ/V7sFHLShu/6FlmTA/YfU9VUf4k=) 2: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: m681LM1ItdW4dx+wPJxInCtAMds6i/b/AFLjGDvuwL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:24:27:17:1f:5c:c7:1b:e4:ee:75:66:bd:5c:8e:1b:af:b3:c1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Validity Not Before: Mar 24 16:27:15 2026 GMT Not After : Mar 28 00:55:15 2026 GMT Subject: CN=4FCD4BABDB34373D35F7F5B9187105A19DA35F8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:53:59:c6:6a:2c:01:d2:39:04:a5:01:47: c3:cf:83:e3:7f:aa:d8:70:7d:cd:0b:f1:ec:85:b6: e5:82:fd:91:b4:28:bb:b6:a5:0a:b9:ee:10:74:4d: 14:26:bf:2c:22:73:d9:60:ef:f7:c0:86:28:3b:d2: 62:8c:ab:f0:c4:d8:bf:0c:30:aa:d2:ba:04:92:7e: 4c:c6:3c:17:68:0e:c6:d7:a5:12:ba:d1:d3:39:91: d0:a3:af:b3:3e:92:8f:03:ab:cb:fc:75:71:2f:d1: 9e:a8:4c:00:6a:7d:bb:85:cc:5c:31:93:17:4c:bf: 55:db:28:ac:db:e0:54:33:95:a4:56:a6:c3:99:65: da:91:f0:99:b5:e3:02:c2:35:13:b1:96:b2:53:65: a1:0e:64:d0:89:90:ee:7b:b6:59:6d:6c:4b:97:40: 8d:d1:f8:5e:43:74:cb:37:fe:13:0c:80:65:f9:28: 8d:1c:be:1e:b4:42:79:c0:59:05:f7:08:e5:01:fd: 59:41:56:87:7e:3c:7d:1f:d1:93:f8:d3:5e:38:fc: 67:95:bd:88:9a:12:8c:95:90:66:9a:b5:ce:6d:36: df:72:94:49:c9:c0:d1:b8:ac:ad:6e:83:b2:5e:72: 3a:1b:b4:d2:72:34:c1:bc:43:3f:90:ee:16:06:6f: 2b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CD:4B:AB:DB:34:37:3D:35:F7:F5:B9:18:71:05:A1:9D:A3:5F:8D X509v3 Authority Key Identifier: keyid:BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bd:32:46:f7:db:b9:b2:40:93:40:8a:26:b8:53:48:fe:ba: 94:a2:0e:72:de:ce:4d:55:0c:69:61:ca:72:73:1c:90:ae:27: 35:55:17:55:f2:9a:af:0e:b2:d7:b5:e6:48:8b:ff:44:5d:bf: 70:11:f8:6e:87:e3:37:e8:08:02:37:50:e1:3b:51:a1:88:a3: f1:05:5a:e7:23:d9:87:9c:2f:c5:c8:30:d6:2f:69:6e:56:39: ce:41:23:3d:58:8f:d3:7c:d6:1e:c2:03:4d:9d:32:46:ac:ec: 45:b1:16:fd:55:2b:fa:ba:3c:7e:39:82:16:e5:fb:78:a9:db: f2:e6:aa:de:45:35:ff:cc:c2:7d:fe:ed:91:d3:fc:24:b8:27: df:65:87:2d:77:ec:0e:e5:52:3e:fc:5b:8b:8f:8c:8b:74:0b: 59:6b:87:21:aa:1d:f5:74:09:bc:38:d2:84:dc:6c:44:a8:d7: f2:45:0e:9e:e2:15:14:08:5d:d1:cd:3b:58:23:d8:5a:08:be: 77:4b:0c:b3:61:6f:df:8d:da:7f:0b:ea:1b:ba:62:28:79:0f: f7:32:0b:30:02:1a:ed:8d:73:1b:6a:49:49:37:8e:2f:81:29: 08:27:73:62:ac:6a:0c:26:ab:fb:bc:17:8a:9f:25:c1:db:be: 7a:80:f9:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQiQnFx9cxxvk7nVmvVyOG6+zwa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhD REU3Q0RBQTAeFw0yNjAzMjQxNjI3MTVaFw0yNjAzMjgwMDU1MTVaMDMxMTAvBgNV BAMTKDRGQ0Q0QkFCREIzNDM3M0QzNUY3RjVCOTE4NzEwNUExOURBMzVGOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BlNZxmosAdI5BKUBR8PPg+N/ qthwfc0L8eyFtuWC/ZG0KLu2pQq57hB0TRQmvywic9lg7/fAhig70mKMq/DE2L8M MKrSugSSfkzGPBdoDsbXpRK60dM5kdCjr7M+ko8Dq8v8dXEv0Z6oTABqfbuFzFwx kxdMv1XbKKzb4FQzlaRWpsOZZdqR8Jm14wLCNROxlrJTZaEOZNCJkO57tlltbEuX QI3R+F5DdMs3/hMMgGX5KI0cvh60QnnAWQX3COUB/VlBVod+PH0f0ZP40144/GeV vYiaEoyVkGaatc5tNt9ylEnJwNG4rK1ug7JecjobtNJyNMG8Qz+Q7hYGbysxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT81Lq9s0Nz019/W5GHEFoZ2jX40wHwYDVR0j BBgwFoAUuyfq1Mxv/1L1uq9Kh1MI2M3nzaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTU0YThjZS0xOGY0LTQ5ODgtYTk1MS05NjY0ZGQxNzZjZDkvMC9CQjI3RUFENEND NkZGRjUyRjVCQUFGNEE4NzUzMDhEOENERTdDREFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhDREU3 Q0RBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4 RDhDREU3Q0RBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACy9Mkb327myQJNAiia4U0j+upSiDnLezk1V DGlhynJzHJCuJzVVF1Xymq8Oste15kiL/0Rdv3AR+G6H4zfoCAI3UOE7UaGIo/EF Wucj2YecL8XIMNYvaW5WOc5BIz1Yj9N81h7CA02dMkas7EWxFv1VK/q6PH45ghbl +3ip2/Lmqt5FNf/Mwn3+7ZHT/CS4J99lhy137A7lUj78W4uPjIt0C1lrhyGqHfV0 Cbw40oTcbESo1/JFDp7iFRQIXdHNO1gj2FoIvndLDLNhb9+N2n8L6hu6Yih5D/cy CzACGu2NcxtqSUk3ji+BKQgnc2Ksagwmq/u8F4qfJcHbvnqA+cM= -----END CERTIFICATE-----Generated at Thu Mar 26 15:49:41 2026 by rpki-client