$ rpki-client -vvf repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft File: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft (raw, json) Hash identifier: ZVmg+LgyEsAk/wyFQKG0aHwRPgA9Yyrquwmzqh9Ye9A= Subject key identifier: 78:AE:D4:F7:83:E8:58:CF:0B:45:5D:29:28:5A:C8:A8:24:DF:C8:6A Authority key identifier: 2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E Certificate issuer: /CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Certificate serial: 7C4EBF222ED43156117D2A9132A96FDD8E2485EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft Manifest number: 77 Signing time: Wed 25 Mar 2026 21:32:11 +0000 Manifest this update: Wed 25 Mar 2026 21:27:11 +0000 Manifest next update: Sun 29 Mar 2026 04:52:11 +0000 Files and hashes: 1: 3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa (hash: 745SbMdhMmIVd9+YwllDATXoMHy8b7XWNJsce0BNxUE=) 2: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl (hash: dRgDL960kgij9NVKq18+ikz7Fk7Rwikg7CuR84kX9+g=) 3: 3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa (hash: 6F2YD7bfpsvy9ZCzb1NRXMUO3qP13tF9eyDHsH0IzEg=) 4: 3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa (hash: 4LokQzzFwf4xC5LYRIdk1nOZ26P5gcvOND0Okjnr1uo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:4e:bf:22:2e:d4:31:56:11:7d:2a:91:32:a9:6f:dd:8e:24:85:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Validity Not Before: Mar 25 21:27:11 2026 GMT Not After : Mar 29 04:52:11 2026 GMT Subject: CN=78AED4F783E858CF0B455D29285AC8A824DFC86A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:47:11:d9:7d:f7:b3:8e:77:de:bc:5e:77:79: 60:47:3e:fe:5d:1a:19:95:d2:fe:6f:6a:33:75:91: de:e0:fd:14:67:20:dc:d4:b1:c8:21:cf:f3:2d:03: 7b:7c:eb:2f:36:bb:46:7a:2a:90:2f:5b:0b:0d:5c: c7:22:cf:7f:d0:42:88:51:86:a8:22:21:f1:53:63: 21:68:fc:45:53:45:c5:c8:28:6c:2e:40:5a:03:35: 06:cc:ad:b8:81:26:d0:19:7d:1f:b1:fc:31:c6:6b: 2e:b6:68:0c:94:00:4a:85:72:49:bf:14:68:e4:33: df:b5:8f:25:d1:fa:7c:12:62:ec:86:5f:7a:3f:e8: 6a:bb:06:6d:f9:ed:7d:81:0c:08:10:9f:b9:89:d5: d6:cc:84:15:26:90:73:c2:46:0d:df:6f:25:10:60: 66:27:50:39:2f:c0:9f:0e:df:41:60:50:b9:a9:91: c5:47:83:fe:1a:b5:5d:a2:ae:18:07:5f:8a:51:17: 4e:90:2b:0e:7f:42:27:d4:aa:6f:1c:3c:cd:e9:3f: 4e:d1:d3:bd:11:54:71:ae:ad:56:74:22:48:9d:f4: 6c:bf:fa:a4:58:2e:b9:a5:15:32:52:f3:bd:57:8a: 89:70:4e:14:93:12:3c:d0:e8:33:dd:bf:72:82:74: a7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AE:D4:F7:83:E8:58:CF:0B:45:5D:29:28:5A:C8:A8:24:DF:C8:6A X509v3 Authority Key Identifier: keyid:2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:5e:03:0f:0b:59:bd:36:5a:f1:6b:41:0a:91:55:f8:36:9a: 42:3d:1b:ce:21:0f:73:b1:73:dd:4b:66:0f:a4:8b:99:8c:ee: 2a:d1:74:a1:5f:2d:b8:51:16:34:6a:1d:ca:10:04:bf:21:c0: 43:d1:31:29:61:38:52:c0:3b:ce:79:65:86:02:0a:9d:63:bb: 1e:c8:65:bc:70:11:be:eb:4c:a6:98:a9:69:40:58:03:6d:19: e5:0f:c8:f1:50:0e:2d:45:35:da:d7:b3:fb:fe:49:6e:26:76: 6c:79:86:d5:34:9b:61:84:14:2f:5a:43:5b:e0:e7:9c:f2:e7: 81:c8:87:0a:5d:01:47:bb:e9:44:0c:67:32:ce:ec:31:e1:4d: 5e:22:54:28:80:b9:bc:93:64:5d:a6:92:bc:a5:e0:38:ea:52: 18:ab:28:b1:41:4c:0b:f2:7c:b9:00:d8:9a:86:2d:67:5d:61: 8d:25:b8:dd:00:e0:6c:23:bd:fa:f9:b3:72:68:ed:9d:23:21: b0:a6:de:66:d3:24:8b:0f:cf:8f:67:7c:68:b3:9c:d6:87:2d: cb:e5:43:78:93:89:0f:fc:de:b5:a8:cd:fb:1c:9f:38:99:11: 0f:d6:96:52:b4:0a:5a:89:67:77:6a:97:15:52:52:56:14:49: 35:19:b8:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfE6/Ii7UMVYRfSqRMqlv3Y4kheswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VC MjFDNDk4RTAeFw0yNjAzMjUyMTI3MTFaFw0yNjAzMjkwNDUyMTFaMDMxMTAvBgNV BAMTKDc4QUVENEY3ODNFODU4Q0YwQjQ1NUQyOTI4NUFDOEE4MjRERkM4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4RxHZffezjnfevF53eWBHPv5d GhmV0v5vajN1kd7g/RRnINzUscghz/MtA3t86y82u0Z6KpAvWwsNXMciz3/QQohR hqgiIfFTYyFo/EVTRcXIKGwuQFoDNQbMrbiBJtAZfR+x/DHGay62aAyUAEqFckm/ FGjkM9+1jyXR+nwSYuyGX3o/6Gq7Bm357X2BDAgQn7mJ1dbMhBUmkHPCRg3fbyUQ YGYnUDkvwJ8O30FgULmpkcVHg/4atV2irhgHX4pRF06QKw5/QifUqm8cPM3pP07R 070RVHGurVZ0Ikid9Gy/+qRYLrmlFTJS871XiolwThSTEjzQ6DPdv3KCdKczAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeK7U94PoWM8LRV0pKFrIqCTfyGowHwYDVR0j BBgwFoAULCeg2d0lMevvHi7FasvLzrIcSY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmYwOTU4NC05MTEwLTRiMGQtOGY2ZC0yY2U1MjU4ZTg0NmIvMC8yQzI3QTBEOURE MjUzMUVCRUYxRTJFQzU2QUNCQ0JDRUIyMUM0OThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VCMjFD NDk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNC Q0VCMjFDNDk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACheAw8LWb02WvFrQQqRVfg2mkI9G84hD3Ox c91LZg+ki5mM7irRdKFfLbhRFjRqHcoQBL8hwEPRMSlhOFLAO855ZYYCCp1jux7I ZbxwEb7rTKaYqWlAWANtGeUPyPFQDi1FNdrXs/v+SW4mdmx5htU0m2GEFC9aQ1vg 55zy54HIhwpdAUe76UQMZzLO7DHhTV4iVCiAubyTZF2mkryl4DjqUhirKLFBTAvy fLkA2JqGLWddYY0luN0A4Gwjvfr5s3Jo7Z0jIbCm3mbTJIsPz49nfGiznNaHLcvl Q3iTiQ/83rWozfscnziZEQ/WllK0ClqJZ3dqlxVSUlYUSTUZuPQ= -----END CERTIFICATE-----Generated at Thu Mar 26 12:21:06 2026 by rpki-client