$ rpki-client -vvf repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft File: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft (raw, json) Hash identifier: VRJm+3RsIZ1bfSTEyxvD4fhvkfhvsxr8SmQcVBycMMc= Subject key identifier: 14:C9:54:D4:F2:D0:D9:3A:39:E7:B4:30:63:07:EC:5F:5F:E0:A9:21 Authority key identifier: 2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E Certificate issuer: /CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Certificate serial: 4AA834DA8EE444DBF85966175CCE097E9B1F5557 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft Manifest number: 2E Signing time: Sat 18 Oct 2025 14:41:56 +0000 Manifest this update: Sat 18 Oct 2025 14:36:56 +0000 Manifest next update: Wed 22 Oct 2025 02:36:56 +0000 Files and hashes: 1: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl (hash: CBtujHb1rqc/n9Hy+fPCl3M6EPXpz02HdXBGPMdyhnk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 02:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a8:34:da:8e:e4:44:db:f8:59:66:17:5c:ce:09:7e:9b:1f:55:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Validity Not Before: Oct 18 14:36:56 2025 GMT Not After : Oct 22 02:36:56 2025 GMT Subject: CN=14C954D4F2D0D93A39E7B4306307EC5F5FE0A921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:18:9d:bc:d3:9e:66:8b:4c:51:0d:72:d1:c7: ba:1d:be:b1:a7:47:c1:cf:a6:35:5e:00:e1:c0:e5: 45:37:9e:68:89:58:93:e9:cf:9f:58:04:0b:e5:b2: f9:04:83:42:94:6d:34:37:f3:aa:94:5e:1a:18:60: a4:4f:8c:f1:1e:1f:2a:5b:75:1b:a2:88:29:f8:16: 13:dc:e7:53:a2:9b:c1:05:16:42:7a:a3:79:51:66: 93:66:2b:bc:4e:55:71:5e:eb:70:3d:cf:25:83:b9: dc:7b:f6:dd:3b:eb:c8:63:72:13:d9:2e:16:f7:0e: 59:ec:86:f7:76:b3:b6:2b:f1:0f:07:1f:ae:28:19: ee:75:9c:5b:ff:8e:72:da:67:50:8c:62:55:9c:ba: c1:bb:a7:99:03:fe:68:e0:83:c3:b0:5a:c3:70:56: a6:1b:04:95:ca:20:b0:bf:e6:8f:fc:d1:88:84:74: b9:32:c3:60:27:b5:f1:6f:11:60:f1:de:b8:a3:64: 33:9b:59:5f:80:8b:b3:01:65:58:27:4f:79:f2:88: 70:9d:42:d4:2d:4a:f4:69:d2:19:0c:ae:a9:27:9e: 7f:32:27:7b:88:45:c5:50:a6:b6:63:d9:ea:5c:48: 83:e3:8c:d3:80:d2:90:1c:50:6a:94:23:0b:dd:84: df:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C9:54:D4:F2:D0:D9:3A:39:E7:B4:30:63:07:EC:5F:5F:E0:A9:21 X509v3 Authority Key Identifier: keyid:2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b6:23:6f:3e:e1:20:6e:67:be:2e:81:61:98:a3:8b:d7:0c: 5e:ff:45:76:f1:f7:86:4a:9e:ff:99:2b:c0:8a:3d:69:0f:24: f9:92:fa:54:90:8c:e8:a7:44:ce:f7:f9:ba:ae:f6:e6:e6:4a: ba:d2:66:bd:09:01:ef:96:ed:6a:0b:bd:0e:0c:20:df:1c:2b: f3:3d:13:a3:8e:fa:69:ee:3c:94:92:31:14:76:88:9c:93:1b: 36:0d:78:dd:1f:8f:75:d0:61:de:b4:e9:c4:7f:27:c0:06:5c: 85:74:a9:f8:9a:8f:08:da:90:90:a2:e8:a4:f9:43:20:64:de: 94:ef:a6:26:67:af:dd:9b:d7:5e:dc:a0:56:fb:f5:5a:12:f0: 67:8e:2c:a0:a5:ed:f5:20:65:29:70:43:8e:91:14:f3:2c:90: 5c:da:ab:18:1b:6e:e6:20:93:09:e7:57:b1:dc:90:2e:42:72: e5:7c:43:2b:ce:8c:04:60:63:8f:2f:cc:52:07:64:bb:c0:90: 6a:98:19:50:94:de:62:9f:d9:d6:b0:1e:a6:0c:6a:cd:cc:2b: 93:37:14:7b:1c:2c:91:9e:88:79:84:16:b2:ef:63:a0:4f:20: 2f:b4:a3:2d:cd:2b:d4:59:bd:d9:e4:59:af:32:7c:7a:cb:be: 1a:87:5d:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSqg02o7kRNv4WWYXXM4JfpsfVVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VC MjFDNDk4RTAeFw0yNTEwMTgxNDM2NTZaFw0yNTEwMjIwMjM2NTZaMDMxMTAvBgNV BAMTKDE0Qzk1NEQ0RjJEMEQ5M0EzOUU3QjQzMDYzMDdFQzVGNUZFMEE5MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjGJ28055mi0xRDXLRx7odvrGn R8HPpjVeAOHA5UU3nmiJWJPpz59YBAvlsvkEg0KUbTQ386qUXhoYYKRPjPEeHypb dRuiiCn4FhPc51Oim8EFFkJ6o3lRZpNmK7xOVXFe63A9zyWDudx79t0768hjchPZ Lhb3Dlnshvd2s7Yr8Q8HH64oGe51nFv/jnLaZ1CMYlWcusG7p5kD/mjgg8OwWsNw VqYbBJXKILC/5o/80YiEdLkyw2AntfFvEWDx3rijZDObWV+Ai7MBZVgnT3nyiHCd QtQtSvRp0hkMrqknnn8yJ3uIRcVQprZj2epcSIPjjNOA0pAcUGqUIwvdhN8nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFMlU1PLQ2To557QwYwfsX1/gqSEwHwYDVR0j BBgwFoAULCeg2d0lMevvHi7FasvLzrIcSY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmYwOTU4NC05MTEwLTRiMGQtOGY2ZC0yY2U1MjU4ZTg0NmIvMC8yQzI3QTBEOURE MjUzMUVCRUYxRTJFQzU2QUNCQ0JDRUIyMUM0OThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VCMjFD NDk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNC Q0VCMjFDNDk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFq2I28+4SBuZ74ugWGYo4vXDF7/RXbx94ZK nv+ZK8CKPWkPJPmS+lSQjOinRM73+bqu9ubmSrrSZr0JAe+W7WoLvQ4MIN8cK/M9 E6OO+mnuPJSSMRR2iJyTGzYNeN0fj3XQYd606cR/J8AGXIV0qfiajwjakJCi6KT5 QyBk3pTvpiZnr92b117coFb79VoS8GeOLKCl7fUgZSlwQ46RFPMskFzaqxgbbuYg kwnnV7HckC5CcuV8QyvOjARgY48vzFIHZLvAkGqYGVCU3mKf2dawHqYMas3MK5M3 FHscLJGeiHmEFrLvY6BPIC+0oy3NK9RZvdnkWa8yfHrLvhqHXU0= -----END CERTIFICATE-----Generated at Mon Oct 20 21:09:40 2025 by rpki-client