$ rpki-client -vvf repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft File: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft (raw, json) Hash identifier: sNQQwHc08RmotfE32C/3Qzq3yQZ5awOS6heaX68gPl8= Subject key identifier: E9:B5:B3:DC:BF:CA:71:5C:F9:C7:1B:04:F2:42:21:DE:D7:EE:1B:38 Authority key identifier: 2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E Certificate issuer: /CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Certificate serial: 04B29CEF2DADA75715240DED403EF322FAA8347A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft Manifest number: 15 Signing time: Sat 23 Aug 2025 02:11:59 +0000 Manifest this update: Sat 23 Aug 2025 02:06:59 +0000 Manifest next update: Tue 26 Aug 2025 05:22:59 +0000 Files and hashes: 1: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl (hash: cdAJ2lqXdyyy5KNKggoqnLgnJErBV0+qLg0EiMkkvHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b2:9c:ef:2d:ad:a7:57:15:24:0d:ed:40:3e:f3:22:fa:a8:34:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Validity Not Before: Aug 23 02:06:59 2025 GMT Not After : Aug 26 05:22:59 2025 GMT Subject: CN=E9B5B3DCBFCA715CF9C71B04F24221DED7EE1B38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:47:15:ce:65:fe:96:1a:ab:58:26:07:4d:6a: c9:44:05:dd:85:83:a1:e0:fe:42:02:1f:17:60:4d: b7:46:83:e0:10:77:34:8b:7b:86:30:f8:75:5b:40: 7c:fa:d3:84:b3:8f:9f:33:45:e3:b1:d9:d6:0f:dd: c9:ad:4c:f7:9d:f8:4c:78:94:b2:70:fb:e2:e6:70: 18:aa:82:68:28:29:27:25:34:5e:80:60:17:2d:11: ee:55:48:d4:96:9a:ed:42:0c:4a:f6:e3:c0:c7:3f: db:3d:2e:4e:45:e2:d7:e2:03:d2:4b:ad:1a:02:cd: de:36:26:d0:65:0f:44:41:b2:2a:77:a0:85:62:d6: 2c:93:32:5e:c8:8c:66:70:b1:07:6d:7b:6e:eb:7d: 63:d7:8d:de:2f:27:6e:1b:27:6b:bc:67:3f:ab:ef: cc:b3:6d:31:f8:65:e3:4a:ec:f5:36:46:a1:d4:cd: f0:9b:7c:eb:c0:ea:50:08:ac:57:48:a8:96:a6:3a: 5b:e3:dc:a7:47:44:5c:d9:b4:16:84:22:76:70:1e: df:f6:f7:6c:ea:8a:05:31:1e:e0:60:2b:be:30:fd: d9:77:04:35:b9:a5:cd:a0:b9:13:da:36:ff:13:ce: 2c:c2:c0:a2:1e:1c:00:1c:c4:6d:04:74:35:ff:6f: 35:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B5:B3:DC:BF:CA:71:5C:F9:C7:1B:04:F2:42:21:DE:D7:EE:1B:38 X509v3 Authority Key Identifier: keyid:2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:1b:1d:98:fb:52:a7:9a:f4:6d:dc:bf:ab:e1:46:82:79:12: bc:ec:dd:0b:7a:c4:31:60:13:85:34:d8:d7:ad:e3:fb:a4:1c: 18:2c:d6:18:6d:03:4e:ee:27:91:67:36:68:d4:36:06:c9:6c: 01:d0:62:54:8e:44:3d:1a:59:f0:dc:8f:59:8b:fe:94:2b:3f: ed:65:1d:90:a1:58:7c:9e:5a:31:10:d0:08:3a:e9:22:fc:14: 2a:25:90:9a:60:be:b3:18:2e:bc:89:85:05:67:27:65:10:dc: 96:42:7c:3d:be:db:46:eb:0b:3b:b3:3f:4c:d8:57:42:f3:d0: d9:5d:4d:4c:3c:09:d2:b1:06:78:76:f0:46:67:aa:bf:2e:57: d5:f3:bb:dd:3e:4c:17:0f:be:6b:7a:26:c5:17:cf:8a:93:ea: db:ec:f3:3d:75:c2:31:7b:f9:d6:14:63:60:50:28:86:c9:77: 8e:dc:27:15:3d:d9:0e:60:b5:fa:aa:f8:18:88:7f:9f:a6:d4: af:b2:71:99:5e:fb:22:91:bc:82:16:b0:58:c2:a7:c1:9c:79: ac:37:13:f1:65:ed:53:ad:f1:3b:c4:9c:94:47:59:92:67:77: 67:7f:37:0c:18:07:dc:91:98:dc:5f:8b:03:c0:6f:0d:f2:ce: 04:f8:48:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLKc7y2tp1cVJA3tQD7zIvqoNHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VC MjFDNDk4RTAeFw0yNTA4MjMwMjA2NTlaFw0yNTA4MjYwNTIyNTlaMDMxMTAvBgNV BAMTKEU5QjVCM0RDQkZDQTcxNUNGOUM3MUIwNEYyNDIyMURFRDdFRTFCMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHRxXOZf6WGqtYJgdNaslEBd2F g6Hg/kICHxdgTbdGg+AQdzSLe4Yw+HVbQHz604Szj58zReOx2dYP3cmtTPed+Ex4 lLJw++LmcBiqgmgoKSclNF6AYBctEe5VSNSWmu1CDEr248DHP9s9Lk5F4tfiA9JL rRoCzd42JtBlD0RBsip3oIVi1iyTMl7IjGZwsQdte27rfWPXjd4vJ24bJ2u8Zz+r 78yzbTH4ZeNK7PU2RqHUzfCbfOvA6lAIrFdIqJamOlvj3KdHRFzZtBaEInZwHt/2 92zqigUxHuBgK74w/dl3BDW5pc2guRPaNv8TzizCwKIeHAAcxG0EdDX/bzVxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6bWz3L/KcVz5xxsE8kIh3tfuGzgwHwYDVR0j BBgwFoAULCeg2d0lMevvHi7FasvLzrIcSY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmYwOTU4NC05MTEwLTRiMGQtOGY2ZC0yY2U1MjU4ZTg0NmIvMC8yQzI3QTBEOURE MjUzMUVCRUYxRTJFQzU2QUNCQ0JDRUIyMUM0OThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VCMjFD NDk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNC Q0VCMjFDNDk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQbHZj7Uqea9G3cv6vhRoJ5Erzs3Qt6xDFg E4U02Net4/ukHBgs1hhtA07uJ5FnNmjUNgbJbAHQYlSORD0aWfDcj1mL/pQrP+1l HZChWHyeWjEQ0Ag66SL8FColkJpgvrMYLryJhQVnJ2UQ3JZCfD2+20brCzuzP0zY V0Lz0NldTUw8CdKxBnh28EZnqr8uV9Xzu90+TBcPvmt6JsUXz4qT6tvs8z11wjF7 +dYUY2BQKIbJd47cJxU92Q5gtfqq+BiIf5+m1K+ycZle+yKRvIIWsFjCp8Gceaw3 E/Fl7VOt8TvEnJRHWZJnd2d/NwwYB9yRmNxfiwPAbw3yzgT4SIk= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:12 2025 by rpki-client