$ rpki-client -vvf repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft File: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft (raw, json) Hash identifier: L5AwhSnt8QsJJbD24ciKBY8W8BXdsWcMgJwV9PXhx5M= Subject key identifier: 9C:24:F6:ED:99:4A:1E:EE:B7:F0:9C:8D:B5:3A:9C:81:16:02:07:3D Authority key identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 Certificate issuer: /CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Certificate serial: 6A87785F01334F42D8D82E233A47D1CD223211C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft Manifest number: 0183 Signing time: Mon 20 Oct 2025 15:31:23 +0000 Manifest this update: Mon 20 Oct 2025 15:26:23 +0000 Manifest next update: Thu 23 Oct 2025 17:06:23 +0000 Files and hashes: 1: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl (hash: M2scbCofyL59SzoJru3FhXFV7wqkvrIeJtgU2BotLTU=) 2: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: 6LXlbR4cNb7e/a5cj5XOa29IvaWvdwclgoGKyPVr99g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:87:78:5f:01:33:4f:42:d8:d8:2e:23:3a:47:d1:cd:22:32:11:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Validity Not Before: Oct 20 15:26:23 2025 GMT Not After : Oct 23 17:06:23 2025 GMT Subject: CN=9C24F6ED994A1EEEB7F09C8DB53A9C811602073D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5f:93:e3:f3:0d:3e:a1:d2:be:b5:c9:3e:e7: ce:08:85:e9:7b:bb:18:b2:30:21:b6:22:dd:5d:6d: 12:ac:81:13:bb:07:fe:67:a6:02:b8:5f:e9:1e:6d: 7c:ea:ce:32:8a:7f:bb:68:1a:07:47:db:44:61:87: 65:66:07:cb:05:b4:31:8b:3b:7d:87:0f:41:6e:6f: 22:46:e2:b0:32:c7:9d:7c:f8:d5:73:95:5e:9d:3e: dd:68:8e:6c:1d:f6:31:6a:18:7c:1c:61:7f:e8:d6: 93:d8:1b:11:19:e3:19:05:ec:69:ee:74:33:0b:e3: 3e:e5:fd:62:a5:73:b9:c4:2b:95:5f:2c:7c:41:fa: fe:ba:da:8e:0d:5f:09:b1:dc:4d:a1:90:65:09:1b: 71:e7:9c:23:95:26:b0:e6:59:27:5d:c6:23:22:75: 91:26:33:12:d4:f1:ee:36:25:b5:7d:0d:9e:07:f6: ef:5b:d9:e9:82:e8:59:21:85:97:46:57:f8:9e:12: 83:86:cd:88:13:90:50:f0:64:ef:c4:08:d8:b3:1a: d1:3d:e2:04:9f:0b:3a:6e:01:82:4c:57:31:02:e2: 5b:b8:d3:ec:54:a7:82:2f:d5:8b:21:c7:d6:60:af: d8:66:a4:a0:64:cd:1b:d6:c1:ec:5d:5b:14:4e:08: 3d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:24:F6:ED:99:4A:1E:EE:B7:F0:9C:8D:B5:3A:9C:81:16:02:07:3D X509v3 Authority Key Identifier: keyid:27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d3:7d:1b:5d:93:dd:12:8b:76:8c:a3:5a:e7:f8:e5:6e:cc: 1c:4c:fb:89:ca:58:a1:b9:4a:30:8a:2f:44:41:98:f0:50:b1: 61:fd:ad:f3:e3:01:c7:e1:40:a0:33:4e:59:9a:6e:d0:75:55: 8d:c8:ab:d7:a7:be:9d:ff:db:a0:6b:c1:a9:7b:b9:b2:a2:68: 6c:6b:aa:e9:b4:1c:51:72:ca:db:96:e2:58:44:5d:69:a8:66: ee:59:c0:50:8f:8f:6c:78:3b:66:ee:bd:d9:24:be:9f:d4:d9: 91:f1:b2:ef:c7:b2:4c:64:6b:4e:68:c0:06:ac:27:1b:04:27: 0e:05:fc:c2:5a:69:1e:bf:24:c9:36:80:b5:c1:27:6c:7c:4d: 21:ef:af:f8:e0:47:28:81:9c:30:e7:4d:f9:db:cf:2e:80:0b: 37:66:ad:73:06:90:98:84:91:cf:83:c0:95:45:47:02:94:df: e7:0f:f2:c4:d4:17:c1:76:15:65:81:81:a3:6b:df:bc:0c:d1: 67:e9:20:4a:e8:c2:d4:69:83:8f:06:f1:2c:cb:d1:3d:93:9a: 87:44:64:5b:56:c1:78:ae:9c:78:e9:82:8e:ea:a3:04:d0:4c: c1:ac:58:57:e2:88:70:af:94:76:a7:bc:a8:c3:58:78:75:64: 9d:16:78:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaod4XwEzT0LY2C4jOkfRzSIyEckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFBQkQy RDEzN0Q1MTAeFw0yNTEwMjAxNTI2MjNaFw0yNTEwMjMxNzA2MjNaMDMxMTAvBgNV BAMTKDlDMjRGNkVEOTk0QTFFRUVCN0YwOUM4REI1M0E5QzgxMTYwMjA3M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsX5Pj8w0+odK+tck+584Ihel7 uxiyMCG2It1dbRKsgRO7B/5npgK4X+kebXzqzjKKf7toGgdH20Rhh2VmB8sFtDGL O32HD0FubyJG4rAyx518+NVzlV6dPt1ojmwd9jFqGHwcYX/o1pPYGxEZ4xkF7Gnu dDML4z7l/WKlc7nEK5VfLHxB+v662o4NXwmx3E2hkGUJG3HnnCOVJrDmWSddxiMi dZEmMxLU8e42JbV9DZ4H9u9b2emC6FkhhZdGV/ieEoOGzYgTkFDwZO/ECNizGtE9 4gSfCzpuAYJMVzEC4lu40+xUp4Iv1Yshx9Zgr9hmpKBkzRvWwexdWxROCD1dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnCT27ZlKHu638JyNtTqcgRYCBz0wHwYDVR0j BBgwFoAUJ8aohBdkGFGS07fj/G0avS0TfVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTMwYWM2NC0wZjEzLTQxNjItOTY4Zi1hZmU1Y2M3MTRjZjYvMC8yN0M2QTg4NDE3 NjQxODUxOTJEM0I3RTNGQzZEMUFCRDJEMTM3RDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFBQkQyRDEz N0Q1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUzMGFjNjQtMGYxMy00MTYyLTk2 OGYtYWZlNWNjNzE0Y2Y2LzAvMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFB QkQyRDEzN0Q1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrTfRtdk90Si3aMo1rn+OVuzBxM+4nKWKG5 SjCKL0RBmPBQsWH9rfPjAcfhQKAzTlmabtB1VY3Iq9envp3/26Brwal7ubKiaGxr qum0HFFyytuW4lhEXWmoZu5ZwFCPj2x4O2buvdkkvp/U2ZHxsu/Hskxka05owAas JxsEJw4F/MJaaR6/JMk2gLXBJ2x8TSHvr/jgRyiBnDDnTfnbzy6ACzdmrXMGkJiE kc+DwJVFRwKU3+cP8sTUF8F2FWWBgaNr37wM0WfpIErowtRpg48G8SzL0T2TmodE ZFtWwXiunHjpgo7qowTQTMGsWFfiiHCvlHanvKjDWHh1ZJ0WeOA= -----END CERTIFICATE-----Generated at Mon Oct 20 18:03:31 2025 by rpki-client