$ rpki-client -vvf repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft File: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft (raw, json) Hash identifier: F8tfmOA3V/kTJfGVmgfsDoZx5E8+RNQ70NCDixGKx4I= Subject key identifier: B5:13:80:D9:54:53:BD:74:B2:C7:AA:AD:05:05:25:D1:89:88:6B:2B Authority key identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 Certificate issuer: /CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Certificate serial: 2288FEF24BA91DEDD7B53DDF901017FEEA2B49C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft Manifest number: 0168 Signing time: Thu 21 Aug 2025 14:01:25 +0000 Manifest this update: Thu 21 Aug 2025 13:56:25 +0000 Manifest next update: Sun 24 Aug 2025 21:17:25 +0000 Files and hashes: 1: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl (hash: ufBDBKaJ1iVYWm266FsEYsoTk1prnMja2VK3h9SSUgE=) 2: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: 6LXlbR4cNb7e/a5cj5XOa29IvaWvdwclgoGKyPVr99g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:88:fe:f2:4b:a9:1d:ed:d7:b5:3d:df:90:10:17:fe:ea:2b:49:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Validity Not Before: Aug 21 13:56:25 2025 GMT Not After : Aug 24 21:17:25 2025 GMT Subject: CN=B51380D95453BD74B2C7AAAD050525D189886B2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:96:f7:da:24:80:ff:69:af:e8:01:cf:87: 71:00:37:3d:fb:53:1b:41:18:de:70:88:e1:06:1e: 5d:38:7a:30:a4:66:09:19:8b:f2:05:48:5f:bb:66: e0:33:5e:05:06:4e:0a:d2:f8:7e:1d:3c:f4:84:7b: 42:b2:67:64:3a:0b:53:97:76:8e:25:ef:40:c5:ce: f4:21:7d:4b:8e:f5:bd:9d:99:b2:b5:79:fc:43:10: 41:0f:4f:38:f2:91:f9:d9:4b:ad:7c:6e:8a:4e:e9: 95:7f:1f:ce:f0:f7:34:e2:e9:bf:b6:d9:eb:45:f0: 5d:3a:23:e2:1f:52:a8:9f:9b:4b:0e:8f:76:9c:0c: e4:d7:07:3b:3c:8b:b7:35:f1:c0:8d:75:66:15:1d: 02:3f:02:02:42:cf:5e:e1:d7:8f:46:ce:e7:84:f4: b6:8b:3d:a8:03:5b:41:67:6d:48:59:a6:09:e3:22: 3b:51:b9:15:12:3d:2e:4b:ab:ce:82:82:99:b3:39: 7f:77:39:6e:84:af:e3:06:9e:00:6f:3a:05:18:7e: 57:7c:5d:57:68:0c:60:9e:0d:46:38:2e:b7:fe:63: d4:58:30:73:e4:54:85:a1:28:97:3b:bf:46:48:10: 39:b9:48:c3:c2:4a:38:5b:32:48:b0:ba:73:91:3c: ef:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:13:80:D9:54:53:BD:74:B2:C7:AA:AD:05:05:25:D1:89:88:6B:2B X509v3 Authority Key Identifier: keyid:27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ff:f5:f1:b3:cf:0b:b0:4b:fa:c0:77:39:52:57:1d:1a:eb: 14:65:d0:79:2f:8b:f6:2a:4d:33:b0:fe:4a:27:55:30:f7:27: 9d:44:b6:60:36:45:61:9a:43:49:01:e2:1f:03:93:76:b5:07: de:df:49:91:cb:4f:4e:ef:73:21:3c:c7:6f:1f:87:d6:e5:e0: 9c:94:a9:a0:9a:0f:a9:e6:ad:24:bd:5e:b3:f8:44:a9:7d:5b: 3f:ab:4f:dc:60:23:ed:16:f0:91:54:1f:44:4f:7c:55:89:3e: 58:76:b8:e3:1c:26:b0:54:de:a6:20:58:27:fb:13:6b:96:d4: 92:1a:c3:78:d7:f8:e1:71:99:4e:46:5a:f4:aa:e9:18:1a:31: aa:09:19:ed:35:07:c9:7d:e5:0f:23:34:fa:88:82:c3:4f:d5: 31:0e:76:56:d6:db:33:d1:b1:7a:85:90:89:3a:ad:bf:ea:71: b6:fd:ca:b3:57:12:f1:25:ea:72:7c:d3:6e:9e:48:44:5a:55: 06:f5:d2:c1:d7:cd:8e:66:44:d7:f3:88:0e:6e:58:dc:88:49: 42:2a:37:81:1d:ed:3d:c3:55:e2:d8:ab:c8:58:e9:4b:d5:2e: ab:5d:bd:24:09:d3:70:ea:b7:79:ca:4a:0b:38:d5:f7:74:be: 7c:71:f0:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIoj+8kupHe3XtT3fkBAX/uorScYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFBQkQy RDEzN0Q1MTAeFw0yNTA4MjExMzU2MjVaFw0yNTA4MjQyMTE3MjVaMDMxMTAvBgNV BAMTKEI1MTM4MEQ5NTQ1M0JENzRCMkM3QUFBRDA1MDUyNUQxODk4ODZCMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQZb32iSA/2mv6AHPh3EANz37 UxtBGN5wiOEGHl04ejCkZgkZi/IFSF+7ZuAzXgUGTgrS+H4dPPSEe0KyZ2Q6C1OX do4l70DFzvQhfUuO9b2dmbK1efxDEEEPTzjykfnZS618bopO6ZV/H87w9zTi6b+2 2etF8F06I+IfUqifm0sOj3acDOTXBzs8i7c18cCNdWYVHQI/AgJCz17h149GzueE 9LaLPagDW0FnbUhZpgnjIjtRuRUSPS5Lq86CgpmzOX93OW6Er+MGngBvOgUYfld8 XVdoDGCeDUY4Lrf+Y9RYMHPkVIWhKJc7v0ZIEDm5SMPCSjhbMkiwunORPO8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtROA2VRTvXSyx6qtBQUl0YmIayswHwYDVR0j BBgwFoAUJ8aohBdkGFGS07fj/G0avS0TfVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTMwYWM2NC0wZjEzLTQxNjItOTY4Zi1hZmU1Y2M3MTRjZjYvMC8yN0M2QTg4NDE3 NjQxODUxOTJEM0I3RTNGQzZEMUFCRDJEMTM3RDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFBQkQyRDEz N0Q1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUzMGFjNjQtMGYxMy00MTYyLTk2 OGYtYWZlNWNjNzE0Y2Y2LzAvMjdDNkE4ODQxNzY0MTg1MTkyRDNCN0UzRkM2RDFB QkQyRDEzN0Q1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJj/9fGzzwuwS/rAdzlSVx0a6xRl0Hkvi/Yq TTOw/konVTD3J51EtmA2RWGaQ0kB4h8Dk3a1B97fSZHLT07vcyE8x28fh9bl4JyU qaCaD6nmrSS9XrP4RKl9Wz+rT9xgI+0W8JFUH0RPfFWJPlh2uOMcJrBU3qYgWCf7 E2uW1JIaw3jX+OFxmU5GWvSq6RgaMaoJGe01B8l95Q8jNPqIgsNP1TEOdlbW2zPR sXqFkIk6rb/qcbb9yrNXEvEl6nJ8026eSERaVQb10sHXzY5mRNfziA5uWNyISUIq N4Ed7T3DVeLYq8hY6UvVLqtdvSQJ03Dqt3nKSgs41fd0vnxx8B4= -----END CERTIFICATE-----Generated at Sat Aug 23 10:12:22 2025 by rpki-client