$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft File: 27992B841C717A90B3FDBD81B476F3FF9045212D.mft (raw, json) Hash identifier: QATb86rSA31x+ecS9vBF3GUgrxvnA1rwM1Nv4/7PnzI= Subject key identifier: 00:87:CE:04:28:B1:3F:E3:F7:AA:80:77:A1:82:3A:09:3C:DE:F5:0B Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D Certificate serial: 1685FFA94ADE6458B743282C1FB6CD9FD7ED0A6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft Manifest number: 0176 Signing time: Thu 26 Mar 2026 08:30:05 +0000 Manifest this update: Thu 26 Mar 2026 08:25:05 +0000 Manifest next update: Sun 29 Mar 2026 15:24:05 +0000 Files and hashes: 1: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: VwvC8FnFaqPY+qV2Yf8a0j5PamatjQpNJvumx1aC9c4=) 2: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: 2fll4NIrlBtRmSI1B/XfRZt07eji5vB7yU1I6L4xwaU=) 3: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: Ox4ZTFR07e7JY/PWDRkVjaGrsYWVREjNDM/zRhbDUOE=) 4: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: zJ4dPhpKTwfxjBM9r05t0oUe6ezn1Aa8OjhsYGhldqw=) 5: 27992B841C717A90B3FDBD81B476F3FF9045212D.crl (hash: HqKKRGpMX2YTk1eORQwKqXF+X/5ZchlHp7fk7wOHIDw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 15:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:85:ff:a9:4a:de:64:58:b7:43:28:2c:1f:b6:cd:9f:d7:ed:0a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D Validity Not Before: Mar 26 08:25:05 2026 GMT Not After : Mar 29 15:24:05 2026 GMT Subject: CN=0087CE0428B13FE3F7AA8077A1823A093CDEF50B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bc:e0:72:bb:0b:ae:1f:94:64:a2:c1:b8:1a: 7d:5a:90:50:9a:a6:4b:39:ba:54:b0:e1:df:50:a9: 01:3c:03:55:21:fd:7d:fe:af:d1:40:10:69:72:03: 9a:75:4e:8e:23:dc:d6:61:45:45:c3:48:20:c7:1b: f7:58:b5:af:e1:16:65:c5:e0:2f:1a:93:89:da:82: 48:c7:6e:e5:72:d7:c5:12:9f:fd:5f:cc:7d:86:94: 81:c4:c9:a0:c9:29:e7:fb:9c:a3:3e:ab:4d:4d:76: e0:f7:c8:43:59:8c:30:7e:03:76:00:39:de:0a:98: 22:e1:1f:e4:ca:de:84:51:b3:68:99:9a:37:e9:23: ff:aa:88:ab:c8:c7:b4:18:44:44:9d:02:e6:a8:d6: ae:24:bb:78:cd:32:d2:e4:7f:a1:af:7f:6e:ac:42: d0:1d:8d:44:f6:11:82:cb:95:ca:3e:16:db:0d:0c: d5:c6:83:7a:29:aa:b6:d3:3f:de:c5:e5:96:fc:fb: 24:0b:b0:7c:73:7c:18:fc:41:88:21:29:89:89:e9: 57:8a:79:4f:3a:d8:0a:ba:7b:25:48:f2:c6:28:33: 68:b4:e6:99:0b:72:ad:fb:e9:c7:59:82:2d:14:b8: 18:47:0f:88:00:ac:70:7f:c9:9d:f9:e2:10:6a:42: 38:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:87:CE:04:28:B1:3F:E3:F7:AA:80:77:A1:82:3A:09:3C:DE:F5:0B X509v3 Authority Key Identifier: keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b5:4d:fa:0a:32:d4:ef:22:ef:73:79:64:89:1d:7d:91:90: ba:be:bd:78:75:30:fa:38:9c:81:f9:42:31:b0:00:af:9e:b3: fe:79:50:e8:64:dd:24:db:c4:84:68:d7:a2:e4:22:d7:d0:2c: f9:59:40:3f:8b:2f:36:12:f0:9a:8f:3c:0a:68:bf:26:22:4f: 32:d0:80:14:4f:ca:1e:f1:f2:a1:69:d2:5d:0b:ec:a9:8c:7f: 74:db:c8:96:21:56:a1:61:61:08:a8:15:3f:c2:8e:62:9d:12: 93:87:d5:12:3b:30:bc:44:38:5c:c6:ee:a6:e3:b4:4e:cd:29: b3:9b:f8:0a:be:1f:8e:e6:88:49:ca:86:50:55:0d:6d:ae:89: 59:5f:4a:d3:87:16:4c:52:ea:cc:4c:2d:22:6f:0a:24:ff:4b: 53:90:20:bc:f1:65:fc:8c:9b:79:79:0c:b0:57:f3:99:03:4a: 5b:6c:0f:60:ec:94:8d:4b:12:af:3b:0f:86:58:31:bc:16:e1: 2b:9b:1b:45:9c:15:b4:c4:94:ab:59:05:4c:34:66:f0:6b:4a: d8:ee:71:5e:7e:58:be:81:40:3b:d5:a6:cf:93:90:52:da:0b: 7e:cc:12:48:7c:d2:a8:67:f5:52:4f:be:a9:81:c1:a8:84:4f: 09:d5:78:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFoX/qUreZFi3QygsH7bNn9ftCmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5 MDQ1MjEyRDAeFw0yNjAzMjYwODI1MDVaFw0yNjAzMjkxNTI0MDVaMDMxMTAvBgNV BAMTKDAwODdDRTA0MjhCMTNGRTNGN0FBODA3N0ExODIzQTA5M0NERUY1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvOByuwuuH5RkosG4Gn1akFCa pks5ulSw4d9QqQE8A1Uh/X3+r9FAEGlyA5p1To4j3NZhRUXDSCDHG/dYta/hFmXF 4C8ak4nagkjHbuVy18USn/1fzH2GlIHEyaDJKef7nKM+q01NduD3yENZjDB+A3YA Od4KmCLhH+TK3oRRs2iZmjfpI/+qiKvIx7QYRESdAuao1q4ku3jNMtLkf6Gvf26s QtAdjUT2EYLLlco+FtsNDNXGg3opqrbTP97F5Zb8+yQLsHxzfBj8QYghKYmJ6VeK eU862Aq6eyVI8sYoM2i05pkLcq376cdZgi0UuBhHD4gArHB/yZ354hBqQjhlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAIfOBCixP+P3qoB3oYI6CTze9QswHwYDVR0j BBgwFoAUJ5krhBxxepCz/b2BtHbz/5BFIS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC8yNzk5MkI4NDFD NzE3QTkwQjNGREJEODFCNDc2RjNGRjkwNDUyMTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5MDQ1 MjEyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZlM2RkOTUtMmE4NS00MzllLTg0 ZjItOTcyYTIzZTMyNzFlLzAvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYz RkY5MDQ1MjEyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF61TfoKMtTvIu9zeWSJHX2RkLq+vXh1MPo4 nIH5QjGwAK+es/55UOhk3STbxIRo16LkItfQLPlZQD+LLzYS8JqPPApovyYiTzLQ gBRPyh7x8qFp0l0L7KmMf3TbyJYhVqFhYQioFT/CjmKdEpOH1RI7MLxEOFzG7qbj tE7NKbOb+Aq+H47miEnKhlBVDW2uiVlfStOHFkxS6sxMLSJvCiT/S1OQILzxZfyM m3l5DLBX85kDSltsD2DslI1LEq87D4ZYMbwW4SubG0WcFbTElKtZBUw0ZvBrStju cV5+WL6BQDvVps+TkFLaC37MEkh80qhn9VJPvqmBwaiETwnVeOI= -----END CERTIFICATE-----Generated at Thu Mar 26 14:33:59 2026 by rpki-client