$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft File: 27992B841C717A90B3FDBD81B476F3FF9045212D.mft (raw, json) Hash identifier: whjUkYwjTPGyHaTuWiecVp67H4f3wV2vSwtBKUxXH6w= Subject key identifier: E9:67:D6:66:0B:D7:00:24:CE:06:95:81:4C:CF:0B:0F:BC:43:72:FC Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D Certificate serial: 45E317D805B9D8D03592E87C4BB05DB5D4A07397 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft Manifest number: 0115 Signing time: Sat 23 Aug 2025 06:10:04 +0000 Manifest this update: Sat 23 Aug 2025 06:05:04 +0000 Manifest next update: Tue 26 Aug 2025 07:09:04 +0000 Files and hashes: 1: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: chZgSebYL3AyASorKFgZxAtVxsXGef1bjWlqKc1bcs8=) 2: 27992B841C717A90B3FDBD81B476F3FF9045212D.crl (hash: 9rFnUKRU6Z/I9/qU6PU0PdDTLIMDbL/alkvDM8eKIz0=) 3: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: Cf8zuOBPe5ne4FbCX/nB71vXdpt4+lQ9NgMPpci6uTA=) 4: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: M98dO/m+ycrBeg1CtOIteFJftV3RCXQ2eLl/At2g8+Q=) 5: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: Ywn1UEJnpT1UpuAh2VB4UnPn+99/TPlQAq9uS4gdn7I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e3:17:d8:05:b9:d8:d0:35:92:e8:7c:4b:b0:5d:b5:d4:a0:73:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D Validity Not Before: Aug 23 06:05:04 2025 GMT Not After : Aug 26 07:09:04 2025 GMT Subject: CN=E967D6660BD70024CE0695814CCF0B0FBC4372FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:4a:68:de:fe:bc:1a:12:80:1e:0c:dc:42: b7:f8:1e:e4:51:98:09:ba:58:b0:39:73:a9:e6:31: 48:df:2b:fe:9b:77:6a:34:4b:bf:d7:87:9d:a3:bd: c1:60:e5:ef:30:77:28:a6:58:09:40:b9:fd:9c:14: 15:ab:5d:a4:39:be:41:04:70:41:79:df:5e:1f:2d: c0:d1:6d:4c:ef:b2:a7:aa:02:6b:3a:20:43:e6:80: fe:10:a6:1d:16:45:76:56:78:b9:09:24:08:c2:67: 97:d8:98:7a:1f:bb:52:9e:76:95:96:0c:6f:37:50: c2:f6:a1:52:3b:63:16:f9:66:58:66:f1:3d:16:bd: 64:31:5f:fa:e9:77:c5:a7:1f:87:43:e1:5a:67:5a: f9:1f:d3:74:bc:23:2e:88:5e:74:da:6c:6d:3c:0c: 8f:4d:41:ec:49:84:42:6b:ae:bb:38:0f:83:9a:db: 43:95:a8:57:1d:8a:32:7c:82:63:81:96:87:08:80: 8b:b6:e8:b0:26:6c:79:38:a3:d2:f8:4f:6e:7f:76: 6c:13:64:26:6b:ab:98:5d:81:a0:e3:c2:13:02:29: 9f:91:d5:32:da:9d:8f:00:23:71:5a:93:77:a9:a8: 9e:41:b1:5a:f3:8f:e3:16:5d:a2:df:e0:4e:93:1b: 8c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:67:D6:66:0B:D7:00:24:CE:06:95:81:4C:CF:0B:0F:BC:43:72:FC X509v3 Authority Key Identifier: keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:8d:ca:2d:b1:11:ac:46:17:92:01:4a:59:28:e9:15:2a:6a: 0c:92:41:7c:b8:0d:1e:b2:89:73:42:b5:40:80:b1:0a:0d:67: 06:2b:fd:93:b1:c2:0d:7d:5d:ad:e2:fc:f3:c3:ef:99:e4:8c: 00:9b:0c:99:5d:f8:db:fa:d5:7f:db:13:75:32:2e:d9:02:44: 0c:a9:6f:11:de:a9:ac:25:4e:73:8c:05:c4:4f:05:da:8f:7c: 22:fc:a8:33:66:a0:fb:0a:f3:3e:ba:df:72:bd:e4:f6:8d:a6: 1a:59:04:3a:db:54:f0:01:00:90:7c:c4:c5:02:75:0b:92:96: af:0e:40:90:0b:c1:de:97:18:51:c4:26:b6:96:71:27:8b:1f: cb:2e:e9:5a:92:85:30:fa:ca:3a:af:53:81:91:4b:87:77:6d: 1c:de:f1:a0:cc:74:b1:51:e0:6e:91:9d:81:b2:54:f5:a6:33: 7f:06:8a:41:94:e6:4f:08:59:11:e7:8b:80:67:f7:95:7f:e0: 06:b6:78:c9:14:ab:04:c7:51:75:2a:c3:24:96:db:be:84:4a: b6:f0:c3:0d:e1:69:a8:c4:e2:5a:c4:bd:84:84:73:b6:b9:a1: 04:7c:25:9c:6d:84:cb:35:a0:be:83:d3:47:1f:b9:f3:83:7a: be:44:7b:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUReMX2AW52NA1kuh8S7BdtdSgc5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5 MDQ1MjEyRDAeFw0yNTA4MjMwNjA1MDRaFw0yNTA4MjYwNzA5MDRaMDMxMTAvBgNV BAMTKEU5NjdENjY2MEJENzAwMjRDRTA2OTU4MTRDQ0YwQjBGQkM0MzcyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4KUpo3v68GhKAHgzcQrf4HuRR mAm6WLA5c6nmMUjfK/6bd2o0S7/Xh52jvcFg5e8wdyimWAlAuf2cFBWrXaQ5vkEE cEF5314fLcDRbUzvsqeqAms6IEPmgP4Qph0WRXZWeLkJJAjCZ5fYmHofu1KedpWW DG83UML2oVI7Yxb5Zlhm8T0WvWQxX/rpd8WnH4dD4VpnWvkf03S8Iy6IXnTabG08 DI9NQexJhEJrrrs4D4Oa20OVqFcdijJ8gmOBlocIgIu26LAmbHk4o9L4T25/dmwT ZCZrq5hdgaDjwhMCKZ+R1TLanY8AI3Fak3epqJ5BsVrzj+MWXaLf4E6TG4wPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6WfWZgvXACTOBpWBTM8LD7xDcvwwHwYDVR0j BBgwFoAUJ5krhBxxepCz/b2BtHbz/5BFIS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC8yNzk5MkI4NDFD NzE3QTkwQjNGREJEODFCNDc2RjNGRjkwNDUyMTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5MDQ1 MjEyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZlM2RkOTUtMmE4NS00MzllLTg0 ZjItOTcyYTIzZTMyNzFlLzAvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYz RkY5MDQ1MjEyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKNyi2xEaxGF5IBSlko6RUqagySQXy4DR6y iXNCtUCAsQoNZwYr/ZOxwg19Xa3i/PPD75nkjACbDJld+Nv61X/bE3UyLtkCRAyp bxHeqawlTnOMBcRPBdqPfCL8qDNmoPsK8z6633K95PaNphpZBDrbVPABAJB8xMUC dQuSlq8OQJALwd6XGFHEJraWcSeLH8su6VqShTD6yjqvU4GRS4d3bRze8aDMdLFR 4G6RnYGyVPWmM38GikGU5k8IWRHni4Bn95V/4Aa2eMkUqwTHUXUqwySW276ESrbw ww3haajE4lrEvYSEc7a5oQR8JZxthMs1oL6D00cfufODer5Ee2Q= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:42 2025 by rpki-client