$ rpki-client -vvf repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft File: 27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft (raw, json) Hash identifier: lZOAhx9yr2fxYjRLHJDk+y5CmJKEGYTmN2kuvOh9Tys= Subject key identifier: FF:4B:FC:F2:6B:2D:E2:14:05:8A:CE:7C:75:C9:02:4A:B0:5F:F6:CF Authority key identifier: 27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1 Certificate issuer: /CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1 Certificate serial: 0D8B8B6DA8CE6EB1FB3F8AD1DF6DA9CC186A5DF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft Manifest number: 01CD Signing time: Mon 20 Oct 2025 16:21:01 +0000 Manifest this update: Mon 20 Oct 2025 16:16:01 +0000 Manifest next update: Fri 24 Oct 2025 00:34:01 +0000 Files and hashes: 1: 3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa (hash: ZL34hhxgSVm8YMiIofnGZ8eIEEK0rTf5wpsCzmwT6wA=) 2: 3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa (hash: f2QS2bkCAnvcHZRI/qOVoXk+1PJl2qNtEtgN6wxB1DM=) 3: 3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa (hash: KEbEalVEafBDzV3MLE/Git/FoIDPkOruC23YgT8hoVA=) 4: 27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl (hash: rB2H1OI/Ue69cZgdUJsM/JJeGPz9VXp2G8BpyVW8e+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:8b:8b:6d:a8:ce:6e:b1:fb:3f:8a:d1:df:6d:a9:cc:18:6a:5d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1 Validity Not Before: Oct 20 16:16:01 2025 GMT Not After : Oct 24 00:34:01 2025 GMT Subject: CN=FF4BFCF26B2DE214058ACE7C75C9024AB05FF6CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:d8:6b:e6:25:69:5c:b9:f4:a5:0a:b1:5c: 6d:ad:17:17:16:ed:b8:5e:bc:38:fc:e4:ed:5e:69: 53:14:fe:75:ae:7e:e4:f0:b3:c7:c1:57:1e:90:ca: ba:6f:61:7b:31:21:c0:ab:a3:e1:29:1f:39:95:26: de:07:2d:eb:17:5f:f1:cc:00:3c:f4:0d:5c:32:33: f5:b9:db:66:9d:ab:76:8d:56:c5:1b:40:8e:fe:86: 15:0b:ee:4f:41:cd:77:52:9d:57:a8:58:50:02:11: b4:6a:2e:98:76:a7:1d:32:fa:dc:b5:7b:6d:da:82: be:1a:4e:d6:a7:67:5a:cc:20:0e:71:60:d3:76:97: ee:d0:86:50:b4:44:7d:87:c6:4f:4e:3e:57:45:32: c6:28:8f:65:19:7d:d5:69:73:a0:f9:d4:2e:2a:0f: 17:88:b4:4f:c3:a4:e9:80:1c:0c:10:45:ee:ca:09: 7a:d0:ce:de:3c:7c:be:e6:27:f9:6b:a7:8e:2d:4f: 60:6b:b5:cd:78:ab:92:59:df:95:a6:54:ef:64:57: 43:04:68:1a:16:cf:a2:4b:0b:1d:14:b0:f2:c7:68: 00:7e:e2:fb:bf:58:a5:01:3d:60:dd:ee:8f:b9:8e: f4:93:d3:2d:e1:e7:cc:56:a3:96:48:06:49:f1:b2: 7b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4B:FC:F2:6B:2D:E2:14:05:8A:CE:7C:75:C9:02:4A:B0:5F:F6:CF X509v3 Authority Key Identifier: keyid:27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:32:be:78:76:44:39:10:62:c4:71:19:72:9c:1e:bf:59:08: 91:05:cf:c6:5d:90:7d:84:74:24:fc:ad:2b:cb:07:1e:6b:9c: 8d:17:7f:cb:35:cc:1f:e5:19:1e:65:d8:bf:33:ea:bc:37:f4: 80:2d:0d:f9:e3:cf:47:da:42:1a:9e:07:17:2e:66:3c:4c:0d: 8b:65:53:17:7d:71:ef:49:9d:2f:c3:4a:a5:52:0c:5f:8f:8d: bf:2d:d2:67:70:a0:05:f7:1f:ac:bc:e5:49:c4:73:d7:c3:40: ff:b2:92:09:1f:4f:81:8b:ce:42:c1:8b:d5:70:de:0b:d1:2e: b0:8d:81:12:3b:88:12:f9:c7:87:d0:a1:ba:29:0b:cf:c3:97: 0a:98:64:f1:05:cf:04:bd:a9:d1:4c:bd:0d:d3:16:cd:9d:3a: bc:ee:08:0c:2a:fe:80:4f:ef:3a:12:13:4a:a7:40:1c:f7:16: 7c:de:36:a3:b1:3f:ba:bf:68:f1:72:21:72:44:56:9d:4a:7d: 2b:d3:88:c5:74:bc:89:17:ab:3f:26:b0:e8:b0:37:f7:d8:bd: e8:5e:72:3a:a2:24:d7:07:4e:0c:f7:13:33:ec:db:d4:40:2b: 2c:8b:2d:b6:24:bb:0c:6b:cc:33:55:de:f2:c7:01:39:05:83: b7:db:8c:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDYuLbajObrH7P4rR322pzBhqXfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2NkMz MTk0OTJGMTAeFw0yNTEwMjAxNjE2MDFaFw0yNTEwMjQwMDM0MDFaMDMxMTAvBgNV BAMTKEZGNEJGQ0YyNkIyREUyMTQwNThBQ0U3Qzc1QzkwMjRBQjA1RkY2Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFSthr5iVpXLn0pQqxXG2tFxcW 7bhevDj85O1eaVMU/nWufuTws8fBVx6QyrpvYXsxIcCro+EpHzmVJt4HLesXX/HM ADz0DVwyM/W522adq3aNVsUbQI7+hhUL7k9BzXdSnVeoWFACEbRqLph2px0y+ty1 e23agr4aTtanZ1rMIA5xYNN2l+7QhlC0RH2Hxk9OPldFMsYoj2UZfdVpc6D51C4q DxeItE/DpOmAHAwQRe7KCXrQzt48fL7mJ/lrp44tT2Brtc14q5JZ35WmVO9kV0ME aBoWz6JLCx0UsPLHaAB+4vu/WKUBPWDd7o+5jvST0y3h58xWo5ZIBknxsntvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/0v88mst4hQFis58dckCSrBf9s8wHwYDVR0j BBgwFoAUJxFM/FhcXbLgrF2nTwTGbDGUkvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWM4YjllMy1iNDRmLTQ5MGItYmY1MS05OWYyZGQyYTEzNjQvMC8yNzExNENGQzU4 NUM1REIyRTBBQzVEQTc0RjA0QzY2QzMxOTQ5MkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2NkMzMTk0 OTJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTVjOGI5ZTMtYjQ0Zi00OTBiLWJm NTEtOTlmMmRkMmExMzY0LzAvMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2 NkMzMTk0OTJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8yvnh2RDkQYsRxGXKcHr9ZCJEFz8ZdkH2E dCT8rSvLBx5rnI0Xf8s1zB/lGR5l2L8z6rw39IAtDfnjz0faQhqeBxcuZjxMDYtl Uxd9ce9JnS/DSqVSDF+Pjb8t0mdwoAX3H6y85UnEc9fDQP+ykgkfT4GLzkLBi9Vw 3gvRLrCNgRI7iBL5x4fQobopC8/DlwqYZPEFzwS9qdFMvQ3TFs2dOrzuCAwq/oBP 7zoSE0qnQBz3FnzeNqOxP7q/aPFyIXJEVp1KfSvTiMV0vIkXqz8msOiwN/fYvehe cjqiJNcHTgz3EzPs29RAKyyLLbYkuwxrzDNV3vLHATkFg7fbjHQ= -----END CERTIFICATE-----Generated at Mon Oct 20 21:19:40 2025 by rpki-client