$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft File: 27575AEBC443417C31FDF4A1DDFE016557A835F4.mft (raw, json) Hash identifier: 00tB3Jt4nwH7EE8rgACU2twpvhg+kGBbdWHIAVAIcgE= Subject key identifier: 71:33:4C:64:E3:87:85:61:B0:0C:3C:9C:E4:69:B2:0D:7A:68:9A:AB Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Certificate serial: 0DDE086ABD5AECAF9B409B1FB291E4FA1C521B5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft Manifest number: 0224 Signing time: Wed 25 Mar 2026 02:51:43 +0000 Manifest this update: Wed 25 Mar 2026 02:46:43 +0000 Manifest next update: Sat 28 Mar 2026 07:55:43 +0000 Files and hashes: 1: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: iVmYuqrywXHq070b2b6b1AVyJeKdilvifyJRDNtlsDw=) 2: 27575AEBC443417C31FDF4A1DDFE016557A835F4.crl (hash: 7SZ9x1fXwcYERBXFXiGmK5QZvogdmfAc9FARXsy3q3s=) 3: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: 11KNXlbV6XDV6e1jADYaW+1r6VvI4ginelDqZNH0poo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:de:08:6a:bd:5a:ec:af:9b:40:9b:1f:b2:91:e4:fa:1c:52:1b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Validity Not Before: Mar 25 02:46:43 2026 GMT Not After : Mar 28 07:55:43 2026 GMT Subject: CN=71334C64E3878561B00C3C9CE469B20D7A689AAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ea:48:3f:b6:eb:b6:09:32:17:7c:36:03:97: 7d:33:4f:96:0f:bc:18:3d:48:15:3c:43:14:2f:6d: 17:fe:53:5e:e0:48:2a:af:3a:eb:9a:09:74:59:de: eb:a5:f8:18:f2:0e:97:e7:ed:1b:64:53:d7:cc:0a: 93:80:ea:bb:34:a2:2e:e7:97:68:5a:b5:26:ce:14: 96:ed:e3:3d:31:e8:93:6b:b4:97:42:bd:25:ec:74: 6d:cb:a5:b9:c4:a6:6f:21:b4:30:25:73:10:b3:b0: 35:e2:f4:c7:ec:79:4e:8f:59:9c:83:36:24:d2:8e: 9f:d5:4e:7f:93:31:28:3c:ae:6f:ab:5d:8a:cf:62: cb:a2:20:50:bb:c2:28:69:46:60:1e:be:82:a9:7d: dc:be:da:7d:ba:f7:2f:17:62:89:c7:cf:28:8e:20: fd:06:3a:e4:4d:3c:05:8e:f7:ca:81:75:a6:26:05: d8:2e:47:92:e1:b6:16:fd:17:5a:6f:57:43:1c:2c: 11:50:90:6c:ed:4a:7b:a2:7c:ec:00:17:a3:2c:f1: 23:eb:c6:b7:e9:07:51:6e:64:cc:42:8b:8b:7d:54: d9:8c:f8:ae:2e:bb:96:dc:82:df:7f:db:5e:65:99: 65:92:3e:3a:81:11:ab:78:81:58:ee:bd:77:7a:18: 19:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:33:4C:64:E3:87:85:61:B0:0C:3C:9C:E4:69:B2:0D:7A:68:9A:AB X509v3 Authority Key Identifier: keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:53:64:c5:1a:23:3b:f0:7f:48:14:5f:25:9e:f7:83:0b:48: 82:ce:de:61:65:8b:60:ab:b9:65:51:9b:e2:f9:c0:b9:ff:11: 4f:06:c6:6a:95:96:09:c7:85:6b:29:b4:3f:13:ae:78:b1:21: 84:ab:c6:c2:e2:9f:86:73:29:29:be:32:6b:85:ed:f9:74:82: d1:fc:7d:7e:c7:8c:6c:82:46:2e:3b:57:de:d1:13:1f:59:15: 47:5f:b0:7a:97:a6:db:55:6a:18:83:6a:f9:21:7e:f4:f4:05: 72:50:9c:8a:ed:19:74:8c:eb:63:e1:f5:c6:f4:35:03:d0:2e: e7:92:2f:eb:da:ee:a7:9f:a3:ba:77:02:77:69:07:f4:b1:0f: 46:08:a8:ea:a8:aa:d1:80:12:bf:dc:9f:30:fc:56:45:0e:b9: 77:49:e6:d7:b0:59:5b:2c:b3:ac:1c:82:6b:55:cc:ce:cd:b8: ec:aa:49:b5:e3:90:8f:4b:1d:c7:3b:9c:65:7e:34:40:d6:fb: 69:be:f3:71:78:b3:5e:cb:07:bf:eb:d4:b6:e8:aa:0e:65:24: d0:f5:70:4d:cd:09:ba:73:97:42:20:17:f9:3f:fd:a5:df:e6: d0:7d:4f:11:03:1f:7a:36:e1:c3:99:54:56:44:13:47:27:95: 17:43:c0:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDd4Iar1a7K+bQJsfspHk+hxSG14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1 N0E4MzVGNDAeFw0yNjAzMjUwMjQ2NDNaFw0yNjAzMjgwNzU1NDNaMDMxMTAvBgNV BAMTKDcxMzM0QzY0RTM4Nzg1NjFCMDBDM0M5Q0U0NjlCMjBEN0E2ODlBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy6kg/tuu2CTIXfDYDl30zT5YP vBg9SBU8QxQvbRf+U17gSCqvOuuaCXRZ3uul+BjyDpfn7RtkU9fMCpOA6rs0oi7n l2hatSbOFJbt4z0x6JNrtJdCvSXsdG3LpbnEpm8htDAlcxCzsDXi9MfseU6PWZyD NiTSjp/VTn+TMSg8rm+rXYrPYsuiIFC7wihpRmAevoKpfdy+2n269y8XYonHzyiO IP0GOuRNPAWO98qBdaYmBdguR5Lhthb9F1pvV0McLBFQkGztSnuifOwAF6Ms8SPr xrfpB1FuZMxCi4t9VNmM+K4uu5bcgt9/215lmWWSPjqBEat4gVjuvXd6GBmBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcTNMZOOHhWGwDDyc5GmyDXpomqswHwYDVR0j BBgwFoAUJ1da68RDQXwx/fSh3f4BZVeoNfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMC8yNzU3NUFFQkM0 NDM0MTdDMzFGREY0QTFEREZFMDE2NTU3QTgzNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1N0E4 MzVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM2YjU5N2MtOTU0Ny00YzFlLWFj ODctM2E0MzRhMzAwYTY3LzAvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAx NjU1N0E4MzVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANBTZMUaIzvwf0gUXyWe94MLSILO3mFli2Cr uWVRm+L5wLn/EU8GxmqVlgnHhWsptD8TrnixIYSrxsLin4ZzKSm+MmuF7fl0gtH8 fX7HjGyCRi47V97REx9ZFUdfsHqXpttVahiDavkhfvT0BXJQnIrtGXSM62Ph9cb0 NQPQLueSL+va7qefo7p3AndpB/SxD0YIqOqoqtGAEr/cnzD8VkUOuXdJ5tewWVss s6wcgmtVzM7NuOyqSbXjkI9LHcc7nGV+NEDW+2m+83F4s17LB7/r1Lboqg5lJND1 cE3NCbpzl0IgF/k//aXf5tB9TxEDH3o24cOZVFZEE0cnlRdDwAw= -----END CERTIFICATE-----Generated at Thu Mar 26 15:20:39 2026 by rpki-client