$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft File: 27575AEBC443417C31FDF4A1DDFE016557A835F4.mft (raw, json) Hash identifier: +9rX+j2moWe4Tb1oCu1xbH+e6eNmOpQVZors2NxhQB4= Subject key identifier: C4:ED:F0:DB:3C:E3:1B:72:89:E5:85:AE:A9:D0:12:EF:3D:24:93:0E Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Certificate serial: 609C8828C5EC9CB79D9876064390380B5B8BA95F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft Manifest number: 01DF Signing time: Sun 19 Oct 2025 15:01:33 +0000 Manifest this update: Sun 19 Oct 2025 14:56:33 +0000 Manifest next update: Thu 23 Oct 2025 01:32:33 +0000 Files and hashes: 1: 27575AEBC443417C31FDF4A1DDFE016557A835F4.crl (hash: av3wlyYZVejNHLNgdxTZUQ+rWW9Yi1iWHT0hieach40=) 2: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: iVmYuqrywXHq070b2b6b1AVyJeKdilvifyJRDNtlsDw=) 3: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: 11KNXlbV6XDV6e1jADYaW+1r6VvI4ginelDqZNH0poo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:9c:88:28:c5:ec:9c:b7:9d:98:76:06:43:90:38:0b:5b:8b:a9:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Validity Not Before: Oct 19 14:56:33 2025 GMT Not After : Oct 23 01:32:33 2025 GMT Subject: CN=C4EDF0DB3CE31B7289E585AEA9D012EF3D24930E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:64:4e:47:eb:e6:ba:e2:90:a4:cf:a3:0c: 0a:3e:37:9f:58:19:7a:83:a3:00:9e:2c:e2:38:51: 19:64:d1:60:ea:eb:4d:b4:95:b6:f0:01:a7:8c:5c: eb:87:a5:b7:32:13:91:90:ba:20:03:be:f2:72:87: 16:d1:fa:64:2d:b0:b9:57:b4:0e:12:37:7f:03:a9: a2:61:b1:b5:7e:60:b9:98:a6:4e:5f:c9:44:a3:40: cb:52:8c:95:b7:df:aa:57:fa:f3:c1:66:f2:2f:24: 9e:b6:04:a3:33:96:4d:18:c7:ee:96:9a:25:5b:ab: e0:75:44:e7:2d:7c:54:9a:b4:fd:3b:70:98:01:f6: e3:f7:d2:3b:ba:41:ea:ac:5f:85:b8:6f:19:93:60: 9d:ab:39:bd:f6:af:6c:96:95:bf:43:43:7b:db:b6: ab:f7:a5:c8:b2:da:19:4a:ca:ab:3e:f7:be:86:d1: c2:36:fe:fd:ec:28:39:92:af:c8:2a:63:67:ec:35: fc:36:93:d4:cf:39:f9:f5:8e:0d:d5:b4:01:57:78: 07:02:a3:eb:03:2a:49:e2:0a:6f:72:45:81:bc:88: a5:ff:ec:82:89:5b:8d:65:38:14:73:ed:d0:e2:e6: 67:12:21:fa:29:5f:bb:70:90:d6:8b:85:86:96:27: 2e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:ED:F0:DB:3C:E3:1B:72:89:E5:85:AE:A9:D0:12:EF:3D:24:93:0E X509v3 Authority Key Identifier: keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5b:49:51:91:60:8e:e8:7e:f4:15:b4:df:e8:0c:11:03:83: bf:6a:e2:32:b9:01:48:7f:ad:52:2b:96:52:2c:89:39:a7:79: 91:6b:c4:49:fd:04:ec:0b:77:d2:9a:c7:c8:17:5d:f8:fd:57: 35:6c:e0:1f:90:76:e4:15:70:a2:77:67:0c:2d:96:42:ac:83: 24:14:c5:1d:50:ad:28:15:c7:f0:9d:b4:81:ee:3d:a1:85:d8: 24:d8:a0:b7:b3:04:a0:f6:40:22:c6:14:b5:97:30:a1:04:8f: e8:bf:da:bb:04:c6:1b:f7:84:45:3e:10:db:c8:8c:4b:3b:6d: e1:1b:f9:52:18:54:45:a4:f8:5e:7b:49:aa:8a:46:c2:9d:be: d1:20:f0:d3:85:d8:ca:ab:60:45:48:99:eb:48:0c:7b:28:ab: 28:9d:0c:b3:f9:b6:ec:5b:c8:6a:8f:72:67:cd:84:d5:b5:c5: e2:b4:59:56:d1:b1:9c:64:e9:09:e9:7f:a9:0c:ef:4d:a3:37: 3b:61:57:65:26:81:ba:25:52:c8:ba:c8:98:ff:3a:a8:a3:b9: 63:6a:a1:dc:03:b9:42:7c:d1:c2:27:ac:24:e6:32:a1:40:16: dd:89:36:7f:14:f9:0a:d8:cb:db:da:9f:90:54:d1:cc:c1:bc: 19:3d:c9:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJyIKMXsnLedmHYGQ5A4C1uLqV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1 N0E4MzVGNDAeFw0yNTEwMTkxNDU2MzNaFw0yNTEwMjMwMTMyMzNaMDMxMTAvBgNV BAMTKEM0RURGMERCM0NFMzFCNzI4OUU1ODVBRUE5RDAxMkVGM0QyNDkzMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFV2ROR+vmuuKQpM+jDAo+N59Y GXqDowCeLOI4URlk0WDq6020lbbwAaeMXOuHpbcyE5GQuiADvvJyhxbR+mQtsLlX tA4SN38DqaJhsbV+YLmYpk5fyUSjQMtSjJW336pX+vPBZvIvJJ62BKMzlk0Yx+6W miVbq+B1ROctfFSatP07cJgB9uP30ju6QeqsX4W4bxmTYJ2rOb32r2yWlb9DQ3vb tqv3pciy2hlKyqs+976G0cI2/v3sKDmSr8gqY2fsNfw2k9TPOfn1jg3VtAFXeAcC o+sDKkniCm9yRYG8iKX/7IKJW41lOBRz7dDi5mcSIfopX7twkNaLhYaWJy4/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxO3w2zzjG3KJ5YWuqdAS7z0kkw4wHwYDVR0j BBgwFoAUJ1da68RDQXwx/fSh3f4BZVeoNfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMC8yNzU3NUFFQkM0 NDM0MTdDMzFGREY0QTFEREZFMDE2NTU3QTgzNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1N0E4 MzVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM2YjU5N2MtOTU0Ny00YzFlLWFj ODctM2E0MzRhMzAwYTY3LzAvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAx NjU1N0E4MzVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5bSVGRYI7ofvQVtN/oDBEDg79q4jK5AUh/ rVIrllIsiTmneZFrxEn9BOwLd9Kax8gXXfj9VzVs4B+QduQVcKJ3ZwwtlkKsgyQU xR1QrSgVx/CdtIHuPaGF2CTYoLezBKD2QCLGFLWXMKEEj+i/2rsExhv3hEU+ENvI jEs7beEb+VIYVEWk+F57SaqKRsKdvtEg8NOF2MqrYEVImetIDHsoqyidDLP5tuxb yGqPcmfNhNW1xeK0WVbRsZxk6Qnpf6kM702jNzthV2UmgbolUsi6yJj/OqijuWNq odwDuUJ80cInrCTmMqFAFt2JNn8U+QrYy9van5BU0czBvBk9yas= -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:29 2025 by rpki-client