
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
File: 27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft (raw, json)
Hash identifier: 0TMQHLnpvhenlLv6cMGj2pAu7Sygc/wL0DcOXBeszMM=
Subject key identifier: 89:EE:5C:50:0E:99:64:FC:2C:40:B7:E0:9E:8F:EE:79:CF:15:C9:95
Authority key identifier: 27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6
Certificate issuer: /CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6
Certificate serial: 5F67402E800E568591DA054C7F756E0D36D4B764
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 07:49:12 +0000
Manifest this update: Tue 12 May 2026 07:44:12 +0000
Manifest next update: Wed 13 May 2026 10:03:12 +0000
Files and hashes: 1: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: VH+O4TH4eDJSI25JypJZ7rsLYdNS/p0NBbNxGChAQqQ=)
2: 27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl (hash: odDNnNCvJb4q9YN8pA9d2h6m/hYf/HpxlzQjk1NbxJA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl
rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:67:40:2e:80:0e:56:85:91:da:05:4c:7f:75:6e:0d:36:d4:b7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6
Validity
Not Before: May 12 07:44:12 2026 GMT
Not After : May 13 10:03:12 2026 GMT
Subject: CN=89EE5C500E9964FC2C40B7E09E8FEE79CF15C995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:2c:53:88:89:50:ab:3a:ea:21:01:70:78:
bf:f1:f0:4b:94:a3:24:e8:19:5b:16:b7:b5:3a:bb:
f7:4c:22:c3:58:81:f4:27:7e:3f:3e:01:8d:0f:5f:
67:cf:51:30:82:a5:cf:15:aa:ab:c2:40:c1:9b:a0:
37:e3:b3:45:05:96:ca:c5:77:5d:15:b5:85:47:cc:
cb:57:05:44:ab:31:8b:f4:df:0d:3e:78:d7:fa:f7:
82:f0:55:6b:d0:46:8f:e1:f2:93:b0:65:54:fb:bb:
7e:30:22:2b:60:ab:0a:33:e3:40:42:75:bf:a0:db:
41:94:88:ed:92:64:5d:a8:06:7f:1e:b0:65:fd:a3:
ea:75:5a:b2:64:30:68:95:4a:36:e7:04:72:7b:85:
8d:8a:bb:f9:f9:fc:38:de:eb:91:d5:7a:87:00:4b:
ce:48:25:9a:7f:cf:fe:dc:f2:e5:c2:df:7d:89:c3:
48:b7:60:9a:26:95:be:f7:36:d0:6c:ff:87:1f:6c:
f2:55:4d:ee:e0:f1:09:7b:25:fc:e9:ce:a3:bd:b5:
25:63:7d:0f:c3:f7:f6:47:6d:32:0f:6f:05:76:d4:
df:48:93:4e:7f:6c:cb:e1:b9:f4:dc:33:88:04:bb:
b9:c9:c8:40:84:65:49:60:6d:9f:e0:8e:23:99:d2:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EE:5C:50:0E:99:64:FC:2C:40:B7:E0:9E:8F:EE:79:CF:15:C9:95
X509v3 Authority Key Identifier:
keyid:27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:23:05:b3:94:fd:44:ad:ab:06:e1:52:92:19:1e:29:6b:ae:
15:99:2f:49:72:c8:69:fd:c8:a5:d7:ec:c6:a4:71:e1:4e:1f:
7b:33:70:a6:ab:74:fb:09:8a:69:33:23:e6:cb:e7:ea:aa:41:
ce:da:d9:56:45:d8:2b:b4:b1:74:b7:e6:33:bb:ec:a4:df:de:
f8:ab:96:76:87:f6:37:d3:55:b8:37:3f:4c:4d:81:76:e9:e6:
79:e6:85:a8:84:13:d8:03:a7:79:00:26:bb:c2:9e:a5:cd:eb:
dc:fe:b0:cc:54:5c:8b:32:8f:c0:c5:85:7c:74:ca:cb:7c:bf:
30:1b:f1:d9:8f:84:8e:fa:ee:68:ff:42:1b:43:67:d1:dc:19:
ea:9a:f1:e3:3e:ba:ae:36:02:65:22:f7:87:49:40:9a:06:a7:
b0:ea:ac:4a:75:05:af:2a:7e:68:f9:fd:ef:2b:9e:96:3a:82:
4c:b6:38:78:7b:e3:4b:7e:85:b4:0b:ef:89:b7:a0:40:c3:b4:
cf:da:78:04:e1:be:72:d0:b6:d0:d6:dd:f1:87:ad:97:c4:30:
94:1f:3f:e8:7a:d3:24:2c:79:6a:de:34:94:18:db:94:4e:c0:
dc:93:4b:bf:a9:66:87:47:ea:1c:42:b3:30:5c:97:4e:3d:8c:
be:39:0a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:46 2026 by rpki-client