
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
File: 27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft (raw, json)
Hash identifier: RxepSdU9NvhfooCV8D2fcRh7jn7+b4DuWiST5Zvpqco=
Subject key identifier: 5B:37:E8:DB:F0:1C:DC:6E:F7:8B:1E:EE:C3:29:E0:DA:B1:1A:57:02
Authority key identifier: 27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6
Certificate issuer: /CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6
Certificate serial: 42D2CA4428D8C639FF4147B86D26A3B9B385DC0A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 19:44:13 +0000
Manifest this update: Thu 23 Jul 2026 19:39:13 +0000
Manifest next update: Fri 24 Jul 2026 23:40:13 +0000
Files and hashes: 1: 27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl (hash: Gh80GmQyCSWqE95elD1f2hJycHZXA0GbLcXyTaytPic=)
2: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: VH+O4TH4eDJSI25JypJZ7rsLYdNS/p0NBbNxGChAQqQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl
rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:40:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:d2:ca:44:28:d8:c6:39:ff:41:47:b8:6d:26:a3:b9:b3:85:dc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6
Validity
Not Before: Jul 23 19:39:13 2026 GMT
Not After : Jul 24 23:40:13 2026 GMT
Subject: CN=5B37E8DBF01CDC6EF78B1EEEC329E0DAB11A5702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:32:f9:c4:3e:97:d2:ca:83:06:21:7c:d1:
6a:18:27:45:f0:db:56:11:f0:75:06:26:b0:82:2b:
ce:d3:e3:43:2a:01:aa:55:e7:47:58:a8:ae:c2:97:
02:4c:4c:52:2c:28:59:44:8c:8d:7b:02:44:da:b5:
64:ca:c2:c8:ff:85:c2:80:86:a5:04:a1:97:7f:a9:
fe:17:6d:d0:77:84:ce:d4:23:c0:4e:e7:03:5d:d0:
bd:3e:69:08:09:b3:a2:ba:d2:71:c7:31:84:6c:64:
1a:11:ef:1d:88:bb:09:88:16:bb:17:e9:08:cb:45:
97:d3:dc:46:f1:47:44:76:b1:cc:6f:d1:24:b5:3f:
a8:88:23:43:e4:20:3b:63:42:7a:7f:a4:1c:aa:0a:
c5:cb:3d:72:60:23:9e:d7:e9:da:5c:40:6a:c2:5d:
9c:97:f9:3b:20:89:4c:c5:42:51:96:70:69:ab:17:
23:c5:e0:7d:2c:6e:3d:b8:86:36:11:25:37:3f:d9:
9d:bf:e4:ea:39:5e:fb:99:16:5b:47:27:0e:51:02:
22:0e:cd:e8:e4:99:79:54:a9:c5:90:df:fb:2f:82:
d4:e7:c4:fd:dd:4f:1e:d6:07:fa:83:88:a8:66:d0:
ea:f9:fb:bc:59:24:9d:61:f4:93:f9:f6:ff:dc:e8:
51:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:37:E8:DB:F0:1C:DC:6E:F7:8B:1E:EE:C3:29:E0:DA:B1:1A:57:02
X509v3 Authority Key Identifier:
keyid:27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:45:35:ee:53:2a:3d:f4:99:2b:fe:8b:d1:fc:cb:9f:2f:7c:
0e:29:57:8a:f9:1b:27:16:f1:64:1a:a7:b3:38:ce:6b:ab:2e:
10:f6:25:2c:bf:0b:67:0c:b6:a9:24:d4:97:93:78:d2:43:f0:
dd:bf:6e:bf:be:f3:03:0b:3f:aa:d8:4f:ce:65:79:73:30:4a:
c1:24:1b:3c:82:c6:d2:52:2d:f2:2d:b4:6a:57:7e:9f:44:d4:
92:e3:20:00:a0:13:26:7d:ea:cf:44:e4:5a:4d:72:c7:e1:52:
88:71:3f:ac:98:30:84:24:47:81:31:da:1e:52:40:ef:36:0e:
68:f0:67:b9:4e:8c:93:fd:f5:97:c8:f6:ed:a2:c8:43:7c:ab:
02:68:10:79:14:1a:4b:8e:90:a5:80:3d:a4:82:9a:b4:4f:87:
90:a8:99:b3:06:42:89:36:a4:30:23:a2:2a:e3:2f:2d:41:8e:
1f:9f:af:34:4d:09:0d:11:a5:90:62:cd:51:b5:2a:c0:36:87:
5b:cc:62:dd:43:fa:3c:80:b7:16:e1:32:4f:38:50:d0:91:16:
0e:92:06:e8:7c:fa:5a:a9:28:30:33:61:f5:8a:f2:8b:2a:b7:
12:57:7b:63:fa:65:c8:aa:9d:20:63:f9:0f:fd:fd:ca:fb:b9:
67:28:df:23
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQtLKRCjYxjn/QUe4bSajubOF3AowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdCMEEyRkEwMjgyNzA0MEU0REY2NTA2N0M3QTBENTBE
QTUxNTRFNjAeFw0yNjA3MjMxOTM5MTNaFw0yNjA3MjQyMzQwMTNaMDMxMTAvBgNV
BAMTKDVCMzdFOERCRjAxQ0RDNkVGNzhCMUVFRUMzMjlFMERBQjExQTU3MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrlTL5xD6X0sqDBiF80WoYJ0Xw
21YR8HUGJrCCK87T40MqAapV50dYqK7ClwJMTFIsKFlEjI17AkTatWTKwsj/hcKA
hqUEoZd/qf4XbdB3hM7UI8BO5wNd0L0+aQgJs6K60nHHMYRsZBoR7x2IuwmIFrsX
6QjLRZfT3EbxR0R2scxv0SS1P6iII0PkIDtjQnp/pByqCsXLPXJgI57X6dpcQGrC
XZyX+TsgiUzFQlGWcGmrFyPF4H0sbj24hjYRJTc/2Z2/5Oo5XvuZFltHJw5RAiIO
zejkmXlUqcWQ3/svgtTnxP3dTx7WB/qDiKhm0Or5+7xZJJ1h9JP59v/c6FG/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWzfo2/Ac3G73ix7uwyng2rEaVwIwHwYDVR0j
BBgwFoAUJ7Ci+gKCcEDk32UGfHoNUNpRVOYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2M2ZjhjMGEtZTAzZi00MTQwLWJhMTYtODMzYWMyMjQxYWZiLzAvMjdCMEEyRkEw
MjgyNzA0MEU0REY2NTA2N0M3QTBENTBEQTUxNTRFNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yN0IwQTJGQTAyODI3MDQwRTRERjY1MDY3QzdBMEQ1MERBNTE1
NEU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M2ZjhjMGEtZTAzZi00MTQwLWJh
MTYtODMzYWMyMjQxYWZiLzAvMjdCMEEyRkEwMjgyNzA0MEU0REY2NTA2N0M3QTBE
NTBEQTUxNTRFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAFFNe5TKj30mSv+i9H8y58vfA4pV4r5GycW
8WQap7M4zmurLhD2JSy/C2cMtqkk1JeTeNJD8N2/br++8wMLP6rYT85leXMwSsEk
GzyCxtJSLfIttGpXfp9E1JLjIACgEyZ96s9E5FpNcsfhUohxP6yYMIQkR4Ex2h5S
QO82DmjwZ7lOjJP99ZfI9u2iyEN8qwJoEHkUGkuOkKWAPaSCmrRPh5CombMGQok2
pDAjoirjLy1Bjh+frzRNCQ0RpZBizVG1KsA2h1vMYt1D+jyAtxbhMk84UNCRFg6S
Buh8+lqpKDAzYfWK8osqtxJXe2P6ZciqnSBj+Q/9/cr7uWco3yM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:23 2026 by rpki-client