
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.mft
File: 27A02CA4FEB6B2D7C98BE15935226321BC5082C3.mft (raw, json)
Hash identifier: 7FqtTWwfpVTJ3RM5M2oe8cgBvduUimhM1cAxlPvHS8c=
Subject key identifier: C1:0C:A2:C4:D0:0E:68:11:45:62:6B:90:95:0D:CB:F2:C2:06:FD:4C
Authority key identifier: 27:A0:2C:A4:FE:B6:B2:D7:C9:8B:E1:59:35:22:63:21:BC:50:82:C3
Certificate issuer: /CN=27A02CA4FEB6B2D7C98BE15935226321BC5082C3
Certificate serial: 70F9415C7A2CF9DCB87524A16F8AD83D67DEC9B9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.mft
Manifest number: C4
Signing time: Fri 25 Sep 2026 16:51:07 +0000
Manifest this update: Fri 25 Sep 2026 16:46:07 +0000
Manifest next update: Sat 26 Sep 2026 20:40:07 +0000
Files and hashes: 1: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: ISamzj2GyfxCZEAngxKx/usD8wbe2PFgnEt/8aD0w6g=)
2: 27A02CA4FEB6B2D7C98BE15935226321BC5082C3.crl (hash: D+NnuzljkTA8hihLZScaWGEmaCn1rQmCaAyMecb4r0Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.crl
rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:f9:41:5c:7a:2c:f9:dc:b8:75:24:a1:6f:8a:d8:3d:67:de:c9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27A02CA4FEB6B2D7C98BE15935226321BC5082C3
Validity
Not Before: Sep 25 16:46:07 2026 GMT
Not After : Sep 26 20:40:07 2026 GMT
Subject: CN=C10CA2C4D00E681145626B90950DCBF2C206FD4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:95:49:3b:69:cf:22:4f:e9:e1:dc:a0:a9:b6:
44:4c:48:f3:7e:31:a2:10:1a:0b:44:90:6b:5b:83:
a0:65:d5:93:1c:72:7c:57:29:8f:2b:b5:e2:fa:14:
2f:fc:6d:4f:d4:67:09:ac:d9:77:4d:6a:f3:15:a7:
a4:11:49:9f:1c:c9:8b:d0:97:99:58:a7:f9:49:71:
64:4c:0b:3f:1f:4a:1e:ae:a9:5c:42:88:7c:aa:70:
45:3c:02:02:65:6b:f7:70:e8:88:bf:80:f9:59:9e:
ac:bf:9f:d3:f2:2f:f3:a9:ef:98:32:b9:dc:8d:ad:
6a:d1:0d:fc:96:5b:db:4f:1b:4b:14:4e:9f:5b:d7:
38:a4:a2:83:11:35:62:11:85:1b:55:c7:db:9e:b0:
6a:62:d9:29:de:49:55:05:58:c1:c6:97:3a:99:55:
ae:3c:7d:6b:00:fb:7c:7c:e7:d2:34:83:84:5b:4e:
fd:10:66:b6:ec:c1:da:0e:2e:1d:0b:6c:42:63:7d:
ee:b2:d3:8c:67:1a:35:f1:70:3d:c8:db:2f:04:f5:
f7:d3:70:69:01:72:32:12:e0:8f:b8:a6:aa:36:82:
36:68:6a:0a:95:ea:92:f7:cb:01:ef:b5:e3:aa:17:
e1:05:53:96:36:3a:13:15:56:bb:40:8d:aa:99:b9:
b2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0C:A2:C4:D0:0E:68:11:45:62:6B:90:95:0D:CB:F2:C2:06:FD:4C
X509v3 Authority Key Identifier:
keyid:27:A0:2C:A4:FE:B6:B2:D7:C9:8B:E1:59:35:22:63:21:BC:50:82:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a6:57:77:b6:c4:c6:53:8f:86:86:3d:7c:1f:1f:5c:ce:18:
6d:63:a8:79:2e:74:92:4c:15:e2:fa:23:2f:fe:a5:6d:81:d0:
5f:b1:63:49:48:3a:a9:62:9c:fe:4d:6e:a6:53:8a:b6:b0:38:
53:5e:70:d6:9b:2f:4f:18:35:43:ef:7e:9c:c7:2d:fc:70:15:
a6:43:a7:d3:a2:a8:ec:3e:7e:2b:4e:7f:77:57:de:a2:1d:25:
33:f2:b9:a4:31:e2:b4:e3:22:4d:40:69:4c:7a:00:2e:7f:49:
3f:8d:00:f9:7e:79:4b:e0:55:18:af:d0:73:f9:19:93:da:f0:
89:fe:4d:93:62:bf:ba:98:74:92:a5:16:46:27:3e:48:5e:cd:
13:d2:e7:a9:7d:4c:03:c7:2a:45:ec:71:c5:74:c6:76:72:b0:
39:a8:84:45:40:6c:f4:e4:72:22:53:82:9b:29:21:7c:da:0a:
1e:69:da:dd:59:44:24:8a:c2:2e:d8:7d:27:93:81:49:37:27:
a0:68:63:31:be:0c:c2:e1:03:a7:6d:d6:3b:ce:f5:4c:80:56:
ba:2f:53:43:60:da:b2:2e:48:9f:e7:fd:7a:a3:94:c2:40:21:
85:10:0a:49:3c:d0:1d:20:11:f4:1c:0d:90:c6:0e:5c:84:26:
1b:b0:b1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:51:51 2026 by rpki-client