$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft File: A27FF2B00B818D036621468F265A350211C5B6B1.mft (raw, json) Hash identifier: LDNAo5zjaPlBz4froZ5eWuuTojgI1oCaY5IZqZ4Q4Pw= Subject key identifier: 4B:0B:01:22:F9:CB:4B:A5:E0:BD:B0:8A:F6:DF:3A:96:FB:37:EF:E0 Authority key identifier: A2:7F:F2:B0:0B:81:8D:03:66:21:46:8F:26:5A:35:02:11:C5:B6:B1 Certificate issuer: /CN=A27FF2B00B818D036621468F265A350211C5B6B1 Certificate serial: 6CAFADEB29F28A6F577BBB716048A8D3FCFCBE0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 18:54:01 +0000 Manifest this update: Thu 24 Sep 2026 18:49:01 +0000 Manifest next update: Fri 25 Sep 2026 19:53:01 +0000 Files and hashes: 1: A27FF2B00B818D036621468F265A350211C5B6B1.crl (hash: 3uSvFkoS9LZlty4dCnU0bXCJr24VGVjfrYoQ0iC4GWk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.crl rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:af:ad:eb:29:f2:8a:6f:57:7b:bb:71:60:48:a8:d3:fc:fc:be:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A27FF2B00B818D036621468F265A350211C5B6B1 Validity Not Before: Sep 24 18:49:01 2026 GMT Not After : Sep 25 19:53:01 2026 GMT Subject: CN=4B0B0122F9CB4BA5E0BDB08AF6DF3A96FB37EFE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e1:23:fa:77:10:b9:0e:44:2c:e0:1e:e2:be: e0:69:12:1e:1b:f5:a2:3d:66:ef:4e:6d:df:9d:02: bf:0e:f8:e8:fc:1b:e2:d9:d1:d8:5d:a2:27:5f:26: 71:a2:7a:eb:7b:5e:c8:35:5c:83:82:d3:9e:91:0c: 9e:c7:2c:88:86:c7:fd:66:b9:de:c3:95:6d:c5:da: f9:0e:2c:23:3a:84:a2:45:e8:40:69:7d:67:cb:93: ac:17:3b:fd:bd:36:b1:f1:28:45:0e:3e:f3:a0:ea: 7f:b9:31:9a:23:71:f9:9d:9c:66:30:1d:05:24:94: 31:8d:6e:7a:26:79:a7:85:19:05:c9:d0:00:46:c7: 5a:70:2f:89:11:1d:4d:c4:85:41:22:b4:48:c4:b1: 40:07:a4:f0:ef:2e:da:f8:ee:f1:82:d5:30:71:9c: 26:cc:66:7c:82:8d:00:17:e7:9a:a7:69:e7:2e:19: 02:1d:1b:08:94:ab:9d:90:8d:ff:e3:e3:be:7b:51: 35:5d:d9:65:a3:75:5e:e8:6e:d9:4e:5c:fc:1e:fa: b6:0b:10:1f:e0:17:07:db:c7:35:4a:4a:db:f4:01: 2a:a5:4c:4f:61:76:3b:94:21:7a:d2:b4:e4:ac:a3: bd:b7:88:4c:53:2a:b3:fc:b9:56:ac:eb:30:46:ac: fe:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0B:01:22:F9:CB:4B:A5:E0:BD:B0:8A:F6:DF:3A:96:FB:37:EF:E0 X509v3 Authority Key Identifier: keyid:A2:7F:F2:B0:0B:81:8D:03:66:21:46:8F:26:5A:35:02:11:C5:B6:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:03:a5:c9:20:61:93:f9:06:11:57:16:60:5f:80:97:72:87: 9e:66:56:c8:dd:24:f6:7a:1d:74:f7:6a:14:8f:24:ca:4d:44: 2c:6b:01:37:5e:f8:7d:92:a9:e9:17:3f:52:0d:2c:26:e6:b0: 48:1d:f3:ab:13:ab:08:a4:9e:bc:84:e1:09:87:ba:11:2a:cf: 4d:22:dc:44:cb:d6:7a:48:e5:84:3b:4d:e7:ed:ba:74:6d:40: 1f:bb:aa:c2:6d:5a:83:af:07:25:80:05:cd:a7:00:ad:2b:b9: 28:58:0d:ed:08:ff:d5:b4:76:39:cf:29:bb:d2:4a:a1:cd:3d: ea:64:0c:13:72:6e:24:9c:c8:4b:d3:eb:cd:10:9a:14:25:68: 4e:71:f4:d3:bd:24:8a:30:d9:5f:62:f6:4c:0c:ca:e3:c1:5f: 33:21:02:19:c6:27:25:d0:61:f5:13:f4:48:20:25:4b:c9:7d: 4a:16:55:32:f8:ce:d3:32:6d:60:47:0b:12:61:7a:02:6b:24: 1a:30:5b:fc:8c:cd:e1:16:af:50:57:a3:8a:04:28:de:41:c0: 72:5c:15:84:45:06:16:87:f1:f4:2c:b2:06:05:7f:9f:7b:6c: 44:a6:3f:f4:2b:90:e5:05:04:46:6d:2f:27:40:16:4b:55:5e: 7d:69:4d:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbK+t6ynyim9Xe7txYEio0/z8vgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI3RkYyQjAwQjgxOEQwMzY2MjE0NjhGMjY1QTM1MDIx MUM1QjZCMTAeFw0yNjA5MjQxODQ5MDFaFw0yNjA5MjUxOTUzMDFaMDMxMTAvBgNV BAMTKDRCMEIwMTIyRjlDQjRCQTVFMEJEQjA4QUY2REYzQTk2RkIzN0VGRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT4SP6dxC5DkQs4B7ivuBpEh4b 9aI9Zu9Obd+dAr8O+Oj8G+LZ0dhdoidfJnGieut7Xsg1XIOC056RDJ7HLIiGx/1m ud7DlW3F2vkOLCM6hKJF6EBpfWfLk6wXO/29NrHxKEUOPvOg6n+5MZojcfmdnGYw HQUklDGNbnomeaeFGQXJ0ABGx1pwL4kRHU3EhUEitEjEsUAHpPDvLtr47vGC1TBx nCbMZnyCjQAX55qnaecuGQIdGwiUq52Qjf/j4757UTVd2WWjdV7obtlOXPwe+rYL EB/gFwfbxzVKStv0ASqlTE9hdjuUIXrStOSso723iExTKrP8uVas6zBGrP5BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSwsBIvnLS6XgvbCK9t86lvs37+AwHwYDVR0j BBgwFoAUon/ysAuBjQNmIUaPJlo1AhHFtrEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWUyMGU4MDAtMjViYi00Yzc4LWE4YjMtZjBlYjI1YzJlODJhLzAvQTI3RkYyQjAw QjgxOEQwMzY2MjE0NjhGMjY1QTM1MDIxMUM1QjZCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjdGRjJCMDBCODE4RDAzNjYyMTQ2OEYyNjVBMzUwMjExQzVC NkIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWUyMGU4MDAtMjViYi00Yzc4LWE4 YjMtZjBlYjI1YzJlODJhLzAvQTI3RkYyQjAwQjgxOEQwMzY2MjE0NjhGMjY1QTM1 MDIxMUM1QjZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYDpckgYZP5BhFXFmBfgJdyh55mVsjdJPZ6 HXT3ahSPJMpNRCxrATde+H2SqekXP1INLCbmsEgd86sTqwiknryE4QmHuhEqz00i 3ETL1npI5YQ7TeftunRtQB+7qsJtWoOvByWABc2nAK0ruShYDe0I/9W0djnPKbvS SqHNPepkDBNybiScyEvT680QmhQlaE5x9NO9JIow2V9i9kwMyuPBXzMhAhnGJyXQ YfUT9EggJUvJfUoWVTL4ztMybWBHCxJhegJrJBowW/yMzeEWr1BXo4oEKN5BwHJc FYRFBhaH8fQssgYFf597bESmP/QrkOUFBEZtLydAFktVXn1pTcY= -----END CERTIFICATE-----Generated at Thu Sep 24 21:05:44 2026 by rpki-client