$ rpki-client -vvf rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft File: A27FF2B00B818D036621468F265A350211C5B6B1.mft (raw, json) Hash identifier: PUMRYT8WjDc7TTUQhuuioBHxiCqoOHHvYXO0NOGDUnQ= Subject key identifier: 0D:AD:2A:73:EB:85:84:28:A6:24:8A:46:B1:AA:08:4D:5A:7D:EC:1F Authority key identifier: A2:7F:F2:B0:0B:81:8D:03:66:21:46:8F:26:5A:35:02:11:C5:B6:B1 Certificate issuer: /CN=A27FF2B00B818D036621468F265A350211C5B6B1 Certificate serial: 3524FFAC199DE29AF08751891B5A2417FBA09F28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:46:52 +0000 Manifest this update: Thu 23 Jul 2026 17:41:52 +0000 Manifest next update: Fri 24 Jul 2026 19:23:52 +0000 Files and hashes: 1: A27FF2B00B818D036621468F265A350211C5B6B1.crl (hash: JnDUFDIMNSHVVkY42rFOC9crUhRsJS5pNWeaJmPU6iQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.crl rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:24:ff:ac:19:9d:e2:9a:f0:87:51:89:1b:5a:24:17:fb:a0:9f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A27FF2B00B818D036621468F265A350211C5B6B1 Validity Not Before: Jul 23 17:41:52 2026 GMT Not After : Jul 24 19:23:52 2026 GMT Subject: CN=0DAD2A73EB858428A6248A46B1AA084D5A7DEC1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:37:03:cf:09:0e:06:1f:7a:70:6b:19:c4:3d: a4:15:ff:f7:6d:46:1b:bc:26:c4:08:8c:ce:0d:7e: 87:d2:e8:1d:88:0a:57:3a:43:e5:1b:51:27:de:a6: 0f:c2:77:e2:3e:3a:11:dd:3d:a2:42:a3:ff:78:52: e9:71:5c:d7:e4:31:bd:34:cc:40:f5:ad:61:e6:5b: 82:a7:a0:27:06:f9:01:a5:ef:b8:f2:b8:75:f1:d2: eb:c6:c8:81:e9:d1:5f:f2:94:40:2c:e1:9c:0b:69: 35:b4:2c:65:b2:e5:02:4d:6a:be:c9:0c:93:b5:73: bc:b1:9d:b2:10:ed:dc:40:5f:88:a7:65:54:f0:69: 4b:a9:51:f5:7f:06:79:70:d7:a0:7b:2e:d9:e3:f4: 22:33:1b:c2:67:16:90:d7:d7:fd:f6:c2:ee:06:ff: ce:f2:b7:cf:92:54:43:f4:07:51:c8:1b:b1:4b:26: 1e:85:e1:51:e0:16:3c:e0:87:89:75:68:e3:7c:89: 10:06:08:cf:68:05:37:52:cb:e8:28:e6:02:25:77: fd:56:c1:7e:ce:56:49:b7:1a:4e:f6:dc:30:84:61: ef:db:d6:18:ea:62:a0:a0:8c:66:c7:6e:d3:9b:2e: e7:14:ce:1d:f1:2b:13:56:7a:28:71:bc:aa:2a:69: 96:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AD:2A:73:EB:85:84:28:A6:24:8A:46:B1:AA:08:4D:5A:7D:EC:1F X509v3 Authority Key Identifier: keyid:A2:7F:F2:B0:0B:81:8D:03:66:21:46:8F:26:5A:35:02:11:C5:B6:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:0f:05:60:a9:56:d7:3d:54:00:a3:55:52:8e:91:ca:1b:81: 92:65:72:08:84:00:59:07:7d:0e:fb:9b:d6:ba:e7:0c:49:58: 8c:71:a9:97:02:cb:92:27:c6:db:f0:97:8f:e8:76:15:e4:24: 94:be:cc:b8:a7:53:05:3b:e8:87:a7:1c:18:3d:be:17:11:dc: 85:2d:04:a2:88:1c:44:fb:ff:27:8d:40:0d:e4:48:c7:7b:87: ff:21:df:00:59:3e:ca:7d:a4:e7:fe:7d:f5:50:0f:59:c1:c2: 74:94:3e:91:84:7a:07:74:24:b7:36:f9:6d:94:c3:1e:23:94: 37:2e:be:3c:7e:9c:4c:2a:c2:1d:a7:a3:cf:27:cb:41:b9:97: 8c:a5:fd:56:9c:64:d2:cd:20:1e:77:04:e6:46:8d:d5:94:00: c3:8f:ac:40:44:af:9d:e3:9e:30:77:0e:34:d0:3b:8f:c6:64: 06:d1:01:ca:f5:c2:91:1c:fa:4f:ff:2b:64:7a:61:a3:b1:17: 58:b7:55:c1:df:4f:bb:17:ae:f6:26:c8:3a:7f:15:80:77:09: 76:1a:06:ba:18:5d:1f:fd:5b:d0:f2:09:5b:f1:41:fb:9b:dd: 7d:1f:df:a5:2a:33:2b:15:3c:1d:1c:36:36:e5:52:0f:64:52: 4c:c8:d5:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNST/rBmd4prwh1GJG1okF/ugnygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI3RkYyQjAwQjgxOEQwMzY2MjE0NjhGMjY1QTM1MDIx MUM1QjZCMTAeFw0yNjA3MjMxNzQxNTJaFw0yNjA3MjQxOTIzNTJaMDMxMTAvBgNV BAMTKDBEQUQyQTczRUI4NTg0MjhBNjI0OEE0NkIxQUEwODRENUE3REVDMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdNwPPCQ4GH3pwaxnEPaQV//dt Rhu8JsQIjM4NfofS6B2IClc6Q+UbUSfepg/Cd+I+OhHdPaJCo/94UulxXNfkMb00 zED1rWHmW4KnoCcG+QGl77jyuHXx0uvGyIHp0V/ylEAs4ZwLaTW0LGWy5QJNar7J DJO1c7yxnbIQ7dxAX4inZVTwaUupUfV/Bnlw16B7Ltnj9CIzG8JnFpDX1/32wu4G /87yt8+SVEP0B1HIG7FLJh6F4VHgFjzgh4l1aON8iRAGCM9oBTdSy+go5gIld/1W wX7OVkm3Gk723DCEYe/b1hjqYqCgjGbHbtObLucUzh3xKxNWeihxvKoqaZaFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDa0qc+uFhCimJIpGsaoITVp97B8wHwYDVR0j BBgwFoAUon/ysAuBjQNmIUaPJlo1AhHFtrEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWUyMGU4MDAtMjViYi00Yzc4LWE4YjMtZjBlYjI1YzJlODJhLzAvQTI3RkYyQjAw QjgxOEQwMzY2MjE0NjhGMjY1QTM1MDIxMUM1QjZCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjdGRjJCMDBCODE4RDAzNjYyMTQ2OEYyNjVBMzUwMjExQzVC NkIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWUyMGU4MDAtMjViYi00Yzc4LWE4 YjMtZjBlYjI1YzJlODJhLzAvQTI3RkYyQjAwQjgxOEQwMzY2MjE0NjhGMjY1QTM1 MDIxMUM1QjZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEPBWCpVtc9VACjVVKOkcobgZJlcgiEAFkH fQ77m9a65wxJWIxxqZcCy5Inxtvwl4/odhXkJJS+zLinUwU76IenHBg9vhcR3IUt BKKIHET7/yeNQA3kSMd7h/8h3wBZPsp9pOf+ffVQD1nBwnSUPpGEegd0JLc2+W2U wx4jlDcuvjx+nEwqwh2no88ny0G5l4yl/VacZNLNIB53BOZGjdWUAMOPrEBEr53j njB3DjTQO4/GZAbRAcr1wpEc+k//K2R6YaOxF1i3VcHfT7sXrvYmyDp/FYB3CXYa BroYXR/9W9DyCVvxQfub3X0f36UqMysVPB0cNjblUg9kUkzI1W0= -----END CERTIFICATE-----Generated at Fri Jul 24 04:52:28 2026 by rpki-client