$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft File: 27A90045CBA22331AEF929C017271A7936688C97.mft (raw, json) Hash identifier: 2OX8Tayq1DlYaiHE0dDjLKKZNbPcIf+1Taq4fAW1nmw= Subject key identifier: BE:10:F5:CE:D3:1D:87:68:1A:A8:B4:A3:FF:93:15:2B:48:B9:F7:F9 Authority key identifier: 27:A9:00:45:CB:A2:23:31:AE:F9:29:C0:17:27:1A:79:36:68:8C:97 Certificate issuer: /CN=27A90045CBA22331AEF929C017271A7936688C97 Certificate serial: 5A81467C41A3CE90750F7CD82230020DACDF4F9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27A90045CBA22331AEF929C017271A7936688C97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 19:03:28 +0000 Manifest this update: Sat 14 Nov 2026 18:58:28 +0000 Manifest next update: Sun 15 Nov 2026 20:59:28 +0000 Files and hashes: 1: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: wxG5u0knwwtRFwXPMgfrz2l9Xi2Prxv/dPiLuDPGtJo=) 2: 27A90045CBA22331AEF929C017271A7936688C97.crl (hash: gAD+Qtn1DNwzUmX3c3akfvGHnFcqaoHn1yZgY/GnPyM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.crl rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27A90045CBA22331AEF929C017271A7936688C97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:81:46:7c:41:a3:ce:90:75:0f:7c:d8:22:30:02:0d:ac:df:4f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27A90045CBA22331AEF929C017271A7936688C97 Validity Not Before: Nov 14 18:58:28 2026 GMT Not After : Nov 15 20:59:28 2026 GMT Subject: CN=BE10F5CED31D87681AA8B4A3FF93152B48B9F7F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:03:5b:a4:36:aa:79:d5:79:42:1c:92:30:c0: e4:89:cd:b4:f6:d1:35:c8:85:ef:0a:20:84:09:84: 34:d4:b7:f4:d6:6a:11:06:dd:e8:9b:f1:bc:a0:ec: b2:0c:5b:e9:fb:24:2f:ce:15:af:4d:57:6c:21:8f: c5:36:34:05:9b:3a:3d:ad:03:6d:31:84:ce:96:1b: 5b:da:c1:da:17:15:28:6e:2b:90:01:f7:f0:0c:4b: b3:0f:e0:fd:ee:a7:37:91:f7:0e:da:7e:e5:bc:66: f7:7c:50:b2:58:64:3d:62:1d:6a:16:4f:b6:76:0a: 9a:4a:8b:54:ea:3f:2b:c9:bd:70:e0:0c:e2:bc:e9: d3:40:45:eb:7b:d4:15:99:f4:fa:9e:ff:29:94:46: 54:c2:f0:95:f3:b6:a7:ef:c8:76:b8:fd:4a:8d:c4: f9:c5:b9:82:09:1b:80:24:c2:d1:ca:a7:a3:b9:c4: ae:e3:62:91:2c:42:c6:a3:6c:58:b6:f7:f7:a1:18: e8:b0:2e:26:cc:08:a3:8a:ba:84:89:50:8a:f5:13: 3d:fe:b0:88:10:ce:ed:76:d5:c5:d6:6a:9f:9e:b9: b8:6f:cc:40:a6:9d:a6:f9:15:38:6f:79:7c:3c:22: 1c:96:88:88:48:56:ce:05:77:38:11:de:ba:54:c5: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:10:F5:CE:D3:1D:87:68:1A:A8:B4:A3:FF:93:15:2B:48:B9:F7:F9 X509v3 Authority Key Identifier: keyid:27:A9:00:45:CB:A2:23:31:AE:F9:29:C0:17:27:1A:79:36:68:8C:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27A90045CBA22331AEF929C017271A7936688C97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:e4:f2:2f:9c:a0:ca:65:16:68:95:5d:fc:c3:90:cf:93:d0: 85:f6:e9:0e:0b:8b:2f:79:6e:94:9b:da:1e:c5:54:ab:3e:7e: 81:7c:dc:21:21:83:8d:55:9e:fb:80:92:18:c7:f2:2e:1e:51: fe:42:9d:58:92:8d:82:28:a3:65:a1:56:87:2d:ef:e3:48:77: a2:3d:0e:1c:62:f5:bc:b5:11:0d:7c:00:31:2c:31:28:e7:ff: 7e:1a:dd:09:c6:74:3d:50:9e:44:a7:c1:33:17:33:4e:67:db: 81:28:ec:ad:8e:79:c2:83:94:4b:1d:27:c0:71:ec:78:bd:93: dc:3b:20:2f:2e:ab:5e:a4:f4:74:0b:42:36:e8:95:f5:97:f1: a1:12:e8:a2:f5:e2:d3:08:61:61:d3:28:f6:e5:24:17:2c:24: b7:6b:6d:5b:72:1e:26:65:85:07:da:cb:46:f9:4b:01:00:c0: 0d:75:b7:c0:57:2b:69:29:87:fd:4a:a2:aa:4b:f7:69:1b:ea: 2e:4e:92:b5:ed:49:f6:25:08:4d:95:4a:cd:67:7e:b2:88:82: a9:56:a9:c4:b3:37:a8:58:4c:76:b4:d5:1d:ed:27:09:cd:3f: 58:22:32:09:98:eb:0d:ba:0e:7c:de:9b:ca:34:bd:a1:25:a7: 46:24:44:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWoFGfEGjzpB1D3zYIjACDazfT58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdBOTAwNDVDQkEyMjMzMUFFRjkyOUMwMTcyNzFBNzkz NjY4OEM5NzAeFw0yNjExMTQxODU4MjhaFw0yNjExMTUyMDU5MjhaMDMxMTAvBgNV BAMTKEJFMTBGNUNFRDMxRDg3NjgxQUE4QjRBM0ZGOTMxNTJCNDhCOUY3RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsA1ukNqp51XlCHJIwwOSJzbT2 0TXIhe8KIIQJhDTUt/TWahEG3eib8byg7LIMW+n7JC/OFa9NV2whj8U2NAWbOj2t A20xhM6WG1vawdoXFShuK5AB9/AMS7MP4P3upzeR9w7afuW8Zvd8ULJYZD1iHWoW T7Z2CppKi1TqPyvJvXDgDOK86dNARet71BWZ9Pqe/ymURlTC8JXztqfvyHa4/UqN xPnFuYIJG4AkwtHKp6O5xK7jYpEsQsajbFi29/ehGOiwLibMCKOKuoSJUIr1Ez3+ sIgQzu121cXWap+eubhvzECmnab5FThveXw8IhyWiIhIVs4FdzgR3rpUxfFLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvhD1ztMdh2gaqLSj/5MVK0i59/kwHwYDVR0j BBgwFoAUJ6kARcuiIzGu+SnAFycaeTZojJcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTg4NTNhYWItOGQ2Yy00NTdmLTlkNTctNDg0YWNhY2VhOWQ4LzAvMjdBOTAwNDVD QkEyMjMzMUFFRjkyOUMwMTcyNzFBNzkzNjY4OEM5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yN0E5MDA0NUNCQTIyMzMxQUVGOTI5QzAxNzI3MUE3OTM2Njg4 Qzk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzAvMjdBOTAwNDVDQkEyMjMzMUFFRjkyOUMwMTcyNzFB NzkzNjY4OEM5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXk8i+coMplFmiVXfzDkM+T0IX26Q4Liy95 bpSb2h7FVKs+foF83CEhg41VnvuAkhjH8i4eUf5CnViSjYIoo2WhVoct7+NId6I9 Dhxi9by1EQ18ADEsMSjn/34a3QnGdD1QnkSnwTMXM05n24Eo7K2OecKDlEsdJ8Bx 7Hi9k9w7IC8uq16k9HQLQjbolfWX8aES6KL14tMIYWHTKPblJBcsJLdrbVtyHiZl hQfay0b5SwEAwA11t8BXK2kph/1KoqpL92kb6i5OkrXtSfYlCE2VSs1nfrKIgqlW qcSzN6hYTHa01R3tJwnNP1giMgmY6w26Dnzem8o0vaElp0YkRFU= -----END CERTIFICATE-----Generated at Sat Nov 14 22:44:01 2026 by rpki-client