$ rpki-client -vvf rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft File: CA270F1FD051B3CD65DB930972A99335C45615EC.mft (raw, json) Hash identifier: 7lLK56EqPyZVegKLurpCyQbaoNGtl5/IxNmYxsIG0kY= Subject key identifier: 39:A1:78:53:CF:61:3F:DF:0C:CE:FD:14:26:69:2C:EA:F6:8C:06:7E Authority key identifier: CA:27:0F:1F:D0:51:B3:CD:65:DB:93:09:72:A9:93:35:C4:56:15:EC Certificate issuer: /CN=CA270F1FD051B3CD65DB930972A99335C45615EC Certificate serial: 57E0C7FC17F9CAEF40C6D21EB2391FDBCD78D829 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 10:27:49 +0000 Manifest this update: Thu 23 Jul 2026 10:22:49 +0000 Manifest next update: Fri 24 Jul 2026 11:15:49 +0000 Files and hashes: 1: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: NkKjSf90ElcdssnMG0/v4I3k9N6YTsqapPAgxV9RP+E=) 2: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: UuwOEqaAvPthTROezeYmcp8tB98baeryTixXf6GL8Aw=) 3: CA270F1FD051B3CD65DB930972A99335C45615EC.crl (hash: A5X7R1d97dZfmWRwZE+OGFRjtd/xPZqoVwuS/Z2PhCU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.crl rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 11:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e0:c7:fc:17:f9:ca:ef:40:c6:d2:1e:b2:39:1f:db:cd:78:d8:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA270F1FD051B3CD65DB930972A99335C45615EC Validity Not Before: Jul 23 10:22:49 2026 GMT Not After : Jul 24 11:15:49 2026 GMT Subject: CN=39A17853CF613FDF0CCEFD1426692CEAF68C067E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:9c:5a:6b:5a:f2:f4:2b:e6:eb:18:88:d0: d7:db:06:b5:a0:bd:33:cb:bf:cd:7d:9d:7a:25:bd: fc:c7:47:84:39:ad:5d:1d:c2:d1:08:64:54:cf:e1: e0:2b:95:37:da:9e:e7:1d:eb:8d:5e:3a:ec:81:18: 14:47:da:b4:ff:00:42:21:7b:84:8c:d0:13:a6:b5: cf:8b:e4:e5:2f:60:2d:90:14:17:fe:55:ac:ea:52: 70:91:08:5a:e9:d5:f9:af:0c:2c:10:70:8c:90:68: 24:3d:ec:c6:66:0a:f0:bc:8f:77:12:5a:02:99:cf: 32:ee:77:23:c8:2c:8c:c7:a5:9f:51:16:17:20:0e: 4c:d2:3f:57:fe:d5:f6:35:50:8b:84:d8:60:21:a7: 1b:c1:31:25:1d:76:9c:f0:cd:26:d6:b9:33:0f:e9: ab:4e:6c:26:86:a7:ac:97:8a:97:ed:c6:57:bb:df: 4f:71:4d:b6:c8:f5:87:8b:92:7f:ea:5a:18:bb:8f: 72:a3:32:69:5c:99:6d:99:75:57:ba:fe:a3:82:b2: 0b:51:5a:1d:e7:7e:2e:18:2c:3d:77:6e:1f:02:44: 35:ff:f6:18:af:13:6b:9e:f7:98:71:4d:01:ca:7e: 4b:4c:59:c6:57:2f:33:58:ea:a4:56:ba:c3:14:89: eb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A1:78:53:CF:61:3F:DF:0C:CE:FD:14:26:69:2C:EA:F6:8C:06:7E X509v3 Authority Key Identifier: keyid:CA:27:0F:1F:D0:51:B3:CD:65:DB:93:09:72:A9:93:35:C4:56:15:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:10:0d:ed:56:f9:05:5a:12:38:a4:af:25:a8:28:63:60:8d: c6:4c:01:d2:48:9b:7a:0f:c6:33:85:1a:35:d7:92:e8:5e:8b: 8d:fd:22:b5:64:b2:0c:1f:06:9b:97:e3:90:a5:8f:65:94:09: f2:2a:d5:6c:1b:40:09:01:b8:fe:6d:39:99:a8:06:5d:dd:6b: 8f:6a:d8:56:0a:ed:2a:ab:ae:6b:c3:02:16:64:34:23:ac:4e: 6a:a9:d6:0d:50:a0:ac:23:63:75:8f:9d:56:22:6b:43:86:67: 19:55:22:89:59:98:1d:3e:97:0a:a8:43:23:f6:de:83:f3:4a: 18:bd:59:5f:15:2f:fc:42:23:2a:b8:28:da:18:0f:dc:4e:12: 69:0a:27:0b:ca:96:c0:67:94:a1:7f:4c:66:67:b5:91:d7:79: b4:a3:a5:4a:5f:18:72:24:76:7e:86:58:6f:f6:df:fe:06:30: 85:9a:b4:ee:64:fc:46:6d:e8:80:a5:cf:f0:80:56:9e:21:28: 98:79:b0:6b:d8:8b:ce:be:9c:92:2e:cc:0c:ae:15:55:a6:c6: 72:8e:a1:5a:67:78:32:2a:57:40:e8:a7:51:1a:db:f9:fd:13: b6:6d:06:87:5c:82:27:be:76:2c:81:48:15:42:e0:23:cb:83: 53:f6:91:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+DH/Bf5yu9AxtIesjkf28142CkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyNzBGMUZEMDUxQjNDRDY1REI5MzA5NzJBOTkzMzVD NDU2MTVFQzAeFw0yNjA3MjMxMDIyNDlaFw0yNjA3MjQxMTE1NDlaMDMxMTAvBgNV BAMTKDM5QTE3ODUzQ0Y2MTNGREYwQ0NFRkQxNDI2NjkyQ0VBRjY4QzA2N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3pxaa1ry9Cvm6xiI0NfbBrWg vTPLv819nXolvfzHR4Q5rV0dwtEIZFTP4eArlTfanucd641eOuyBGBRH2rT/AEIh e4SM0BOmtc+L5OUvYC2QFBf+VazqUnCRCFrp1fmvDCwQcIyQaCQ97MZmCvC8j3cS WgKZzzLudyPILIzHpZ9RFhcgDkzSP1f+1fY1UIuE2GAhpxvBMSUddpzwzSbWuTMP 6atObCaGp6yXipftxle7309xTbbI9YeLkn/qWhi7j3KjMmlcmW2ZdVe6/qOCsgtR Wh3nfi4YLD13bh8CRDX/9hivE2ue95hxTQHKfktMWcZXLzNY6qRWusMUietZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOaF4U89hP98Mzv0UJmks6vaMBn4wHwYDVR0j BBgwFoAUyicPH9BRs81l25MJcqmTNcRWFewwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVkOWVhMjAtMzQzZC00YWNiLTk1ODEtODFmOWQ3ZWE5MmZlLzAvQ0EyNzBGMUZE MDUxQjNDRDY1REI5MzA5NzJBOTkzMzVDNDU2MTVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTI3MEYxRkQwNTFCM0NENjVEQjkzMDk3MkE5OTMzNUM0NTYx NUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVkOWVhMjAtMzQzZC00YWNiLTk1 ODEtODFmOWQ3ZWE5MmZlLzAvQ0EyNzBGMUZEMDUxQjNDRDY1REI5MzA5NzJBOTkz MzVDNDU2MTVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQQDe1W+QVaEjikryWoKGNgjcZMAdJIm3oP xjOFGjXXkuhei439IrVksgwfBpuX45Clj2WUCfIq1WwbQAkBuP5tOZmoBl3da49q 2FYK7SqrrmvDAhZkNCOsTmqp1g1QoKwjY3WPnVYia0OGZxlVIolZmB0+lwqoQyP2 3oPzShi9WV8VL/xCIyq4KNoYD9xOEmkKJwvKlsBnlKF/TGZntZHXebSjpUpfGHIk dn6GWG/23/4GMIWatO5k/EZt6IClz/CAVp4hKJh5sGvYi86+nJIuzAyuFVWmxnKO oVpneDIqV0Dop1Ea2/n9E7ZtBodcgie+diyBSBVC4CPLg1P2kd0= -----END CERTIFICATE-----Generated at Fri Jul 24 01:15:57 2026 by rpki-client