$ rpki-client -vvf rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft File: CA270F1FD051B3CD65DB930972A99335C45615EC.mft (raw, json) Hash identifier: oaKgXVmBxAk4wZoIbPfhOIkqYBMakZrzQhoiJwLYmSU= Subject key identifier: 3E:A7:FB:5B:8C:63:87:7F:45:59:D4:C1:42:9D:5E:11:79:28:E7:09 Authority key identifier: CA:27:0F:1F:D0:51:B3:CD:65:DB:93:09:72:A9:93:35:C4:56:15:EC Certificate issuer: /CN=CA270F1FD051B3CD65DB930972A99335C45615EC Certificate serial: 6C433C9DEF8FFF74E062F5E598CFCA1109F9A560 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:36:01 +0000 Manifest this update: Tue 12 May 2026 05:31:01 +0000 Manifest next update: Wed 13 May 2026 06:59:01 +0000 Files and hashes: 1: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: UuwOEqaAvPthTROezeYmcp8tB98baeryTixXf6GL8Aw=) 2: CA270F1FD051B3CD65DB930972A99335C45615EC.crl (hash: MiHDgDowSHrK7BwCIHd05Z5nwVofQHl2QyKhWuT8Tkw=) 3: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: NkKjSf90ElcdssnMG0/v4I3k9N6YTsqapPAgxV9RP+E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.crl rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:43:3c:9d:ef:8f:ff:74:e0:62:f5:e5:98:cf:ca:11:09:f9:a5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA270F1FD051B3CD65DB930972A99335C45615EC Validity Not Before: May 12 05:31:01 2026 GMT Not After : May 13 06:59:01 2026 GMT Subject: CN=3EA7FB5B8C63877F4559D4C1429D5E117928E709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c9:ba:21:8e:a0:d2:ea:34:85:d7:82:4d:54: 9b:ee:a2:6d:7d:9a:03:f2:96:51:ea:32:27:b2:a3: cd:d7:99:3a:62:cf:bf:be:a2:3b:e3:1b:3d:cf:9d: 9f:b4:a3:ff:d7:9e:56:b3:28:ff:cf:75:f3:73:78: 63:19:7e:0a:a9:39:1a:8e:9d:20:fd:07:b2:27:45: 5e:f1:15:49:6e:51:fb:1c:2b:66:8e:0c:8f:56:56: 4b:c0:94:0f:2a:d4:f5:1f:ad:d0:a9:d8:4f:7a:81: 47:98:16:7f:6c:dc:f5:35:01:8c:9f:e7:c3:ed:0d: ff:9c:8e:f4:8c:e1:5d:46:36:d3:13:f3:82:94:d2: 79:5b:a4:ea:7c:24:6c:4b:84:3f:a2:b6:bd:64:ea: e7:c3:2e:39:95:cf:12:5b:aa:69:8b:b2:b7:a5:b7: 61:ef:c1:45:9c:81:9b:71:9d:07:48:30:1a:59:f9: 4f:23:fb:0d:e6:80:52:91:c7:c1:a6:fc:01:2c:b4: aa:69:60:8d:58:65:51:54:10:24:c6:39:6a:83:62: 64:11:06:a9:ef:13:b4:e4:a2:38:7a:b3:e5:3e:15: bb:2e:22:1a:fa:ca:e4:ad:bb:41:91:a2:f0:98:a0: b1:55:20:19:aa:3d:0a:f8:84:cc:5e:1a:e5:51:9b: d3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A7:FB:5B:8C:63:87:7F:45:59:D4:C1:42:9D:5E:11:79:28:E7:09 X509v3 Authority Key Identifier: keyid:CA:27:0F:1F:D0:51:B3:CD:65:DB:93:09:72:A9:93:35:C4:56:15:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:93:45:2e:38:4c:c8:7f:4a:47:96:2f:e7:39:a5:18:6e:69: 2e:5e:c1:8e:78:d9:32:cb:bb:b8:6b:ae:aa:4d:69:b5:f6:c8: 98:6b:02:14:5c:99:4e:af:39:46:6d:b4:00:00:3e:2b:13:99: 6f:b5:a7:42:cf:28:d3:25:f4:ac:78:76:b6:a9:e9:78:92:05: be:40:31:54:8c:89:0e:e2:4b:41:89:55:c7:90:f7:b0:f4:ae: 76:d5:9a:56:a8:07:e8:62:11:e1:3b:29:33:ea:3f:08:27:f0: d1:5d:95:0c:4f:d8:cb:24:0b:fc:fc:10:39:31:b3:20:55:75: cb:48:bd:94:ab:ca:e6:1d:d2:9b:87:41:47:08:5f:ac:bb:37: 51:8e:51:71:74:78:75:7e:4c:df:ec:12:8b:bc:7f:a7:3a:93: 43:68:c8:b4:af:e8:db:81:ff:f1:09:a1:5b:bf:21:43:d8:7e: ea:e6:fc:c9:d7:b0:81:70:9b:a9:31:69:b9:02:b0:5c:13:15: 47:4e:30:2e:07:f7:8f:c3:c6:79:0d:74:39:9c:d4:0f:07:db: 2e:8e:e5:a8:ca:36:5a:de:ee:8c:c2:d2:53:31:24:d5:e6:56: 82:02:ba:3e:1f:e9:ea:90:b7:cb:86:1f:3d:ce:0e:de:f7:62: 99:ac:04:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEM8ne+P/3TgYvXlmM/KEQn5pWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyNzBGMUZEMDUxQjNDRDY1REI5MzA5NzJBOTkzMzVD NDU2MTVFQzAeFw0yNjA1MTIwNTMxMDFaFw0yNjA1MTMwNjU5MDFaMDMxMTAvBgNV BAMTKDNFQTdGQjVCOEM2Mzg3N0Y0NTU5RDRDMTQyOUQ1RTExNzkyOEU3MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpybohjqDS6jSF14JNVJvuom19 mgPyllHqMieyo83XmTpiz7++ojvjGz3PnZ+0o//XnlazKP/PdfNzeGMZfgqpORqO nSD9B7InRV7xFUluUfscK2aODI9WVkvAlA8q1PUfrdCp2E96gUeYFn9s3PU1AYyf 58PtDf+cjvSM4V1GNtMT84KU0nlbpOp8JGxLhD+itr1k6ufDLjmVzxJbqmmLsrel t2HvwUWcgZtxnQdIMBpZ+U8j+w3mgFKRx8Gm/AEstKppYI1YZVFUECTGOWqDYmQR BqnvE7Tkojh6s+U+FbsuIhr6yuStu0GRovCYoLFVIBmqPQr4hMxeGuVRm9OVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPqf7W4xjh39FWdTBQp1eEXko5wkwHwYDVR0j BBgwFoAUyicPH9BRs81l25MJcqmTNcRWFewwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVkOWVhMjAtMzQzZC00YWNiLTk1ODEtODFmOWQ3ZWE5MmZlLzAvQ0EyNzBGMUZE MDUxQjNDRDY1REI5MzA5NzJBOTkzMzVDNDU2MTVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTI3MEYxRkQwNTFCM0NENjVEQjkzMDk3MkE5OTMzNUM0NTYx NUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVkOWVhMjAtMzQzZC00YWNiLTk1 ODEtODFmOWQ3ZWE5MmZlLzAvQ0EyNzBGMUZEMDUxQjNDRDY1REI5MzA5NzJBOTkz MzVDNDU2MTVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqTRS44TMh/SkeWL+c5pRhuaS5ewY542TLL u7hrrqpNabX2yJhrAhRcmU6vOUZttAAAPisTmW+1p0LPKNMl9Kx4drap6XiSBb5A MVSMiQ7iS0GJVceQ97D0rnbVmlaoB+hiEeE7KTPqPwgn8NFdlQxP2MskC/z8EDkx syBVdctIvZSryuYd0puHQUcIX6y7N1GOUXF0eHV+TN/sEou8f6c6k0NoyLSv6NuB //EJoVu/IUPYfurm/MnXsIFwm6kxabkCsFwTFUdOMC4H94/DxnkNdDmc1A8H2y6O 5ajKNlre7ozC0lMxJNXmVoICuj4f6eqQt8uGHz3ODt73YpmsBKk= -----END CERTIFICATE-----Generated at Wed May 13 01:07:05 2026 by rpki-client