$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft File: CA270F1FD051B3CD65DB930972A99335C45615EC.mft (raw, json) Hash identifier: vTIqLEJo8f4msZoIiWHnG2b2PJ6iC0lM7LE4Ns2j2bk= Subject key identifier: 2B:C3:71:C2:15:4F:43:E9:62:E4:27:27:B8:DF:62:0A:15:1A:8E:91 Authority key identifier: CA:27:0F:1F:D0:51:B3:CD:65:DB:93:09:72:A9:93:35:C4:56:15:EC Certificate issuer: /CN=CA270F1FD051B3CD65DB930972A99335C45615EC Certificate serial: 7D0518CCD4885B1F35910126D4064289FFA37707 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 12:00:54 +0000 Manifest this update: Wed 23 Sep 2026 11:55:54 +0000 Manifest next update: Thu 24 Sep 2026 15:36:54 +0000 Files and hashes: 1: CA270F1FD051B3CD65DB930972A99335C45615EC.crl (hash: u+tRJJxpDKKyMOljztdB5QlG/zz7aEk0D+/yEDKVgJw=) 2: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: UuwOEqaAvPthTROezeYmcp8tB98baeryTixXf6GL8Aw=) 3: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: NkKjSf90ElcdssnMG0/v4I3k9N6YTsqapPAgxV9RP+E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.crl rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:05:18:cc:d4:88:5b:1f:35:91:01:26:d4:06:42:89:ff:a3:77:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA270F1FD051B3CD65DB930972A99335C45615EC Validity Not Before: Sep 23 11:55:54 2026 GMT Not After : Sep 24 15:36:54 2026 GMT Subject: CN=2BC371C2154F43E962E42727B8DF620A151A8E91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ea:02:57:d1:30:74:b7:1b:9b:d6:96:46:2e: cf:fa:72:70:56:2b:07:9c:67:01:9c:f5:83:cc:88: 85:5d:39:21:54:a6:34:6e:2f:e5:4d:f9:df:27:34: 11:96:f1:58:e4:43:1d:52:d3:63:88:5f:29:61:83: 1b:42:43:8c:ad:3d:68:b4:f8:1c:8b:35:64:8d:3d: 6b:58:5d:93:1c:25:42:d8:ea:a3:b2:13:9f:f9:9d: e1:3a:47:7c:e7:b0:e2:b5:5a:6f:bf:1e:d0:53:95: ff:f5:16:da:31:7c:58:52:9e:27:e9:ae:ad:80:d2: d2:50:fc:bf:9f:32:40:92:a8:fa:26:82:a4:36:91: a1:67:8c:e2:ba:22:10:b2:17:6a:b0:20:c5:27:fc: a7:ce:f4:76:09:84:8a:2a:da:d2:04:19:05:2b:d1: b6:9c:98:e8:ae:53:00:92:80:35:4e:23:6c:2e:1d: 97:d8:98:fe:70:27:ba:37:c7:70:b7:e3:e3:1a:c9: 5d:33:c1:c9:f3:0a:46:b8:30:3d:2b:a8:48:71:f9: f3:93:81:55:fa:d1:43:23:db:7f:a7:c3:cf:e3:6c: ba:e7:fa:ab:3e:34:8c:a7:87:40:93:af:14:f2:07: 9b:ce:d2:06:58:ef:6f:11:b8:22:94:1a:89:30:a5: a6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C3:71:C2:15:4F:43:E9:62:E4:27:27:B8:DF:62:0A:15:1A:8E:91 X509v3 Authority Key Identifier: keyid:CA:27:0F:1F:D0:51:B3:CD:65:DB:93:09:72:A9:93:35:C4:56:15:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:77:00:4a:94:4f:1c:56:41:f4:76:d1:09:f6:6d:23:7e:7c: 8c:60:a0:44:f5:37:a2:de:7d:75:61:4e:9c:15:2b:ca:66:69: ff:b6:37:18:a8:eb:9b:f6:82:27:ed:6d:9d:fe:53:97:71:b7: e0:82:29:77:29:05:85:82:af:b7:44:ee:bc:4e:a0:2d:f3:2c: 0e:04:0a:31:85:30:9b:52:7a:eb:1a:5b:27:ad:e1:9f:9d:6c: de:16:18:0a:4a:7f:55:34:29:d2:af:b1:da:ba:a1:2a:5a:51: 20:68:35:6e:5a:b6:21:c1:41:57:23:ba:fa:d1:fc:6e:e9:b3: 34:de:a9:37:a4:70:c9:df:9c:bc:6c:5f:dd:37:56:96:2f:35: 42:f8:04:68:5d:3c:7e:c5:8c:bb:7c:01:04:3c:c9:2c:e5:f4: 9e:7d:27:47:a8:64:97:7f:fa:e7:36:c5:98:1a:1f:35:39:6f: 2f:68:c1:a4:56:4b:2c:de:df:da:a7:51:ae:e2:f9:8a:ac:c2: 74:7d:e4:1a:e8:10:c8:b2:24:66:a7:32:45:60:07:85:a8:a9: d2:db:72:93:30:80:1b:22:b4:ad:c3:d4:ee:d6:43:36:5c:f6: 0f:08:ea:1f:0a:bb:e6:ae:70:66:bb:4d:a8:58:90:05:cd:30: 69:ee:10:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQUYzNSIWx81kQEm1AZCif+jdwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyNzBGMUZEMDUxQjNDRDY1REI5MzA5NzJBOTkzMzVD NDU2MTVFQzAeFw0yNjA5MjMxMTU1NTRaFw0yNjA5MjQxNTM2NTRaMDMxMTAvBgNV BAMTKDJCQzM3MUMyMTU0RjQzRTk2MkU0MjcyN0I4REY2MjBBMTUxQThFOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs6gJX0TB0txub1pZGLs/6cnBW KwecZwGc9YPMiIVdOSFUpjRuL+VN+d8nNBGW8VjkQx1S02OIXylhgxtCQ4ytPWi0 +ByLNWSNPWtYXZMcJULY6qOyE5/5neE6R3znsOK1Wm+/HtBTlf/1FtoxfFhSnifp rq2A0tJQ/L+fMkCSqPomgqQ2kaFnjOK6IhCyF2qwIMUn/KfO9HYJhIoq2tIEGQUr 0bacmOiuUwCSgDVOI2wuHZfYmP5wJ7o3x3C34+MayV0zwcnzCka4MD0rqEhx+fOT gVX60UMj23+nw8/jbLrn+qs+NIynh0CTrxTyB5vO0gZY728RuCKUGokwpaYbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK8NxwhVPQ+li5CcnuN9iChUajpEwHwYDVR0j BBgwFoAUyicPH9BRs81l25MJcqmTNcRWFewwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVkOWVhMjAtMzQzZC00YWNiLTk1ODEtODFmOWQ3ZWE5MmZlLzAvQ0EyNzBGMUZE MDUxQjNDRDY1REI5MzA5NzJBOTkzMzVDNDU2MTVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTI3MEYxRkQwNTFCM0NENjVEQjkzMDk3MkE5OTMzNUM0NTYx NUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVkOWVhMjAtMzQzZC00YWNiLTk1 ODEtODFmOWQ3ZWE5MmZlLzAvQ0EyNzBGMUZEMDUxQjNDRDY1REI5MzA5NzJBOTkz MzVDNDU2MTVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABt3AEqUTxxWQfR20Qn2bSN+fIxgoET1N6Le fXVhTpwVK8pmaf+2Nxio65v2giftbZ3+U5dxt+CCKXcpBYWCr7dE7rxOoC3zLA4E CjGFMJtSeusaWyet4Z+dbN4WGApKf1U0KdKvsdq6oSpaUSBoNW5atiHBQVcjuvrR /G7pszTeqTekcMnfnLxsX903VpYvNUL4BGhdPH7FjLt8AQQ8ySzl9J59J0eoZJd/ +uc2xZgaHzU5by9owaRWSyze39qnUa7i+YqswnR95BroEMiyJGanMkVgB4WoqdLb cpMwgBsitK3D1O7WQzZc9g8I6h8Ku+aucGa7TahYkAXNMGnuEAk= -----END CERTIFICATE-----Generated at Thu Sep 24 03:39:23 2026 by rpki-client