$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft File: 27E417DDE008607BCDD5A3593D3468A196716538.mft (raw, json) Hash identifier: CbO7VsSbS7R0cxLDjLeXvMSMc0hClYnDFX6O3IlMAKk= Subject key identifier: 7C:01:0A:E7:E9:CB:B3:C8:D0:0A:0E:65:FB:24:51:52:36:6E:2C:30 Authority key identifier: 27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38 Certificate issuer: /CN=27E417DDE008607BCDD5A3593D3468A196716538 Certificate serial: 7271337A0FD0C8C847963DCC724696774969A1B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 05:37:19 +0000 Manifest this update: Fri 25 Sep 2026 05:32:19 +0000 Manifest next update: Sat 26 Sep 2026 06:59:19 +0000 Files and hashes: 1: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: 1bOoTdfrvDcIKLgnFWnuVyWYZ52c2xuJTvaGjJbRj4Y=) 2: 27E417DDE008607BCDD5A3593D3468A196716538.crl (hash: 4oT1YSTC7WELCdYHaiFSMJzSE0SfGEKYQ/ZsbIvYy88=) 3: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: 6rYbBTfQu9Ye+jxQ58mCILFsaxt3rc45oOO8Pu0AOKM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 06:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:71:33:7a:0f:d0:c8:c8:47:96:3d:cc:72:46:96:77:49:69:a1:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27E417DDE008607BCDD5A3593D3468A196716538 Validity Not Before: Sep 25 05:32:19 2026 GMT Not After : Sep 26 06:59:19 2026 GMT Subject: CN=7C010AE7E9CBB3C8D00A0E65FB245152366E2C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f4:06:89:62:58:06:c7:57:59:62:42:2b:18: 4c:0a:d7:bb:f4:64:14:6e:f0:96:ed:99:cc:ec:a4: e0:7f:fd:2f:d9:57:25:e8:14:23:2d:21:63:fb:75: 93:78:97:7c:0f:6c:03:22:39:83:4e:1f:e6:7b:7c: 3e:24:cf:ff:92:09:d9:a4:ae:0b:c3:0e:4d:0b:84: 9f:58:b3:93:40:07:23:6a:23:21:ef:95:2a:91:b6: 76:4d:36:1c:f1:dd:ee:4b:96:c0:55:1f:ca:a3:2d: 84:f4:81:d7:5c:e8:48:93:8c:b1:77:2f:07:4a:8f: 41:a4:6e:05:18:04:b8:60:e4:5a:2f:c9:64:dc:fd: 47:cc:6a:d9:a1:e9:bf:39:28:2a:8f:a2:cc:4c:16: a3:9e:64:10:1e:43:05:16:f0:94:b0:98:c5:7c:64: ea:67:48:2e:39:63:83:1a:f2:2f:29:4c:56:4a:d6: d9:66:8c:d8:85:e0:fc:f9:dd:7a:b5:95:a3:c4:0e: 33:85:13:e3:da:4b:83:6a:af:4c:d4:3b:f9:2e:13: 34:71:37:71:66:4e:0c:f9:4d:55:ac:88:bd:1f:45: 5f:93:92:31:8b:1e:30:03:81:8e:90:51:c8:a7:63: c6:68:87:e0:f3:8d:b0:4c:b8:cb:83:ff:04:c8:12: 0f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:01:0A:E7:E9:CB:B3:C8:D0:0A:0E:65:FB:24:51:52:36:6E:2C:30 X509v3 Authority Key Identifier: keyid:27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:8b:bb:1c:35:6c:82:c1:72:06:cd:f7:94:16:5e:28:93:14: db:e2:12:e6:38:c2:e4:5a:fa:8a:f0:85:6c:93:f2:54:c9:96: 03:1d:7a:61:b6:6f:c9:3f:1f:b5:5b:48:d8:e0:f5:3b:80:2b: e2:46:e9:6a:b2:a3:85:70:b5:9c:f3:95:8d:5e:a8:d1:58:3a: a8:44:e6:84:35:76:f9:5d:7b:79:42:3a:32:c2:4b:1b:0c:cb: c5:8c:49:36:41:03:d8:b1:c3:1a:e2:ee:6a:d4:ce:cd:65:69: d0:22:32:5b:5c:2d:ba:62:6f:7c:4e:0e:30:94:81:40:56:4e: 4d:ab:65:f3:f1:5e:04:f3:eb:1e:a6:79:bf:f8:47:47:1f:ec: 49:98:7b:c3:9f:24:82:b7:fe:43:75:dd:ad:5c:e0:89:32:1c: 13:9c:f5:be:b2:a0:ba:ba:a8:fc:40:6c:37:b9:be:ce:34:71: 1e:07:41:c3:8b:8a:bf:27:01:93:9b:c6:e6:35:b0:3d:8f:af: 18:d2:b0:ae:b7:5c:e4:80:8c:38:85:34:84:2b:fa:c4:e4:c2: 32:0d:a6:bf:8a:47:dc:1c:27:fd:6d:73:4c:40:30:3e:b6:43: 5b:49:e3:fb:60:10:71:d9:f4:af:ba:27:f9:40:9b:28:b9:6d: ee:46:bf:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcnEzeg/QyMhHlj3MckaWd0lpobMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdFNDE3RERFMDA4NjA3QkNERDVBMzU5M0QzNDY4QTE5 NjcxNjUzODAeFw0yNjA5MjUwNTMyMTlaFw0yNjA5MjYwNjU5MTlaMDMxMTAvBgNV BAMTKDdDMDEwQUU3RTlDQkIzQzhEMDBBMEU2NUZCMjQ1MTUyMzY2RTJDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79AaJYlgGx1dZYkIrGEwK17v0 ZBRu8JbtmczspOB//S/ZVyXoFCMtIWP7dZN4l3wPbAMiOYNOH+Z7fD4kz/+SCdmk rgvDDk0LhJ9Ys5NAByNqIyHvlSqRtnZNNhzx3e5LlsBVH8qjLYT0gddc6EiTjLF3 LwdKj0GkbgUYBLhg5FovyWTc/UfMatmh6b85KCqPosxMFqOeZBAeQwUW8JSwmMV8 ZOpnSC45Y4Ma8i8pTFZK1tlmjNiF4Pz53Xq1laPEDjOFE+PaS4Nqr0zUO/kuEzRx N3FmTgz5TVWsiL0fRV+TkjGLHjADgY6QUcinY8Zoh+DzjbBMuMuD/wTIEg+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfAEK5+nLs8jQCg5l+yRRUjZuLDAwHwYDVR0j BBgwFoAUJ+QX3eAIYHvN1aNZPTRooZZxZTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjliOWJkMzgtMmVmYS00ZDRjLWE5NTYtNDI0OTJhM2U2MDAwLzAvMjdFNDE3RERF MDA4NjA3QkNERDVBMzU5M0QzNDY4QTE5NjcxNjUzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yN0U0MTdEREUwMDg2MDdCQ0RENUEzNTkzRDM0NjhBMTk2NzE2 NTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMjdFNDE3RERFMDA4NjA3QkNERDVBMzU5M0QzNDY4 QTE5NjcxNjUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCLuxw1bILBcgbN95QWXiiTFNviEuY4wuRa +orwhWyT8lTJlgMdemG2b8k/H7VbSNjg9TuAK+JG6Wqyo4VwtZzzlY1eqNFYOqhE 5oQ1dvlde3lCOjLCSxsMy8WMSTZBA9ixwxri7mrUzs1ladAiMltcLbpib3xODjCU gUBWTk2rZfPxXgTz6x6meb/4R0cf7EmYe8OfJIK3/kN13a1c4IkyHBOc9b6yoLq6 qPxAbDe5vs40cR4HQcOLir8nAZObxuY1sD2PrxjSsK63XOSAjDiFNIQr+sTkwjIN pr+KR9wcJ/1tc0xAMD62Q1tJ4/tgEHHZ9K+6J/lAmyi5be5Gv4w= -----END CERTIFICATE-----Generated at Fri Sep 25 23:41:03 2026 by rpki-client