$ rpki-client -vvf rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft File: 27E417DDE008607BCDD5A3593D3468A196716538.mft (raw, json) Hash identifier: wRiSv1u948b9rTO87ou56He32yZRA/ZPa43ji3sBj9Q= Subject key identifier: C7:8C:96:E4:51:6C:99:D0:82:1D:B0:C4:AB:6A:23:1B:68:FE:02:62 Authority key identifier: 27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38 Certificate issuer: /CN=27E417DDE008607BCDD5A3593D3468A196716538 Certificate serial: 65BE8D640E6D20DC1FD9A4AD44FC95DADA9B3F89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:23:53 +0000 Manifest this update: Thu 23 Jul 2026 19:18:53 +0000 Manifest next update: Fri 24 Jul 2026 21:36:53 +0000 Files and hashes: 1: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: 1bOoTdfrvDcIKLgnFWnuVyWYZ52c2xuJTvaGjJbRj4Y=) 2: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: 6rYbBTfQu9Ye+jxQ58mCILFsaxt3rc45oOO8Pu0AOKM=) 3: 27E417DDE008607BCDD5A3593D3468A196716538.crl (hash: YGAdRHyF2FeZ1PdZVon+cC9fuuhD1FN+xhqb2xYRmYI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:be:8d:64:0e:6d:20:dc:1f:d9:a4:ad:44:fc:95:da:da:9b:3f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27E417DDE008607BCDD5A3593D3468A196716538 Validity Not Before: Jul 23 19:18:53 2026 GMT Not After : Jul 24 21:36:53 2026 GMT Subject: CN=C78C96E4516C99D0821DB0C4AB6A231B68FE0262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:98:2d:ac:c9:e4:52:02:3f:cd:b9:91:6c:b7: f5:b3:14:63:ea:37:7d:7a:a1:14:92:c8:5d:1b:38: 94:bd:ec:e3:d2:61:b5:ab:9c:69:31:f1:82:84:af: a8:d4:25:1a:b9:87:ea:3f:af:75:f7:24:38:50:6d: b8:b9:e5:a0:16:1e:b4:d4:87:32:0a:3c:64:89:9c: 5b:fe:eb:4b:f6:48:e3:fd:ba:33:f4:22:09:27:9c: ad:6c:1f:6b:de:2b:32:5b:8f:00:6a:e5:60:75:c2: a6:88:b9:77:ec:2a:8b:23:3f:f5:c6:d0:6e:c5:c7: ab:a1:bf:82:99:21:24:2c:69:4d:1e:3c:74:19:30: 6f:6e:09:62:24:d5:47:6c:01:14:74:af:88:51:d0: 5e:61:d5:bb:d4:e6:65:08:c3:7e:92:f4:40:14:5d: d1:4c:d4:96:1f:42:2a:d5:eb:06:e9:06:25:74:84: 4c:d3:a2:c0:75:a3:3d:28:e9:e1:ae:65:27:60:d2: e6:e5:bc:1b:a0:9c:40:02:6a:4e:21:01:43:dc:1c: 0c:9e:e6:3f:bc:14:07:ff:36:12:4c:43:73:a6:7e: 1e:8a:2f:f4:43:f9:66:c6:7a:db:71:38:46:89:1d: b5:ee:97:d2:61:6d:1a:d4:8a:9e:4b:e5:9e:5f:1a: 65:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8C:96:E4:51:6C:99:D0:82:1D:B0:C4:AB:6A:23:1B:68:FE:02:62 X509v3 Authority Key Identifier: keyid:27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:bd:e9:90:82:bc:0d:fc:eb:5e:65:d2:9a:15:be:5c:af:aa: ee:f1:b6:f4:d4:06:48:6a:11:3e:3d:42:17:72:26:f5:94:b9: 6c:df:07:e1:5f:d4:06:3c:e8:b2:1b:41:a1:52:6a:ab:79:ca: 53:2c:f5:f8:12:f8:f9:ef:e1:65:21:1f:2b:e4:44:fd:65:fa: cb:f2:0a:86:00:0c:3c:0b:14:dc:d8:3c:5d:21:81:c1:81:5c: 16:22:f7:9f:70:99:05:f3:12:99:4f:03:a0:b8:52:cc:c9:a4: f7:24:d8:00:03:10:0c:56:6f:25:19:e3:66:73:78:65:54:53: 82:76:41:e2:10:a1:bd:84:77:53:5d:90:3a:99:be:bf:e2:9b: c3:88:b8:01:2a:28:c3:55:e9:41:ff:c4:4f:9b:4a:04:85:ee: 2b:ca:47:17:aa:fb:9f:7c:48:db:25:e5:73:ee:b5:b9:47:dd: 65:ca:66:f8:69:8e:6f:cb:de:db:c9:9c:c6:c7:77:ef:c0:15: 9c:72:19:02:48:ef:e0:cf:d4:4f:a9:3c:ab:09:be:97:ea:1d: 04:a4:61:62:60:f0:4f:2b:15:a6:75:35:e2:fa:91:e5:f8:40: fb:5e:b5:a4:df:de:d9:09:39:95:18:0d:5f:b5:dc:46:8f:26: 4e:af:b7:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZb6NZA5tINwf2aStRPyV2tqbP4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdFNDE3RERFMDA4NjA3QkNERDVBMzU5M0QzNDY4QTE5 NjcxNjUzODAeFw0yNjA3MjMxOTE4NTNaFw0yNjA3MjQyMTM2NTNaMDMxMTAvBgNV BAMTKEM3OEM5NkU0NTE2Qzk5RDA4MjFEQjBDNEFCNkEyMzFCNjhGRTAyNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCumC2syeRSAj/NuZFst/WzFGPq N316oRSSyF0bOJS97OPSYbWrnGkx8YKEr6jUJRq5h+o/r3X3JDhQbbi55aAWHrTU hzIKPGSJnFv+60v2SOP9ujP0IgknnK1sH2veKzJbjwBq5WB1wqaIuXfsKosjP/XG 0G7Fx6uhv4KZISQsaU0ePHQZMG9uCWIk1UdsARR0r4hR0F5h1bvU5mUIw36S9EAU XdFM1JYfQirV6wbpBiV0hEzTosB1oz0o6eGuZSdg0ublvBugnEACak4hAUPcHAye 5j+8FAf/NhJMQ3Omfh6KL/RD+WbGettxOEaJHbXul9JhbRrUip5L5Z5fGmVNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx4yW5FFsmdCCHbDEq2ojG2j+AmIwHwYDVR0j BBgwFoAUJ+QX3eAIYHvN1aNZPTRooZZxZTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjliOWJkMzgtMmVmYS00ZDRjLWE5NTYtNDI0OTJhM2U2MDAwLzAvMjdFNDE3RERF MDA4NjA3QkNERDVBMzU5M0QzNDY4QTE5NjcxNjUzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yN0U0MTdEREUwMDg2MDdCQ0RENUEzNTkzRDM0NjhBMTk2NzE2 NTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMjdFNDE3RERFMDA4NjA3QkNERDVBMzU5M0QzNDY4 QTE5NjcxNjUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+96ZCCvA38615l0poVvlyvqu7xtvTUBkhq ET49QhdyJvWUuWzfB+Ff1AY86LIbQaFSaqt5ylMs9fgS+Pnv4WUhHyvkRP1l+svy CoYADDwLFNzYPF0hgcGBXBYi959wmQXzEplPA6C4UszJpPck2AADEAxWbyUZ42Zz eGVUU4J2QeIQob2Ed1NdkDqZvr/im8OIuAEqKMNV6UH/xE+bSgSF7ivKRxeq+598 SNsl5XPutblH3WXKZvhpjm/L3tvJnMbHd+/AFZxyGQJI7+DP1E+pPKsJvpfqHQSk YWJg8E8rFaZ1NeL6keX4QPtetaTf3tkJOZUYDV+13EaPJk6vt3M= -----END CERTIFICATE-----Generated at Fri Jul 24 07:13:28 2026 by rpki-client