
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft
File: 27E417DDE008607BCDD5A3593D3468A196716538.mft (raw, json)
Hash identifier: K7Ybe9F7h8hs1FrWrkcdg32H0LkO2skU4OPgRR0BMN0=
Subject key identifier: 41:DC:3C:27:5F:BC:01:9D:48:CD:8B:44:E8:CB:6A:8E:77:FF:8D:FC
Authority key identifier: 27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38
Certificate issuer: /CN=27E417DDE008607BCDD5A3593D3468A196716538
Certificate serial: 70889BBA8AC116B707FC1CFB7192929AD2922471
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 00:39:24 +0000
Manifest this update: Wed 13 May 2026 00:34:24 +0000
Manifest next update: Thu 14 May 2026 01:22:24 +0000
Files and hashes: 1: 27E417DDE008607BCDD5A3593D3468A196716538.crl (hash: 8yKQxiawpZzfEjitKVDbV8+Pd67nibgX/cjbVNkQ+w4=)
2: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: 6rYbBTfQu9Ye+jxQ58mCILFsaxt3rc45oOO8Pu0AOKM=)
3: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: 1bOoTdfrvDcIKLgnFWnuVyWYZ52c2xuJTvaGjJbRj4Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl
rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:88:9b:ba:8a:c1:16:b7:07:fc:1c:fb:71:92:92:9a:d2:92:24:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27E417DDE008607BCDD5A3593D3468A196716538
Validity
Not Before: May 13 00:34:24 2026 GMT
Not After : May 14 01:22:24 2026 GMT
Subject: CN=41DC3C275FBC019D48CD8B44E8CB6A8E77FF8DFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:34:e5:cf:93:e3:5f:3d:da:b0:9e:e2:98:81:
04:79:9a:1e:c7:35:05:a3:4d:40:31:c4:b7:cc:08:
eb:22:ac:6f:ac:13:9f:d9:c3:c4:b5:82:83:71:aa:
37:82:84:7d:d1:51:27:d6:6f:4c:d1:f4:52:24:a2:
1e:54:4d:df:eb:2b:51:7d:36:3d:48:1a:b1:60:85:
7a:3a:ed:54:ff:43:d4:65:c7:02:b0:dc:f4:da:5f:
31:10:c8:35:2f:c2:29:2f:f2:15:8d:bf:95:b9:e3:
3e:8a:d4:f7:2a:3e:87:58:ed:ee:f8:53:06:9b:06:
8d:fa:fa:0a:67:42:86:29:b7:59:7a:70:f0:c1:84:
ce:fb:9b:98:e9:a1:2b:d5:1f:60:be:9c:b3:13:6f:
d9:47:51:90:b4:1f:ac:67:1f:0b:e8:a2:13:62:55:
9d:e2:a9:4c:6c:e9:df:86:ec:75:96:c1:22:f4:96:
43:9e:a2:aa:6d:44:7a:ee:9d:b4:31:64:1a:84:54:
00:4c:cb:aa:31:51:91:c7:25:ab:2f:a1:76:74:ce:
b5:e1:10:f3:72:71:3e:cf:16:f0:4d:0d:b4:c5:4a:
90:1d:7d:97:02:bb:ea:d5:74:56:8c:e4:9f:9d:bf:
a1:fd:55:90:c6:14:48:48:04:7c:f1:d4:fa:ee:23:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DC:3C:27:5F:BC:01:9D:48:CD:8B:44:E8:CB:6A:8E:77:FF:8D:FC
X509v3 Authority Key Identifier:
keyid:27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:09:41:18:f7:68:cc:3c:7c:45:be:86:38:89:2e:36:89:ad:
be:d9:55:d3:17:84:82:c5:06:f2:80:94:98:5a:3d:a5:b8:8e:
8a:f4:44:c5:d5:8d:1c:4e:65:ca:bf:f6:bc:5b:c9:ae:bc:51:
98:d5:cc:9f:c7:48:a5:3a:17:d8:4d:b0:9f:8e:78:b9:15:1e:
47:e9:f6:b3:af:43:d8:a8:a3:7e:cc:72:82:1d:1a:a2:de:81:
9a:73:0d:a3:8a:93:76:5e:00:17:bc:db:34:f1:ba:6b:2b:44:
ae:f8:2f:06:50:64:43:76:ed:1c:33:54:d2:fd:fb:1e:a0:28:
d7:8a:93:95:ea:97:aa:5d:fd:59:b9:cb:92:53:48:5f:7d:1b:
ec:17:a4:32:9d:b0:89:55:1d:e5:7b:77:4f:c5:14:67:85:17:
b8:f0:4b:5e:11:24:c0:82:6d:0a:8f:10:d0:ae:98:ef:01:a0:
de:e6:20:4c:51:0b:e4:6a:42:ef:c0:6c:6e:b9:fc:b4:b6:8d:
62:e1:79:8b:4f:5f:fe:1e:6c:69:2b:76:04:23:00:4d:6c:d2:
62:51:42:22:42:44:26:93:40:58:dd:9a:23:72:3e:1e:3d:3c:
5e:9b:c0:46:28:07:7f:08:38:08:e9:7c:35:4c:a0:23:e9:11:
c5:43:62:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:51 2026 by rpki-client