$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft File: CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft (raw, json) Hash identifier: uLhBTQNcf0nWpHWgwG2V1P5jtef8vdSqULx9p5VQ/8I= Subject key identifier: 15:41:00:EB:A1:70:44:AA:A2:FD:EB:38:73:DC:C1:D1:56:AC:AD:A9 Authority key identifier: CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D Certificate issuer: /CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D Certificate serial: 5C4F777663C47E68AE70542BC98C2B03F04875C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 17:47:58 +0000 Manifest this update: Wed 23 Sep 2026 17:42:58 +0000 Manifest next update: Thu 24 Sep 2026 18:15:58 +0000 Files and hashes: 1: 3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (hash: 2+4lQdjwQAe85kVWzjTaO1AsvRqx5WYrEbUSKbxLW0A=) 2: CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl (hash: Z3b61mtDjrKoJmEf9PpQwjE5UUZngT2MksvPw2T9ZxI=) 3: 3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa (hash: uXy9b8XhpbesCCoDWjd2NVNJTQEIt1Rzumg6PbPcPrA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:4f:77:76:63:c4:7e:68:ae:70:54:2b:c9:8c:2b:03:f0:48:75:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D Validity Not Before: Sep 23 17:42:58 2026 GMT Not After : Sep 24 18:15:58 2026 GMT Subject: CN=154100EBA17044AAA2FDEB3873DCC1D156ACADA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:31:93:42:3a:06:84:de:40:98:f7:71:29:87: 6b:7f:db:bc:31:42:cb:ec:60:17:7c:4e:36:b4:a3: b0:fe:1f:dc:3e:b0:86:9f:ca:9a:46:85:bb:69:cd: 27:26:ea:38:f6:8b:65:7f:1c:0b:4e:cf:b1:20:c2: ae:39:05:1f:9b:a6:c8:c1:ac:a1:ea:18:6e:e9:8b: 38:ec:e9:9c:36:cb:76:14:23:33:d9:2a:22:cd:ae: 24:4a:d4:b0:d8:31:c4:10:17:46:33:cc:12:1c:ca: dc:0b:c1:c1:d9:5b:9c:a7:45:90:a4:1d:68:66:ce: 4b:a2:e3:25:2f:9a:3a:c2:b9:38:a4:bf:d8:40:58: 79:e2:4a:fa:c7:d9:e4:aa:28:3a:6c:59:2e:c8:f4: 4f:b2:14:75:98:c0:1c:28:b2:6a:30:cd:3b:78:46: 98:e0:96:ea:61:68:9a:ed:6c:55:36:9e:b2:81:21: d2:fc:54:9a:e4:cc:c5:c1:ba:c6:b4:96:8b:58:4e: 14:98:e0:37:fc:c6:1d:15:6f:04:4b:c3:19:95:ca: 82:61:c6:a5:98:fc:1b:b9:b8:41:f3:46:14:1f:2b: 44:ff:0e:a9:f9:de:3b:00:74:bf:2d:14:c7:13:79: 3b:dd:ac:15:c5:a2:a1:95:e8:18:b5:c0:e0:8f:b2: 20:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:41:00:EB:A1:70:44:AA:A2:FD:EB:38:73:DC:C1:D1:56:AC:AD:A9 X509v3 Authority Key Identifier: keyid:CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ed:9d:eb:00:7b:a2:44:08:43:9b:7e:ae:21:b5:f9:0c:05: 3e:e6:52:68:2c:20:89:b6:41:12:22:98:32:fc:e2:04:e8:be: d4:50:cc:76:c8:2c:05:07:27:bd:93:5a:5f:f0:4e:92:0a:5d: 0f:9e:15:1c:d4:10:dd:d8:52:68:b1:af:bc:43:b3:9e:6a:13: 2f:0c:14:54:af:e9:80:e1:c0:33:e1:16:b0:5f:cf:38:38:43: 42:4d:99:ce:1f:72:22:5a:b3:66:7c:86:80:89:1a:ea:25:4c: 95:db:b2:52:aa:11:fc:5f:ca:37:7c:ba:47:f3:37:b3:db:1c: 5d:14:5d:f2:4e:99:ad:23:87:63:e7:63:53:9d:ae:3c:a3:52: d7:ae:4d:31:c3:9a:2c:10:69:91:63:da:21:1c:3c:3b:a5:fa: 0e:a1:af:43:67:b0:62:2a:b6:a9:f0:6d:c3:99:e8:5e:59:6d: c7:88:7a:d6:00:da:5d:2c:ca:ba:66:09:c7:42:52:15:b2:7e: a6:d6:22:cd:99:dd:c7:77:6b:78:fa:97:02:00:b9:26:03:ab: 21:db:e8:38:f6:71:d4:1f:8e:7b:44:44:da:62:86:32:ba:af: 50:ff:28:47:44:b7:60:f4:79:90:c5:78:97:f5:cc:9f:01:f9: 73:a2:44:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXE93dmPEfmiucFQryYwrA/BIdcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyN0MzRTUzQzcyN0VDNjEyMzhEMUUyQzFFMzUzNTQw Q0VFQjc5RDAeFw0yNjA5MjMxNzQyNThaFw0yNjA5MjQxODE1NThaMDMxMTAvBgNV BAMTKDE1NDEwMEVCQTE3MDQ0QUFBMkZERUIzODczRENDMUQxNTZBQ0FEQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgMZNCOgaE3kCY93Eph2t/27wx QsvsYBd8Tja0o7D+H9w+sIafyppGhbtpzScm6jj2i2V/HAtOz7Egwq45BR+bpsjB rKHqGG7pizjs6Zw2y3YUIzPZKiLNriRK1LDYMcQQF0YzzBIcytwLwcHZW5ynRZCk HWhmzkui4yUvmjrCuTikv9hAWHniSvrH2eSqKDpsWS7I9E+yFHWYwBwosmowzTt4 RpjgluphaJrtbFU2nrKBIdL8VJrkzMXBusa0lotYThSY4Df8xh0VbwRLwxmVyoJh xqWY/Bu5uEHzRhQfK0T/Dqn53jsAdL8tFMcTeTvdrBXFoqGV6Bi1wOCPsiBvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFUEA66FwRKqi/es4c9zB0VasrakwHwYDVR0j BBgwFoAUyifD5TxyfsYSONHiweNTVAzut50wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2M4ZDRlZTItNTQ5ZS00MTYwLThkNmYtODc3MzBlOGFlNWUyLzAvQ0EyN0MzRTUz QzcyN0VDNjEyMzhEMUUyQzFFMzUzNTQwQ0VFQjc5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTI3QzNFNTNDNzI3RUM2MTIzOEQxRTJDMUUzNTM1NDBDRUVC NzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2M4ZDRlZTItNTQ5ZS00MTYwLThk NmYtODc3MzBlOGFlNWUyLzAvQ0EyN0MzRTUzQzcyN0VDNjEyMzhEMUUyQzFFMzUz NTQwQ0VFQjc5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/tnesAe6JECEObfq4htfkMBT7mUmgsIIm2 QRIimDL84gTovtRQzHbILAUHJ72TWl/wTpIKXQ+eFRzUEN3YUmixr7xDs55qEy8M FFSv6YDhwDPhFrBfzzg4Q0JNmc4fciJas2Z8hoCJGuolTJXbslKqEfxfyjd8ukfz N7PbHF0UXfJOma0jh2PnY1OdrjyjUteuTTHDmiwQaZFj2iEcPDul+g6hr0NnsGIq tqnwbcOZ6F5ZbceIetYA2l0syrpmCcdCUhWyfqbWIs2Z3cd3a3j6lwIAuSYDqyHb 6Dj2cdQfjntERNpihjK6r1D/KEdEt2D0eZDFeJf1zJ8B+XOiRCQ= -----END CERTIFICATE-----Generated at Thu Sep 24 02:34:46 2026 by rpki-client