
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft
File: CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft (raw, json)
Hash identifier: UitGTtZFlAwK/gyqHvSgAsv/2kM7S3k37167VQ89zXA=
Subject key identifier: 93:B8:C7:56:B6:F0:34:80:B0:3E:A9:6F:EA:82:67:47:3E:27:A2:F4
Authority key identifier: CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D
Certificate issuer: /CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D
Certificate serial: 367CE710D937A4B4B9BECECBEEADC97A497ACD5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 02:47:43 +0000
Manifest this update: Fri 24 Jul 2026 02:42:43 +0000
Manifest next update: Sat 25 Jul 2026 05:15:43 +0000
Files and hashes: 1: 3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (hash: 2+4lQdjwQAe85kVWzjTaO1AsvRqx5WYrEbUSKbxLW0A=)
2: CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl (hash: uYT3s0dFbHU/r10+ScvWeK5fipipqgXen9FYVSnbB5k=)
3: 3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa (hash: uXy9b8XhpbesCCoDWjd2NVNJTQEIt1Rzumg6PbPcPrA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl
rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:7c:e7:10:d9:37:a4:b4:b9:be:ce:cb:ee:ad:c9:7a:49:7a:cd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D
Validity
Not Before: Jul 24 02:42:43 2026 GMT
Not After : Jul 25 05:15:43 2026 GMT
Subject: CN=93B8C756B6F03480B03EA96FEA8267473E27A2F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b8:28:2b:3f:66:92:f3:3d:69:c4:3d:a7:16:
e1:bb:22:5f:3b:08:a6:34:4e:a4:17:7b:65:74:bb:
ab:b0:c4:79:03:12:11:3d:04:aa:f9:f1:be:2d:83:
ff:95:f5:db:6b:1c:57:84:51:57:75:39:7d:b1:e1:
50:2a:c7:58:3c:c1:60:32:46:f1:02:6d:a5:e1:7e:
7b:d7:02:f0:22:d7:84:4c:de:31:05:8a:33:c9:4b:
10:e3:87:9a:13:b2:26:06:59:2a:85:fd:d7:2a:70:
2e:d7:32:44:8b:cd:8f:93:f3:ca:e2:49:70:98:71:
df:c1:99:ad:df:00:09:7c:de:9c:c5:93:5f:18:43:
d0:89:45:01:1e:b9:5f:98:75:ec:cf:67:90:16:61:
e7:df:cc:01:46:22:52:21:16:60:f2:f3:ef:cb:63:
48:6f:8c:08:9c:36:ad:36:e6:38:e0:ad:b9:73:03:
ff:fc:dd:6e:1b:cd:e2:49:f6:13:df:82:75:ed:81:
80:f0:85:d5:94:7a:a1:11:78:68:0e:28:0a:76:ac:
3e:35:1e:28:27:76:16:16:de:d7:62:f2:c0:ce:34:
38:88:d7:8b:d7:a2:0b:db:ba:4a:7d:bc:ec:b1:dc:
97:10:92:6c:20:ba:17:d3:38:dd:ff:27:95:0c:04:
63:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B8:C7:56:B6:F0:34:80:B0:3E:A9:6F:EA:82:67:47:3E:27:A2:F4
X509v3 Authority Key Identifier:
keyid:CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b5:ed:8d:6f:cc:44:f7:43:fa:79:0f:c4:19:f1:b2:6f:55:
4e:1e:71:97:a9:e2:83:50:bf:c0:89:06:7c:8d:26:91:e3:a8:
df:dc:d7:51:8f:a8:30:46:5f:ac:1b:e0:99:a3:b0:b4:a4:a3:
b6:cf:9c:ff:3f:dc:2f:1f:79:bd:d3:1a:0b:af:50:0d:01:1e:
a7:0a:27:29:ab:48:49:94:6a:b4:e6:5a:6f:b2:08:a4:b7:98:
d7:4b:d9:05:30:4b:f1:18:f1:00:25:20:da:4f:77:76:29:3a:
30:59:3d:60:b8:75:81:50:60:c7:b8:20:e5:cd:90:99:23:54:
48:75:c7:98:f8:6a:d1:4b:a7:41:18:ac:aa:fb:b8:96:b0:b8:
2f:1f:b2:06:65:c8:19:61:c6:ee:89:60:34:99:f6:a2:fc:0c:
3a:7e:ad:c5:5a:9b:75:d9:18:53:c0:53:a7:fc:34:2e:a3:5e:
19:1e:8c:ee:fc:aa:62:d3:f5:f1:e9:b9:55:f9:36:02:77:98:
8c:45:bb:cf:37:26:d9:44:0b:38:6e:1e:cb:39:56:9c:da:09:
f7:9f:d9:6e:63:df:9d:70:c3:c6:4d:e9:21:e0:94:2d:a4:ca:
2d:09:26:c9:16:9a:03:d9:b6:fc:14:eb:ae:00:57:6a:6e:ca:
cf:ca:df:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:55 2026 by rpki-client