$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft File: CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft (raw, json) Hash identifier: ln6+l2sh1LOejQblLN3tQEeLEgbkJlH2s8FYyPnZBZs= Subject key identifier: 6C:9D:44:B3:CC:38:99:D9:16:33:8B:4C:15:07:F9:88:D3:9C:19:5E Authority key identifier: CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D Certificate issuer: /CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D Certificate serial: 574074F03CF3B8906FE8413D0846EA7BB0C189BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:06:18 +0000 Manifest this update: Tue 12 May 2026 10:01:18 +0000 Manifest next update: Wed 13 May 2026 12:12:18 +0000 Files and hashes: 1: CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl (hash: eMar7Dh9kfUV/clkGLlGUX2UUOp8IP0pYLmBNRFMjfA=) 2: 3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa (hash: uXy9b8XhpbesCCoDWjd2NVNJTQEIt1Rzumg6PbPcPrA=) 3: 3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (hash: 2+4lQdjwQAe85kVWzjTaO1AsvRqx5WYrEbUSKbxLW0A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:40:74:f0:3c:f3:b8:90:6f:e8:41:3d:08:46:ea:7b:b0:c1:89:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D Validity Not Before: May 12 10:01:18 2026 GMT Not After : May 13 12:12:18 2026 GMT Subject: CN=6C9D44B3CC3899D916338B4C1507F988D39C195E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a1:69:54:d0:59:87:d8:7b:f4:41:e5:80:3d: 7c:7b:71:f9:d5:73:07:6c:4d:dd:83:85:c2:1b:19: 69:2b:cc:90:e3:35:57:89:51:1c:de:f1:46:c1:e5: ef:b4:f8:89:93:c9:c5:52:97:09:5e:6f:fd:05:84: 66:12:8c:6c:20:e0:36:28:2d:9e:b3:3b:96:c2:18: 66:b6:a2:81:bb:6d:fc:a0:8a:61:3d:7a:86:cf:54: 96:f7:2d:fe:00:fa:83:51:6c:50:2f:7f:f1:90:31: 66:ef:b5:45:74:9d:d3:e6:7b:86:30:15:c6:7a:f5: 3b:6e:10:2a:99:96:ad:03:17:39:02:ec:74:2f:64: 5c:7e:e9:79:c1:9d:5f:3a:e2:85:a8:c0:df:7b:63: 1c:3b:cc:70:ed:8d:6c:c3:a4:c1:9f:da:52:6c:9b: a8:12:da:50:c1:7b:5c:a5:27:6b:cc:aa:09:49:8b: 19:0f:d4:14:ed:a2:f4:8b:1a:d5:4b:50:d3:0c:06: dc:09:d9:cc:1a:ee:b4:6c:2e:a0:37:2d:8d:33:4e: 52:10:99:8e:50:f1:58:de:de:bb:7a:68:29:75:7d: 63:cc:92:85:11:38:8b:d9:c2:5a:5d:1a:4e:f8:d9: 2b:a4:79:33:06:56:94:a6:f1:03:d4:38:95:81:55: 36:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9D:44:B3:CC:38:99:D9:16:33:8B:4C:15:07:F9:88:D3:9C:19:5E X509v3 Authority Key Identifier: keyid:CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c7:c9:0d:c3:df:cf:4e:82:1f:61:ab:c5:b6:c0:5c:ab:9b: 3e:54:40:74:bf:9f:2a:5b:2f:4f:25:6c:70:3a:70:04:cd:3c: 67:de:26:4e:b2:be:9e:99:10:c8:3c:5b:1d:ba:fa:85:14:49: 03:42:81:cf:89:67:ec:e1:2f:95:1b:cd:bd:8c:d3:5e:41:6a: c1:bc:27:c4:68:2d:2d:b9:c5:6a:ac:7a:a3:6b:97:fa:b8:f4: f5:84:15:f7:a9:a3:2c:20:34:d2:48:10:0f:10:87:b4:fd:d4: 47:b1:36:1a:a9:cf:a4:d0:8f:6f:ef:15:ae:ec:a3:3d:37:ec: 09:bc:61:22:fa:e7:62:92:98:a4:75:d3:cc:d1:f7:32:bf:0f: 72:f0:e2:75:fe:0f:ee:a0:85:24:a0:68:82:a5:a2:99:90:2f: a1:fb:2a:ed:56:11:1c:e8:c6:93:35:39:ef:2a:8d:fe:6c:0a: 81:f0:f4:8a:0c:9f:16:f9:66:cd:15:9c:21:0b:25:64:4b:d2: bc:52:f3:88:72:09:ea:48:87:ee:5c:5d:99:17:74:14:78:db: 1a:b3:80:63:cf:a8:1d:6b:bf:b5:be:dc:55:1c:81:2d:c2:57: 7e:39:05:d2:b9:98:c3:cc:16:3a:6f:04:b4:8e:be:8f:93:8a: 4a:ac:40:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV0B08DzzuJBv6EE9CEbqe7DBib0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyN0MzRTUzQzcyN0VDNjEyMzhEMUUyQzFFMzUzNTQw Q0VFQjc5RDAeFw0yNjA1MTIxMDAxMThaFw0yNjA1MTMxMjEyMThaMDMxMTAvBgNV BAMTKDZDOUQ0NEIzQ0MzODk5RDkxNjMzOEI0QzE1MDdGOTg4RDM5QzE5NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsoWlU0FmH2Hv0QeWAPXx7cfnV cwdsTd2DhcIbGWkrzJDjNVeJURze8UbB5e+0+ImTycVSlwleb/0FhGYSjGwg4DYo LZ6zO5bCGGa2ooG7bfygimE9eobPVJb3Lf4A+oNRbFAvf/GQMWbvtUV0ndPme4Yw FcZ69TtuECqZlq0DFzkC7HQvZFx+6XnBnV864oWowN97Yxw7zHDtjWzDpMGf2lJs m6gS2lDBe1ylJ2vMqglJixkP1BTtovSLGtVLUNMMBtwJ2cwa7rRsLqA3LY0zTlIQ mY5Q8Vje3rt6aCl1fWPMkoUROIvZwlpdGk742SukeTMGVpSm8QPUOJWBVTavAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbJ1Es8w4mdkWM4tMFQf5iNOcGV4wHwYDVR0j BBgwFoAUyifD5TxyfsYSONHiweNTVAzut50wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2M4ZDRlZTItNTQ5ZS00MTYwLThkNmYtODc3MzBlOGFlNWUyLzAvQ0EyN0MzRTUz QzcyN0VDNjEyMzhEMUUyQzFFMzUzNTQwQ0VFQjc5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTI3QzNFNTNDNzI3RUM2MTIzOEQxRTJDMUUzNTM1NDBDRUVC NzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2M4ZDRlZTItNTQ5ZS00MTYwLThk NmYtODc3MzBlOGFlNWUyLzAvQ0EyN0MzRTUzQzcyN0VDNjEyMzhEMUUyQzFFMzUz NTQwQ0VFQjc5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTHyQ3D389Ogh9hq8W2wFyrmz5UQHS/nypb L08lbHA6cATNPGfeJk6yvp6ZEMg8Wx26+oUUSQNCgc+JZ+zhL5Ubzb2M015BasG8 J8RoLS25xWqseqNrl/q49PWEFfepoywgNNJIEA8Qh7T91EexNhqpz6TQj2/vFa7s oz037Am8YSL652KSmKR108zR9zK/D3Lw4nX+D+6ghSSgaIKlopmQL6H7Ku1WERzo xpM1Oe8qjf5sCoHw9IoMnxb5Zs0VnCELJWRL0rxS84hyCepIh+5cXZkXdBR42xqz gGPPqB1rv7W+3FUcgS3CV345BdK5mMPMFjpvBLSOvo+TikqsQAs= -----END CERTIFICATE-----Generated at Tue May 12 22:56:33 2026 by rpki-client