$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft File: 27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft (raw, json) Hash identifier: wfmCQCNV74adxux6ngall8oVXejYUz5uCjNIA+TGj4Y= Subject key identifier: CE:B6:56:61:61:41:B2:4B:E3:B7:B6:2B:AC:83:02:A2:3C:73:81:0A Authority key identifier: 27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6 Certificate issuer: /CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6 Certificate serial: DF198DD92892FD50DD22FD00A411E4C17AED26 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 10:40:03 +0000 Manifest this update: Tue 28 Jul 2026 10:35:03 +0000 Manifest next update: Wed 29 Jul 2026 12:41:03 +0000 Files and hashes: 1: 27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl (hash: mcQw+ax9D6GRDh5u4n0QdNjjnT9K63VFkrGL5PZ8elA=) 2: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: VH+O4TH4eDJSI25JypJZ7rsLYdNS/p0NBbNxGChAQqQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: df:19:8d:d9:28:92:fd:50:dd:22:fd:00:a4:11:e4:c1:7a:ed:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6 Validity Not Before: Jul 28 10:35:03 2026 GMT Not After : Jul 29 12:41:03 2026 GMT Subject: CN=CEB656616141B24BE3B7B62BAC8302A23C73810A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:7b:03:9f:0d:c2:2b:b3:60:fd:c2:e2:8e:99: 29:9f:8d:77:7e:fd:f6:7f:f7:df:2e:36:26:05:b3: c9:67:d4:48:dc:dd:14:b2:dd:eb:e5:4e:cf:ec:a5: 14:2f:40:70:91:b4:7c:44:b6:37:65:03:54:fc:b2: 4a:b6:e7:9f:4e:a0:32:dc:59:0d:9d:58:32:65:85: dd:88:11:3f:0d:cc:bc:cf:85:9b:c2:a5:1b:05:57: 55:31:a1:a5:4e:c7:bd:a0:28:6c:09:17:ab:99:58: bd:aa:70:7f:6a:68:d4:e9:ad:e5:17:e3:70:18:8e: c4:60:07:bb:21:a0:2a:27:fe:86:45:30:73:f8:de: a7:2f:96:0c:0b:a6:11:84:4a:df:98:3d:3f:f2:43: c6:95:80:a1:51:85:b2:8e:bd:34:02:4b:8e:46:4a: ed:e6:54:39:02:62:28:71:16:3b:1b:09:00:70:92: fb:39:62:63:66:14:73:ee:58:c2:c0:dc:64:c8:09: 12:7a:4f:7f:ca:6f:49:a3:8e:fc:b3:3c:5c:af:20: aa:8b:ca:1b:98:53:90:b6:2a:d8:cd:da:50:43:3e: 57:5e:df:08:60:43:1e:4c:e2:68:a4:51:d3:52:cb: d8:3e:6a:ca:72:22:92:cc:ba:15:65:bf:5e:0f:4c: 9f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B6:56:61:61:41:B2:4B:E3:B7:B6:2B:AC:83:02:A2:3C:73:81:0A X509v3 Authority Key Identifier: keyid:27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:77:81:b0:34:34:65:c4:78:3a:8b:3d:29:82:77:33:50:59: 97:80:a5:b0:14:29:13:a2:58:0b:a6:ac:12:04:56:73:71:9f: 91:1f:0c:04:2a:20:5b:6c:f6:e0:44:2f:b2:a8:ae:9e:2b:ac: 90:fc:a1:4b:92:d6:f0:1e:23:27:29:dc:13:1c:8f:34:1c:32: 7f:25:f4:df:83:20:a7:ed:ce:0f:7c:49:66:89:43:c7:52:9c: 7e:18:fb:2e:65:97:86:c1:3b:fc:f2:f3:ed:82:be:78:dd:5f: 49:18:41:d5:78:b9:a2:a5:a8:36:19:6a:53:58:d3:db:3e:fe: fa:a4:c8:18:be:57:92:39:aa:e2:28:b0:88:8b:c0:e3:11:d3: 08:54:88:73:a8:18:a0:a1:65:7a:55:f2:49:64:df:1a:b0:dd: 4d:4b:c0:d0:e5:72:e9:34:78:b2:f0:e8:e0:8a:dc:96:d9:90: b3:a7:db:ff:14:ef:75:d9:e3:65:91:21:2d:31:2a:0c:67:96: f4:78:05:25:46:c6:f4:4b:93:f9:72:18:c0:d4:c3:96:ed:de: a6:be:45:e2:a3:26:a3:cf:76:be:17:0d:cd:6f:72:af:bd:2e: a3:68:bc:f4:c3:96:d7:4a:a9:44:10:ac:3c:f7:06:ea:aa:8f: 5f:cf:1d:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAN8Zjdkokv1Q3SL9AKQR5MF67SYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdCMEEyRkEwMjgyNzA0MEU0REY2NTA2N0M3QTBENTBE QTUxNTRFNjAeFw0yNjA3MjgxMDM1MDNaFw0yNjA3MjkxMjQxMDNaMDMxMTAvBgNV BAMTKENFQjY1NjYxNjE0MUIyNEJFM0I3QjYyQkFDODMwMkEyM0M3MzgxMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2ewOfDcIrs2D9wuKOmSmfjXd+ /fZ/998uNiYFs8ln1Ejc3RSy3evlTs/spRQvQHCRtHxEtjdlA1T8skq2559OoDLc WQ2dWDJlhd2IET8NzLzPhZvCpRsFV1UxoaVOx72gKGwJF6uZWL2qcH9qaNTpreUX 43AYjsRgB7shoCon/oZFMHP43qcvlgwLphGESt+YPT/yQ8aVgKFRhbKOvTQCS45G Su3mVDkCYihxFjsbCQBwkvs5YmNmFHPuWMLA3GTICRJ6T3/Kb0mjjvyzPFyvIKqL yhuYU5C2KtjN2lBDPlde3whgQx5M4mikUdNSy9g+aspyIpLMuhVlv14PTJ+jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzrZWYWFBskvjt7YrrIMCojxzgQowHwYDVR0j BBgwFoAUJ7Ci+gKCcEDk32UGfHoNUNpRVOYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M2ZjhjMGEtZTAzZi00MTQwLWJhMTYtODMzYWMyMjQxYWZiLzAvMjdCMEEyRkEw MjgyNzA0MEU0REY2NTA2N0M3QTBENTBEQTUxNTRFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yN0IwQTJGQTAyODI3MDQwRTRERjY1MDY3QzdBMEQ1MERBNTE1 NEU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M2ZjhjMGEtZTAzZi00MTQwLWJh MTYtODMzYWMyMjQxYWZiLzAvMjdCMEEyRkEwMjgyNzA0MEU0REY2NTA2N0M3QTBE NTBEQTUxNTRFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGt3gbA0NGXEeDqLPSmCdzNQWZeApbAUKROi WAumrBIEVnNxn5EfDAQqIFts9uBEL7Korp4rrJD8oUuS1vAeIycp3BMcjzQcMn8l 9N+DIKftzg98SWaJQ8dSnH4Y+y5ll4bBO/zy8+2CvnjdX0kYQdV4uaKlqDYZalNY 09s+/vqkyBi+V5I5quIosIiLwOMR0whUiHOoGKChZXpV8klk3xqw3U1LwNDlcuk0 eLLw6OCK3JbZkLOn2/8U73XZ42WRIS0xKgxnlvR4BSVGxvRLk/lyGMDUw5bt3qa+ ReKjJqPPdr4XDc1vcq+9LqNovPTDltdKqUQQrDz3Buqqj1/PHQ4= -----END CERTIFICATE-----Generated at Tue Jul 28 23:36:22 2026 by rpki-client