
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
File: 27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft (raw, json)
Hash identifier: 3qfyHBO1FCzGLvzAkTp9wAJ5To54idHfdLf0RKoq260=
Subject key identifier: 24:9B:9B:53:1E:54:79:76:4A:D0:81:09:72:A8:9E:7B:78:87:94:8C
Authority key identifier: 27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6
Certificate issuer: /CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6
Certificate serial: 555BF2A1D418375277E59FC477DB4BC92D04A408
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
Manifest number: 38
Signing time: Fri 12 Jun 2026 16:35:16 +0000
Manifest this update: Fri 12 Jun 2026 16:30:16 +0000
Manifest next update: Sat 13 Jun 2026 18:48:16 +0000
Files and hashes: 1: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: VH+O4TH4eDJSI25JypJZ7rsLYdNS/p0NBbNxGChAQqQ=)
2: 27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl (hash: OcTNEnrl8piOBynuWk7OwmjoEVl20+sXt3FtjGmR5Ao=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl
rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 18:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:5b:f2:a1:d4:18:37:52:77:e5:9f:c4:77:db:4b:c9:2d:04:a4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6
Validity
Not Before: Jun 12 16:30:16 2026 GMT
Not After : Jun 13 18:48:16 2026 GMT
Subject: CN=249B9B531E5479764AD0810972A89E7B7887948C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9a:91:6e:87:7b:c1:d9:b1:86:4e:b7:8d:a7:
0b:01:80:13:c1:bf:46:d9:fb:0d:b5:a7:a8:e4:53:
ab:00:cd:80:19:43:4c:f6:dc:41:59:e1:a0:37:4b:
e6:0e:43:c2:8c:00:2b:77:bc:46:f5:fa:13:c5:35:
d0:50:15:3d:27:66:3a:b1:e6:a0:fe:7c:43:36:e9:
2b:15:23:1b:c7:45:14:d6:96:2d:7a:61:67:51:ed:
d5:be:aa:90:7c:3b:33:a2:12:b6:b2:a2:eb:7b:3d:
38:0e:0b:9b:65:9b:7a:96:a2:6c:52:a1:75:80:87:
33:4e:fd:76:70:57:1d:27:3d:34:3a:c9:6f:83:bc:
32:68:e9:6c:42:98:5d:c3:f4:44:0a:6f:71:e0:12:
d4:1e:2d:87:9f:f1:33:db:1b:fc:8e:02:68:2b:68:
ce:50:2a:ea:a6:a1:d1:3d:9a:d6:8f:56:1d:aa:e5:
76:d8:72:aa:94:0a:d4:e0:0d:71:79:40:37:a1:55:
2f:7e:30:3c:a7:85:f6:0f:b8:bc:68:8d:05:cc:09:
80:db:28:d3:32:c6:e2:b1:a0:ed:11:73:33:80:38:
c5:79:b6:6b:d1:dc:fd:b7:88:8f:5c:28:af:a3:93:
6a:d4:5a:76:d4:43:16:91:bd:51:13:0d:5a:07:8a:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9B:9B:53:1E:54:79:76:4A:D0:81:09:72:A8:9E:7B:78:87:94:8C
X509v3 Authority Key Identifier:
keyid:27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d2:fa:5f:d8:72:25:b3:3d:c9:c5:5a:3f:87:46:36:f0:9f:
3b:c7:c6:3e:e3:8b:47:bc:e8:fe:bf:9f:34:bb:1f:01:9b:ea:
d6:6f:40:59:a1:02:92:2b:3e:44:9d:4b:fd:ca:68:36:45:31:
48:db:6f:30:6d:bd:2a:74:38:3a:d3:b0:23:10:6c:08:1e:66:
1c:4c:d2:98:2d:56:83:23:f1:10:83:e5:1a:3e:d6:b0:35:80:
17:93:70:f0:fc:73:83:12:a2:26:df:2e:65:97:8e:a8:c7:f3:
b0:14:27:b8:f2:29:c7:67:da:46:46:c6:77:7c:cd:93:01:84:
17:18:31:7b:91:21:83:35:3f:8b:a0:d5:17:dc:d4:38:26:bd:
53:b4:cb:be:fe:8c:5d:d7:bc:05:9f:f1:d1:bf:48:a7:bf:d7:
d0:38:da:c4:60:ee:83:97:2c:8d:86:87:09:58:2d:6c:68:f3:
bc:78:8f:bb:ee:96:0b:ed:2b:59:10:8a:7d:36:35:8b:e6:e1:
9a:ba:e2:44:e7:8c:b5:9f:94:9a:2f:35:ef:0c:1d:47:40:ca:
5d:c8:8f:4b:ee:a8:83:71:bb:60:84:0c:83:bb:9e:be:a1:e9:
fc:96:23:b3:31:21:7f:e8:07:c6:4b:cc:09:89:46:6c:74:55:
3f:b3:59:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:38 2026 by rpki-client