$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft File: 27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft (raw, json) Hash identifier: Rv5LgaLmZ9HxbNOkKySSD+qS3WNrMZi8m8oxllszkPw= Subject key identifier: 09:4C:8F:2F:A9:9F:98:A4:BC:21:1B:F9:B3:FD:93:4F:41:D8:A9:EA Authority key identifier: 27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6 Certificate issuer: /CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6 Certificate serial: 475717EE5951635BC78DCF4ABEDF96FE0443E33D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft Manifest number: BC Signing time: Mon 21 Sep 2026 00:01:31 +0000 Manifest this update: Sun 20 Sep 2026 23:56:31 +0000 Manifest next update: Tue 22 Sep 2026 00:04:31 +0000 Files and hashes: 1: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: VH+O4TH4eDJSI25JypJZ7rsLYdNS/p0NBbNxGChAQqQ=) 2: 27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl (hash: szNaCPgMLOAL9x5DNmLfwXgiUbUIXk+JvlbwswkwrGo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:57:17:ee:59:51:63:5b:c7:8d:cf:4a:be:df:96:fe:04:43:e3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6 Validity Not Before: Sep 20 23:56:31 2026 GMT Not After : Sep 22 00:04:31 2026 GMT Subject: CN=094C8F2FA99F98A4BC211BF9B3FD934F41D8A9EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ee:97:16:93:4d:d1:f0:a0:16:71:f1:55:9c: 16:ac:81:e9:f1:be:89:f6:41:78:3f:2e:e8:3f:9e: 69:19:20:f0:01:d2:89:5b:4c:44:b8:80:53:4f:6b: 29:98:45:31:d7:c0:8c:5e:51:05:51:72:4c:6c:33: 0d:e9:a1:64:1d:6e:e3:78:1a:4e:9c:e8:c8:85:f1: a7:b0:ad:dd:d5:cb:40:ab:a7:be:e1:8a:da:0f:6e: f9:dd:b5:7e:5b:e0:56:93:ce:78:4c:af:94:03:33: f3:ae:b2:04:28:40:64:eb:99:1f:23:3f:fb:40:04: 8f:a7:b7:cd:91:8e:0d:8f:37:86:69:28:fb:2e:cc: 11:28:c6:a5:e7:40:a0:46:e2:bc:62:55:9f:2c:3f: 83:36:8f:eb:00:ad:ea:7d:39:90:f2:2e:50:04:fc: 5e:49:af:26:9c:81:4d:3d:94:ef:fe:a1:e5:6f:6b: 8f:85:3c:30:cb:6d:46:58:0a:f4:fb:19:15:e5:02: 6f:cb:3d:e4:23:d7:57:56:b5:75:c5:b8:e2:84:40: c6:ea:8e:2a:ed:5d:df:f4:4a:d1:be:49:a9:1b:b0: b7:0e:0b:c3:20:96:7c:ce:91:da:d1:2f:75:f2:bf: 86:fc:b0:fe:7d:25:46:2f:c0:7e:13:77:cf:3b:a3: a9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4C:8F:2F:A9:9F:98:A4:BC:21:1B:F9:B3:FD:93:4F:41:D8:A9:EA X509v3 Authority Key Identifier: keyid:27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:d5:5d:40:78:69:82:2d:2c:34:72:b9:b0:ae:7c:89:08:9b: d1:3c:de:8f:e7:cf:ee:3b:da:24:13:e3:32:07:ae:15:1e:2c: ce:37:fd:53:0e:b6:d9:43:c5:e8:67:97:88:ea:15:0d:6a:52: 4b:dd:91:87:5e:bf:1b:dc:48:4f:94:b0:58:12:72:9f:52:fa: 59:0e:4e:df:a3:e9:4c:43:dd:76:97:3f:cc:b1:9e:9f:d0:f2: 34:65:82:2c:64:ec:14:84:f1:9c:9b:aa:d1:ed:cc:09:b4:b4: 2a:74:fc:21:3f:87:7a:4c:da:67:30:95:15:3d:0e:44:f7:61: 22:77:6c:60:db:b0:8f:18:83:9e:91:e7:1d:c1:69:0c:38:d8: c0:3b:26:23:21:79:df:7b:8a:be:ec:3c:0b:e1:c8:12:21:06: 79:42:66:86:2c:cd:4c:8e:35:92:d5:48:66:b3:ac:c3:4b:3a: fc:30:5f:e1:8a:8f:af:3c:ba:60:2c:8b:dc:1a:73:fa:34:f7: b5:ee:c0:0a:c1:57:af:6d:f8:25:79:93:c7:49:26:4d:75:ca: bd:67:00:0f:8f:74:01:a9:a3:83:c9:45:c8:a8:f5:4d:4b:4c: c6:b5:5b:ed:47:3d:6d:6e:6b:06:6b:cf:9b:8c:cf:d9:14:9c: 92:33:6b:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR1cX7llRY1vHjc9Kvt+W/gRD4z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdCMEEyRkEwMjgyNzA0MEU0REY2NTA2N0M3QTBENTBE QTUxNTRFNjAeFw0yNjA5MjAyMzU2MzFaFw0yNjA5MjIwMDA0MzFaMDMxMTAvBgNV BAMTKDA5NEM4RjJGQTk5Rjk4QTRCQzIxMUJGOUIzRkQ5MzRGNDFEOEE5RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7pcWk03R8KAWcfFVnBasgenx von2QXg/Lug/nmkZIPAB0olbTES4gFNPaymYRTHXwIxeUQVRckxsMw3poWQdbuN4 Gk6c6MiF8aewrd3Vy0Crp77hitoPbvndtX5b4FaTznhMr5QDM/OusgQoQGTrmR8j P/tABI+nt82Rjg2PN4ZpKPsuzBEoxqXnQKBG4rxiVZ8sP4M2j+sArep9OZDyLlAE /F5JryacgU09lO/+oeVva4+FPDDLbUZYCvT7GRXlAm/LPeQj11dWtXXFuOKEQMbq jirtXd/0StG+SakbsLcOC8MglnzOkdrRL3Xyv4b8sP59JUYvwH4Td887o6lTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCUyPL6mfmKS8IRv5s/2TT0HYqeowHwYDVR0j BBgwFoAUJ7Ci+gKCcEDk32UGfHoNUNpRVOYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M2ZjhjMGEtZTAzZi00MTQwLWJhMTYtODMzYWMyMjQxYWZiLzAvMjdCMEEyRkEw MjgyNzA0MEU0REY2NTA2N0M3QTBENTBEQTUxNTRFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yN0IwQTJGQTAyODI3MDQwRTRERjY1MDY3QzdBMEQ1MERBNTE1 NEU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M2ZjhjMGEtZTAzZi00MTQwLWJh MTYtODMzYWMyMjQxYWZiLzAvMjdCMEEyRkEwMjgyNzA0MEU0REY2NTA2N0M3QTBE NTBEQTUxNTRFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjVXUB4aYItLDRyubCufIkIm9E83o/nz+47 2iQT4zIHrhUeLM43/VMOttlDxehnl4jqFQ1qUkvdkYdevxvcSE+UsFgScp9S+lkO Tt+j6UxD3XaXP8yxnp/Q8jRlgixk7BSE8ZybqtHtzAm0tCp0/CE/h3pM2mcwlRU9 DkT3YSJ3bGDbsI8Yg56R5x3BaQw42MA7JiMhed97ir7sPAvhyBIhBnlCZoYszUyO NZLVSGazrMNLOvwwX+GKj688umAsi9wac/o097XuwArBV69t+CV5k8dJJk11yr1n AA+PdAGpo4PJRcio9U1LTMa1W+1HPW1uawZrz5uMz9kUnJIza2o= -----END CERTIFICATE-----Generated at Mon Sep 21 17:57:58 2026 by rpki-client