
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.mft
File: 27A02CA4FEB6B2D7C98BE15935226321BC5082C3.mft (raw, json)
Hash identifier: vVDpsYF6XzOswbKMt4w851d01K0+hPyZ7xKG1PbERwk=
Subject key identifier: 67:DF:EF:1D:8D:B6:67:F9:6A:02:B5:21:F9:9E:5D:D8:29:CA:56:3C
Authority key identifier: 27:A0:2C:A4:FE:B6:B2:D7:C9:8B:E1:59:35:22:63:21:BC:50:82:C3
Certificate issuer: /CN=27A02CA4FEB6B2D7C98BE15935226321BC5082C3
Certificate serial: 0C66DB12A9F93407E0BAE0535FD43F2A587F8C2C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.mft
Manifest number: BD
Signing time: Sun 20 Sep 2026 09:28:55 +0000
Manifest this update: Sun 20 Sep 2026 09:23:55 +0000
Manifest next update: Mon 21 Sep 2026 13:08:55 +0000
Files and hashes: 1: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: ISamzj2GyfxCZEAngxKx/usD8wbe2PFgnEt/8aD0w6g=)
2: 27A02CA4FEB6B2D7C98BE15935226321BC5082C3.crl (hash: WZ4/wjbPotUc1tfv26E/oVLYLraBXCFA3iOidIY3mhg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.crl
rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 13:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:66:db:12:a9:f9:34:07:e0:ba:e0:53:5f:d4:3f:2a:58:7f:8c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27A02CA4FEB6B2D7C98BE15935226321BC5082C3
Validity
Not Before: Sep 20 09:23:55 2026 GMT
Not After : Sep 21 13:08:55 2026 GMT
Subject: CN=67DFEF1D8DB667F96A02B521F99E5DD829CA563C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:21:83:4a:c3:be:71:38:3c:a7:37:4a:08:
df:eb:24:0b:c8:de:78:13:2b:e0:a2:f2:8c:70:ba:
43:9d:be:b7:a4:d7:6d:7e:9a:20:ac:fe:2f:be:37:
55:1e:39:d4:ca:13:0a:db:3e:ad:7f:ab:d0:d2:55:
1b:c7:f8:f6:3b:18:b2:4e:0d:6d:ec:ac:f1:6a:54:
c4:44:fe:54:a4:81:0e:eb:d9:24:a3:de:64:4b:6a:
ae:a5:55:01:a3:2b:90:c9:72:ad:af:a0:36:97:dc:
4e:f0:d7:ef:a6:46:2d:c7:97:b8:f2:e7:b3:36:42:
73:77:6f:17:81:d3:7b:57:f2:3c:94:7c:52:0e:ee:
31:6e:2e:bf:4b:c1:57:9d:e8:cd:02:c5:ee:4e:3f:
15:9c:ed:cb:56:e6:a1:4c:fe:1f:4e:7e:b5:b6:d3:
05:49:0f:51:cc:39:f2:b0:d2:75:83:8d:56:be:68:
f3:cc:98:fc:8d:0b:64:8c:a4:16:8e:2f:1b:8b:35:
9c:dc:59:d9:71:1d:dc:24:ba:b9:71:75:88:39:cb:
87:3b:63:79:9c:b0:33:08:51:af:51:9d:04:ef:70:
60:7c:4f:81:99:9d:0e:03:da:f4:14:3c:7b:5c:7d:
cd:ca:45:99:ed:4f:5a:e7:13:c9:18:fd:d0:7a:d4:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DF:EF:1D:8D:B6:67:F9:6A:02:B5:21:F9:9E:5D:D8:29:CA:56:3C
X509v3 Authority Key Identifier:
keyid:27:A0:2C:A4:FE:B6:B2:D7:C9:8B:E1:59:35:22:63:21:BC:50:82:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:bc:ef:db:d1:54:85:65:11:f8:aa:04:c0:fb:b3:88:7f:04:
c0:77:24:0a:74:14:6f:bc:04:04:7c:28:a2:47:0d:26:ef:e1:
18:a1:ef:cb:27:7b:2f:5f:22:f9:e9:3f:ca:33:a7:57:7a:3b:
76:f0:a9:0f:6e:6b:a8:e9:00:a0:90:01:ea:df:ab:bb:96:b5:
65:04:9d:6c:a4:a3:86:74:3a:78:df:46:6a:61:c6:30:27:01:
b3:69:22:d8:80:44:23:f1:55:c3:ad:22:46:68:88:eb:08:fb:
31:e5:a7:e7:9b:34:4f:47:f3:86:11:24:6a:ea:76:af:cf:72:
6a:5c:36:21:7a:d1:c2:13:d0:74:ad:83:1b:44:6f:ae:0c:49:
39:bd:f6:08:08:a8:b1:13:d0:2e:17:14:ae:8b:86:1f:ac:cd:
e2:ad:9c:c1:9c:4b:50:5a:55:cc:ce:4d:f7:c0:22:2f:f2:12:
91:e0:86:a2:6e:a1:ed:2a:44:60:30:a6:1b:aa:90:27:21:be:
8b:dc:7d:92:34:0c:ee:3f:6e:90:7b:78:97:cd:d1:2d:70:46:
f8:8e:95:b5:1b:76:eb:d8:d6:06:70:7e:c1:a4:51:5f:74:90:
6f:37:c8:28:b8:cc:56:67:77:5d:28:6f:84:2d:20:1c:b6:25:
fc:ad:a3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:14:34 2026 by rpki-client