$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft File: 27A90045CBA22331AEF929C017271A7936688C97.mft (raw, json) Hash identifier: 0qp/bT4OXujgnMaHuo80aGML+aziYeC8Dp33+pWeXRo= Subject key identifier: D8:2F:38:2D:1C:CE:16:16:3B:12:DB:45:72:00:30:FA:15:A4:33:2F Authority key identifier: 27:A9:00:45:CB:A2:23:31:AE:F9:29:C0:17:27:1A:79:36:68:8C:97 Certificate issuer: /CN=27A90045CBA22331AEF929C017271A7936688C97 Certificate serial: 2B5542693B5F626CED0F337F754B1112D1F52042 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27A90045CBA22331AEF929C017271A7936688C97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 19:25:31 +0000 Manifest this update: Mon 21 Sep 2026 19:20:31 +0000 Manifest next update: Tue 22 Sep 2026 21:35:31 +0000 Files and hashes: 1: 27A90045CBA22331AEF929C017271A7936688C97.crl (hash: 5fyuek10Zvqf/eHlFNUnEdogCdZaruaxyrmhR73soaM=) 2: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: wxG5u0knwwtRFwXPMgfrz2l9Xi2Prxv/dPiLuDPGtJo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.crl rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27A90045CBA22331AEF929C017271A7936688C97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:55:42:69:3b:5f:62:6c:ed:0f:33:7f:75:4b:11:12:d1:f5:20:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27A90045CBA22331AEF929C017271A7936688C97 Validity Not Before: Sep 21 19:20:31 2026 GMT Not After : Sep 22 21:35:31 2026 GMT Subject: CN=D82F382D1CCE16163B12DB45720030FA15A4332F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:92:dd:8d:26:e8:4d:6a:95:f1:cc:ae:95:64: 24:e6:d2:01:aa:91:40:04:88:38:2c:6f:4f:44:7b: 2b:02:b0:3f:bd:86:08:47:7f:f7:f6:bd:87:5d:3c: 07:22:4c:da:ce:e6:70:8f:2d:dd:a0:cb:c8:40:ce: 48:25:cb:76:6b:e4:78:3e:6d:0f:98:5a:00:db:89: 95:17:b5:da:f8:6b:f5:67:67:7e:fb:24:af:46:cf: fb:10:fa:6f:31:fa:96:c7:ff:33:64:ec:da:40:aa: f7:15:ee:a2:fd:b2:00:b1:53:83:69:cd:21:9d:69: f5:df:84:37:0e:75:3d:d4:97:33:bc:93:17:84:5c: 8e:6a:9f:f5:d5:02:94:94:1f:7f:e6:89:ef:74:96: a5:a5:80:ee:15:c7:85:25:74:2c:70:72:3c:d2:73: f1:3c:36:10:71:c2:43:1e:fc:1e:99:d7:e3:6f:f2: 51:63:34:22:b9:8c:49:fe:93:aa:53:b2:88:31:5b: ec:b5:4f:93:fa:15:e4:35:aa:46:40:b3:dc:02:49: 49:53:29:3f:0a:ca:21:e6:a1:c8:02:4c:da:53:41: 3c:05:5c:7b:26:47:d4:27:a9:08:b5:ab:c4:ca:bf: 24:ce:9a:cf:39:4e:48:cd:ef:34:67:25:55:0b:d8: 66:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2F:38:2D:1C:CE:16:16:3B:12:DB:45:72:00:30:FA:15:A4:33:2F X509v3 Authority Key Identifier: keyid:27:A9:00:45:CB:A2:23:31:AE:F9:29:C0:17:27:1A:79:36:68:8C:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27A90045CBA22331AEF929C017271A7936688C97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:ee:5d:e2:e8:eb:25:75:c4:3f:16:bd:8b:7b:4f:0a:3c:35: 93:99:ea:f0:e4:97:9f:66:48:f4:4a:ef:e5:4d:f8:64:e6:50: 8a:49:6f:13:5c:c3:d4:78:73:d0:c4:73:e1:ce:e2:29:ea:e2: 4b:b4:d2:66:d7:af:42:db:34:98:e4:4b:3d:5a:ed:e2:63:5c: f8:4f:31:06:14:fe:19:a1:16:04:80:4c:63:cc:cf:ec:d1:38: f5:c9:90:04:cb:7d:ca:df:2c:bd:34:96:05:21:dc:94:03:f2: a0:08:85:c1:5d:f2:13:57:22:04:4a:20:fb:93:d8:3e:e5:ee: c4:58:5f:03:2b:fc:72:28:a5:ed:c0:5d:ab:09:4f:d0:8c:10: 06:f1:5d:27:d2:10:1a:bc:63:be:e6:14:96:9b:f5:15:03:2d: e6:c3:86:d3:ba:f7:7f:1d:36:83:91:32:38:9b:05:c6:ac:72: e5:e7:59:c8:0b:56:b7:a4:50:d0:bc:f8:82:61:a9:aa:70:5e: 8e:e1:4c:c9:b2:28:0d:b3:79:1e:25:75:b1:26:21:63:2f:cb: 84:33:f7:57:77:e1:b4:58:49:5b:7f:3b:d4:f4:e4:c3:cf:ad: a3:4f:0e:7a:bd:8e:72:ab:51:e5:5e:d7:83:fd:2e:fe:1e:ff: cb:b4:4c:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK1VCaTtfYmztDzN/dUsREtH1IEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdBOTAwNDVDQkEyMjMzMUFFRjkyOUMwMTcyNzFBNzkz NjY4OEM5NzAeFw0yNjA5MjExOTIwMzFaFw0yNjA5MjIyMTM1MzFaMDMxMTAvBgNV BAMTKEQ4MkYzODJEMUNDRTE2MTYzQjEyREI0NTcyMDAzMEZBMTVBNDMzMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4kt2NJuhNapXxzK6VZCTm0gGq kUAEiDgsb09EeysCsD+9hghHf/f2vYddPAciTNrO5nCPLd2gy8hAzkgly3Zr5Hg+ bQ+YWgDbiZUXtdr4a/VnZ377JK9Gz/sQ+m8x+pbH/zNk7NpAqvcV7qL9sgCxU4Np zSGdafXfhDcOdT3UlzO8kxeEXI5qn/XVApSUH3/mie90lqWlgO4Vx4UldCxwcjzS c/E8NhBxwkMe/B6Z1+Nv8lFjNCK5jEn+k6pTsogxW+y1T5P6FeQ1qkZAs9wCSUlT KT8KyiHmocgCTNpTQTwFXHsmR9QnqQi1q8TKvyTOms85TkjN7zRnJVUL2GbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2C84LRzOFhY7EttFcgAw+hWkMy8wHwYDVR0j BBgwFoAUJ6kARcuiIzGu+SnAFycaeTZojJcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTg4NTNhYWItOGQ2Yy00NTdmLTlkNTctNDg0YWNhY2VhOWQ4LzAvMjdBOTAwNDVD QkEyMjMzMUFFRjkyOUMwMTcyNzFBNzkzNjY4OEM5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yN0E5MDA0NUNCQTIyMzMxQUVGOTI5QzAxNzI3MUE3OTM2Njg4 Qzk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzAvMjdBOTAwNDVDQkEyMjMzMUFFRjkyOUMwMTcyNzFB NzkzNjY4OEM5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXuXeLo6yV1xD8WvYt7Two8NZOZ6vDkl59m SPRK7+VN+GTmUIpJbxNcw9R4c9DEc+HO4inq4ku00mbXr0LbNJjkSz1a7eJjXPhP MQYU/hmhFgSATGPMz+zROPXJkATLfcrfLL00lgUh3JQD8qAIhcFd8hNXIgRKIPuT 2D7l7sRYXwMr/HIope3AXasJT9CMEAbxXSfSEBq8Y77mFJab9RUDLebDhtO6938d NoORMjibBcascuXnWcgLVrekUNC8+IJhqapwXo7hTMmyKA2zeR4ldbEmIWMvy4Qz 91d34bRYSVt/O9T05MPPraNPDnq9jnKrUeVe14P9Lv4e/8u0TKw= -----END CERTIFICATE-----Generated at Tue Sep 22 15:16:36 2026 by rpki-client