$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft File: CA270F1FD051B3CD65DB930972A99335C45615EC.mft (raw, json) Hash identifier: LAfmAKYc3Vf7LF/RU/2apX9EzSHcUKU43SwYgZZDK8E= Subject key identifier: 0B:C8:0B:08:EB:E4:16:16:40:D7:59:AE:92:31:13:02:2F:15:5B:0C Authority key identifier: CA:27:0F:1F:D0:51:B3:CD:65:DB:93:09:72:A9:93:35:C4:56:15:EC Certificate issuer: /CN=CA270F1FD051B3CD65DB930972A99335C45615EC Certificate serial: 2B9589ABB87AB79D4D1EED801900680BC792F8B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft Manifest number: BE Signing time: Mon 21 Sep 2026 23:10:21 +0000 Manifest this update: Mon 21 Sep 2026 23:05:21 +0000 Manifest next update: Wed 23 Sep 2026 02:11:21 +0000 Files and hashes: 1: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: UuwOEqaAvPthTROezeYmcp8tB98baeryTixXf6GL8Aw=) 2: CA270F1FD051B3CD65DB930972A99335C45615EC.crl (hash: 7Es0C6405hLPQ7alB6qQkOQDPGG5MKS5M4gzfok0waU=) 3: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: NkKjSf90ElcdssnMG0/v4I3k9N6YTsqapPAgxV9RP+E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.crl rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:95:89:ab:b8:7a:b7:9d:4d:1e:ed:80:19:00:68:0b:c7:92:f8:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA270F1FD051B3CD65DB930972A99335C45615EC Validity Not Before: Sep 21 23:05:21 2026 GMT Not After : Sep 23 02:11:21 2026 GMT Subject: CN=0BC80B08EBE4161640D759AE923113022F155B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:13:c2:05:9b:0f:4b:3b:df:7e:58:9f:36:69: 67:55:cb:77:d1:78:85:4e:fd:04:68:7e:e3:ec:7b: c6:0c:ff:e6:00:81:a7:ac:3e:2d:f4:33:36:5f:dc: 70:31:4b:22:22:67:e4:23:06:15:8d:1d:35:4d:3f: 1b:47:30:be:1f:ce:25:3a:f3:d0:d2:1e:20:a8:9b: 74:be:84:62:48:43:a5:b8:fb:2a:ff:b5:78:b6:4e: 7f:fd:e2:a5:e4:1e:b0:8c:15:35:37:f2:c0:fa:d0: d1:dc:29:52:f2:4a:9f:d4:85:b3:2e:ed:12:98:93: 3f:10:ba:1b:08:25:21:19:65:db:9a:2f:47:d8:3f: 55:32:78:6e:cd:d8:ea:ca:1d:40:ee:f5:32:98:a5: b6:96:37:6c:7c:b1:70:60:66:bc:25:29:35:b2:fe: c8:aa:5e:21:44:00:ca:f2:c2:69:1a:15:49:03:7a: 71:b1:fd:30:6a:c8:06:b8:09:72:21:1f:27:1a:c8: eb:4d:47:8d:e3:ae:68:54:6e:04:68:41:1d:17:82: f9:b7:98:eb:d5:c6:75:d0:d5:ce:5a:46:20:90:49: 42:1d:9f:14:21:11:a0:c5:cb:38:52:4f:69:ce:c4: ac:5c:72:27:eb:6d:4c:f9:22:77:f4:5c:81:a6:fb: de:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C8:0B:08:EB:E4:16:16:40:D7:59:AE:92:31:13:02:2F:15:5B:0C X509v3 Authority Key Identifier: keyid:CA:27:0F:1F:D0:51:B3:CD:65:DB:93:09:72:A9:93:35:C4:56:15:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f6:bd:38:71:7f:20:54:27:b7:a8:45:19:df:4b:06:8f:7c: 49:86:3d:e2:0c:22:fd:8e:d7:b9:7c:58:0d:2e:17:fc:1e:c0: d8:03:50:f9:0a:98:65:03:7f:b0:a9:80:24:96:6d:58:2c:0e: df:cc:0f:14:f3:1d:1c:e5:bd:62:00:f0:a9:a7:d3:8a:c7:53: 7b:44:44:39:6d:92:7e:16:cc:8e:2b:35:d7:5a:23:fa:cc:ea: 50:f4:24:05:65:0f:23:b6:33:53:3a:1d:15:3e:b7:f3:68:fc: d0:b1:7e:ab:58:fe:71:53:72:c4:ae:ba:5e:cf:8a:59:c5:32: 03:d4:e1:81:84:45:54:bb:49:fe:26:f6:3e:85:eb:f1:c7:05: d0:11:60:6d:ca:e3:e2:17:fa:d4:fe:9f:ae:0b:02:e5:13:f9: 73:e1:21:a8:0e:3f:bd:11:ee:61:1d:67:ca:6f:e1:51:67:8b: b0:0f:ff:27:1c:a8:b5:48:fb:03:ac:6b:01:36:be:4b:43:d8: 7f:dd:2a:07:9a:62:c3:ce:a5:f5:81:90:d9:ac:21:40:3e:16: 32:a1:c8:0c:47:b5:16:a3:e6:49:9a:6c:67:63:02:9a:8e:c0: dd:c9:42:39:ab:80:dd:a1:4f:93:e6:96:9e:66:21:c6:34:3d: 6c:28:77:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK5WJq7h6t51NHu2AGQBoC8eS+LUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyNzBGMUZEMDUxQjNDRDY1REI5MzA5NzJBOTkzMzVD NDU2MTVFQzAeFw0yNjA5MjEyMzA1MjFaFw0yNjA5MjMwMjExMjFaMDMxMTAvBgNV BAMTKDBCQzgwQjA4RUJFNDE2MTY0MEQ3NTlBRTkyMzExMzAyMkYxNTVCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHE8IFmw9LO99+WJ82aWdVy3fR eIVO/QRofuPse8YM/+YAgaesPi30MzZf3HAxSyIiZ+QjBhWNHTVNPxtHML4fziU6 89DSHiCom3S+hGJIQ6W4+yr/tXi2Tn/94qXkHrCMFTU38sD60NHcKVLySp/UhbMu 7RKYkz8QuhsIJSEZZduaL0fYP1UyeG7N2OrKHUDu9TKYpbaWN2x8sXBgZrwlKTWy /siqXiFEAMrywmkaFUkDenGx/TBqyAa4CXIhHycayOtNR43jrmhUbgRoQR0Xgvm3 mOvVxnXQ1c5aRiCQSUIdnxQhEaDFyzhST2nOxKxccifrbUz5Inf0XIGm+96dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC8gLCOvkFhZA11mukjETAi8VWwwwHwYDVR0j BBgwFoAUyicPH9BRs81l25MJcqmTNcRWFewwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVkOWVhMjAtMzQzZC00YWNiLTk1ODEtODFmOWQ3ZWE5MmZlLzAvQ0EyNzBGMUZE MDUxQjNDRDY1REI5MzA5NzJBOTkzMzVDNDU2MTVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTI3MEYxRkQwNTFCM0NENjVEQjkzMDk3MkE5OTMzNUM0NTYx NUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVkOWVhMjAtMzQzZC00YWNiLTk1 ODEtODFmOWQ3ZWE5MmZlLzAvQ0EyNzBGMUZEMDUxQjNDRDY1REI5MzA5NzJBOTkz MzVDNDU2MTVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJH2vThxfyBUJ7eoRRnfSwaPfEmGPeIMIv2O 17l8WA0uF/wewNgDUPkKmGUDf7CpgCSWbVgsDt/MDxTzHRzlvWIA8Kmn04rHU3tE RDltkn4WzI4rNddaI/rM6lD0JAVlDyO2M1M6HRU+t/No/NCxfqtY/nFTcsSuul7P ilnFMgPU4YGERVS7Sf4m9j6F6/HHBdARYG3K4+IX+tT+n64LAuUT+XPhIagOP70R 7mEdZ8pv4VFni7AP/yccqLVI+wOsawE2vktD2H/dKgeaYsPOpfWBkNmsIUA+FjKh yAxHtRaj5kmabGdjApqOwN3JQjmrgN2hT5Pmlp5mIcY0PWwod5c= -----END CERTIFICATE-----Generated at Tue Sep 22 20:07:46 2026 by rpki-client