$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft File: CA270F1FD051B3CD65DB930972A99335C45615EC.mft (raw, json) Hash identifier: lnVRKLeUcITVuEbzKKvBnFoMI4Ec2xVLPWEYOT9hp/c= Subject key identifier: 08:DB:B6:DA:7B:3E:0C:43:1D:40:1A:EF:15:E8:5D:B1:A0:34:BD:92 Authority key identifier: CA:27:0F:1F:D0:51:B3:CD:65:DB:93:09:72:A9:93:35:C4:56:15:EC Certificate issuer: /CN=CA270F1FD051B3CD65DB930972A99335C45615EC Certificate serial: 3C47B72E0D84DFE86068F4A363BF09CE4A157213 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft Manifest number: FE Signing time: Mon 09 Nov 2026 19:50:25 +0000 Manifest this update: Mon 09 Nov 2026 19:45:25 +0000 Manifest next update: Tue 10 Nov 2026 22:48:25 +0000 Files and hashes: 1: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: UuwOEqaAvPthTROezeYmcp8tB98baeryTixXf6GL8Aw=) 2: CA270F1FD051B3CD65DB930972A99335C45615EC.crl (hash: lvTkKkmd7dDF1J6Z1cnvgD3DPcSHbB/Rj9o+UoFG310=) 3: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: NkKjSf90ElcdssnMG0/v4I3k9N6YTsqapPAgxV9RP+E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.crl rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:47:b7:2e:0d:84:df:e8:60:68:f4:a3:63:bf:09:ce:4a:15:72:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA270F1FD051B3CD65DB930972A99335C45615EC Validity Not Before: Nov 9 19:45:25 2026 GMT Not After : Nov 10 22:48:25 2026 GMT Subject: CN=08DBB6DA7B3E0C431D401AEF15E85DB1A034BD92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:86:2f:97:b2:82:af:a7:80:54:c3:d4:92:28: f6:0c:2f:48:c7:52:80:66:84:f5:a6:45:44:a4:88: d4:7d:49:b9:58:88:62:51:90:8a:52:6a:60:62:bd: fd:c0:23:4b:34:0c:6a:40:f5:6b:30:d0:9f:c0:64: 0e:d0:73:08:a1:f4:1e:ba:be:52:fa:f7:5c:48:71: 17:48:e5:37:a7:99:e4:1c:3a:b5:9d:c1:d3:4d:c5: e3:55:1a:90:61:c4:ba:10:2f:f5:e7:7f:fc:26:da: 9d:d8:04:ee:09:ea:38:fe:69:9c:17:26:4e:5f:2d: 89:04:96:00:65:c4:34:af:30:b7:1a:b0:96:e5:55: 61:35:c0:c1:dd:3e:01:50:a6:ea:d5:b3:46:36:7b: 05:ac:7c:a7:cd:3b:d1:30:8a:c5:dc:d0:f8:f2:f1: f2:e3:f8:7a:df:0a:6e:68:85:39:f4:22:b8:18:31: f5:4a:66:a8:15:3b:8c:0a:79:e3:a7:e9:5b:e6:8f: a2:ce:c4:4b:d4:31:ee:7a:bb:f8:81:a5:51:16:f3: b2:73:1a:25:a8:cd:44:5f:bb:80:b5:bc:92:87:d4: bc:6e:56:83:62:0b:07:19:70:70:fe:4c:51:b7:ed: 3c:39:81:a0:cf:0f:0b:17:b3:27:e0:8c:40:d8:73: e2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DB:B6:DA:7B:3E:0C:43:1D:40:1A:EF:15:E8:5D:B1:A0:34:BD:92 X509v3 Authority Key Identifier: keyid:CA:27:0F:1F:D0:51:B3:CD:65:DB:93:09:72:A9:93:35:C4:56:15:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:6f:66:d2:46:b4:54:32:fd:18:8f:45:63:33:78:8b:56:81: be:46:fd:59:09:f6:c5:59:8a:a3:66:7e:79:2b:9b:c9:b1:b1: 34:b3:ec:7b:e3:88:1d:00:a6:a3:0e:bc:3a:e4:01:fc:5d:12: 26:23:60:5e:e7:24:55:3e:b8:dc:81:69:83:02:ca:4d:82:8d: 4a:76:b6:83:47:50:2c:94:ec:ce:6d:28:29:c7:30:27:96:24: b3:d3:13:2d:0b:14:62:97:43:08:4a:7b:72:dd:f5:64:9b:2c: 18:39:27:86:39:39:f3:78:2c:73:51:fd:f2:31:34:1e:85:02: c0:f5:57:77:fe:89:0e:bb:ad:d1:5b:92:7d:87:15:4b:d6:8e: 40:cd:6f:8f:de:2c:04:e8:dd:6d:33:79:8a:eb:b4:c2:af:ac: 61:36:4c:78:7e:09:0c:df:1c:ed:ad:03:78:b0:f7:b1:02:46: 75:3c:6a:4f:ec:db:c9:38:b9:01:eb:77:d8:2a:cc:a6:41:b0: 10:c8:70:87:de:b0:49:2b:7f:0c:5e:68:b6:7a:09:60:3c:ed: ff:36:fd:0c:2e:2c:39:06:50:5e:70:62:f4:a6:db:eb:49:d2: 1a:49:28:b3:ca:71:1f:6a:93:e4:ee:7e:2a:0b:8d:05:f4:fe: bc:b4:7b:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPEe3Lg2E3+hgaPSjY78JzkoVchMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyNzBGMUZEMDUxQjNDRDY1REI5MzA5NzJBOTkzMzVD NDU2MTVFQzAeFw0yNjExMDkxOTQ1MjVaFw0yNjExMTAyMjQ4MjVaMDMxMTAvBgNV BAMTKDA4REJCNkRBN0IzRTBDNDMxRDQwMUFFRjE1RTg1REIxQTAzNEJEOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCihi+XsoKvp4BUw9SSKPYML0jH UoBmhPWmRUSkiNR9SblYiGJRkIpSamBivf3AI0s0DGpA9Wsw0J/AZA7Qcwih9B66 vlL691xIcRdI5TenmeQcOrWdwdNNxeNVGpBhxLoQL/Xnf/wm2p3YBO4J6jj+aZwX Jk5fLYkElgBlxDSvMLcasJblVWE1wMHdPgFQpurVs0Y2ewWsfKfNO9EwisXc0Pjy 8fLj+HrfCm5ohTn0IrgYMfVKZqgVO4wKeeOn6Vvmj6LOxEvUMe56u/iBpVEW87Jz GiWozURfu4C1vJKH1LxuVoNiCwcZcHD+TFG37Tw5gaDPDwsXsyfgjEDYc+J/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCNu22ns+DEMdQBrvFehdsaA0vZIwHwYDVR0j BBgwFoAUyicPH9BRs81l25MJcqmTNcRWFewwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVkOWVhMjAtMzQzZC00YWNiLTk1ODEtODFmOWQ3ZWE5MmZlLzAvQ0EyNzBGMUZE MDUxQjNDRDY1REI5MzA5NzJBOTkzMzVDNDU2MTVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTI3MEYxRkQwNTFCM0NENjVEQjkzMDk3MkE5OTMzNUM0NTYx NUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVkOWVhMjAtMzQzZC00YWNiLTk1 ODEtODFmOWQ3ZWE5MmZlLzAvQ0EyNzBGMUZEMDUxQjNDRDY1REI5MzA5NzJBOTkz MzVDNDU2MTVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhvZtJGtFQy/RiPRWMzeItWgb5G/VkJ9sVZ iqNmfnkrm8mxsTSz7HvjiB0ApqMOvDrkAfxdEiYjYF7nJFU+uNyBaYMCyk2CjUp2 toNHUCyU7M5tKCnHMCeWJLPTEy0LFGKXQwhKe3Ld9WSbLBg5J4Y5OfN4LHNR/fIx NB6FAsD1V3f+iQ67rdFbkn2HFUvWjkDNb4/eLATo3W0zeYrrtMKvrGE2THh+CQzf HO2tA3iw97ECRnU8ak/s28k4uQHrd9gqzKZBsBDIcIfesEkrfwxeaLZ6CWA87f82 /QwuLDkGUF5wYvSm2+tJ0hpJKLPKcR9qk+TufioLjQX0/ry0e3o= -----END CERTIFICATE-----Generated at Tue Nov 10 01:52:14 2026 by rpki-client