
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft
File: 27E417DDE008607BCDD5A3593D3468A196716538.mft (raw, json)
Hash identifier: S5bwXe2rmfs9K93hJJwkCtqZ5hzNa58ktiwzzGJlflk=
Subject key identifier: 91:F0:69:65:93:5A:DB:D2:01:47:6C:50:63:28:FD:86:D0:F6:BB:BB
Authority key identifier: 27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38
Certificate issuer: /CN=27E417DDE008607BCDD5A3593D3468A196716538
Certificate serial: 7724BD7C4C2D74E43AB5DD69ABEF869FB228DC90
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 02:49:34 +0000
Manifest this update: Wed 29 Jul 2026 02:44:34 +0000
Manifest next update: Thu 30 Jul 2026 06:28:34 +0000
Files and hashes: 1: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: 1bOoTdfrvDcIKLgnFWnuVyWYZ52c2xuJTvaGjJbRj4Y=)
2: 27E417DDE008607BCDD5A3593D3468A196716538.crl (hash: GSbZ/iWYiWGIoknjuWrrStp5mMZmG9/b2mp4K9Q2mtY=)
3: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: 6rYbBTfQu9Ye+jxQ58mCILFsaxt3rc45oOO8Pu0AOKM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl
rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:24:bd:7c:4c:2d:74:e4:3a:b5:dd:69:ab:ef:86:9f:b2:28:dc:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27E417DDE008607BCDD5A3593D3468A196716538
Validity
Not Before: Jul 29 02:44:34 2026 GMT
Not After : Jul 30 06:28:34 2026 GMT
Subject: CN=91F06965935ADBD201476C506328FD86D0F6BBBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:47:65:5a:40:c7:70:9a:04:41:40:d2:0b:
c1:d2:c4:d8:0a:c5:b5:31:d1:59:cb:81:d2:e8:70:
76:56:0f:09:5f:17:b1:86:51:fb:4a:46:cb:94:b9:
42:6f:04:1e:6c:2d:40:45:02:c7:ac:37:88:e9:34:
eb:06:df:46:9e:36:29:ac:28:9e:26:22:99:d7:13:
02:48:29:98:c6:cc:e3:e5:12:6f:c5:50:f3:e3:70:
9b:fb:0b:01:2f:c5:e1:fd:71:b4:2b:97:d4:3e:0a:
97:ea:f5:56:14:00:ac:9f:90:3c:a5:63:a4:94:56:
f5:76:dd:e3:c1:d5:22:d6:b9:03:df:50:b4:71:e2:
50:f9:2d:45:c7:f7:e3:8c:9a:2e:6b:f7:0a:2b:31:
e8:87:bd:bc:bd:bb:d5:ca:70:9d:d5:bc:3d:e9:87:
8c:d6:68:c3:2c:f7:68:01:17:9a:8d:67:7d:f8:1d:
eb:d3:44:10:b3:8e:c4:8b:29:34:f3:9a:6d:d3:ad:
36:f0:ba:6e:b5:aa:01:1d:fc:c7:40:13:47:65:2d:
f0:0f:8c:59:45:39:1f:e3:dd:05:de:47:ae:97:5f:
4f:16:49:2d:66:e2:0a:65:bc:0d:74:1f:2b:26:a4:
d2:5e:01:59:90:0a:d3:84:ec:c1:94:b3:98:a7:8a:
a4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F0:69:65:93:5A:DB:D2:01:47:6C:50:63:28:FD:86:D0:F6:BB:BB
X509v3 Authority Key Identifier:
keyid:27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5c:f7:c8:70:d6:fa:f3:98:73:19:fc:6e:5c:8d:88:b1:1e:
a9:04:60:5c:53:ec:bc:4e:a5:1e:4d:13:22:c2:b9:51:10:7a:
fb:c6:75:d1:cc:fd:36:55:dc:d6:0e:e0:23:82:1f:ff:73:83:
b6:7f:ab:bd:1a:7a:0e:b6:f5:ab:f9:c7:38:97:94:44:48:bc:
55:7a:bf:ab:2d:dc:cb:8e:8b:38:8e:af:80:1c:79:cb:dd:c3:
89:8e:e9:99:44:ea:5a:e3:1a:56:6e:b7:e5:ef:4d:76:aa:5b:
8b:ed:71:70:fa:7f:83:a6:50:6f:46:3e:83:c4:96:c6:56:d1:
5a:56:62:56:f0:b4:6b:e2:67:87:2d:15:3f:6c:d9:66:b2:a8:
52:ad:8e:88:c8:80:7e:c9:54:f0:22:aa:20:aa:77:38:1d:5d:
9f:96:bd:59:3f:77:94:11:41:8b:2c:89:d7:03:84:5b:69:48:
5f:ab:a5:fa:f8:9c:60:67:f5:f4:27:23:4c:11:46:6d:49:5a:
0a:2c:4e:06:24:c6:0f:ee:42:bd:29:d9:e3:f2:23:d6:fb:17:
a9:25:f5:4f:5d:93:52:23:b1:30:bb:8d:0a:f5:38:e4:0f:82:
f1:ce:f0:f9:8c:02:c6:40:1b:f2:8f:66:f7:91:8e:fa:a0:67:
c7:4a:d9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:54:35 2026 by rpki-client