$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft File: 27E417DDE008607BCDD5A3593D3468A196716538.mft (raw, json) Hash identifier: sh2am8YQvVJi8qyv0Szi/AoXiHoiShu9fsukmjM6GQQ= Subject key identifier: 93:98:9C:91:7C:01:76:C0:CF:3C:2A:ED:4C:9A:63:81:A4:12:03:21 Authority key identifier: 27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38 Certificate issuer: /CN=27E417DDE008607BCDD5A3593D3468A196716538 Certificate serial: 6A2E41A8CD45CF6E6BC741AE6667A25CC97D6E64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:03:32 +0000 Manifest this update: Wed 23 Sep 2026 13:58:32 +0000 Manifest next update: Thu 24 Sep 2026 17:45:32 +0000 Files and hashes: 1: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: 1bOoTdfrvDcIKLgnFWnuVyWYZ52c2xuJTvaGjJbRj4Y=) 2: 27E417DDE008607BCDD5A3593D3468A196716538.crl (hash: 246HjvS8z3BMRAhwfXq/2ed0pQIvv0ygq3CfML2uhXg=) 3: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: 6rYbBTfQu9Ye+jxQ58mCILFsaxt3rc45oOO8Pu0AOKM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:2e:41:a8:cd:45:cf:6e:6b:c7:41:ae:66:67:a2:5c:c9:7d:6e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27E417DDE008607BCDD5A3593D3468A196716538 Validity Not Before: Sep 23 13:58:32 2026 GMT Not After : Sep 24 17:45:32 2026 GMT Subject: CN=93989C917C0176C0CF3C2AED4C9A6381A4120321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:86:d5:1b:0c:24:25:52:85:21:30:90:9c:02: dc:4b:2a:87:8a:e4:b0:4e:2e:0e:64:32:97:82:9b: 2f:73:51:fe:dc:dc:b3:4d:70:5f:bd:a3:34:ae:39: 9e:63:a0:00:34:92:e8:2b:98:9e:59:25:04:23:5c: 50:1b:32:c8:34:00:3e:04:4d:65:3b:09:b5:bd:b8: 22:c5:0d:a3:a0:de:05:75:e0:a0:a9:ab:cc:b0:ac: 60:5d:50:0a:8e:68:ba:a6:ec:6f:36:f2:e4:de:05: e6:40:ae:b2:2c:18:78:16:cd:b7:bf:19:dd:64:5a: 4d:61:97:1a:75:4b:e5:62:39:03:78:3d:ab:a3:08: 68:f7:a2:2c:91:e5:bd:fd:e7:3f:0c:2f:b5:66:ce: 4a:d3:86:08:ca:c9:0e:79:de:78:3f:3d:d0:88:06: 3b:d7:48:08:7d:8b:b4:08:41:77:27:32:e3:5f:36: ec:d8:3d:d5:5f:eb:84:15:df:0b:e0:ea:22:5b:3b: ce:c8:fd:a1:64:42:4b:dc:c6:7f:9b:93:28:6b:3f: 66:e4:93:38:95:f0:e2:23:e6:be:1b:ad:fe:55:97: b9:9f:82:1f:96:a6:f5:74:50:dd:43:8e:e9:cb:81: 0b:d4:fa:13:18:a3:81:8f:33:53:d2:26:c0:78:ec: a8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:98:9C:91:7C:01:76:C0:CF:3C:2A:ED:4C:9A:63:81:A4:12:03:21 X509v3 Authority Key Identifier: keyid:27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a2:66:9c:12:bc:4f:0e:77:07:f5:ec:39:f4:ed:0f:ef:49: c7:e3:f6:2d:ec:05:17:8b:6f:cf:05:88:c3:3d:18:ce:68:11: d6:69:52:ec:10:62:a4:d1:6c:a8:5f:70:68:01:62:bf:ff:42: 1b:b5:3a:2b:4e:ae:99:08:49:2d:d3:e0:35:8a:ae:5d:6f:e3: b1:2a:fa:fa:52:d2:50:6f:d3:3c:35:8b:76:50:28:61:53:a7: af:2b:b9:9c:7e:b0:30:77:64:4f:68:b1:42:4d:dc:85:4f:ad: 5c:79:53:44:e7:ad:c5:f3:be:4e:46:10:b9:20:05:2e:79:f2: cc:09:93:8f:47:6b:36:4a:4b:44:e4:4f:c3:73:fb:b5:6e:71: 04:61:76:f9:31:9c:66:47:3c:36:55:04:3e:10:62:ee:72:e1: 8e:5b:cb:d4:8d:7d:7f:a2:a3:23:49:d9:cb:24:67:3a:6c:5f: 3d:e7:bc:b5:bc:84:c4:d3:dd:97:f8:d5:b7:62:0e:91:b5:b6: 1e:4d:a0:d5:5e:20:ad:02:ff:34:bc:65:37:95:ff:2a:70:b4: 1d:7b:59:5d:f9:fa:8f:9f:b2:07:de:2a:1d:08:b8:b7:fc:9a: 3e:57:11:10:80:59:f3:8d:52:67:0c:90:55:e8:fc:02:d9:ad: 34:3e:3b:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUai5BqM1Fz25rx0GuZmeiXMl9bmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdFNDE3RERFMDA4NjA3QkNERDVBMzU5M0QzNDY4QTE5 NjcxNjUzODAeFw0yNjA5MjMxMzU4MzJaFw0yNjA5MjQxNzQ1MzJaMDMxMTAvBgNV BAMTKDkzOTg5QzkxN0MwMTc2QzBDRjNDMkFFRDRDOUE2MzgxQTQxMjAzMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhtUbDCQlUoUhMJCcAtxLKoeK 5LBOLg5kMpeCmy9zUf7c3LNNcF+9ozSuOZ5joAA0kugrmJ5ZJQQjXFAbMsg0AD4E TWU7CbW9uCLFDaOg3gV14KCpq8ywrGBdUAqOaLqm7G828uTeBeZArrIsGHgWzbe/ Gd1kWk1hlxp1S+ViOQN4PaujCGj3oiyR5b395z8ML7VmzkrThgjKyQ553ng/PdCI BjvXSAh9i7QIQXcnMuNfNuzYPdVf64QV3wvg6iJbO87I/aFkQkvcxn+bkyhrP2bk kziV8OIj5r4brf5Vl7mfgh+WpvV0UN1DjunLgQvU+hMYo4GPM1PSJsB47KinAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk5ickXwBdsDPPCrtTJpjgaQSAyEwHwYDVR0j BBgwFoAUJ+QX3eAIYHvN1aNZPTRooZZxZTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjliOWJkMzgtMmVmYS00ZDRjLWE5NTYtNDI0OTJhM2U2MDAwLzAvMjdFNDE3RERF MDA4NjA3QkNERDVBMzU5M0QzNDY4QTE5NjcxNjUzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yN0U0MTdEREUwMDg2MDdCQ0RENUEzNTkzRDM0NjhBMTk2NzE2 NTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMjdFNDE3RERFMDA4NjA3QkNERDVBMzU5M0QzNDY4 QTE5NjcxNjUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+iZpwSvE8Odwf17Dn07Q/vScfj9i3sBReL b88FiMM9GM5oEdZpUuwQYqTRbKhfcGgBYr//Qhu1OitOrpkISS3T4DWKrl1v47Eq +vpS0lBv0zw1i3ZQKGFTp68ruZx+sDB3ZE9osUJN3IVPrVx5U0TnrcXzvk5GELkg BS558swJk49HazZKS0TkT8Nz+7VucQRhdvkxnGZHPDZVBD4QYu5y4Y5by9SNfX+i oyNJ2cskZzpsXz3nvLW8hMTT3Zf41bdiDpG1th5NoNVeIK0C/zS8ZTeV/ypwtB17 WV35+o+fsgfeKh0IuLf8mj5XERCAWfONUmcMkFXo/ALZrTQ+O/k= -----END CERTIFICATE-----Generated at Wed Sep 23 20:32:50 2026 by rpki-client