
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft
File: 27E417DDE008607BCDD5A3593D3468A196716538.mft (raw, json)
Hash identifier: Mb+vYMb9dkLKSHTRswfRbsBpIilyihA+9v4iejEN/tA=
Subject key identifier: E2:7C:E8:CE:22:70:89:F3:11:C2:7B:5B:83:81:A1:46:BF:89:15:E8
Authority key identifier: 27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38
Certificate issuer: /CN=27E417DDE008607BCDD5A3593D3468A196716538
Certificate serial: 529DB7EA7AEA3714CF8BD656D9385DA918E0D4E3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft
Manifest number: 38
Signing time: Sat 13 Jun 2026 01:05:42 +0000
Manifest this update: Sat 13 Jun 2026 01:00:42 +0000
Manifest next update: Sun 14 Jun 2026 01:44:42 +0000
Files and hashes: 1: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: 6rYbBTfQu9Ye+jxQ58mCILFsaxt3rc45oOO8Pu0AOKM=)
2: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: 1bOoTdfrvDcIKLgnFWnuVyWYZ52c2xuJTvaGjJbRj4Y=)
3: 27E417DDE008607BCDD5A3593D3468A196716538.crl (hash: +2ZYd1dEF4IgSePVbTRr9JKO+7JYPUCoidmS+AM4EGE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl
rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:9d:b7:ea:7a:ea:37:14:cf:8b:d6:56:d9:38:5d:a9:18:e0:d4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27E417DDE008607BCDD5A3593D3468A196716538
Validity
Not Before: Jun 13 01:00:42 2026 GMT
Not After : Jun 14 01:44:42 2026 GMT
Subject: CN=E27CE8CE227089F311C27B5B8381A146BF8915E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:9a:9a:15:f7:2d:2e:fe:00:b7:f3:79:c0:
64:3c:61:1e:c3:f8:6d:ab:c1:fd:bf:84:db:6f:6e:
90:a4:51:1c:f9:34:64:0f:f9:df:3b:a1:6d:f7:10:
23:dc:82:0c:7e:19:b7:5d:bd:bb:47:12:b7:a0:52:
8b:b9:81:17:6c:1d:d6:59:e1:09:5c:5f:14:8c:3b:
41:ee:d0:12:36:1c:91:d1:07:a1:b6:74:b1:89:53:
35:16:f8:d4:02:67:f8:71:97:32:c7:fb:81:cc:a0:
3e:7f:e9:ad:9d:3c:2b:2f:73:f6:2b:f4:43:f2:b7:
a7:c8:28:88:be:26:d5:7e:86:09:83:67:5b:18:da:
bc:40:2b:63:15:c1:2e:50:94:16:86:75:53:5e:ce:
2c:21:24:35:78:0d:ed:67:77:ea:b2:a3:5a:f7:d5:
a6:03:0b:25:9c:07:c1:ad:65:bb:5e:6a:32:81:8a:
34:6e:06:cf:37:fe:f7:94:9a:2a:53:02:60:69:68:
43:89:5d:34:a4:fe:fe:7b:c1:72:dd:e6:56:dc:a1:
ca:c4:aa:56:e0:66:17:da:4b:75:70:08:60:12:63:
89:ab:e1:9c:f6:51:6d:32:84:f5:f3:cb:40:fb:a7:
cc:cb:26:85:29:6c:25:bd:81:d5:f9:85:db:bc:b1:
56:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7C:E8:CE:22:70:89:F3:11:C2:7B:5B:83:81:A1:46:BF:89:15:E8
X509v3 Authority Key Identifier:
keyid:27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:31:53:2f:8f:22:9e:7d:a9:54:c2:22:95:14:20:f2:4d:ba:
33:ab:e9:38:61:07:2b:b5:e4:cb:bd:5f:72:5f:63:25:ee:5b:
aa:54:5e:9d:c4:7e:84:3e:75:32:4e:73:0b:b7:70:1a:d2:d8:
55:68:17:47:e9:65:f5:4f:2b:86:a3:33:03:10:84:28:83:0b:
d4:50:a2:6e:74:d1:0e:34:50:2c:94:b3:47:76:7d:32:0e:c1:
29:b7:17:fe:67:e0:32:49:0e:77:c7:27:d5:f7:d4:97:cd:d3:
f4:29:6e:c3:a7:d6:fc:99:3e:39:b0:96:c2:04:52:38:3b:c5:
d8:7c:c9:18:8b:6b:8f:43:ef:4b:69:14:e6:56:4c:24:07:a1:
49:99:e4:83:f2:fe:96:f4:59:ee:f0:5b:b4:f9:1d:bb:d3:57:
be:d5:63:36:81:8c:cf:f5:58:ae:72:66:1a:04:6b:e2:8c:0c:
e0:a7:16:75:da:4b:8e:78:0b:43:7f:b8:56:d6:99:70:68:fc:
45:43:9d:e4:51:ca:8e:81:58:f2:ba:b6:05:50:31:32:58:61:
f9:4e:ec:c5:dc:56:38:4c:2a:21:15:0b:b3:65:55:fb:79:61:
ba:55:60:d8:f7:2f:a9:9c:47:44:74:f3:1d:2b:4f:89:49:13:
3a:95:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:05:58 2026 by rpki-client