$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft File: CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft (raw, json) Hash identifier: kb9nFqlH0Ohxw6JFgDSATW7P0ddcGUKBkYKMlBM70Bw= Subject key identifier: 35:9D:16:8E:48:98:59:E5:B8:A8:D7:C8:EF:87:39:9D:E7:81:C0:B9 Authority key identifier: CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D Certificate issuer: /CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D Certificate serial: 5755DFD5E85A0CBC301343F27E8A210357FAAC22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft Manifest number: BE Signing time: Mon 21 Sep 2026 11:35:46 +0000 Manifest this update: Mon 21 Sep 2026 11:30:46 +0000 Manifest next update: Tue 22 Sep 2026 13:05:46 +0000 Files and hashes: 1: 3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa (hash: uXy9b8XhpbesCCoDWjd2NVNJTQEIt1Rzumg6PbPcPrA=) 2: CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl (hash: DasvRJVAuR6xkSxnOe7WijG2K2zb408h0fVPatA4UA0=) 3: 3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (hash: 2+4lQdjwQAe85kVWzjTaO1AsvRqx5WYrEbUSKbxLW0A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:55:df:d5:e8:5a:0c:bc:30:13:43:f2:7e:8a:21:03:57:fa:ac:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D Validity Not Before: Sep 21 11:30:46 2026 GMT Not After : Sep 22 13:05:46 2026 GMT Subject: CN=359D168E489859E5B8A8D7C8EF87399DE781C0B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:e4:a6:32:d5:80:15:9f:33:f9:0f:06:14: 7f:ee:66:58:4d:96:35:74:eb:9d:39:bb:07:41:db: 2b:24:9c:66:f4:ed:a6:93:47:2c:4e:d6:22:92:2c: f6:1e:83:67:5f:99:a1:4e:36:e3:eb:fd:b6:7b:9a: c7:c6:82:51:15:ea:8f:46:8c:cf:57:2b:44:d3:f8: ea:c1:7c:09:67:21:5d:12:a1:70:de:7e:9b:1a:43: f1:fa:f5:0d:f5:40:d6:c5:75:96:80:e9:ae:7b:f1: 98:36:e9:4a:70:08:47:1b:27:60:0f:46:8a:6e:90: 06:9d:e8:fc:35:29:b0:a2:06:ab:24:64:36:d3:6a: 5c:e7:3d:37:24:78:e0:08:c1:d6:14:6b:c9:2b:21: be:bf:79:af:7a:a6:cc:e6:b2:c6:50:de:6a:2e:b3: ed:c1:51:8c:9e:62:92:2e:8a:87:9f:83:4d:3a:63: cd:b6:ab:2a:35:60:b7:70:a3:0f:a0:3b:10:ea:70: 9f:f1:01:c0:e1:e1:9e:0e:60:0b:e6:0f:f9:9c:ba: 17:35:0e:7c:a3:2b:72:4a:7e:56:dc:c4:c1:c6:1a: 2f:9a:92:1d:f2:21:08:23:e7:a4:97:b4:d7:62:ce: a3:c0:a2:07:c4:3b:10:99:30:d1:c5:84:e6:4a:8e: 35:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9D:16:8E:48:98:59:E5:B8:A8:D7:C8:EF:87:39:9D:E7:81:C0:B9 X509v3 Authority Key Identifier: keyid:CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c0:01:7c:4b:aa:c7:b5:65:b0:4d:7a:a0:78:5c:95:a6:4a: 83:5c:6c:14:be:eb:bb:55:d7:99:b7:fe:a6:0b:e8:99:08:2a: 63:07:85:12:13:0c:e3:e2:b4:b8:7a:05:f6:28:74:28:c3:ca: b5:c5:80:6d:a2:dd:9d:5e:c2:6e:f5:09:3d:9a:19:8c:95:8a: e6:18:d8:fb:45:c3:e0:b1:b5:1c:5d:ea:fc:83:a9:6c:f9:1e: 37:85:c6:30:68:f4:24:2c:9e:09:ad:d1:22:0c:a6:81:75:55: cf:52:39:58:f8:d5:5a:89:fb:f0:54:11:24:a5:ca:0d:dd:3d: 16:75:0f:03:2c:a7:7e:60:27:85:c2:24:11:b0:ab:72:aa:50: b9:96:68:ea:49:e9:d1:c3:77:aa:26:f3:df:5f:fd:ea:12:22: 6e:fb:25:2c:df:82:fb:e2:35:f5:7c:33:d7:6e:07:b0:52:c5: 54:70:41:0e:71:f6:bf:49:dc:d7:a6:25:9f:f8:90:35:d5:28: fc:63:a9:73:67:3f:69:74:ca:b6:4e:bd:de:0f:52:7e:31:5e: c0:d7:22:d4:22:20:c5:05:c3:af:10:2a:b7:2d:6d:eb:50:fb: a7:57:67:c5:75:4b:9f:56:c1:af:75:d5:a4:39:79:d1:a2:df: 97:03:fd:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1Xf1ehaDLwwE0PyfoohA1f6rCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyN0MzRTUzQzcyN0VDNjEyMzhEMUUyQzFFMzUzNTQw Q0VFQjc5RDAeFw0yNjA5MjExMTMwNDZaFw0yNjA5MjIxMzA1NDZaMDMxMTAvBgNV BAMTKDM1OUQxNjhFNDg5ODU5RTVCOEE4RDdDOEVGODczOTlERTc4MUMwQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9MOSmMtWAFZ8z+Q8GFH/uZlhN ljV06505uwdB2ysknGb07aaTRyxO1iKSLPYeg2dfmaFONuPr/bZ7msfGglEV6o9G jM9XK0TT+OrBfAlnIV0SoXDefpsaQ/H69Q31QNbFdZaA6a578Zg26UpwCEcbJ2AP RopukAad6Pw1KbCiBqskZDbTalznPTckeOAIwdYUa8krIb6/ea96pszmssZQ3mou s+3BUYyeYpIuioefg006Y822qyo1YLdwow+gOxDqcJ/xAcDh4Z4OYAvmD/mcuhc1 DnyjK3JKflbcxMHGGi+akh3yIQgj56SXtNdizqPAogfEOxCZMNHFhOZKjjV9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNZ0WjkiYWeW4qNfI74c5neeBwLkwHwYDVR0j BBgwFoAUyifD5TxyfsYSONHiweNTVAzut50wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2M4ZDRlZTItNTQ5ZS00MTYwLThkNmYtODc3MzBlOGFlNWUyLzAvQ0EyN0MzRTUz QzcyN0VDNjEyMzhEMUUyQzFFMzUzNTQwQ0VFQjc5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTI3QzNFNTNDNzI3RUM2MTIzOEQxRTJDMUUzNTM1NDBDRUVC NzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2M4ZDRlZTItNTQ5ZS00MTYwLThk NmYtODc3MzBlOGFlNWUyLzAvQ0EyN0MzRTUzQzcyN0VDNjEyMzhEMUUyQzFFMzUz NTQwQ0VFQjc5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHAAXxLqse1ZbBNeqB4XJWmSoNcbBS+67tV 15m3/qYL6JkIKmMHhRITDOPitLh6BfYodCjDyrXFgG2i3Z1ewm71CT2aGYyViuYY 2PtFw+CxtRxd6vyDqWz5HjeFxjBo9CQsngmt0SIMpoF1Vc9SOVj41VqJ+/BUESSl yg3dPRZ1DwMsp35gJ4XCJBGwq3KqULmWaOpJ6dHDd6om899f/eoSIm77JSzfgvvi NfV8M9duB7BSxVRwQQ5x9r9J3NemJZ/4kDXVKPxjqXNnP2l0yrZOvd4PUn4xXsDX ItQiIMUFw68QKrctbetQ+6dXZ8V1S59Wwa911aQ5edGi35cD/WM= -----END CERTIFICATE-----Generated at Tue Sep 22 02:21:57 2026 by rpki-client