$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft File: CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft (raw, json) Hash identifier: J1eDu94ouPI7Lle4lpd9g3SHFFePwCFRlbrOZAy5W6A= Subject key identifier: AD:FB:69:98:65:E4:C9:79:09:EA:D7:96:74:85:27:89:E5:C1:19:1E Authority key identifier: CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D Certificate issuer: /CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D Certificate serial: 25477CC4649294DB307AA277D4683464BBE66F53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 01:19:28 +0000 Manifest this update: Wed 17 Jun 2026 01:14:28 +0000 Manifest next update: Thu 18 Jun 2026 01:23:28 +0000 Files and hashes: 1: 3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa (hash: uXy9b8XhpbesCCoDWjd2NVNJTQEIt1Rzumg6PbPcPrA=) 2: 3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (hash: 2+4lQdjwQAe85kVWzjTaO1AsvRqx5WYrEbUSKbxLW0A=) 3: CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl (hash: uVJoCMWgIRndbpNC32b/CX6tW6Q8st0OTQXd1fgJQ4I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:47:7c:c4:64:92:94:db:30:7a:a2:77:d4:68:34:64:bb:e6:6f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D Validity Not Before: Jun 17 01:14:28 2026 GMT Not After : Jun 18 01:23:28 2026 GMT Subject: CN=ADFB699865E4C97909EAD79674852789E5C1191E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0f:2e:83:6e:85:b8:65:3d:e0:8d:d8:fe:cc: 8c:b6:93:b2:38:8a:8d:85:c3:e5:39:5f:c7:62:8d: 56:55:62:65:e0:92:8f:6b:50:c7:7c:45:f0:49:6c: 01:c8:89:3d:95:fe:0b:88:a9:7b:70:d5:f5:68:0e: 5f:47:1f:8f:ce:46:2b:35:8d:3f:b8:a5:48:69:2d: 80:33:f7:62:9b:55:78:9f:5f:ef:3b:49:84:b5:e8: 56:8e:3a:a7:74:2e:6e:ec:27:bb:76:62:4b:18:40: 31:95:5c:b5:dd:08:00:3c:18:7c:ff:92:19:b1:ec: a1:91:2b:a7:39:c1:46:46:54:9e:b5:eb:33:fd:a8: 5b:38:23:f8:b5:b6:89:6b:fa:3c:f1:04:54:9b:f4: 9a:9b:46:52:c8:8e:2f:e5:fc:1e:0f:2a:90:98:db: 85:fe:01:4d:88:de:21:82:09:15:fa:d4:5a:96:94: a1:d8:48:bf:28:89:5c:7b:f4:da:e6:f5:91:85:3e: 1c:e8:eb:10:29:d8:c6:92:56:54:f4:02:31:52:16: 19:fd:5b:1c:50:14:e9:17:29:9a:b0:e6:51:78:0c: 95:70:0c:e5:28:66:90:63:0e:b2:cb:e4:d8:59:fb: 2b:d0:fb:e3:02:00:d8:23:bc:b7:cb:a9:9b:68:62: 74:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FB:69:98:65:E4:C9:79:09:EA:D7:96:74:85:27:89:E5:C1:19:1E X509v3 Authority Key Identifier: keyid:CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:44:e0:9d:86:ea:1f:78:7e:61:29:c3:9e:65:fc:9b:a7:93: 58:cc:25:1b:5a:6b:7c:d6:6a:f2:51:2f:1b:09:d3:1a:82:0b: ab:20:92:32:5b:68:24:72:8b:d0:29:2f:b1:72:dd:40:9a:e6: 21:90:4d:dc:12:df:9f:5e:c4:2f:d3:75:0d:71:ba:8b:59:77: 31:08:d9:a5:98:85:0c:b7:10:de:e7:9d:cd:fe:ed:c2:6d:00: af:18:13:00:30:2d:c5:54:5c:5a:46:e2:09:48:39:1e:0b:e6: ad:a0:ae:c4:00:60:a2:42:08:48:1b:83:88:12:d3:ca:aa:dd: 4c:ff:91:b3:67:02:5e:be:25:d8:ec:13:35:72:e6:e8:b5:2c: d4:52:a8:4a:ae:04:11:07:a6:07:d2:36:b2:03:9a:ef:cc:7e: 41:5f:c9:95:ac:a9:bd:79:31:a0:ad:1e:50:09:f9:a2:66:c2: 2a:b2:6e:e7:55:b5:34:4d:62:82:db:f2:43:ec:6b:1f:a8:f4: 25:0b:0d:f3:b1:3a:cf:e6:8a:bc:ff:db:21:4f:b2:46:2c:ce: dc:be:36:05:79:5d:ff:31:4e:39:a5:88:31:79:ff:4c:4c:bc: bd:d3:6c:95:07:df:5a:2f:7f:52:ef:e9:fc:dd:ed:df:48:fb: f5:5c:67:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJUd8xGSSlNsweqJ31Gg0ZLvmb1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyN0MzRTUzQzcyN0VDNjEyMzhEMUUyQzFFMzUzNTQw Q0VFQjc5RDAeFw0yNjA2MTcwMTE0MjhaFw0yNjA2MTgwMTIzMjhaMDMxMTAvBgNV BAMTKEFERkI2OTk4NjVFNEM5NzkwOUVBRDc5Njc0ODUyNzg5RTVDMTE5MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcDy6DboW4ZT3gjdj+zIy2k7I4 io2Fw+U5X8dijVZVYmXgko9rUMd8RfBJbAHIiT2V/guIqXtw1fVoDl9HH4/ORis1 jT+4pUhpLYAz92KbVXifX+87SYS16FaOOqd0Lm7sJ7t2YksYQDGVXLXdCAA8GHz/ khmx7KGRK6c5wUZGVJ616zP9qFs4I/i1tolr+jzxBFSb9JqbRlLIji/l/B4PKpCY 24X+AU2I3iGCCRX61FqWlKHYSL8oiVx79Nrm9ZGFPhzo6xAp2MaSVlT0AjFSFhn9 WxxQFOkXKZqw5lF4DJVwDOUoZpBjDrLL5NhZ+yvQ++MCANgjvLfLqZtoYnQxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrftpmGXkyXkJ6teWdIUnieXBGR4wHwYDVR0j BBgwFoAUyifD5TxyfsYSONHiweNTVAzut50wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2M4ZDRlZTItNTQ5ZS00MTYwLThkNmYtODc3MzBlOGFlNWUyLzAvQ0EyN0MzRTUz QzcyN0VDNjEyMzhEMUUyQzFFMzUzNTQwQ0VFQjc5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTI3QzNFNTNDNzI3RUM2MTIzOEQxRTJDMUUzNTM1NDBDRUVC NzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2M4ZDRlZTItNTQ5ZS00MTYwLThk NmYtODc3MzBlOGFlNWUyLzAvQ0EyN0MzRTUzQzcyN0VDNjEyMzhEMUUyQzFFMzUz NTQwQ0VFQjc5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVE4J2G6h94fmEpw55l/Junk1jMJRtaa3zW avJRLxsJ0xqCC6sgkjJbaCRyi9ApL7Fy3UCa5iGQTdwS359exC/TdQ1xuotZdzEI 2aWYhQy3EN7nnc3+7cJtAK8YEwAwLcVUXFpG4glIOR4L5q2grsQAYKJCCEgbg4gS 08qq3Uz/kbNnAl6+JdjsEzVy5ui1LNRSqEquBBEHpgfSNrIDmu/MfkFfyZWsqb15 MaCtHlAJ+aJmwiqybudVtTRNYoLb8kPsax+o9CULDfOxOs/mirz/2yFPskYszty+ NgV5Xf8xTjmliDF5/0xMvL3TbJUH31ovf1Lv6fzd7d9I+/VcZw0= -----END CERTIFICATE-----Generated at Wed Jun 17 09:24:19 2026 by rpki-client