$ rpki-client -vvf rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft File: CA270F1FD051B3CD65DB930972A99335C45615EC.mft (raw, json) Hash identifier: ryzkj06gslufYiUGzKRfxNyOSvZmkiThuQh4s6/ibHo= Subject key identifier: 19:47:33:DA:82:BC:A9:FF:52:63:8A:AC:4A:0F:26:0C:80:43:5D:AB Authority key identifier: CA:27:0F:1F:D0:51:B3:CD:65:DB:93:09:72:A9:93:35:C4:56:15:EC Certificate issuer: /CN=CA270F1FD051B3CD65DB930972A99335C45615EC Certificate serial: 03B9BB6A6F38FE5111C44C893E4BA71866091693 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 02:03:14 +0000 Manifest this update: Tue 21 Jul 2026 01:58:14 +0000 Manifest next update: Wed 22 Jul 2026 04:32:14 +0000 Files and hashes: 1: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: UuwOEqaAvPthTROezeYmcp8tB98baeryTixXf6GL8Aw=) 2: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: NkKjSf90ElcdssnMG0/v4I3k9N6YTsqapPAgxV9RP+E=) 3: CA270F1FD051B3CD65DB930972A99335C45615EC.crl (hash: zIkPN2LB3fOlVa+g6dFx+5xLG9Jes4cNbiGw8tJvqWM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.crl rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b9:bb:6a:6f:38:fe:51:11:c4:4c:89:3e:4b:a7:18:66:09:16:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA270F1FD051B3CD65DB930972A99335C45615EC Validity Not Before: Jul 21 01:58:14 2026 GMT Not After : Jul 22 04:32:14 2026 GMT Subject: CN=194733DA82BCA9FF52638AAC4A0F260C80435DAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:52:12:6f:ed:45:20:b5:b0:96:e5:58:e0:3f: 95:d9:04:c5:d4:88:fd:3d:da:1a:7e:ec:99:46:2f: ef:8d:5a:1f:04:e6:fd:61:8f:f0:77:ae:88:b6:f9: be:2b:58:3a:ee:cb:6b:55:6c:a1:ef:78:a8:a3:0b: 67:a3:2e:6e:17:0d:da:a3:fc:88:cd:50:6e:c7:dd: 60:48:86:d8:3b:fe:87:0d:dd:8f:50:b4:f2:a1:0d: e8:c8:07:c8:f5:ae:7c:b2:3f:b1:17:38:a9:30:9c: a4:85:c5:5c:0c:b0:31:03:8c:42:87:86:4b:76:23: 77:86:d4:0b:8e:68:6c:ff:13:8e:7d:6e:00:b1:5b: 5f:42:1a:c3:7b:34:a4:f2:70:bc:cb:d0:d0:9a:05: 3f:93:1f:8f:62:dc:3d:df:91:cf:42:bd:52:9f:0f: 07:f2:fc:4a:e4:46:35:c6:77:d6:57:f2:a1:0a:a7: 5a:98:c0:59:ab:92:b6:6c:09:6e:3e:a4:d3:67:82: 7b:95:0b:1b:ff:ca:39:5e:b0:32:d6:45:64:8c:73: 55:ae:ea:01:2c:a6:e6:0c:b2:88:86:c7:54:3c:26: 9f:ab:96:e5:0a:85:34:2b:52:a5:08:c8:70:99:fc: e6:ff:df:79:49:bc:7c:3f:12:7b:c5:9f:e2:44:c2: 18:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:47:33:DA:82:BC:A9:FF:52:63:8A:AC:4A:0F:26:0C:80:43:5D:AB X509v3 Authority Key Identifier: keyid:CA:27:0F:1F:D0:51:B3:CD:65:DB:93:09:72:A9:93:35:C4:56:15:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:0e:6b:b0:fa:3a:61:98:b6:96:67:c5:23:48:32:73:6f:b4: 3a:12:c7:4c:9f:78:27:8f:ad:dc:9b:8e:38:80:fe:9a:bb:88: 2b:ba:92:f8:3d:3c:30:00:bd:3e:3d:17:20:69:48:69:e3:90: d5:6a:4f:c5:15:b7:ea:89:11:90:3a:1f:43:b3:1d:8a:e4:31: 53:e1:cd:b9:a0:28:60:f0:2c:bf:04:ff:cd:28:ba:c9:55:74: 5d:4a:d2:55:d1:2d:fc:ff:36:b1:5b:8a:1d:19:f7:42:06:f5: c0:fb:35:e0:c3:55:84:b0:ab:9b:ce:28:a2:ab:9c:99:d6:68: 32:1f:91:c6:b6:af:b6:05:17:f0:06:1e:c4:d9:96:f8:c3:6a: ad:68:80:3d:fe:ea:ef:2b:ea:37:f4:a2:38:2b:64:fe:a6:c5: 77:a6:bd:b2:48:d7:01:9e:d9:a4:9f:4c:d2:96:84:97:b6:c3: c3:9c:b6:13:51:ce:09:0f:b0:ed:bf:16:05:72:84:3d:c0:ea: 9e:07:b0:57:1c:5f:56:60:f9:19:d8:26:7b:2d:b1:e7:df:7f: b4:fe:f3:e2:83:30:3b:ed:7e:62:5c:de:71:83:29:ca:3d:7a: 73:78:7e:f9:15:fc:d3:53:1d:33:2f:9f:b2:6a:ff:e3:31:ff: 7f:aa:10:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA7m7am84/lERxEyJPkunGGYJFpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyNzBGMUZEMDUxQjNDRDY1REI5MzA5NzJBOTkzMzVD NDU2MTVFQzAeFw0yNjA3MjEwMTU4MTRaFw0yNjA3MjIwNDMyMTRaMDMxMTAvBgNV BAMTKDE5NDczM0RBODJCQ0E5RkY1MjYzOEFBQzRBMEYyNjBDODA0MzVEQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgUhJv7UUgtbCW5VjgP5XZBMXU iP092hp+7JlGL++NWh8E5v1hj/B3roi2+b4rWDruy2tVbKHveKijC2ejLm4XDdqj /IjNUG7H3WBIhtg7/ocN3Y9QtPKhDejIB8j1rnyyP7EXOKkwnKSFxVwMsDEDjEKH hkt2I3eG1AuOaGz/E459bgCxW19CGsN7NKTycLzL0NCaBT+TH49i3D3fkc9CvVKf Dwfy/ErkRjXGd9ZX8qEKp1qYwFmrkrZsCW4+pNNngnuVCxv/yjlesDLWRWSMc1Wu 6gEspuYMsoiGx1Q8Jp+rluUKhTQrUqUIyHCZ/Ob/33lJvHw/EnvFn+JEwhjbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGUcz2oK8qf9SY4qsSg8mDIBDXaswHwYDVR0j BBgwFoAUyicPH9BRs81l25MJcqmTNcRWFewwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVkOWVhMjAtMzQzZC00YWNiLTk1ODEtODFmOWQ3ZWE5MmZlLzAvQ0EyNzBGMUZE MDUxQjNDRDY1REI5MzA5NzJBOTkzMzVDNDU2MTVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTI3MEYxRkQwNTFCM0NENjVEQjkzMDk3MkE5OTMzNUM0NTYx NUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVkOWVhMjAtMzQzZC00YWNiLTk1 ODEtODFmOWQ3ZWE5MmZlLzAvQ0EyNzBGMUZEMDUxQjNDRDY1REI5MzA5NzJBOTkz MzVDNDU2MTVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0Oa7D6OmGYtpZnxSNIMnNvtDoSx0yfeCeP rdybjjiA/pq7iCu6kvg9PDAAvT49FyBpSGnjkNVqT8UVt+qJEZA6H0OzHYrkMVPh zbmgKGDwLL8E/80ouslVdF1K0lXRLfz/NrFbih0Z90IG9cD7NeDDVYSwq5vOKKKr nJnWaDIfkca2r7YFF/AGHsTZlvjDaq1ogD3+6u8r6jf0ojgrZP6mxXemvbJI1wGe 2aSfTNKWhJe2w8OcthNRzgkPsO2/FgVyhD3A6p4HsFccX1Zg+RnYJnstsefff7T+ 8+KDMDvtfmJc3nGDKco9enN4fvkV/NNTHTMvn7Jq/+Mx/3+qEAc= -----END CERTIFICATE-----Generated at Tue Jul 21 06:51:24 2026 by rpki-client