$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft File: 27E417DDE008607BCDD5A3593D3468A196716538.mft (raw, json) Hash identifier: L5SMbAuWV8pCdGhHXxff/6k0ku0mZSOIu8yzgsMc9s4= Subject key identifier: 82:1C:B0:A0:C6:26:A0:C4:B8:E8:4C:C7:9C:51:00:F4:D6:4B:5E:D3 Authority key identifier: 27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38 Certificate issuer: /CN=27E417DDE008607BCDD5A3593D3468A196716538 Certificate serial: 40067B3DF1D2222AF761DC2F1C5E4F4B2A7A0F6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 22:00:15 +0000 Manifest this update: Tue 03 Nov 2026 21:55:15 +0000 Manifest next update: Wed 04 Nov 2026 23:28:15 +0000 Files and hashes: 1: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: 1bOoTdfrvDcIKLgnFWnuVyWYZ52c2xuJTvaGjJbRj4Y=) 2: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: 6rYbBTfQu9Ye+jxQ58mCILFsaxt3rc45oOO8Pu0AOKM=) 3: 27E417DDE008607BCDD5A3593D3468A196716538.crl (hash: 4yf2UNAfLAPTCXLSfJ4eJ6okuIQ/lrblhvsy400iTH8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 23:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:06:7b:3d:f1:d2:22:2a:f7:61:dc:2f:1c:5e:4f:4b:2a:7a:0f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27E417DDE008607BCDD5A3593D3468A196716538 Validity Not Before: Nov 3 21:55:15 2026 GMT Not After : Nov 4 23:28:15 2026 GMT Subject: CN=821CB0A0C626A0C4B8E84CC79C5100F4D64B5ED3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6e:3b:30:5c:7e:ce:3c:b0:74:99:f9:92:12: 35:51:9f:82:25:b9:f9:cc:83:62:ee:8b:2c:12:db: 9c:37:59:73:0a:c1:97:99:5c:6c:52:32:fd:4d:61: 09:85:f4:10:93:ed:3f:16:78:86:39:f0:4a:7c:ea: 40:7b:98:f6:f2:71:dc:71:1b:47:aa:a0:c0:18:87: d3:e8:87:2a:3b:89:54:e0:97:29:65:9e:2a:b6:41: c6:d3:ca:47:5e:e9:3d:46:47:66:96:12:7b:24:79: d2:7f:bb:af:0e:4f:75:78:05:56:55:c2:7b:4d:43: 66:64:47:59:01:7e:62:fe:41:6f:df:ad:2d:3b:6a: a4:70:61:98:83:db:69:51:d0:00:df:a4:19:f6:32: 00:7e:59:d2:42:65:ed:6f:8e:b2:80:9a:f0:6d:2d: 90:21:3d:bf:8d:e9:c7:8e:2b:a6:4e:d5:44:59:08: b7:b2:74:98:1f:c6:08:7d:4a:e6:cd:05:35:40:4d: c5:56:9f:0f:f5:61:70:32:4a:be:74:5e:cc:46:93: 60:0e:1b:94:56:07:1d:8b:a7:de:5d:ec:ec:5e:0d: c5:7b:20:14:69:25:a8:64:9a:df:ce:ac:b1:c1:be: 91:7b:c5:76:04:85:05:ca:6d:7e:59:cc:90:9c:11: 15:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1C:B0:A0:C6:26:A0:C4:B8:E8:4C:C7:9C:51:00:F4:D6:4B:5E:D3 X509v3 Authority Key Identifier: keyid:27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2c:a7:00:f2:bf:68:c5:47:14:f1:b5:32:4d:8a:4c:e6:a8: 5b:b4:ad:b0:36:3f:20:66:3c:d6:57:07:f1:d4:b6:17:96:b4: dc:59:8b:84:cb:6d:ca:59:4e:bc:e6:bd:65:d8:f2:2a:10:00: b0:75:5b:58:78:a1:1e:54:af:dd:69:51:35:e1:9c:94:f5:18: c8:e3:48:c0:b0:21:2c:02:cd:2c:c8:f8:b6:10:c1:80:f5:1e: f6:e2:c7:43:07:59:23:9c:8f:7b:d4:9f:7f:4a:30:c8:1c:d8: 1c:db:a8:ac:d8:71:95:16:d8:2e:90:d3:07:4a:29:b2:e5:e0: 47:8a:53:bd:b5:1b:4e:cd:bb:62:97:ef:fd:d4:20:0d:e0:7c: 9e:28:38:2e:03:54:a5:d0:6a:c7:d8:9c:dd:95:21:b0:a7:48: 99:d4:f0:42:c0:07:8d:1d:08:a8:66:3a:12:f9:0d:fe:d3:0d: b6:90:fc:04:79:db:25:2b:52:97:2b:87:41:13:e3:4f:1d:23: 82:1c:cc:93:55:33:b0:2e:35:f0:50:16:cd:b8:f6:02:14:58: 04:62:36:96:89:15:16:ff:05:ae:ff:af:07:6f:cf:38:fd:3b: d7:4c:25:aa:b0:01:e0:6d:2a:2b:54:bc:85:f7:bc:57:e6:5f: a2:c3:a7:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQAZ7PfHSIir3YdwvHF5PSyp6D24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdFNDE3RERFMDA4NjA3QkNERDVBMzU5M0QzNDY4QTE5 NjcxNjUzODAeFw0yNjExMDMyMTU1MTVaFw0yNjExMDQyMzI4MTVaMDMxMTAvBgNV BAMTKDgyMUNCMEEwQzYyNkEwQzRCOEU4NENDNzlDNTEwMEY0RDY0QjVFRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3bjswXH7OPLB0mfmSEjVRn4Il ufnMg2LuiywS25w3WXMKwZeZXGxSMv1NYQmF9BCT7T8WeIY58Ep86kB7mPbycdxx G0eqoMAYh9Pohyo7iVTglyllniq2QcbTykde6T1GR2aWEnskedJ/u68OT3V4BVZV wntNQ2ZkR1kBfmL+QW/frS07aqRwYZiD22lR0ADfpBn2MgB+WdJCZe1vjrKAmvBt LZAhPb+N6ceOK6ZO1URZCLeydJgfxgh9SubNBTVATcVWnw/1YXAySr50XsxGk2AO G5RWBx2Lp95d7OxeDcV7IBRpJahkmt/OrLHBvpF7xXYEhQXKbX5ZzJCcERVrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUghywoMYmoMS46EzHnFEA9NZLXtMwHwYDVR0j BBgwFoAUJ+QX3eAIYHvN1aNZPTRooZZxZTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjliOWJkMzgtMmVmYS00ZDRjLWE5NTYtNDI0OTJhM2U2MDAwLzAvMjdFNDE3RERF MDA4NjA3QkNERDVBMzU5M0QzNDY4QTE5NjcxNjUzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yN0U0MTdEREUwMDg2MDdCQ0RENUEzNTkzRDM0NjhBMTk2NzE2 NTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMjdFNDE3RERFMDA4NjA3QkNERDVBMzU5M0QzNDY4 QTE5NjcxNjUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGospwDyv2jFRxTxtTJNikzmqFu0rbA2PyBm PNZXB/HUtheWtNxZi4TLbcpZTrzmvWXY8ioQALB1W1h4oR5Ur91pUTXhnJT1GMjj SMCwISwCzSzI+LYQwYD1Hvbix0MHWSOcj3vUn39KMMgc2BzbqKzYcZUW2C6Q0wdK KbLl4EeKU721G07Nu2KX7/3UIA3gfJ4oOC4DVKXQasfYnN2VIbCnSJnU8ELAB40d CKhmOhL5Df7TDbaQ/AR52yUrUpcrh0ET408dI4IczJNVM7AuNfBQFs249gIUWARi NpaJFRb/Ba7/rwdvzzj9O9dMJaqwAeBtKitUvIX3vFfmX6LDp6k= -----END CERTIFICATE-----Generated at Wed Nov 4 05:39:08 2026 by rpki-client