
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
File: 27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft (raw, json)
Hash identifier: bbXHbmqytjEHv0dAnKCcl+LlUb14ApuMjWJeb4TyDh0=
Subject key identifier: 7F:F9:32:F3:F0:4C:FE:F8:2C:36:B1:34:23:1A:AB:4D:0E:86:A3:F1
Authority key identifier: 27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6
Certificate issuer: /CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6
Certificate serial: 6593CF03A0ADCC71B8423FC88A35B748D3737F0E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 02:06:06 +0000
Manifest this update: Wed 13 May 2026 02:01:06 +0000
Manifest next update: Thu 14 May 2026 03:25:06 +0000
Files and hashes: 1: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: VH+O4TH4eDJSI25JypJZ7rsLYdNS/p0NBbNxGChAQqQ=)
2: 27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl (hash: aEWqKSZwzj5uc8ZOhAjWxjUOMqZUCYpmrfPJ0Y8CPYM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl
rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:93:cf:03:a0:ad:cc:71:b8:42:3f:c8:8a:35:b7:48:d3:73:7f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6
Validity
Not Before: May 13 02:01:06 2026 GMT
Not After : May 14 03:25:06 2026 GMT
Subject: CN=7FF932F3F04CFEF82C36B134231AAB4D0E86A3F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:37:90:24:aa:cc:25:e4:98:a1:98:ab:1f:36:
05:98:46:92:f8:a8:69:3b:ba:07:aa:74:06:cc:59:
d2:0e:40:3a:f0:11:fe:cb:56:d5:e1:c4:07:df:9b:
bf:05:a1:c5:64:d0:47:e1:01:34:a6:dc:fc:5c:dc:
a3:f2:55:25:3b:eb:7d:c4:74:08:d0:8f:98:60:83:
86:1c:6d:50:2f:56:57:c5:bf:64:69:59:78:95:15:
76:ed:34:dc:f6:4e:25:76:a6:c2:54:81:48:83:b8:
a2:28:db:a1:7a:1e:b0:cb:7c:67:7b:d9:17:bb:74:
91:ff:ba:c2:2c:88:7a:3c:7c:c3:1d:b9:fa:69:ad:
75:d2:64:00:86:cc:dc:52:c2:71:e8:f8:c1:67:3b:
43:38:e8:5a:b1:e4:70:84:af:ba:44:0a:e5:31:57:
b1:fa:f5:40:1e:7d:ec:dd:86:86:20:bf:3b:1a:71:
8f:cf:d7:63:58:4b:8f:d2:5d:1d:26:19:87:c5:3a:
01:21:df:3f:02:73:9d:4a:4c:52:2a:07:a0:37:70:
a0:f7:c9:14:1a:60:ae:a6:85:ce:7c:a9:62:36:89:
d2:f2:66:da:e3:7c:11:43:b4:db:ae:39:41:40:93:
d7:c4:d1:ec:a5:b4:58:70:bb:b7:7e:ff:12:94:a0:
25:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F9:32:F3:F0:4C:FE:F8:2C:36:B1:34:23:1A:AB:4D:0E:86:A3:F1
X509v3 Authority Key Identifier:
keyid:27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7a:9a:6f:a6:9e:2f:29:3f:a7:d5:14:c6:26:c6:2c:14:22:
9d:14:11:8d:37:30:99:08:3e:a6:1f:2d:0d:f1:7c:ad:ef:41:
f7:69:ea:e6:e7:f5:9c:30:39:ab:36:d6:ed:b0:b6:88:37:92:
d2:d7:cb:2b:e8:87:46:27:36:16:53:b3:d9:11:9a:8f:f7:a0:
bd:27:c6:40:3d:be:30:66:85:58:6f:a4:24:b9:76:1c:4c:b9:
5d:8c:6d:56:85:00:4d:c2:59:44:4b:b1:fa:34:1e:5b:d8:d0:
98:95:f6:78:5b:2a:3a:d2:65:9f:a3:2e:29:d7:c6:0f:f5:c1:
e1:51:e1:4b:ae:aa:4d:ae:70:77:ac:eb:e1:04:a3:8b:0b:a0:
1f:10:5d:eb:9d:e4:d7:5d:26:13:2d:fb:57:84:34:15:7b:3d:
6a:71:2f:b8:32:8a:c3:52:33:c1:0d:d8:ce:a2:fc:34:a3:a2:
ea:8c:7a:1d:b7:99:3f:92:4a:8b:9d:e0:ad:c1:1b:84:1f:07:
11:fb:90:3a:e7:aa:a1:b9:77:f7:8f:55:6f:10:33:af:d3:2a:
b5:37:c4:67:ed:34:7a:f2:a3:15:fa:4f:67:4e:cc:49:3c:72:
d0:b0:fa:b1:e4:7d:87:a7:ab:c2:e3:55:a7:cb:d7:59:ac:ff:
6e:b4:97:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:49:08 2026 by rpki-client