
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.mft
File: 27A02CA4FEB6B2D7C98BE15935226321BC5082C3.mft (raw, json)
Hash identifier: NccbkJNpw7+uBsYWDb//y7yXN99D6Ku6Xxoy8A23/m4=
Subject key identifier: EC:37:B3:3A:9A:B6:7D:C8:ED:82:E4:21:53:F2:43:85:B1:73:E5:80
Authority key identifier: 27:A0:2C:A4:FE:B6:B2:D7:C9:8B:E1:59:35:22:63:21:BC:50:82:C3
Certificate issuer: /CN=27A02CA4FEB6B2D7C98BE15935226321BC5082C3
Certificate serial: 318CFC8C5B6020CE1818AB42A0710A9DB3A4B87D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.mft
Manifest number: ED
Signing time: Mon 26 Oct 2026 12:48:21 +0000
Manifest this update: Mon 26 Oct 2026 12:43:21 +0000
Manifest next update: Tue 27 Oct 2026 14:30:21 +0000
Files and hashes: 1: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: ISamzj2GyfxCZEAngxKx/usD8wbe2PFgnEt/8aD0w6g=)
2: 27A02CA4FEB6B2D7C98BE15935226321BC5082C3.crl (hash: w5atU1UIElEvEuWe4lMSiSdADwUJixX+UrMK2ItB0Mo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.crl
rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 12:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:8c:fc:8c:5b:60:20:ce:18:18:ab:42:a0:71:0a:9d:b3:a4:b8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27A02CA4FEB6B2D7C98BE15935226321BC5082C3
Validity
Not Before: Oct 26 12:43:21 2026 GMT
Not After : Oct 27 14:30:21 2026 GMT
Subject: CN=EC37B33A9AB67DC8ED82E42153F24385B173E580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d9:d1:8f:5d:6f:8a:22:57:2f:91:82:e3:78:
ed:d6:1f:fd:2a:17:04:1b:44:d1:7e:6a:90:e9:e6:
dd:33:2c:7e:13:b6:7c:38:96:84:fc:d9:aa:93:00:
c4:d5:0a:ae:bb:4d:4e:6f:7b:c2:72:ba:b8:e7:44:
0e:6a:fb:62:a3:ee:c6:61:a4:fb:7a:91:6d:d9:8f:
c5:f4:f8:34:c3:30:0f:b0:29:43:ed:41:73:9b:59:
6e:73:42:93:fe:7a:91:60:c7:7e:b8:f2:e7:35:f5:
5a:66:32:5e:9b:20:5f:8c:a6:9e:da:a4:21:5f:bc:
ed:ed:c3:71:6b:91:8b:4e:50:51:b0:0e:0e:c1:12:
69:fb:6c:55:83:2c:9d:94:47:2f:aa:be:d6:6c:cb:
e5:5f:d5:78:fa:51:8f:b1:39:41:1c:b7:b2:97:c7:
67:ec:ad:b6:5a:a0:27:52:b9:29:61:07:7c:c2:79:
c7:de:bf:e2:ce:b4:91:cf:9b:f9:78:8c:d7:8c:70:
5f:f7:48:ca:86:54:ec:40:33:38:bc:71:9f:be:36:
a3:de:c9:32:e9:65:b6:b2:32:53:f4:b7:29:3a:52:
d1:8c:f3:e4:d3:e0:90:98:dd:31:86:97:5d:2f:c5:
54:2a:07:e9:16:fe:2f:b5:9d:9c:7f:b3:37:92:ea:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:37:B3:3A:9A:B6:7D:C8:ED:82:E4:21:53:F2:43:85:B1:73:E5:80
X509v3 Authority Key Identifier:
keyid:27:A0:2C:A4:FE:B6:B2:D7:C9:8B:E1:59:35:22:63:21:BC:50:82:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c8:98:26:20:ab:62:59:49:0b:07:1c:ac:f8:1a:d8:cc:3c:
f1:fa:21:8f:4f:6e:ba:f6:56:84:b3:2c:3a:6b:82:a4:81:3a:
b7:7a:0f:47:7a:9e:86:ca:cd:d0:b3:fd:32:ad:7b:3a:f0:ec:
e6:26:64:a4:ee:02:28:1a:58:90:d7:43:ef:05:d3:d1:b4:55:
7a:2b:6a:87:57:1b:75:be:ee:2a:48:24:cd:e7:dc:bb:77:0e:
72:7c:a8:95:58:08:0e:e8:9a:72:ef:12:04:13:c7:40:6f:3a:
f6:41:e6:60:52:a2:06:da:a7:a0:83:56:c0:32:1d:16:da:d2:
f1:a7:cb:54:ec:91:7d:42:d7:31:ef:31:58:1e:f6:48:e1:89:
22:55:0c:d0:7c:fa:28:ef:92:10:36:6c:26:93:67:0e:06:e1:
d8:45:5a:09:b0:cf:b1:52:03:d8:c6:3d:ec:d8:ed:96:c0:cc:
8c:69:0b:1f:af:9d:25:10:c9:f1:e2:90:cb:79:18:c2:9c:14:
36:2d:54:84:c0:83:7f:95:8a:ac:c9:41:4c:d5:69:f1:46:08:
d2:b9:97:78:1a:1b:2b:3b:df:02:a3:02:dc:30:c1:c7:2e:06:
81:03:45:d1:bf:49:e6:31:4c:ec:75:a8:36:df:0f:80:93:fa:
31:d7:96:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:39:34 2026 by rpki-client