$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft File: A27FF2B00B818D036621468F265A350211C5B6B1.mft (raw, json) Hash identifier: ZnPHwyY4cXk6FLfc4lu4IojarHESLnwshMsXvLQPBCg= Subject key identifier: CF:80:6B:2B:42:86:98:EE:2E:25:40:99:68:A3:3F:42:6D:42:E7:93 Authority key identifier: A2:7F:F2:B0:0B:81:8D:03:66:21:46:8F:26:5A:35:02:11:C5:B6:B1 Certificate issuer: /CN=A27FF2B00B818D036621468F265A350211C5B6B1 Certificate serial: 1A121628D5ACA8BB44A176A75E28DA1DF8272775 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:15:15 +0000 Manifest this update: Wed 16 Sep 2026 21:10:15 +0000 Manifest next update: Fri 18 Sep 2026 00:06:15 +0000 Files and hashes: 1: A27FF2B00B818D036621468F265A350211C5B6B1.crl (hash: NvaO8gxFzNR2B5jwynQmesaaJuOjZswgEBdZm7AzIPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.crl rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:12:16:28:d5:ac:a8:bb:44:a1:76:a7:5e:28:da:1d:f8:27:27:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A27FF2B00B818D036621468F265A350211C5B6B1 Validity Not Before: Sep 16 21:10:15 2026 GMT Not After : Sep 18 00:06:15 2026 GMT Subject: CN=CF806B2B428698EE2E25409968A33F426D42E793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:25:8e:21:64:39:b0:b9:0e:62:17:1f:87: dc:6b:24:26:cc:95:1a:61:65:07:e6:52:fb:7b:c4: 18:97:d1:2a:44:4e:dd:a7:6f:07:a6:08:ff:c6:54: f8:e4:cf:86:3a:79:3d:2b:19:04:6a:8e:2a:1f:3a: 34:b2:b2:46:68:9a:2b:3c:44:ee:f9:8b:6c:25:e3: 6d:7c:66:73:fd:85:f9:cd:6a:57:7c:7f:02:17:2c: 7d:21:bd:fe:c6:b9:25:95:a2:02:c8:a7:62:10:ac: 41:0d:c0:2b:05:dc:11:5c:cf:dc:d9:f3:67:a2:fe: 93:1c:bd:99:e6:f7:8e:26:30:b2:4a:95:f1:9f:e4: 1d:89:bc:4c:f8:df:69:0d:cd:77:22:43:a7:95:a8: 0a:0c:9d:de:97:4a:8c:a0:22:17:19:26:c5:8c:fe: 89:f5:53:ae:29:e3:f8:fa:b7:8d:97:27:ff:7d:39: 71:05:65:fd:2a:05:26:ca:63:82:b1:5d:b4:2c:57: 15:4c:d9:2e:7d:f8:af:00:e1:bd:a0:1b:ef:ec:53: 4d:79:76:af:ff:7d:2f:72:c1:a7:9a:1f:14:fd:2e: 52:76:10:29:b2:1f:90:aa:06:32:c8:ec:91:3e:5e: 80:c5:e3:b0:67:5e:fc:ea:b4:70:7d:70:5b:26:1a: 98:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:80:6B:2B:42:86:98:EE:2E:25:40:99:68:A3:3F:42:6D:42:E7:93 X509v3 Authority Key Identifier: keyid:A2:7F:F2:B0:0B:81:8D:03:66:21:46:8F:26:5A:35:02:11:C5:B6:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:32:30:a3:f4:d7:fb:88:b7:c5:c4:d6:8d:f4:f4:0d:c7:8f: 66:5c:fd:83:79:11:3b:8b:79:84:61:dc:db:d6:52:a3:4c:4e: 84:19:97:13:d3:88:48:dc:9b:21:de:35:65:9f:77:12:76:6a: fc:da:3b:bb:89:1e:04:5c:35:e1:f5:d1:69:69:6b:47:f4:e1: f5:65:84:17:43:7b:cf:7c:89:73:80:4c:48:bd:a1:96:c3:61: 20:cd:3f:33:f2:fa:dc:72:c3:34:1d:de:99:f3:25:ed:69:67: b2:70:7f:1a:9a:8f:d6:80:53:5a:39:ae:97:1e:43:fc:e8:49: 73:01:df:41:e8:e5:14:7e:b4:65:c6:a5:05:b6:09:e5:8b:d1: 7f:26:0c:79:48:fa:37:d6:13:a4:48:dd:cd:13:5f:2b:fe:d6: 4b:00:ea:55:90:4e:01:15:88:89:f8:39:cc:5b:5b:70:53:24: 5c:d9:be:db:3e:57:a4:65:07:09:57:2d:b3:81:7b:22:34:92: 9a:a7:56:e8:99:f3:84:f4:7f:40:b2:74:e7:88:39:87:e8:7a: e1:e3:c9:95:33:10:5e:3e:5c:7b:c2:db:3d:5d:ac:8d:47:f2: 10:36:e2:14:4a:f0:31:10:42:a1:a4:38:50:00:f5:3e:38:c9: 23:80:50:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhIWKNWsqLtEoXanXijaHfgnJ3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI3RkYyQjAwQjgxOEQwMzY2MjE0NjhGMjY1QTM1MDIx MUM1QjZCMTAeFw0yNjA5MTYyMTEwMTVaFw0yNjA5MTgwMDA2MTVaMDMxMTAvBgNV BAMTKENGODA2QjJCNDI4Njk4RUUyRTI1NDA5OTY4QTMzRjQyNkQ0MkU3OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqCyWOIWQ5sLkOYhcfh9xrJCbM lRphZQfmUvt7xBiX0SpETt2nbwemCP/GVPjkz4Y6eT0rGQRqjiofOjSyskZomis8 RO75i2wl4218ZnP9hfnNald8fwIXLH0hvf7GuSWVogLIp2IQrEENwCsF3BFcz9zZ 82ei/pMcvZnm944mMLJKlfGf5B2JvEz432kNzXciQ6eVqAoMnd6XSoygIhcZJsWM /on1U64p4/j6t42XJ/99OXEFZf0qBSbKY4KxXbQsVxVM2S59+K8A4b2gG+/sU015 dq//fS9ywaeaHxT9LlJ2ECmyH5CqBjLI7JE+XoDF47BnXvzqtHB9cFsmGpgxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz4BrK0KGmO4uJUCZaKM/Qm1C55MwHwYDVR0j BBgwFoAUon/ysAuBjQNmIUaPJlo1AhHFtrEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWUyMGU4MDAtMjViYi00Yzc4LWE4YjMtZjBlYjI1YzJlODJhLzAvQTI3RkYyQjAw QjgxOEQwMzY2MjE0NjhGMjY1QTM1MDIxMUM1QjZCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjdGRjJCMDBCODE4RDAzNjYyMTQ2OEYyNjVBMzUwMjExQzVC NkIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWUyMGU4MDAtMjViYi00Yzc4LWE4 YjMtZjBlYjI1YzJlODJhLzAvQTI3RkYyQjAwQjgxOEQwMzY2MjE0NjhGMjY1QTM1 MDIxMUM1QjZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkyMKP01/uIt8XE1o309A3Hj2Zc/YN5ETuL eYRh3NvWUqNMToQZlxPTiEjcmyHeNWWfdxJ2avzaO7uJHgRcNeH10Wlpa0f04fVl hBdDe898iXOATEi9oZbDYSDNPzPy+txywzQd3pnzJe1pZ7Jwfxqaj9aAU1o5rpce Q/zoSXMB30Ho5RR+tGXGpQW2CeWL0X8mDHlI+jfWE6RI3c0TXyv+1ksA6lWQTgEV iIn4OcxbW3BTJFzZvts+V6RlBwlXLbOBeyI0kpqnVuiZ84T0f0CydOeIOYfoeuHj yZUzEF4+XHvC2z1drI1H8hA24hRK8DEQQqGkOFAA9T44ySOAUKs= -----END CERTIFICATE-----Generated at Thu Sep 17 14:45:47 2026 by rpki-client