$ rpki-client -vvf rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft File: A27FF2B00B818D036621468F265A350211C5B6B1.mft (raw, json) Hash identifier: XqkyNJ7oZyKA7jOFBI9Bgk8eR4z51lxYLvru/D/WxFg= Subject key identifier: E3:BB:21:70:CF:D5:4E:80:46:9A:1B:79:47:D7:0B:4E:C4:81:0E:33 Authority key identifier: A2:7F:F2:B0:0B:81:8D:03:66:21:46:8F:26:5A:35:02:11:C5:B6:B1 Certificate issuer: /CN=A27FF2B00B818D036621468F265A350211C5B6B1 Certificate serial: 7882BF5018F999B8CEB1BCDAAD87A72A38652792 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 05:16:14 +0000 Manifest this update: Sat 20 Jun 2026 05:11:14 +0000 Manifest next update: Sun 21 Jun 2026 06:10:14 +0000 Files and hashes: 1: A27FF2B00B818D036621468F265A350211C5B6B1.crl (hash: NTr5ldyQ/e8rGkVup/BCGRj7arD9PsGQPNjIQqr5CHQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.crl rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:82:bf:50:18:f9:99:b8:ce:b1:bc:da:ad:87:a7:2a:38:65:27:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A27FF2B00B818D036621468F265A350211C5B6B1 Validity Not Before: Jun 20 05:11:14 2026 GMT Not After : Jun 21 06:10:14 2026 GMT Subject: CN=E3BB2170CFD54E80469A1B7947D70B4EC4810E33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:37:75:66:3b:31:4d:f3:f6:bb:79:45:69: 5f:ca:c3:ea:6e:b2:48:ad:e5:27:e0:7a:32:b7:aa: 0d:28:b3:8e:47:27:62:b6:a8:73:32:50:36:c2:d5: 72:22:ff:c5:3d:61:6a:7d:ac:64:5c:28:d7:f0:42: 13:cc:3f:e3:37:9b:b0:c7:ec:3b:dd:89:ad:1d:c5: f7:f5:00:16:11:06:dc:27:23:11:eb:30:3d:88:87: 76:22:f9:db:6e:e7:5b:f9:66:f2:7e:f7:fb:1f:79: 36:34:37:cb:6d:bb:c2:d4:27:3e:72:0e:8b:99:6f: 93:58:8b:95:10:51:f4:75:46:43:a4:bf:e1:7b:41: 1d:66:72:6d:14:ae:9e:fb:6d:a4:96:1f:15:fb:56: 54:21:e9:72:24:80:68:97:46:ba:e4:11:f0:49:a8: 0c:80:b7:b6:b6:5c:1d:94:fb:dc:52:6c:ec:ab:3c: c4:3b:41:3e:7b:b0:0e:ff:c1:70:3f:9b:f4:9d:22: c4:01:11:74:09:93:22:49:f3:0e:05:3f:31:e1:3c: a6:a5:7c:c9:b8:99:52:48:6f:9e:9b:8f:03:c3:15: 07:4a:88:e6:ed:9a:47:6e:b1:d3:14:63:c6:99:ab: 86:59:e5:c0:62:17:4f:14:fb:45:28:58:fe:34:3a: c2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BB:21:70:CF:D5:4E:80:46:9A:1B:79:47:D7:0B:4E:C4:81:0E:33 X509v3 Authority Key Identifier: keyid:A2:7F:F2:B0:0B:81:8D:03:66:21:46:8F:26:5A:35:02:11:C5:B6:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:48:6e:25:41:6f:b1:94:b6:4a:c5:6e:33:ac:fc:cd:1a:29: c9:60:d6:38:b9:e9:fa:53:a1:68:31:ab:06:2e:dc:77:3a:68: 5c:49:be:e5:cc:c3:c9:8f:4e:d7:2c:e9:5a:8e:59:99:af:a8: b3:86:8d:19:b3:24:82:08:27:b1:b0:58:cc:7c:43:c0:c3:a3: 95:ef:f2:4a:88:21:e0:33:8a:6b:b1:50:d3:bf:74:bf:bb:6c: a1:b4:bd:0b:04:eb:11:5b:9e:a8:b7:94:b2:51:1f:64:e9:7a: 58:6f:ae:a6:6a:e5:28:70:ae:69:f6:cb:2b:87:bf:ee:4a:d6: f4:b8:e8:ec:18:bc:0c:79:2b:00:08:6a:7d:df:31:e7:74:38: 52:ff:88:f4:b3:8e:dc:d8:3a:9e:02:10:57:13:8e:64:99:a5: b4:3b:fc:4c:cb:55:3a:c7:2a:e1:8f:81:58:27:cd:86:16:3d: 53:1b:f3:e7:38:48:cb:ef:94:ba:dd:30:ee:1e:82:71:c5:42: ed:0f:9e:87:46:9d:4a:07:82:f7:f5:99:f3:7e:8a:57:9e:34: e6:3c:28:62:7a:bf:b6:7b:e0:f9:80:aa:9f:4d:12:cb:5c:17: 28:5d:f9:b7:c1:35:ee:0c:ed:01:5d:3d:a1:d4:cf:dd:39:e0: 92:7a:41:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeIK/UBj5mbjOsbzarYenKjhlJ5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI3RkYyQjAwQjgxOEQwMzY2MjE0NjhGMjY1QTM1MDIx MUM1QjZCMTAeFw0yNjA2MjAwNTExMTRaFw0yNjA2MjEwNjEwMTRaMDMxMTAvBgNV BAMTKEUzQkIyMTcwQ0ZENTRFODA0NjlBMUI3OTQ3RDcwQjRFQzQ4MTBFMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyjzd1ZjsxTfP2u3lFaV/Kw+pu skit5SfgejK3qg0os45HJ2K2qHMyUDbC1XIi/8U9YWp9rGRcKNfwQhPMP+M3m7DH 7Dvdia0dxff1ABYRBtwnIxHrMD2Ih3Yi+dtu51v5ZvJ+9/sfeTY0N8ttu8LUJz5y DouZb5NYi5UQUfR1RkOkv+F7QR1mcm0Urp77baSWHxX7VlQh6XIkgGiXRrrkEfBJ qAyAt7a2XB2U+9xSbOyrPMQ7QT57sA7/wXA/m/SdIsQBEXQJkyJJ8w4FPzHhPKal fMm4mVJIb56bjwPDFQdKiObtmkdusdMUY8aZq4ZZ5cBiF08U+0UoWP40OsLfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU47shcM/VToBGmht5R9cLTsSBDjMwHwYDVR0j BBgwFoAUon/ysAuBjQNmIUaPJlo1AhHFtrEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWUyMGU4MDAtMjViYi00Yzc4LWE4YjMtZjBlYjI1YzJlODJhLzAvQTI3RkYyQjAw QjgxOEQwMzY2MjE0NjhGMjY1QTM1MDIxMUM1QjZCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjdGRjJCMDBCODE4RDAzNjYyMTQ2OEYyNjVBMzUwMjExQzVC NkIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWUyMGU4MDAtMjViYi00Yzc4LWE4 YjMtZjBlYjI1YzJlODJhLzAvQTI3RkYyQjAwQjgxOEQwMzY2MjE0NjhGMjY1QTM1 MDIxMUM1QjZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZIbiVBb7GUtkrFbjOs/M0aKclg1ji56fpT oWgxqwYu3Hc6aFxJvuXMw8mPTtcs6VqOWZmvqLOGjRmzJIIIJ7GwWMx8Q8DDo5Xv 8kqIIeAzimuxUNO/dL+7bKG0vQsE6xFbnqi3lLJRH2TpelhvrqZq5Shwrmn2yyuH v+5K1vS46OwYvAx5KwAIan3fMed0OFL/iPSzjtzYOp4CEFcTjmSZpbQ7/EzLVTrH KuGPgVgnzYYWPVMb8+c4SMvvlLrdMO4egnHFQu0PnodGnUoHgvf1mfN+ileeNOY8 KGJ6v7Z74PmAqp9NEstcFyhd+bfBNe4M7QFdPaHUz9054JJ6QaI= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:59 2026 by rpki-client