
$ rpki-client -vvf rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft
File: 27A90045CBA22331AEF929C017271A7936688C97.mft (raw, json)
Hash identifier: UuZmoYmErAZJKGxBkNfG/PMj9oObD35hTPyh5T63deA=
Subject key identifier: 72:F4:C4:4D:AE:85:3E:19:BD:DA:C1:3A:9B:3D:A2:B5:DC:F4:C9:7F
Authority key identifier: 27:A9:00:45:CB:A2:23:31:AE:F9:29:C0:17:27:1A:79:36:68:8C:97
Certificate issuer: /CN=27A90045CBA22331AEF929C017271A7936688C97
Certificate serial: 4BD9DE4371E09042B06B1593B3B87325E14D820C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27A90045CBA22331AEF929C017271A7936688C97.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft
Manifest number: 40
Signing time: Thu 18 Jun 2026 07:16:02 +0000
Manifest this update: Thu 18 Jun 2026 07:11:02 +0000
Manifest next update: Fri 19 Jun 2026 07:50:02 +0000
Files and hashes: 1: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: wxG5u0knwwtRFwXPMgfrz2l9Xi2Prxv/dPiLuDPGtJo=)
2: 27A90045CBA22331AEF929C017271A7936688C97.crl (hash: E6Dj6E0O16Fxpgkj7v1jv+ZkNCJTII32imv5qUaMRAg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.crl
rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27A90045CBA22331AEF929C017271A7936688C97.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 07:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:d9:de:43:71:e0:90:42:b0:6b:15:93:b3:b8:73:25:e1:4d:82:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27A90045CBA22331AEF929C017271A7936688C97
Validity
Not Before: Jun 18 07:11:02 2026 GMT
Not After : Jun 19 07:50:02 2026 GMT
Subject: CN=72F4C44DAE853E19BDDAC13A9B3DA2B5DCF4C97F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:a8:81:2b:26:e5:40:87:02:de:2c:b6:b1:
31:d6:9c:8d:9f:52:3b:67:e8:64:43:d2:4c:8e:29:
96:9d:22:5c:30:5c:32:61:2e:46:1f:e9:0d:f7:2e:
5d:e3:21:ad:22:97:9f:fb:7d:b0:fc:75:6c:76:a2:
b1:d4:32:98:b5:2e:d1:f6:ff:95:59:1c:78:13:37:
e8:b6:f4:bf:c2:85:39:91:30:f6:ea:12:42:43:99:
bd:d1:e4:68:c7:4f:6b:c9:11:ac:5d:51:a1:7b:7d:
a1:0a:51:7d:d3:59:62:b0:75:b1:d5:33:1f:87:e5:
92:c3:66:c5:fd:fb:3c:ba:1d:9a:b2:32:83:a8:6c:
c2:df:c2:86:80:39:a7:08:66:12:7e:3e:42:3d:a3:
be:f1:05:af:6c:fe:73:96:ba:f2:3d:42:88:13:37:
88:6d:51:ab:79:5f:b3:dd:cb:2b:68:d5:b2:56:97:
4a:f7:94:65:1b:c6:2e:da:d7:b8:33:c1:6e:f9:fc:
88:f9:fc:72:a8:d8:b5:57:a6:25:60:6e:75:d0:b4:
28:f3:f4:63:27:f3:25:52:92:b7:d1:76:57:67:d2:
28:86:39:84:9d:f2:e1:01:78:a6:e9:8b:71:8d:92:
13:b5:19:a3:f5:84:ca:06:65:a6:51:e1:34:c4:a9:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F4:C4:4D:AE:85:3E:19:BD:DA:C1:3A:9B:3D:A2:B5:DC:F4:C9:7F
X509v3 Authority Key Identifier:
keyid:27:A9:00:45:CB:A2:23:31:AE:F9:29:C0:17:27:1A:79:36:68:8C:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27A90045CBA22331AEF929C017271A7936688C97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ec:61:65:f8:d1:8b:b6:6f:0e:73:57:b1:f8:41:82:e9:a5:
d7:76:ab:26:35:08:fd:04:25:c1:58:8b:de:77:6e:92:51:b3:
a5:56:d8:a5:b2:bc:ed:76:e4:4c:b1:46:de:ec:d4:55:70:f6:
6f:5c:06:f0:e2:e0:27:df:24:b0:5f:8f:2b:e5:f5:16:2f:07:
f1:d8:c9:97:5f:56:aa:52:99:ec:b8:a4:f2:ec:b0:d6:c0:8a:
02:57:44:ea:c8:b8:ad:20:2b:4c:1e:ba:37:5f:8e:2b:25:12:
42:1d:d0:3e:43:16:42:e3:3d:36:13:9c:ef:90:11:73:e3:b1:
81:d8:2d:71:06:67:fa:c2:5a:f1:77:a0:f2:6a:02:88:ef:f1:
de:b5:5e:5d:80:33:0d:ed:a8:7b:2b:28:4d:8a:0b:32:6a:7a:
a6:58:74:4d:f7:88:eb:0c:aa:5f:73:09:58:cc:0e:c2:85:96:
88:cc:62:5f:8d:8f:b0:57:39:bf:ed:b7:30:c4:5e:03:e6:67:
a9:5f:24:31:a9:c1:d7:d7:31:99:96:e7:14:9e:7f:6f:06:99:
d2:65:78:28:b4:87:fa:ae:98:cb:cd:2f:4f:6c:d8:47:df:da:
a1:3e:16:33:db:02:a2:ee:4d:0a:bf:8d:e8:99:bf:6e:a8:34:
67:23:e5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:03 2026 by rpki-client