
$ rpki-client -vvf rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft
File: 27A90045CBA22331AEF929C017271A7936688C97.mft (raw, json)
Hash identifier: lRTTIBfUTBziL7CN8FbcTwP18VVGywunYMAlhWAeVeA=
Subject key identifier: 63:50:B0:DA:C4:87:9C:88:14:D1:10:5C:9F:B9:CC:09:D4:57:16:6A
Authority key identifier: 27:A9:00:45:CB:A2:23:31:AE:F9:29:C0:17:27:1A:79:36:68:8C:97
Certificate issuer: /CN=27A90045CBA22331AEF929C017271A7936688C97
Certificate serial: 5BEBB06B783D88A9E8E712DBD6B714B76BFCADC9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27A90045CBA22331AEF929C017271A7936688C97.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft
Manifest number: 7D
Signing time: Sun 02 Aug 2026 18:19:34 +0000
Manifest this update: Sun 02 Aug 2026 18:14:34 +0000
Manifest next update: Mon 03 Aug 2026 21:39:34 +0000
Files and hashes: 1: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: wxG5u0knwwtRFwXPMgfrz2l9Xi2Prxv/dPiLuDPGtJo=)
2: 27A90045CBA22331AEF929C017271A7936688C97.crl (hash: 0mboQK3E4GWibEuSd0o20tk4DeGmfh89SVH0jDxIC6s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.crl
rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27A90045CBA22331AEF929C017271A7936688C97.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 17:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:eb:b0:6b:78:3d:88:a9:e8:e7:12:db:d6:b7:14:b7:6b:fc:ad:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27A90045CBA22331AEF929C017271A7936688C97
Validity
Not Before: Aug 2 18:14:34 2026 GMT
Not After : Aug 3 21:39:34 2026 GMT
Subject: CN=6350B0DAC4879C8814D1105C9FB9CC09D457166A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:51:09:e2:bc:de:61:ea:c7:dc:4c:90:5a:
d4:f4:c9:73:88:56:33:65:76:ec:3e:b4:f1:05:6b:
ca:15:88:40:d1:05:85:dc:d0:2c:2f:37:c8:03:fe:
35:69:e0:27:80:00:78:2e:b1:80:89:93:26:c2:e6:
0e:ed:56:43:66:4b:28:e0:92:15:56:9a:4e:18:c1:
fc:bb:1d:43:52:a9:73:7a:f3:d4:52:c7:34:b7:07:
be:51:1a:cf:08:b2:79:b2:28:7c:30:81:e4:e3:70:
92:bb:e7:4b:b8:c3:9c:9a:82:2c:0e:0d:56:54:2b:
ba:68:8d:a0:32:d0:5d:51:dd:1c:6c:92:68:43:b8:
73:05:95:ed:ec:23:f0:81:6e:71:3f:a4:a6:4a:ae:
4c:d9:ac:ef:34:98:b3:f0:e9:ba:c0:a6:3b:fc:0a:
0c:b1:c9:b6:16:29:78:40:3c:0c:2c:4d:9a:e8:50:
93:c9:b5:b5:8b:d9:56:e9:fe:8f:b3:2f:c5:37:e7:
31:33:fe:ee:7f:c5:c7:4c:0e:72:8d:2d:2f:dd:02:
4f:97:dd:20:bf:a3:ef:28:9e:c3:e9:91:b3:dc:e1:
49:04:34:5c:89:98:6b:09:ba:18:d1:22:39:4a:88:
6f:29:f8:b2:ac:61:6a:2e:59:17:72:04:f7:88:b8:
7e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:50:B0:DA:C4:87:9C:88:14:D1:10:5C:9F:B9:CC:09:D4:57:16:6A
X509v3 Authority Key Identifier:
keyid:27:A9:00:45:CB:A2:23:31:AE:F9:29:C0:17:27:1A:79:36:68:8C:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27A90045CBA22331AEF929C017271A7936688C97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:08:d7:ac:9d:21:03:ed:ca:8a:0f:44:96:55:3d:f4:2e:49:
1c:94:b2:1b:6e:3e:8b:0a:f8:ae:a4:75:12:92:e9:04:c5:d2:
c6:5f:90:d9:50:08:25:f4:61:55:c4:1d:6a:00:c0:a0:95:a3:
a4:a7:ec:b1:f9:fe:09:d0:19:03:f5:96:b9:65:39:56:d3:49:
28:31:f8:e1:80:a9:46:ea:1e:1a:9b:ee:c4:e4:a5:5f:6c:ae:
ae:f4:10:94:87:f6:a3:73:d9:38:75:ff:3d:aa:73:93:12:d4:
45:ec:83:e1:46:31:86:47:37:a7:80:c7:3e:18:39:72:f2:24:
87:18:ed:17:59:04:1a:5d:4f:e3:4c:73:db:1b:56:c2:e6:ba:
d5:85:67:8c:f4:16:24:00:eb:55:8d:1e:1c:95:e5:eb:b9:14:
06:2a:dc:11:67:4c:72:63:b2:c4:47:f4:49:77:56:19:f0:e4:
62:68:27:75:f4:7c:88:ab:7d:cd:68:53:e0:80:79:8a:d3:9b:
3d:c7:fe:3a:3a:3d:9e:f9:10:48:00:ae:d7:0f:de:6f:e8:d5:
b6:48:b0:f9:6a:30:26:35:c2:f1:28:4e:25:08:ad:64:be:9e:
ab:b6:6c:9c:d5:e9:67:f2:32:41:54:57:c0:65:f9:2c:8a:4a:
f3:a1:ad:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:34:54 2026 by rpki-client