$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft File: CA270F1FD051B3CD65DB930972A99335C45615EC.mft (raw, json) Hash identifier: lwz1diup1XqbDnjDN+mRGeucWXTpXPfj+2lE4f+LSEo= Subject key identifier: 23:2D:80:73:93:E6:D3:26:31:34:E6:A4:96:92:25:93:A1:93:B5:59 Authority key identifier: CA:27:0F:1F:D0:51:B3:CD:65:DB:93:09:72:A9:93:35:C4:56:15:EC Certificate issuer: /CN=CA270F1FD051B3CD65DB930972A99335C45615EC Certificate serial: 0E19A4E3810B031DACBB3E261794B35C9C4337B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 14:47:17 +0000 Manifest this update: Wed 16 Sep 2026 14:42:17 +0000 Manifest next update: Thu 17 Sep 2026 15:25:17 +0000 Files and hashes: 1: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: NkKjSf90ElcdssnMG0/v4I3k9N6YTsqapPAgxV9RP+E=) 2: CA270F1FD051B3CD65DB930972A99335C45615EC.crl (hash: pdwdy8jXZ/RqDoSK+q93XXdEuo6j5LdiRRx6E+gO+hA=) 3: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: UuwOEqaAvPthTROezeYmcp8tB98baeryTixXf6GL8Aw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.crl rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 15:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:19:a4:e3:81:0b:03:1d:ac:bb:3e:26:17:94:b3:5c:9c:43:37:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA270F1FD051B3CD65DB930972A99335C45615EC Validity Not Before: Sep 16 14:42:17 2026 GMT Not After : Sep 17 15:25:17 2026 GMT Subject: CN=232D807393E6D3263134E6A496922593A193B559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:17:52:8a:5d:5f:07:68:be:97:99:26:3e:31: d6:8d:d1:e6:97:39:d1:a1:ca:bd:47:21:54:41:b2: 29:a7:e6:54:ca:f9:36:23:43:91:76:c8:38:d8:d2: 27:b6:9a:25:d2:bb:34:0f:9b:c3:f8:c7:99:0d:9d: e4:07:0b:ee:08:3c:f1:e5:97:cf:e2:94:b9:98:8e: da:8e:62:60:22:1c:be:39:02:d2:ee:ee:66:da:e4: ff:c4:82:15:96:e9:18:eb:c9:cf:f1:76:1b:83:73: 59:c1:01:81:66:67:30:f4:4e:80:15:11:68:41:05: f2:9d:4c:29:63:e6:f8:ab:da:27:f4:26:8c:ff:f9: 01:cf:db:45:f7:06:ca:a0:7d:d6:2e:34:b7:b9:79: 01:08:63:5c:78:96:e1:02:e5:63:a7:7e:d6:bb:db: 47:86:98:8d:d0:70:a5:92:9d:09:fc:97:32:c4:5e: 26:14:ee:8d:4b:40:44:b1:8b:d8:17:d4:df:e1:17: 7b:4d:f0:5d:d3:07:fc:0d:39:72:74:1a:68:a1:6d: c2:eb:3b:1d:e8:8e:e8:70:6a:1b:d3:b9:53:70:ce: 26:0d:61:91:07:55:03:e0:39:a6:16:a7:4f:2f:d5: 9b:5e:65:f0:35:e6:30:6e:52:7e:a3:1e:80:b6:11: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2D:80:73:93:E6:D3:26:31:34:E6:A4:96:92:25:93:A1:93:B5:59 X509v3 Authority Key Identifier: keyid:CA:27:0F:1F:D0:51:B3:CD:65:DB:93:09:72:A9:93:35:C4:56:15:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:51:f0:52:70:f5:23:47:bb:84:cf:bd:02:f3:a6:f2:e9:e7: fc:13:25:87:3b:db:fb:a1:2a:c5:1b:01:3a:24:ef:87:ee:f0: 94:47:99:85:1e:69:cf:5b:24:57:83:1d:9b:db:cc:ec:8d:bd: b0:be:47:13:7d:39:00:e3:a3:08:e5:0c:24:52:ce:d8:15:ef: a5:44:1c:23:b9:33:00:0a:92:11:29:61:b5:f5:06:89:14:00: c9:68:1b:e3:5f:7b:8b:19:6b:bb:62:4d:e3:50:10:cb:a1:17: 14:57:32:48:b7:c5:1a:85:19:05:13:19:ae:92:77:37:04:71: 16:8e:d3:da:c2:69:bd:5c:c6:b8:75:06:27:75:b4:ed:44:1b: b5:59:2e:55:d1:d1:68:19:5b:68:6d:c8:91:e9:58:7c:6d:37: ad:1d:cd:0b:31:ce:a7:2b:32:39:0e:f0:38:60:c8:7d:49:ef: 72:f6:ce:8c:1a:71:37:6f:f7:ef:d7:58:2f:7c:30:e8:f7:a9: a4:8d:70:f8:c6:77:47:9d:6d:79:3b:17:2e:b2:7a:82:66:a8: 15:ca:6d:69:01:49:b2:a7:f4:46:76:f0:c3:c7:73:74:1c:c7: 8f:be:59:5a:b1:42:10:2a:e6:5a:ba:60:91:73:ef:bd:df:80: c0:0e:3f:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhmk44ELAx2suz4mF5SzXJxDN7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyNzBGMUZEMDUxQjNDRDY1REI5MzA5NzJBOTkzMzVD NDU2MTVFQzAeFw0yNjA5MTYxNDQyMTdaFw0yNjA5MTcxNTI1MTdaMDMxMTAvBgNV BAMTKDIzMkQ4MDczOTNFNkQzMjYzMTM0RTZBNDk2OTIyNTkzQTE5M0I1NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZF1KKXV8HaL6XmSY+MdaN0eaX OdGhyr1HIVRBsimn5lTK+TYjQ5F2yDjY0ie2miXSuzQPm8P4x5kNneQHC+4IPPHl l8/ilLmYjtqOYmAiHL45AtLu7mba5P/EghWW6Rjryc/xdhuDc1nBAYFmZzD0ToAV EWhBBfKdTClj5vir2if0Joz/+QHP20X3BsqgfdYuNLe5eQEIY1x4luEC5WOnfta7 20eGmI3QcKWSnQn8lzLEXiYU7o1LQESxi9gX1N/hF3tN8F3TB/wNOXJ0GmihbcLr Ox3ojuhwahvTuVNwziYNYZEHVQPgOaYWp08v1ZteZfA15jBuUn6jHoC2EYM1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIy2Ac5Pm0yYxNOaklpIlk6GTtVkwHwYDVR0j BBgwFoAUyicPH9BRs81l25MJcqmTNcRWFewwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVkOWVhMjAtMzQzZC00YWNiLTk1ODEtODFmOWQ3ZWE5MmZlLzAvQ0EyNzBGMUZE MDUxQjNDRDY1REI5MzA5NzJBOTkzMzVDNDU2MTVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTI3MEYxRkQwNTFCM0NENjVEQjkzMDk3MkE5OTMzNUM0NTYx NUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVkOWVhMjAtMzQzZC00YWNiLTk1 ODEtODFmOWQ3ZWE5MmZlLzAvQ0EyNzBGMUZEMDUxQjNDRDY1REI5MzA5NzJBOTkz MzVDNDU2MTVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZR8FJw9SNHu4TPvQLzpvLp5/wTJYc72/uh KsUbATok74fu8JRHmYUeac9bJFeDHZvbzOyNvbC+RxN9OQDjowjlDCRSztgV76VE HCO5MwAKkhEpYbX1BokUAMloG+Nfe4sZa7tiTeNQEMuhFxRXMki3xRqFGQUTGa6S dzcEcRaO09rCab1cxrh1Bid1tO1EG7VZLlXR0WgZW2htyJHpWHxtN60dzQsxzqcr MjkO8DhgyH1J73L2zowacTdv9+/XWC98MOj3qaSNcPjGd0edbXk7Fy6yeoJmqBXK bWkBSbKn9EZ28MPHc3Qcx4++WVqxQhAq5lq6YJFz773fgMAOP2Y= -----END CERTIFICATE-----Generated at Thu Sep 17 08:29:16 2026 by rpki-client