
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft
File: 27E417DDE008607BCDD5A3593D3468A196716538.mft (raw, json)
Hash identifier: vMW17Dq4gGGT287zXuY6KQDR2Mhxk/4lzOtboJBd7Pw=
Subject key identifier: D8:49:3F:E0:FA:FF:25:2F:38:EA:2F:06:F1:41:CB:B6:C8:72:54:F9
Authority key identifier: 27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38
Certificate issuer: /CN=27E417DDE008607BCDD5A3593D3468A196716538
Certificate serial: 5A1C44EB99DFC82223D4ACE59770203B0F0BCDC2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 16:57:50 +0000
Manifest this update: Sun 02 Aug 2026 16:52:50 +0000
Manifest next update: Mon 03 Aug 2026 19:32:50 +0000
Files and hashes: 1: 27E417DDE008607BCDD5A3593D3468A196716538.crl (hash: ClIijMhjEC6F7L/MMqInPdRMctP3nRpm2XR7xIpl9Jc=)
2: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: 1bOoTdfrvDcIKLgnFWnuVyWYZ52c2xuJTvaGjJbRj4Y=)
3: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: 6rYbBTfQu9Ye+jxQ58mCILFsaxt3rc45oOO8Pu0AOKM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl
rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 17:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:1c:44:eb:99:df:c8:22:23:d4:ac:e5:97:70:20:3b:0f:0b:cd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27E417DDE008607BCDD5A3593D3468A196716538
Validity
Not Before: Aug 2 16:52:50 2026 GMT
Not After : Aug 3 19:32:50 2026 GMT
Subject: CN=D8493FE0FAFF252F38EA2F06F141CBB6C87254F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:2e:00:6a:08:51:ad:80:ba:2d:5c:5e:37:
48:95:14:1c:10:62:db:38:1e:44:ea:a9:4d:92:97:
03:77:dc:e4:6b:ff:e1:35:22:d0:00:7b:6b:2c:e1:
ac:d4:85:6c:42:0e:1e:2d:81:c7:cc:ee:09:fb:92:
5e:e0:c5:b3:ec:e2:cf:e9:d2:d7:31:b8:e7:b2:9b:
bf:2e:b5:5d:74:4f:0f:5a:ee:25:2e:e3:b9:b3:02:
40:6b:28:ad:db:ba:78:8a:14:c2:be:71:d2:e8:d0:
da:c8:fc:1f:26:bb:fe:7a:1a:0e:77:7c:b6:a9:18:
83:b9:b4:68:c8:58:1b:3b:ea:2c:38:ec:9e:e5:31:
a2:ec:bc:8e:2a:c9:28:6b:29:52:5c:95:f2:a5:c6:
06:5d:c8:a9:81:57:70:a4:45:99:31:49:63:e7:ff:
28:32:a0:cf:38:cf:7f:ac:9c:e9:7f:de:ba:68:6e:
55:58:6c:d0:aa:43:c9:c0:22:45:81:f3:6e:ce:fa:
b9:a4:de:a9:ac:ea:1b:d7:cc:58:6b:df:dd:d1:41:
68:b7:e3:f8:ff:d3:44:35:cb:48:38:e6:2a:34:3a:
4a:52:3b:3f:5d:f4:bc:39:45:a6:d3:b0:b9:7c:df:
67:d1:fc:b0:6b:08:7f:fe:23:ca:8c:a9:f4:9e:76:
19:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:49:3F:E0:FA:FF:25:2F:38:EA:2F:06:F1:41:CB:B6:C8:72:54:F9
X509v3 Authority Key Identifier:
keyid:27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9f:06:4b:88:09:ee:91:f7:3c:c4:4d:5a:66:33:af:13:c2:
cd:36:ae:e6:01:2c:8e:5b:4e:86:da:91:0f:d1:c5:4d:08:19:
04:d0:57:1b:48:a5:a3:ef:7c:de:c3:0d:e3:68:de:77:6e:f7:
3d:7c:f2:7a:0d:9a:eb:0a:52:9b:b5:66:8b:ba:a4:a4:ac:97:
48:b9:5b:69:1a:ed:dc:a5:7c:6f:63:0e:c8:6d:45:98:0b:78:
6a:0b:51:a1:12:34:fa:55:84:a3:3e:94:fb:8f:5a:9c:bf:fb:
01:1e:12:9d:fb:57:4d:bd:c9:35:c4:e6:fd:d8:ec:34:c8:54:
1c:91:79:3e:8e:c9:d7:c0:99:71:e7:79:b4:2d:ee:61:20:b3:
25:74:37:29:f6:ee:1d:2d:a8:ac:10:c2:2d:33:dc:a4:cb:a6:
7f:40:c4:20:f1:30:25:a1:b4:7b:81:78:e0:70:d2:85:52:d4:
30:42:6b:8f:46:56:10:92:c2:9c:23:1d:e7:e7:3e:6a:b7:85:
b0:78:b3:95:51:80:43:fe:28:94:bf:78:9d:34:fa:4a:45:ac:
9a:99:55:b5:7f:92:e7:1f:a8:e9:ec:3c:f7:f8:3e:e7:21:75:
ea:41:81:3f:f4:dd:89:52:38:2f:a5:b7:37:33:94:01:20:2a:
eb:11:52:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:35:39 2026 by rpki-client