$ rpki-client -vvf rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft File: 27E417DDE008607BCDD5A3593D3468A196716538.mft (raw, json) Hash identifier: JS47TVrq0zrHsNSi6vos+dv9ZRr6VLYcO/ZO+6bJxGQ= Subject key identifier: 89:52:23:B6:87:86:17:E2:C8:C4:2E:02:F7:9E:8C:F9:FF:16:97:67 Authority key identifier: 27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38 Certificate issuer: /CN=27E417DDE008607BCDD5A3593D3468A196716538 Certificate serial: 67376720030FF80F2383C63B76CA0AE2617B7463 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 07:26:16 +0000 Manifest this update: Thu 18 Jun 2026 07:21:16 +0000 Manifest next update: Fri 19 Jun 2026 08:44:16 +0000 Files and hashes: 1: 27E417DDE008607BCDD5A3593D3468A196716538.crl (hash: XIbWEDfTFu0lsVfoI+dGn/bCpqezOYNOXlrizJLJFwE=) 2: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: 1bOoTdfrvDcIKLgnFWnuVyWYZ52c2xuJTvaGjJbRj4Y=) 3: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: 6rYbBTfQu9Ye+jxQ58mCILFsaxt3rc45oOO8Pu0AOKM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:37:67:20:03:0f:f8:0f:23:83:c6:3b:76:ca:0a:e2:61:7b:74:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27E417DDE008607BCDD5A3593D3468A196716538 Validity Not Before: Jun 18 07:21:16 2026 GMT Not After : Jun 19 08:44:16 2026 GMT Subject: CN=895223B6878617E2C8C42E02F79E8CF9FF169767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:db:c5:0c:d0:df:a0:5e:90:55:07:ab:a6:cf: 70:3e:5e:e1:ad:27:77:c9:4c:0d:16:17:9d:4a:96: 69:fe:91:d7:bd:0d:bb:9d:dd:e5:a3:02:30:7c:58: 2c:82:d9:6a:66:2b:e0:0d:df:66:3f:0c:a3:60:79: e0:f8:d2:69:2a:2f:6f:07:f6:4c:98:c4:b9:6d:44: af:39:7c:7e:f5:a8:bb:8b:5e:cd:62:84:c6:68:e7: 54:1e:ff:4b:0b:0a:f4:2d:50:68:8e:fc:e0:0c:7a: aa:36:b3:8d:43:a5:67:2b:d0:42:45:ce:ee:e7:ff: 9d:6f:d8:54:d2:b1:91:c9:b3:9c:ab:f9:db:c5:61: 1c:20:97:62:c0:f1:f4:b5:64:d3:19:37:0a:23:c0: b7:5c:d4:73:fb:a2:38:61:ec:35:8a:70:e1:38:ce: 8f:09:76:86:ed:34:1b:9d:0b:52:72:8b:b3:43:5d: 59:1f:d1:44:ae:dd:9b:a8:a5:a2:80:3e:76:9e:d1: 00:31:c8:c7:da:34:52:a1:8f:61:b1:c7:0a:ad:50: 61:41:b9:a7:0c:89:72:65:a5:ab:4d:88:05:86:cc: f9:43:79:a8:e0:b5:31:fa:e9:76:ca:26:cd:8e:37: 56:5c:bf:00:d0:bb:c7:ad:63:e0:90:12:13:cb:7a: 56:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:52:23:B6:87:86:17:E2:C8:C4:2E:02:F7:9E:8C:F9:FF:16:97:67 X509v3 Authority Key Identifier: keyid:27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a4:67:99:24:7f:ba:1a:2e:c7:da:1f:b3:a6:90:77:37:e6: ba:3a:fa:40:a4:55:ce:ab:16:0b:f1:c7:d2:53:f7:49:cc:32: a2:82:b6:99:6c:1f:78:5a:81:6c:8d:75:5b:20:f4:04:20:d6: f1:34:77:cf:a8:df:45:9b:29:8e:4f:f9:32:75:1c:ce:ba:2d: e4:d6:57:46:ca:24:dd:bc:eb:e2:2e:54:54:bf:bc:e7:35:18: fc:34:41:66:41:46:89:1b:e3:f4:4b:9a:54:11:e7:80:fe:41: 15:f4:51:54:ad:a6:4c:c6:5a:87:61:cd:6e:01:2b:8b:9f:7e: dc:a9:df:bc:f5:e3:16:3a:de:86:50:9c:8c:85:f3:0a:07:d2: 31:23:a1:39:a4:40:3b:57:ae:dc:c4:27:08:9e:4a:aa:be:d7: c9:44:b7:d7:bb:35:ed:d5:41:b0:f5:d3:5b:03:17:2e:ba:39: c1:b8:bb:43:19:1e:11:29:b3:be:69:8d:cb:77:c4:02:f1:cd: 1f:fc:8e:7e:71:7a:5a:75:c9:7d:ea:8b:31:e0:8a:60:47:95: dc:4f:6e:cc:fd:75:e2:8c:8f:f5:d1:b2:31:4c:2b:b9:b4:ff: a7:84:90:79:8d:eb:1e:9c:f3:f1:a1:55:09:25:39:81:04:9b: 0c:39:09:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZzdnIAMP+A8jg8Y7dsoK4mF7dGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdFNDE3RERFMDA4NjA3QkNERDVBMzU5M0QzNDY4QTE5 NjcxNjUzODAeFw0yNjA2MTgwNzIxMTZaFw0yNjA2MTkwODQ0MTZaMDMxMTAvBgNV BAMTKDg5NTIyM0I2ODc4NjE3RTJDOEM0MkUwMkY3OUU4Q0Y5RkYxNjk3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD28UM0N+gXpBVB6umz3A+XuGt J3fJTA0WF51Klmn+kde9Dbud3eWjAjB8WCyC2WpmK+AN32Y/DKNgeeD40mkqL28H 9kyYxLltRK85fH71qLuLXs1ihMZo51Qe/0sLCvQtUGiO/OAMeqo2s41DpWcr0EJF zu7n/51v2FTSsZHJs5yr+dvFYRwgl2LA8fS1ZNMZNwojwLdc1HP7ojhh7DWKcOE4 zo8JdobtNBudC1Jyi7NDXVkf0USu3ZuopaKAPnae0QAxyMfaNFKhj2GxxwqtUGFB uacMiXJlpatNiAWGzPlDeajgtTH66XbKJs2ON1ZcvwDQu8etY+CQEhPLelbJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiVIjtoeGF+LIxC4C956M+f8Wl2cwHwYDVR0j BBgwFoAUJ+QX3eAIYHvN1aNZPTRooZZxZTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjliOWJkMzgtMmVmYS00ZDRjLWE5NTYtNDI0OTJhM2U2MDAwLzAvMjdFNDE3RERF MDA4NjA3QkNERDVBMzU5M0QzNDY4QTE5NjcxNjUzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yN0U0MTdEREUwMDg2MDdCQ0RENUEzNTkzRDM0NjhBMTk2NzE2 NTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMjdFNDE3RERFMDA4NjA3QkNERDVBMzU5M0QzNDY4 QTE5NjcxNjUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFykZ5kkf7oaLsfaH7OmkHc35ro6+kCkVc6r Fgvxx9JT90nMMqKCtplsH3hagWyNdVsg9AQg1vE0d8+o30WbKY5P+TJ1HM66LeTW V0bKJN286+IuVFS/vOc1GPw0QWZBRokb4/RLmlQR54D+QRX0UVStpkzGWodhzW4B K4ufftyp37z14xY63oZQnIyF8woH0jEjoTmkQDtXrtzEJwieSqq+18lEt9e7Ne3V QbD101sDFy66OcG4u0MZHhEps75pjct3xALxzR/8jn5xelp1yX3qizHgimBHldxP bsz9deKMj/XRsjFMK7m0/6eEkHmN6x6c8/GhVQklOYEEmww5CYU= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:51 2026 by rpki-client