$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft File: 27E417DDE008607BCDD5A3593D3468A196716538.mft (raw, json) Hash identifier: i7ERDdNC6twdi6DMzcsqLp0TSKYjaesEvQFLREu2pU4= Subject key identifier: A2:28:AC:4A:76:F8:8B:31:77:93:A7:3F:8A:38:51:4B:2D:F5:48:55 Authority key identifier: 27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38 Certificate issuer: /CN=27E417DDE008607BCDD5A3593D3468A196716538 Certificate serial: 73575B413CB59A6BCEB1F248C9B5AF8FD1FEFD18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:38:11 +0000 Manifest this update: Wed 16 Sep 2026 23:33:11 +0000 Manifest next update: Fri 18 Sep 2026 01:32:11 +0000 Files and hashes: 1: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: 6rYbBTfQu9Ye+jxQ58mCILFsaxt3rc45oOO8Pu0AOKM=) 2: 27E417DDE008607BCDD5A3593D3468A196716538.crl (hash: A0EcD0oAub2hiFq8ueEXllVKycei62ukZCw/dJ1h5sM=) 3: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: 1bOoTdfrvDcIKLgnFWnuVyWYZ52c2xuJTvaGjJbRj4Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:57:5b:41:3c:b5:9a:6b:ce:b1:f2:48:c9:b5:af:8f:d1:fe:fd:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27E417DDE008607BCDD5A3593D3468A196716538 Validity Not Before: Sep 16 23:33:11 2026 GMT Not After : Sep 18 01:32:11 2026 GMT Subject: CN=A228AC4A76F88B317793A73F8A38514B2DF54855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ef:be:2d:61:26:8c:33:a3:0d:9b:10:32:5a: 81:d3:56:c3:66:1d:3e:c9:db:c8:ea:7d:8d:56:7e: d4:28:5e:04:0c:9d:ef:91:58:8b:2f:e9:87:91:e7: 72:c7:75:35:3b:ce:3b:19:74:5c:3d:dc:52:d7:e0: c2:50:40:09:5a:99:80:b4:c9:cf:5f:f2:2c:cf:86: e9:cf:ba:ec:63:57:02:75:47:51:96:c6:46:5c:f8: 13:69:98:9a:66:fb:d6:9a:95:eb:07:c9:82:61:5d: f2:c8:81:1f:db:f2:0b:18:44:81:f8:49:d5:a1:44: 9b:8c:d4:c1:99:91:d6:5e:93:6b:ec:ec:b1:f4:50: c1:52:e8:5a:82:94:e1:c5:b2:e6:5b:f5:e9:c9:a0: ec:55:06:dd:7a:4c:9e:d9:d6:41:a7:ea:a4:ef:61: 68:56:a8:e3:0b:8b:b0:7c:ed:0c:c4:08:49:ef:a8: 39:67:d0:75:f8:ca:d9:ca:2c:5a:4d:3a:10:cc:3e: 34:88:43:95:30:c3:fd:0b:52:60:15:ea:29:14:be: 14:9f:86:d6:94:25:45:b6:8a:34:9a:d2:b3:d6:50: fc:95:fd:42:0d:9c:b9:eb:ca:c2:7f:af:a9:b6:05: b1:1d:34:1d:59:79:b7:51:7e:12:53:ab:42:45:84: b3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:28:AC:4A:76:F8:8B:31:77:93:A7:3F:8A:38:51:4B:2D:F5:48:55 X509v3 Authority Key Identifier: keyid:27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:12:65:cf:83:12:7a:b2:a9:91:64:c7:f0:84:3a:bc:2d:cb: cd:37:91:f7:6c:a7:97:35:2c:c3:26:9b:6b:02:94:47:05:dc: a9:16:8c:ae:f5:38:7c:ba:a8:a1:87:55:09:b4:f2:3a:0b:fc: 06:00:8a:16:67:78:a7:96:51:05:26:eb:c9:5f:3b:17:21:19: 74:2f:e0:59:d1:78:24:1f:f2:eb:dd:82:ab:8e:55:f0:5c:a4: b3:51:d8:51:3a:51:00:b9:79:65:b5:c6:88:3e:ee:ce:39:02: 90:d6:61:78:2c:18:b3:bd:47:c1:30:a1:50:83:58:26:84:42: dc:4d:10:d5:6c:89:15:f3:16:47:b0:51:2e:04:23:07:65:91: 85:f7:8b:0c:46:69:19:54:0b:06:f5:16:5a:72:08:93:28:47: 9e:6a:8b:ac:66:19:4b:07:ac:79:48:b2:e7:70:e2:30:5a:c6: dc:f0:57:3a:bd:0d:c8:75:0c:a6:9c:db:63:a1:ec:7e:21:3c: 74:38:7f:4a:4c:4a:f6:f6:dd:52:f8:33:fa:90:fd:3a:9b:53: 3a:de:bd:66:c1:50:f7:f0:b7:7a:96:78:d9:b1:5e:f6:55:53: ca:64:fa:07:71:e4:69:62:81:4e:e3:d9:a3:4a:5c:8c:13:de: 0b:a3:fb:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc1dbQTy1mmvOsfJIybWvj9H+/RgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdFNDE3RERFMDA4NjA3QkNERDVBMzU5M0QzNDY4QTE5 NjcxNjUzODAeFw0yNjA5MTYyMzMzMTFaFw0yNjA5MTgwMTMyMTFaMDMxMTAvBgNV BAMTKEEyMjhBQzRBNzZGODhCMzE3NzkzQTczRjhBMzg1MTRCMkRGNTQ4NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV774tYSaMM6MNmxAyWoHTVsNm HT7J28jqfY1WftQoXgQMne+RWIsv6YeR53LHdTU7zjsZdFw93FLX4MJQQAlamYC0 yc9f8izPhunPuuxjVwJ1R1GWxkZc+BNpmJpm+9aalesHyYJhXfLIgR/b8gsYRIH4 SdWhRJuM1MGZkdZek2vs7LH0UMFS6FqClOHFsuZb9enJoOxVBt16TJ7Z1kGn6qTv YWhWqOMLi7B87QzECEnvqDln0HX4ytnKLFpNOhDMPjSIQ5Uww/0LUmAV6ikUvhSf htaUJUW2ijSa0rPWUPyV/UINnLnrysJ/r6m2BbEdNB1ZebdRfhJTq0JFhLPdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoiisSnb4izF3k6c/ijhRSy31SFUwHwYDVR0j BBgwFoAUJ+QX3eAIYHvN1aNZPTRooZZxZTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjliOWJkMzgtMmVmYS00ZDRjLWE5NTYtNDI0OTJhM2U2MDAwLzAvMjdFNDE3RERF MDA4NjA3QkNERDVBMzU5M0QzNDY4QTE5NjcxNjUzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yN0U0MTdEREUwMDg2MDdCQ0RENUEzNTkzRDM0NjhBMTk2NzE2 NTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMjdFNDE3RERFMDA4NjA3QkNERDVBMzU5M0QzNDY4 QTE5NjcxNjUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwSZc+DEnqyqZFkx/CEOrwty803kfdsp5c1 LMMmm2sClEcF3KkWjK71OHy6qKGHVQm08joL/AYAihZneKeWUQUm68lfOxchGXQv 4FnReCQf8uvdgquOVfBcpLNR2FE6UQC5eWW1xog+7s45ApDWYXgsGLO9R8EwoVCD WCaEQtxNENVsiRXzFkewUS4EIwdlkYX3iwxGaRlUCwb1FlpyCJMoR55qi6xmGUsH rHlIsudw4jBaxtzwVzq9Dch1DKac22Oh7H4hPHQ4f0pMSvb23VL4M/qQ/TqbUzre vWbBUPfwt3qWeNmxXvZVU8pk+gdx5GligU7j2aNKXIwT3guj+ww= -----END CERTIFICATE-----Generated at Thu Sep 17 14:02:24 2026 by rpki-client