$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft File: CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft (raw, json) Hash identifier: bRUNssNaM6PUnChcN6B+BIvEKqYIjG1wX4t86jhBGiI= Subject key identifier: 1E:31:F2:80:C2:62:11:AE:FC:66:46:C4:F6:B6:75:FE:2F:60:21:88 Authority key identifier: CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D Certificate issuer: /CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D Certificate serial: 4AFDE5E4263B638D56972F2FB06F3DCD3D285DA6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft Manifest number: EA Signing time: Sat 24 Oct 2026 17:20:49 +0000 Manifest this update: Sat 24 Oct 2026 17:15:49 +0000 Manifest next update: Sun 25 Oct 2026 18:01:49 +0000 Files and hashes: 1: CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl (hash: TQ/yWahVMkuheqxE0GD/1TcAvRi87GBqzqcP0K6zrsY=) 2: 3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (hash: 2+4lQdjwQAe85kVWzjTaO1AsvRqx5WYrEbUSKbxLW0A=) 3: 3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa (hash: uXy9b8XhpbesCCoDWjd2NVNJTQEIt1Rzumg6PbPcPrA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 18:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:fd:e5:e4:26:3b:63:8d:56:97:2f:2f:b0:6f:3d:cd:3d:28:5d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D Validity Not Before: Oct 24 17:15:49 2026 GMT Not After : Oct 25 18:01:49 2026 GMT Subject: CN=1E31F280C26211AEFC6646C4F6B675FE2F602188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:96:86:02:a6:12:49:a9:ac:3f:07:f5:1d:2e: be:b4:7e:ed:2b:7f:56:c7:82:fa:1f:04:2b:43:21: 9b:1b:37:cb:21:6b:83:55:e6:c8:14:10:e7:a1:f8: f1:68:82:f8:f1:04:a7:a2:d0:12:de:7f:7b:db:8e: 31:46:19:c8:a0:56:e4:8e:26:60:d7:27:8f:3e:59: 29:0d:06:7f:24:42:d4:bf:c8:ca:50:e0:b1:e3:74: b0:f2:d9:21:76:fd:a3:ba:ef:42:95:ee:96:49:b6: 0e:91:69:27:54:91:9e:01:f4:71:da:60:b6:3a:57: 6d:5d:ca:68:77:39:1a:0d:38:2e:64:97:bf:f6:e5: 65:a9:e2:35:95:a9:22:15:66:cf:16:bb:ff:c4:1b: f5:e4:c9:ea:e3:46:8b:01:29:80:a1:09:ad:9f:38: a9:b4:00:1c:25:a9:29:ac:ca:37:78:a1:fd:eb:77: 2f:f8:2b:11:15:8b:d2:c0:51:c9:ab:cc:93:29:c0: 45:86:b3:0d:d6:de:e1:74:a3:83:d8:bf:1a:51:42: 97:84:ee:0d:e6:ef:fc:c4:51:7f:7b:fc:80:73:0c: a6:9b:e8:72:94:33:f2:7b:e8:4c:cb:24:5f:6b:12: ff:6c:67:72:76:4e:eb:b9:d5:26:f2:87:68:31:62: bd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:31:F2:80:C2:62:11:AE:FC:66:46:C4:F6:B6:75:FE:2F:60:21:88 X509v3 Authority Key Identifier: keyid:CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b1:34:ab:46:38:b1:a6:ef:9f:b8:75:93:97:e0:40:dc:67: 51:4c:e8:de:3a:6d:89:7f:0e:ba:c5:a2:77:b2:d4:2f:20:11: 92:07:d7:8f:7a:82:d4:1f:55:8a:0d:e9:34:c7:f3:79:49:35: 70:8f:99:6f:9f:57:b4:49:9d:4a:d6:27:43:10:fd:bb:a7:5b: b9:35:12:b3:c4:27:4b:a2:5d:86:aa:3a:94:72:e2:da:c2:79: d3:63:e5:f4:65:6e:cd:fe:16:62:d3:c4:48:62:8f:8b:e1:4d: 21:94:75:6e:d2:3d:c6:f2:90:3e:06:09:45:5b:76:cd:e7:ef: 14:98:44:dd:fb:6d:67:92:b7:d3:db:4c:f0:04:2a:f9:fb:62: 89:bb:5b:22:80:53:97:bf:ea:df:1d:41:63:f4:d0:91:84:39: c6:c7:c6:66:4a:a8:9a:bf:f0:18:04:c5:0e:57:c0:36:c2:24: 0b:82:be:de:92:31:d0:98:b1:9a:92:57:09:e3:7a:ca:9a:3e: 94:ab:77:3f:27:c7:f9:03:45:51:45:dc:31:67:c1:bd:21:20: 7c:8c:d7:96:5b:15:f5:2d:fd:22:c6:52:e6:c9:75:85:67:96: b0:92:c1:02:cd:71:f1:82:ce:e8:09:a7:e2:e0:8f:11:6d:0f: 22:d4:27:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSv3l5CY7Y41Wly8vsG89zT0oXaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyN0MzRTUzQzcyN0VDNjEyMzhEMUUyQzFFMzUzNTQw Q0VFQjc5RDAeFw0yNjEwMjQxNzE1NDlaFw0yNjEwMjUxODAxNDlaMDMxMTAvBgNV BAMTKDFFMzFGMjgwQzI2MjExQUVGQzY2NDZDNEY2QjY3NUZFMkY2MDIxODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTloYCphJJqaw/B/UdLr60fu0r f1bHgvofBCtDIZsbN8sha4NV5sgUEOeh+PFogvjxBKei0BLef3vbjjFGGcigVuSO JmDXJ48+WSkNBn8kQtS/yMpQ4LHjdLDy2SF2/aO670KV7pZJtg6RaSdUkZ4B9HHa YLY6V21dymh3ORoNOC5kl7/25WWp4jWVqSIVZs8Wu//EG/XkyerjRosBKYChCa2f OKm0ABwlqSmsyjd4of3rdy/4KxEVi9LAUcmrzJMpwEWGsw3W3uF0o4PYvxpRQpeE 7g3m7/zEUX97/IBzDKab6HKUM/J76EzLJF9rEv9sZ3J2Tuu51Sbyh2gxYr23AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHjHygMJiEa78ZkbE9rZ1/i9gIYgwHwYDVR0j BBgwFoAUyifD5TxyfsYSONHiweNTVAzut50wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2M4ZDRlZTItNTQ5ZS00MTYwLThkNmYtODc3MzBlOGFlNWUyLzAvQ0EyN0MzRTUz QzcyN0VDNjEyMzhEMUUyQzFFMzUzNTQwQ0VFQjc5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTI3QzNFNTNDNzI3RUM2MTIzOEQxRTJDMUUzNTM1NDBDRUVC NzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2M4ZDRlZTItNTQ5ZS00MTYwLThk NmYtODc3MzBlOGFlNWUyLzAvQ0EyN0MzRTUzQzcyN0VDNjEyMzhEMUUyQzFFMzUz NTQwQ0VFQjc5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqxNKtGOLGm75+4dZOX4EDcZ1FM6N46bYl/ DrrFoney1C8gEZIH1496gtQfVYoN6TTH83lJNXCPmW+fV7RJnUrWJ0MQ/bunW7k1 ErPEJ0uiXYaqOpRy4trCedNj5fRlbs3+FmLTxEhij4vhTSGUdW7SPcbykD4GCUVb ds3n7xSYRN37bWeSt9PbTPAEKvn7Yom7WyKAU5e/6t8dQWP00JGEOcbHxmZKqJq/ 8BgExQ5XwDbCJAuCvt6SMdCYsZqSVwnjesqaPpSrdz8nx/kDRVFF3DFnwb0hIHyM 15ZbFfUt/SLGUubJdYVnlrCSwQLNcfGCzugJp+LgjxFtDyLUJyo= -----END CERTIFICATE-----Generated at Sun Oct 25 01:34:56 2026 by rpki-client