$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft File: CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft (raw, json) Hash identifier: WEFNA8wHGoiL9w0EGXgfkaosTTSIz/r/6suxI1FEa5w= Subject key identifier: A2:DF:63:D8:55:33:DA:79:0C:1B:47:12:62:96:99:64:82:3E:A3:C1 Authority key identifier: CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D Certificate issuer: /CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D Certificate serial: 2955A1571D41C6073F44D1E62433358DF4FB8714 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 02:27:45 +0000 Manifest this update: Sat 20 Jun 2026 02:22:45 +0000 Manifest next update: Sun 21 Jun 2026 02:38:45 +0000 Files and hashes: 1: CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl (hash: bfbO4cnYEFbvfY5hQ6l+KoSxPho3q33QYpZn3zXg4MU=) 2: 3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (hash: 2+4lQdjwQAe85kVWzjTaO1AsvRqx5WYrEbUSKbxLW0A=) 3: 3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa (hash: uXy9b8XhpbesCCoDWjd2NVNJTQEIt1Rzumg6PbPcPrA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 02:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:55:a1:57:1d:41:c6:07:3f:44:d1:e6:24:33:35:8d:f4:fb:87:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D Validity Not Before: Jun 20 02:22:45 2026 GMT Not After : Jun 21 02:38:45 2026 GMT Subject: CN=A2DF63D85533DA790C1B471262969964823EA3C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:23:7a:32:c8:3d:d9:94:74:a5:1f:79:29:5a: ee:b1:83:ac:8b:ab:93:79:1e:7f:93:88:e2:64:0e: 55:82:c9:96:6a:79:b6:86:22:58:85:71:40:2b:0b: 7f:4d:b0:4f:32:d4:3f:0b:68:18:5f:cb:c3:a7:38: 78:82:f4:b7:73:5e:7c:5b:17:da:ae:97:b9:92:50: be:01:8d:b0:69:ab:59:74:2e:af:a0:04:48:6b:d1: 72:18:da:f3:50:7e:c5:81:08:ba:04:e1:b5:72:6d: 26:40:3e:73:fe:13:5e:18:4d:ad:56:ea:72:c8:4c: d5:d2:ec:aa:af:f0:d1:a5:f6:a4:3c:44:1b:c4:4a: d6:19:e3:c9:55:c6:fb:78:f9:6c:a3:4b:c2:7f:03: 42:de:97:15:56:c6:59:aa:11:49:b8:56:4c:9b:af: 70:33:c0:01:5a:6d:96:88:15:39:7a:dc:c3:5c:2e: 72:3d:49:41:1f:f6:c2:ae:cb:7a:11:bb:63:ce:46: fa:32:c9:f6:14:e6:da:36:5b:7b:09:3c:e6:09:98: a5:54:02:2d:77:04:8b:00:ab:9b:4d:21:bc:99:6c: bd:b5:80:48:8a:ab:1a:f3:dd:bc:c7:0c:65:46:40: 98:33:2a:0f:a8:8f:8a:12:57:4e:90:fc:0c:42:8e: 72:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DF:63:D8:55:33:DA:79:0C:1B:47:12:62:96:99:64:82:3E:A3:C1 X509v3 Authority Key Identifier: keyid:CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:7e:fc:72:ec:53:ef:9c:de:9e:94:5a:18:48:a2:a8:21:d9: c1:5c:eb:00:d2:c9:87:cf:8b:32:30:00:79:14:a9:51:a3:6c: e6:4c:83:22:95:d1:64:4f:77:39:6f:8c:96:1c:b8:42:45:6b: f6:fe:bc:c1:20:44:2f:9e:67:ea:06:ce:cd:5c:db:45:b8:37: a9:6a:30:10:f2:54:85:26:a4:99:21:93:c5:be:dc:70:df:10: 80:c4:b4:57:15:1c:5f:89:ed:9d:77:28:c5:88:26:fd:b8:99: b0:8c:7f:4c:5e:6d:82:d6:c3:de:a7:c9:6e:2a:14:9e:bd:d5: 63:21:53:3d:b4:49:41:1e:0c:b2:27:4c:1a:2b:91:af:aa:36: e4:c0:51:b9:5c:ef:4d:15:e0:d9:16:2f:40:14:5b:dc:4c:2f: a8:39:27:60:fd:5f:ed:e0:d4:b6:b5:41:0c:85:d0:5c:5f:0e: 2f:ba:a2:0e:a1:2d:8e:c7:b2:3f:77:87:ea:e3:c7:28:c1:09: a2:cb:b9:9b:f6:2b:c8:7c:ff:15:d7:04:d8:f7:f6:1d:7d:58: 5f:89:9e:bb:7a:28:df:ed:b8:31:74:5a:e7:df:b3:23:03:e8: 2f:dd:af:0e:33:16:af:ca:61:b0:e4:a4:5b:0a:88:ee:53:6f: 67:44:a1:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKVWhVx1Bxgc/RNHmJDM1jfT7hxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyN0MzRTUzQzcyN0VDNjEyMzhEMUUyQzFFMzUzNTQw Q0VFQjc5RDAeFw0yNjA2MjAwMjIyNDVaFw0yNjA2MjEwMjM4NDVaMDMxMTAvBgNV BAMTKEEyREY2M0Q4NTUzM0RBNzkwQzFCNDcxMjYyOTY5OTY0ODIzRUEzQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQI3oyyD3ZlHSlH3kpWu6xg6yL q5N5Hn+TiOJkDlWCyZZqebaGIliFcUArC39NsE8y1D8LaBhfy8OnOHiC9LdzXnxb F9qul7mSUL4BjbBpq1l0Lq+gBEhr0XIY2vNQfsWBCLoE4bVybSZAPnP+E14YTa1W 6nLITNXS7Kqv8NGl9qQ8RBvEStYZ48lVxvt4+WyjS8J/A0LelxVWxlmqEUm4Vkyb r3AzwAFabZaIFTl63MNcLnI9SUEf9sKuy3oRu2PORvoyyfYU5to2W3sJPOYJmKVU Ai13BIsAq5tNIbyZbL21gEiKqxrz3bzHDGVGQJgzKg+oj4oSV06Q/AxCjnK1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUot9j2FUz2nkMG0cSYpaZZII+o8EwHwYDVR0j BBgwFoAUyifD5TxyfsYSONHiweNTVAzut50wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2M4ZDRlZTItNTQ5ZS00MTYwLThkNmYtODc3MzBlOGFlNWUyLzAvQ0EyN0MzRTUz QzcyN0VDNjEyMzhEMUUyQzFFMzUzNTQwQ0VFQjc5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTI3QzNFNTNDNzI3RUM2MTIzOEQxRTJDMUUzNTM1NDBDRUVC NzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2M4ZDRlZTItNTQ5ZS00MTYwLThk NmYtODc3MzBlOGFlNWUyLzAvQ0EyN0MzRTUzQzcyN0VDNjEyMzhEMUUyQzFFMzUz NTQwQ0VFQjc5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAF+/HLsU++c3p6UWhhIoqgh2cFc6wDSyYfP izIwAHkUqVGjbOZMgyKV0WRPdzlvjJYcuEJFa/b+vMEgRC+eZ+oGzs1c20W4N6lq MBDyVIUmpJkhk8W+3HDfEIDEtFcVHF+J7Z13KMWIJv24mbCMf0xebYLWw96nyW4q FJ691WMhUz20SUEeDLInTBorka+qNuTAUblc700V4NkWL0AUW9xML6g5J2D9X+3g 1La1QQyF0FxfDi+6og6hLY7Hsj93h+rjxyjBCaLLuZv2K8h8/xXXBNj39h19WF+J nrt6KN/tuDF0WuffsyMD6C/drw4zFq/KYbDkpFsKiO5Tb2dEoYw= -----END CERTIFICATE-----Generated at Sat Jun 20 09:16:08 2026 by rpki-client