$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft File: CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft (raw, json) Hash identifier: /yhP0J4NEW6MbbvMvOmjGJo3QoJb3HsjWufTf4vo81Y= Subject key identifier: FC:A1:E5:7F:0C:D6:14:FA:81:C5:B7:9E:16:B4:91:A5:07:57:82:AD Authority key identifier: CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D Certificate issuer: /CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D Certificate serial: 5A3CFB781921525C5620DE5195FEF43133715CA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft Manifest number: 9C Signing time: Wed 26 Aug 2026 21:58:22 +0000 Manifest this update: Wed 26 Aug 2026 21:53:22 +0000 Manifest next update: Fri 28 Aug 2026 01:19:22 +0000 Files and hashes: 1: 3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (hash: 2+4lQdjwQAe85kVWzjTaO1AsvRqx5WYrEbUSKbxLW0A=) 2: CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl (hash: 7xFdVjIgSCIjUtVmjaZ9d+X31iSbxhpVBo99zwVLm9A=) 3: 3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa (hash: uXy9b8XhpbesCCoDWjd2NVNJTQEIt1Rzumg6PbPcPrA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 01:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3c:fb:78:19:21:52:5c:56:20:de:51:95:fe:f4:31:33:71:5c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D Validity Not Before: Aug 26 21:53:22 2026 GMT Not After : Aug 28 01:19:22 2026 GMT Subject: CN=FCA1E57F0CD614FA81C5B79E16B491A5075782AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:2e:f6:5b:bd:a3:d9:a3:61:4e:6c:c6:90: 29:1e:b7:52:7b:ec:ea:fa:5b:70:11:98:ad:d8:c2: a4:d6:c6:da:e8:61:37:75:c3:09:40:d8:3a:36:99: f1:12:4c:52:f8:5d:5e:b5:60:0b:89:86:a7:4a:97: 8c:14:6b:07:ee:cb:16:2a:c1:98:d2:08:9a:e9:3f: d2:d8:8e:4d:02:ea:8e:58:06:2e:24:93:fa:02:db: af:1c:8f:ab:d9:b1:7d:53:da:96:0f:e0:7c:82:2c: 01:a4:ed:23:51:7e:61:d0:48:cc:d1:38:f9:e6:c1: 6e:42:45:14:6e:24:9f:21:34:5e:b3:6a:68:45:ca: d0:50:19:bc:c7:b1:be:a3:33:f9:ce:b0:07:fc:b2: 17:f5:93:42:d2:c4:1c:d6:c2:97:fc:6c:b1:f5:4f: a4:86:6d:27:76:56:9f:89:9e:c3:28:3b:1c:46:6c: f3:e2:ac:5d:56:10:08:d8:ca:e2:ff:da:3a:2a:65: fd:eb:28:4c:48:7c:6f:75:2a:a9:c7:04:80:a0:a6: 1f:a8:d7:a5:51:fa:be:22:41:00:f0:49:a1:de:c1: 05:4a:2b:52:1b:25:13:11:08:a6:05:a4:aa:48:17: 01:19:b3:43:f2:96:a1:47:8a:b5:fd:b3:2e:d5:4a: 7f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A1:E5:7F:0C:D6:14:FA:81:C5:B7:9E:16:B4:91:A5:07:57:82:AD X509v3 Authority Key Identifier: keyid:CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:8f:ca:14:c9:26:9e:66:fc:ee:85:b3:7b:08:c4:12:39:8b: c2:ec:17:c1:5a:cf:91:98:b9:a3:28:41:e5:c9:3b:2b:05:aa: 65:81:b1:48:7d:29:5f:e0:30:87:92:54:87:40:63:3f:34:e6: 17:1c:9a:84:c5:7b:90:66:d6:36:c4:fa:82:17:a1:4f:8c:05: e3:21:a6:7a:1a:37:bc:55:08:66:83:34:46:3a:33:59:fd:19: 28:8b:45:a9:38:30:cc:df:c8:5b:aa:6d:7a:65:68:e1:64:93: 07:55:50:f2:56:df:be:d3:d2:13:93:19:b9:a0:6e:4c:c5:f8: de:e7:53:fe:bf:71:15:2a:8c:29:6f:3f:e1:f2:30:40:8c:a7: c9:f8:1a:07:50:7b:78:71:c7:8a:5a:5c:c6:dd:1c:27:91:7b: 28:e5:55:5b:04:80:76:7e:c3:62:7f:43:2b:64:fa:56:9f:3b: d7:5e:d8:79:60:3d:0e:ab:c7:e8:33:04:45:56:fd:67:51:57: 1b:58:00:e7:00:d0:22:e9:3f:91:c8:e8:76:30:ac:ae:e7:0b: 3a:b2:62:25:12:01:93:ca:fb:9e:ef:2f:c1:46:9d:5f:15:09: de:f2:a5:ec:9b:1d:64:59:a4:71:15:40:2c:e5:fd:b9:e2:b7: 48:24:fb:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjz7eBkhUlxWIN5Rlf70MTNxXKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyN0MzRTUzQzcyN0VDNjEyMzhEMUUyQzFFMzUzNTQw Q0VFQjc5RDAeFw0yNjA4MjYyMTUzMjJaFw0yNjA4MjgwMTE5MjJaMDMxMTAvBgNV BAMTKEZDQTFFNTdGMENENjE0RkE4MUM1Qjc5RTE2QjQ5MUE1MDc1NzgyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtRy72W72j2aNhTmzGkCket1J7 7Or6W3ARmK3YwqTWxtroYTd1wwlA2Do2mfESTFL4XV61YAuJhqdKl4wUawfuyxYq wZjSCJrpP9LYjk0C6o5YBi4kk/oC268cj6vZsX1T2pYP4HyCLAGk7SNRfmHQSMzR OPnmwW5CRRRuJJ8hNF6zamhFytBQGbzHsb6jM/nOsAf8shf1k0LSxBzWwpf8bLH1 T6SGbSd2Vp+JnsMoOxxGbPPirF1WEAjYyuL/2joqZf3rKExIfG91KqnHBICgph+o 16VR+r4iQQDwSaHewQVKK1IbJRMRCKYFpKpIFwEZs0PylqFHirX9sy7VSn/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/KHlfwzWFPqBxbeeFrSRpQdXgq0wHwYDVR0j BBgwFoAUyifD5TxyfsYSONHiweNTVAzut50wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2M4ZDRlZTItNTQ5ZS00MTYwLThkNmYtODc3MzBlOGFlNWUyLzAvQ0EyN0MzRTUz QzcyN0VDNjEyMzhEMUUyQzFFMzUzNTQwQ0VFQjc5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTI3QzNFNTNDNzI3RUM2MTIzOEQxRTJDMUUzNTM1NDBDRUVC NzlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2M4ZDRlZTItNTQ5ZS00MTYwLThk NmYtODc3MzBlOGFlNWUyLzAvQ0EyN0MzRTUzQzcyN0VDNjEyMzhEMUUyQzFFMzUz NTQwQ0VFQjc5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaPyhTJJp5m/O6Fs3sIxBI5i8LsF8Faz5GY uaMoQeXJOysFqmWBsUh9KV/gMIeSVIdAYz805hccmoTFe5Bm1jbE+oIXoU+MBeMh pnoaN7xVCGaDNEY6M1n9GSiLRak4MMzfyFuqbXplaOFkkwdVUPJW377T0hOTGbmg bkzF+N7nU/6/cRUqjClvP+HyMECMp8n4GgdQe3hxx4paXMbdHCeReyjlVVsEgHZ+ w2J/Qytk+lafO9de2HlgPQ6rx+gzBEVW/WdRVxtYAOcA0CLpP5HI6HYwrK7nCzqy YiUSAZPK+57vL8FGnV8VCd7ypeybHWRZpHEVQCzl/bnit0gk+58= -----END CERTIFICATE-----Generated at Thu Aug 27 17:39:46 2026 by rpki-client