
$ rpki-client -vvf repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
File: 027DBEC91021154263BB0CF1565833705023D987.mft (raw, json)
Hash identifier: 9WmMYM2/phN60Ibkje7zNTSi8A8RaCS0I1Q2K/eQn6Q=
Subject key identifier: 51:E1:51:57:1E:85:F2:E3:97:E8:CF:07:92:88:E5:91:58:E4:93:60
Authority key identifier: 02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87
Certificate issuer: /CN=027DBEC91021154263BB0CF1565833705023D987
Certificate serial: 2ADE4D0A0BBFA3DE39ED0C4872C74AF533C70AF4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
Manifest number: 01E3
Signing time: Tue 24 Mar 2026 07:01:45 +0000
Manifest this update: Tue 24 Mar 2026 06:56:45 +0000
Manifest next update: Fri 27 Mar 2026 18:03:45 +0000
Files and hashes: 1: 323430333a653338303a3a2f33322d3332203d3e20313334363337.roa (hash: vAyuSzG3C8SpiGpFIcSs/HWsw07B00gA01NjZSkVNoY=)
2: 323430333a653338303a313030333a3a2f34382d3438203d3e20313334363337.roa (hash: D7a9H/JOzAAiQzJdPmUlyrWBu9LgMUu1qrNfoBeQLxo=)
3: 323430333a653338303a313030323a3a2f34382d3438203d3e20313334363337.roa (hash: s/T+u3GrpHQpQDGLIfB4y2ZCiVIu1xhOCpqXzOx++a0=)
4: 323430333a653338303a313030313a3a2f34382d3438203d3e20313334363337.roa (hash: /MzkpIvO+yJRIuUE7RrJH9MKdqO6vJCFLNiCFBSLu6w=)
5: 3230322e3136302e3133392e302f32342d3234203d3e20313439363735.roa (hash: wdcIB7gQXhtVlKAgRBcM3DzhzYw/wfKPtk4+7Go8Wg4=)
6: 027DBEC91021154263BB0CF1565833705023D987.crl (hash: mnn37w82SHgl5L66DMWfZEbRs0qpowMScQAr41xapJU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl
rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 18:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:de:4d:0a:0b:bf:a3:de:39:ed:0c:48:72:c7:4a:f5:33:c7:0a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027DBEC91021154263BB0CF1565833705023D987
Validity
Not Before: Mar 24 06:56:45 2026 GMT
Not After : Mar 27 18:03:45 2026 GMT
Subject: CN=51E151571E85F2E397E8CF079288E59158E49360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:5c:1e:ef:c5:51:92:34:e1:98:5e:0a:30:
7f:56:60:52:70:92:81:f7:4a:e6:4b:3f:9e:3e:cf:
63:7b:0d:df:ce:21:c4:bb:fa:33:7e:02:6f:a1:25:
28:d0:2f:da:b6:8e:63:fb:e9:ab:a4:15:c4:47:2f:
e7:34:16:44:9c:d1:21:a9:01:26:d1:85:03:1c:17:
8f:49:23:fe:82:40:e9:56:9e:8a:98:e2:58:bd:23:
a8:8c:b1:bf:c7:2e:35:78:9f:80:43:39:3e:fd:f4:
57:86:16:28:b6:73:47:89:67:ab:be:00:6c:d9:c8:
76:1a:74:3c:a1:dc:0b:12:08:4f:21:5e:32:bb:79:
b4:16:02:fc:a7:85:eb:e5:c5:05:e4:6c:fa:72:ff:
7b:af:ef:e4:28:dd:eb:da:b5:d9:18:f0:41:01:40:
48:a0:23:c9:0a:84:f5:1f:c5:45:e6:9f:a1:6a:a4:
4d:af:ae:1e:ca:1a:26:9c:70:53:ed:2a:c8:4c:1d:
63:58:6c:7a:30:ac:93:65:f9:7b:ca:2c:c7:15:c1:
0e:ac:85:86:09:12:37:e6:db:f9:fe:67:6f:6d:33:
2e:b0:62:ce:fe:df:96:c5:40:e6:ce:d8:67:59:04:
9d:1a:17:6a:1b:5f:c0:29:3d:a9:6b:a5:ae:45:62:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E1:51:57:1E:85:F2:E3:97:E8:CF:07:92:88:E5:91:58:E4:93:60
X509v3 Authority Key Identifier:
keyid:02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:75:60:08:52:fc:a2:35:3d:79:31:3f:2a:b0:c5:dc:f8:f8:
09:3b:bd:f0:78:23:e6:ca:7a:b0:09:52:e4:38:07:21:c4:9e:
69:df:4f:8a:81:28:8c:fc:74:b8:e1:42:e6:a5:02:a0:db:a4:
7b:0b:be:d0:97:f4:65:c5:e8:e3:73:ab:10:de:e1:f5:bd:b4:
91:43:08:44:be:25:a0:22:86:ba:7e:42:80:84:df:3e:3a:dc:
3a:9f:e6:e9:63:66:1e:f6:ae:3f:37:e4:0c:46:5f:79:13:e5:
f2:fa:28:ba:3b:d1:28:95:04:6e:a7:c9:65:ab:5a:c0:28:65:
1d:b7:2a:b2:e0:c9:0e:b5:ed:40:22:6c:fc:31:30:f0:8f:b5:
73:c5:2d:d2:41:17:02:7b:1b:e2:61:d0:de:a1:60:5c:14:d5:
46:13:e8:16:b1:3a:10:10:5c:34:6c:05:41:24:1c:ad:fb:e8:
9c:34:07:a7:ea:f2:93:11:2e:28:1a:12:f3:11:2d:6c:b7:d4:
57:3d:88:4a:3a:f7:92:a3:1b:35:34:cc:4b:36:bd:01:08:a7:
18:22:8c:ae:51:cc:f8:1c:b0:56:38:df:3b:68:7b:f9:5d:97:
59:ca:cb:01:da:4f:09:47:cb:5b:1a:15:c9:d3:d9:84:a3:5f:
48:fd:9b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:44:44 2026 by rpki-client