
$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
File: 37EECBD045CA279ED50372AC86831099D2FD896F.mft (raw, json)
Hash identifier: 5MwRcM8ooQaVeU8TztNCbSQ9BpDUOO77CJXxO+Pa/9A=
Subject key identifier: F2:9A:28:71:9F:AA:FB:E6:8D:F1:B6:28:88:0C:94:1C:7F:B0:6B:CB
Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F
Certificate issuer: /CN=37EECBD045CA279ED50372AC86831099D2FD896F
Certificate serial: 670C9A4D5A438F61FCF9AD3009730CC7A675F263
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
Manifest number: 0273
Signing time: Wed 25 Mar 2026 10:21:13 +0000
Manifest this update: Wed 25 Mar 2026 10:16:13 +0000
Manifest next update: Sat 28 Mar 2026 22:16:13 +0000
Files and hashes: 1: 3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (hash: Ln71RPP7llFU+OlGN86Ee5xV7nvZwzcjYpvm2f0lcIQ=)
2: 3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (hash: DI8mGUi19aF12orHykc0S36TC5G+Qtw+wyOAf8XRRXA=)
3: 3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa (hash: bS9q1FM6zKkGNpPUTupzPD0zpUyeZPD5xrJMwSlvCZ4=)
4: 3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa (hash: yhwWUdoC9WOjTwRDGH2Rztn+XXc2WVSICSdxr6revGQ=)
5: 3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa (hash: 6Du7YSTsPoNmwsS5ivsTmUWMLaQgevGKBTkeY7AtcXE=)
6: 37EECBD045CA279ED50372AC86831099D2FD896F.crl (hash: kT6Dcx3SMaiGtwULsKCPeeNitPphdqyNsdQC45o5c+o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl
rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 22:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:0c:9a:4d:5a:43:8f:61:fc:f9:ad:30:09:73:0c:c7:a6:75:f2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F
Validity
Not Before: Mar 25 10:16:13 2026 GMT
Not After : Mar 28 22:16:13 2026 GMT
Subject: CN=F29A28719FAAFBE68DF1B628880C941C7FB06BCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:e8:72:4a:cd:57:dd:06:59:c9:61:48:d3:
54:d6:95:b3:c7:47:68:82:58:76:68:f0:9d:28:43:
30:d0:6d:12:bf:f5:cc:24:4d:92:94:d9:dd:94:20:
57:a6:cb:e2:af:12:a0:a8:7f:73:91:1d:bd:55:d7:
09:09:b7:24:c5:56:30:6e:f9:57:f7:85:d8:c0:f2:
2c:fd:51:c5:ac:07:38:70:e3:42:26:b8:1c:57:c8:
80:b6:6e:5a:65:79:16:dd:56:b3:6f:7a:c1:48:02:
9a:8f:05:46:69:e9:40:45:de:f7:06:a5:44:37:1a:
b5:7d:69:6f:07:31:33:4f:f5:dc:be:07:63:2e:15:
9e:f0:ad:b8:48:d6:60:3b:cf:f0:76:45:fd:55:fd:
dd:75:8f:6e:93:ab:49:1e:97:ea:ad:a2:e2:e6:95:
b5:9c:72:fa:5c:51:b9:7a:d3:22:e1:77:d5:66:d9:
42:a8:2a:63:ab:5b:68:2e:74:88:f0:b9:6f:4d:d8:
4e:23:99:9f:c6:81:cc:7e:2f:92:85:47:00:af:98:
71:c6:8a:67:f5:5a:25:e5:63:c1:07:a9:45:35:13:
b4:e3:c3:c5:1e:74:f7:d7:4d:48:f3:36:8b:ec:51:
02:ca:cd:f9:be:24:b5:e0:51:91:31:09:9d:57:2e:
14:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9A:28:71:9F:AA:FB:E6:8D:F1:B6:28:88:0C:94:1C:7F:B0:6B:CB
X509v3 Authority Key Identifier:
keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4e:38:47:53:47:34:6e:e2:77:fa:31:53:b7:86:c1:fa:a3:
2d:b0:62:3c:5f:57:54:2d:83:be:b5:cd:62:a6:08:04:4b:08:
eb:78:bc:9d:39:40:b0:46:e9:ed:bf:05:74:c0:04:e3:02:bc:
da:dc:1e:e9:f1:6c:b6:c7:23:bc:57:bb:96:2e:de:37:97:6a:
7a:f9:2a:a7:69:f8:12:82:91:db:39:36:0a:15:62:89:a3:48:
81:c9:5d:2f:6d:93:08:43:6b:31:f0:5d:d0:af:3e:aa:aa:a0:
98:89:cf:05:b9:89:26:b3:b8:29:7c:a1:c4:91:56:6c:05:3a:
4d:a1:83:ac:ae:b7:c8:62:bc:b2:13:47:50:24:08:b5:f5:20:
70:ac:11:47:8e:49:00:bc:7e:fb:6b:c6:5d:3c:15:a7:4a:d3:
16:d6:b4:78:da:b9:f5:d0:b0:d9:70:4d:20:c1:d7:78:4a:40:
30:e6:8b:3e:3c:e5:27:3f:de:96:e9:7e:ee:6a:79:73:26:54:
b5:e9:0d:b0:19:58:58:2f:19:8e:f2:5a:e4:ba:33:93:7b:c3:
14:99:cf:a2:f2:dc:70:27:87:f9:ea:0d:8c:44:ce:26:3f:53:
48:10:c3:c1:2d:ca:63:29:63:1f:f1:fa:6c:f2:08:a0:e6:62:
df:c7:a9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:51:29 2026 by rpki-client