
$ rpki-client -vvf repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft
File: E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft (raw, json)
Hash identifier: uoT8s/bSwziVvVfsSUBpMlmgelrjajUBdZpy+feIodU=
Subject key identifier: AD:A4:53:35:1F:B5:03:C3:EB:1B:7F:1F:FA:E4:77:5B:7A:15:12:7A
Authority key identifier: E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD
Certificate issuer: /CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD
Certificate serial: 1877FB72E8CBA1B51F348C94B4AEF442C7BCC5F5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft
Manifest number: 055C
Signing time: Wed 25 Mar 2026 22:11:46 +0000
Manifest this update: Wed 25 Mar 2026 22:06:46 +0000
Manifest next update: Sun 29 Mar 2026 03:13:46 +0000
Files and hashes: 1: E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl (hash: 34/wUOk+Ybtb4dZTMAaZD3VPcFX8+wENsQHqH2N+Yx4=)
2: 3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa (hash: miixVejqadzJoJUmMD6XBggcBXEaUqaEEMBzMvAqTNc=)
3: 3130332e3132392e3232302e302f32342d3234203d3e20313338303632.roa (hash: Mn5S3vv0y8H86n0LvhDe7TG0qE+zI4uaMffW/k9fqwM=)
4: 3130332e3132392e3232312e302f32342d3234203d3e20313338303632.roa (hash: 3vA9Os0MWzKrIxrdLvYkOp/ZA589dKUhNYNySSQbRyE=)
5: 3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa (hash: IzC9oagOHS4dTtSBILXnwVll7fkLpQc9RpoCIiKjX8I=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl
rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 03:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:77:fb:72:e8:cb:a1:b5:1f:34:8c:94:b4:ae:f4:42:c7:bc:c5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD
Validity
Not Before: Mar 25 22:06:46 2026 GMT
Not After : Mar 29 03:13:46 2026 GMT
Subject: CN=ADA453351FB503C3EB1B7F1FFAE4775B7A15127A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:ea:4a:eb:a9:25:9d:eb:dc:bf:bb:c5:fa:
ab:a6:08:c9:45:b2:49:07:51:73:e8:ad:63:e3:41:
a7:eb:b6:f6:d5:94:8c:55:b6:8b:e2:75:17:89:e7:
f8:49:c5:42:83:b4:07:0d:f9:20:49:5a:a2:76:19:
53:4a:61:58:1e:23:38:f2:5b:eb:3b:21:6b:49:2e:
3f:60:63:d7:e2:e4:0c:c8:96:be:46:0d:5c:6b:a9:
e3:74:4f:db:bd:74:26:9f:88:12:e6:a2:f7:cb:e8:
4e:c3:1b:6b:5b:4e:a0:c3:1e:42:f7:01:30:3a:c9:
dc:06:ea:6f:06:77:2c:78:eb:1b:c1:f1:c9:ad:5c:
b3:18:fd:37:94:a1:dd:51:25:b9:bb:37:ce:7c:ed:
18:f5:28:98:99:26:20:cf:c0:c9:c8:67:3b:88:c7:
cc:0b:4d:b2:e1:53:d5:2c:d9:4a:f0:d9:ff:29:be:
8b:c0:3c:cb:96:6e:b8:28:52:8f:c7:6b:9c:fe:30:
8b:98:a3:e1:ae:13:d0:cb:c2:10:15:89:59:01:3e:
0e:4c:91:c1:25:cc:4f:65:79:b7:b1:be:45:73:dc:
aa:66:38:ea:17:44:fc:fd:62:5b:9b:0a:86:6b:3a:
11:01:9a:0c:fd:37:de:56:41:1c:46:c8:ab:b4:03:
97:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A4:53:35:1F:B5:03:C3:EB:1B:7F:1F:FA:E4:77:5B:7A:15:12:7A
X509v3 Authority Key Identifier:
keyid:E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e4:b6:87:13:74:61:08:a9:0a:d3:21:cd:30:b6:91:d9:a5:
27:85:1e:e4:aa:21:7e:7a:eb:94:6b:25:d7:80:e5:b0:e6:0c:
65:2f:78:c5:26:c7:fe:90:37:81:c9:f8:0f:29:a3:e9:ad:8e:
cf:00:6a:81:2c:d6:0c:cb:df:1f:03:40:87:49:a0:e3:97:31:
70:ee:f3:bb:6e:42:d0:a2:04:bc:ec:14:5f:a4:c1:6e:2d:07:
0c:fb:16:66:c1:03:ae:65:3c:52:15:bb:2b:3e:9f:44:4f:c8:
57:fc:5c:c7:34:84:c8:ed:41:eb:9f:9f:4b:1f:06:5b:9d:87:
dc:a8:76:68:59:56:49:46:75:51:cd:8c:f0:21:70:b0:82:9e:
ff:2f:12:87:80:2c:da:24:d9:fd:e1:b6:50:18:95:83:ea:15:
5a:d1:87:1f:0b:c7:71:c8:b3:2d:c4:27:59:9c:31:78:8b:82:
00:22:eb:95:58:f4:eb:a0:b0:08:d1:42:87:6c:29:05:ab:ac:
6c:d8:0c:c1:92:28:b8:64:9b:d3:b1:13:63:91:8e:43:54:ef:
61:85:af:59:2f:e0:ee:27:bf:51:69:d4:76:25:58:29:7d:b1:
a5:1b:e2:cc:af:57:cd:aa:f3:76:28:f9:f4:74:15:3b:6c:7c:
ec:08:2b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:26:51 2026 by rpki-client