
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
File: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft (raw, json)
Hash identifier: F5bB7awgL/0wBKp/K0pKaPxBtvrNss+yQkxfFyFLigM=
Subject key identifier: 63:BB:4B:6C:F2:00:26:65:E6:6B:8C:4B:BB:E7:D9:FD:2E:35:EA:DF
Authority key identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51
Certificate issuer: /CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51
Certificate serial: 556BFAD77C3A1C35C3A272BCA4758FC18B1D58BA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
Manifest number: 01C8
Signing time: Tue 24 Mar 2026 06:31:31 +0000
Manifest this update: Tue 24 Mar 2026 06:26:31 +0000
Manifest next update: Fri 27 Mar 2026 13:40:31 +0000
Files and hashes: 1: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl (hash: EckAHfcCGwMXe8UsWeatjwLfD17+4l5Kqm1rXQhM8+A=)
2: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: M0fQVaA9y/GHUN4D73xJHIZQVfNSjhrhi+C2OP+xS7k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl
rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 13:40:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:6b:fa:d7:7c:3a:1c:35:c3:a2:72:bc:a4:75:8f:c1:8b:1d:58:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51
Validity
Not Before: Mar 24 06:26:31 2026 GMT
Not After : Mar 27 13:40:31 2026 GMT
Subject: CN=63BB4B6CF2002665E66B8C4BBBE7D9FD2E35EADF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:f9:97:00:15:1d:f3:17:31:54:91:49:04:
f7:58:43:15:7e:af:83:9b:5e:2f:ec:e8:48:b5:4e:
56:98:ec:65:2e:1a:62:ab:8d:30:f8:43:31:b5:34:
4a:2c:19:e5:82:f3:a6:6c:d1:17:13:ed:21:cc:6a:
4b:f8:7f:e3:6c:36:ab:e4:d0:ba:b1:70:25:b8:da:
9f:4f:f6:7c:de:73:a8:1d:f3:ed:a9:5e:43:09:33:
e4:60:0c:ca:8b:87:87:61:21:6f:08:6c:96:2a:15:
98:c9:21:4b:15:d9:12:1c:ee:c9:ec:c2:a8:04:05:
dc:19:ca:59:d2:75:a4:17:09:e8:4b:9f:90:6f:b7:
14:37:ee:07:cc:f4:ff:f6:5d:84:12:7b:cf:06:7c:
e6:8d:50:7c:14:d1:42:88:0b:36:5b:cb:34:c0:71:
8d:e9:3a:d1:3d:13:f8:94:f1:5a:53:de:32:c7:d6:
4d:4e:5d:36:99:ba:ca:63:e1:2e:dd:93:59:5a:9a:
0b:4e:a4:78:04:33:39:c8:3e:7d:0e:f3:83:aa:71:
69:78:7b:4f:73:cd:ea:3a:5f:ac:08:22:a8:7e:d5:
ee:b4:1b:9f:8f:80:ff:64:96:ef:6f:1a:35:82:9d:
ae:e8:b5:48:f1:6e:0b:8e:ed:3d:0a:64:a1:ea:0f:
f1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BB:4B:6C:F2:00:26:65:E6:6B:8C:4B:BB:E7:D9:FD:2E:35:EA:DF
X509v3 Authority Key Identifier:
keyid:27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6b:9d:62:8e:e5:4a:b8:fd:62:8c:ef:a7:2d:43:de:43:bb:
eb:4b:3b:5d:ec:50:21:2a:66:9c:41:33:e8:9d:e0:ac:c9:28:
9d:88:98:ca:77:64:00:50:9d:9b:f5:9c:aa:8f:cb:b6:c6:d3:
07:c7:e3:62:2f:7c:fd:32:84:fd:85:6d:a5:52:62:2b:69:0a:
e1:4e:9b:6a:a4:fc:f0:73:96:81:c9:d8:8b:8f:71:b5:ec:4e:
0e:33:12:10:4d:62:f6:dd:99:d6:93:d4:1d:e6:92:21:d7:a4:
2a:9f:94:89:15:0b:5d:61:c1:cf:1a:3c:c4:46:ec:67:78:d1:
0f:ac:f6:78:33:ba:c6:a7:9d:de:d9:b7:f7:20:f3:74:c1:a5:
af:b7:8f:7e:40:de:89:7a:dd:da:8d:ad:47:98:31:75:ff:db:
73:49:f1:21:ce:56:24:55:be:02:c9:69:f3:8b:d8:1d:9d:59:
96:82:0b:a1:0c:06:94:1e:22:aa:0a:e9:f7:fc:cf:6c:04:f4:
fe:08:1e:4d:3d:4b:3f:c4:69:f6:31:4a:57:f4:ce:09:1b:b0:
a7:97:55:ac:55:08:87:08:9d:9c:1e:b4:d9:b7:14:94:17:23:
01:a8:01:b6:16:09:cd:37:3c:91:82:dc:14:cf:5b:31:7f:d6:
3c:0c:e9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:10:45 2026 by rpki-client