
$ rpki-client -vvf repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
File: 027DBEC91021154263BB0CF1565833705023D987.mft (raw, json)
Hash identifier: 39MadXriS8JMsMTMUHgQNWqx7UQplLZPUmICOXasDUs=
Subject key identifier: 2D:8A:71:D4:BD:16:D1:10:8C:BC:93:3D:93:6D:EA:B0:58:85:49:F2
Authority key identifier: 02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87
Certificate issuer: /CN=027DBEC91021154263BB0CF1565833705023D987
Certificate serial: 103EB91A8991620272F437AE31E3C744755FC6AD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
Manifest number: 01ED
Signing time: Wed 15 Apr 2026 23:11:44 +0000
Manifest this update: Wed 15 Apr 2026 23:06:44 +0000
Manifest next update: Sun 19 Apr 2026 06:03:44 +0000
Files and hashes: 1: 027DBEC91021154263BB0CF1565833705023D987.crl (hash: El+GnJklMYEkSsXxnXSgLne7SJBWQelK07loXKZCuhw=)
2: 323430333a653338303a313030323a3a2f34382d3438203d3e20313334363337.roa (hash: s/T+u3GrpHQpQDGLIfB4y2ZCiVIu1xhOCpqXzOx++a0=)
3: 3230322e3136302e3133392e302f32342d3234203d3e20313439363735.roa (hash: wdcIB7gQXhtVlKAgRBcM3DzhzYw/wfKPtk4+7Go8Wg4=)
4: 323430333a653338303a313030313a3a2f34382d3438203d3e20313334363337.roa (hash: /MzkpIvO+yJRIuUE7RrJH9MKdqO6vJCFLNiCFBSLu6w=)
5: 323430333a653338303a313030333a3a2f34382d3438203d3e20313334363337.roa (hash: D7a9H/JOzAAiQzJdPmUlyrWBu9LgMUu1qrNfoBeQLxo=)
6: 323430333a653338303a3a2f33322d3332203d3e20313334363337.roa (hash: vAyuSzG3C8SpiGpFIcSs/HWsw07B00gA01NjZSkVNoY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl
rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 06:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:3e:b9:1a:89:91:62:02:72:f4:37:ae:31:e3:c7:44:75:5f:c6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027DBEC91021154263BB0CF1565833705023D987
Validity
Not Before: Apr 15 23:06:44 2026 GMT
Not After : Apr 19 06:03:44 2026 GMT
Subject: CN=2D8A71D4BD16D1108CBC933D936DEAB0588549F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:c3:e1:e5:3b:4b:10:6b:a5:cf:61:4b:31:
22:7c:91:12:73:9e:3f:e9:5d:69:c5:2e:83:c2:34:
12:e8:b9:c6:cf:c8:02:96:c6:91:f3:0d:06:a8:0e:
8e:f0:75:36:2e:88:c8:e0:5f:13:12:e1:7d:37:80:
26:50:6d:a2:a9:6e:a5:60:f0:91:58:cd:4f:1a:9d:
89:47:1d:aa:ea:ac:e0:ef:ef:80:b4:7a:84:19:fa:
cb:91:13:62:26:75:f9:df:74:d5:cd:2e:1d:bc:fa:
17:9c:c0:91:bd:5e:d7:6a:3d:b8:ea:ac:47:b1:a0:
b2:1b:38:16:63:08:01:18:bf:82:75:f9:68:09:84:
8d:9a:1e:d5:20:7d:dd:50:b1:a3:35:e6:46:68:c1:
27:0f:b2:80:e9:e8:ac:92:75:2f:f3:88:cb:69:e9:
f6:6c:71:a9:a1:70:0b:fe:6d:a2:93:c4:ed:e2:ef:
7d:5b:00:fc:11:ee:fe:bf:f9:9e:26:33:a7:8a:28:
77:24:8b:79:d3:30:a9:c6:78:71:fa:a8:13:84:f2:
59:df:59:11:21:05:cb:81:d1:5c:b5:10:5e:99:eb:
a9:bd:d6:4f:6b:c4:e1:7a:c9:f6:b7:1d:31:33:69:
c6:ec:53:5a:fe:78:1c:1c:5d:0e:57:dc:1a:ea:d5:
07:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8A:71:D4:BD:16:D1:10:8C:BC:93:3D:93:6D:EA:B0:58:85:49:F2
X509v3 Authority Key Identifier:
keyid:02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:12:c9:2b:ea:83:09:73:f3:14:7a:11:c6:5f:bb:59:f2:76:
13:0a:bf:32:66:e0:c8:96:2c:75:7e:60:43:57:fb:c7:58:85:
31:6f:1f:39:28:97:66:35:00:82:8d:48:07:e3:79:69:29:9e:
76:e1:45:fa:f1:db:9d:4b:b0:ad:b1:42:59:0c:7e:a0:35:22:
11:41:6d:23:e7:91:a6:1f:14:57:dd:94:27:5a:3f:53:ed:79:
42:ee:41:62:1a:83:38:d2:3f:60:55:89:06:b1:88:bb:38:4f:
62:e0:8c:33:71:3a:33:70:04:f8:a2:0d:ca:72:ca:9f:28:db:
bb:3c:ef:77:8e:24:7b:b1:92:82:d9:e1:c4:54:e8:d5:27:3e:
3d:29:c4:e5:9d:de:17:e6:b6:9d:43:a0:a2:79:84:07:34:72:
02:1a:27:f1:af:2e:b4:da:e1:52:fe:a5:82:ed:8c:64:c5:15:
12:1a:9d:c3:03:01:1f:bf:07:e0:42:d6:cf:3a:ed:fa:c3:cf:
26:9d:b8:61:b4:d3:aa:2a:70:87:83:5f:f2:9d:b9:7b:67:96:
b4:31:1c:99:58:7b:36:3f:f0:9c:92:15:14:7a:e9:bd:e6:2c:
81:a6:6f:f7:90:f4:ca:1d:57:ce:55:67:5d:48:9a:fb:5d:eb:
0e:d3:87:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:43:24 2026 by rpki-client