
$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
File: 37EECBD045CA279ED50372AC86831099D2FD896F.mft (raw, json)
Hash identifier: jSez3gF/m/di5u6oAup0a8+qOJmE8ImM/gchNaIKNUM=
Subject key identifier: BC:DE:7D:1E:26:80:22:B3:BC:15:78:CF:2E:21:72:6F:4D:EC:79:7C
Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F
Certificate issuer: /CN=37EECBD045CA279ED50372AC86831099D2FD896F
Certificate serial: 359FE2A56E67D04DF31214124ED05EF9C2956BDF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
Manifest number: 027E
Signing time: Sat 18 Apr 2026 14:51:15 +0000
Manifest this update: Sat 18 Apr 2026 14:46:15 +0000
Manifest next update: Tue 21 Apr 2026 21:23:15 +0000
Files and hashes: 1: 3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa (hash: yhwWUdoC9WOjTwRDGH2Rztn+XXc2WVSICSdxr6revGQ=)
2: 37EECBD045CA279ED50372AC86831099D2FD896F.crl (hash: gDTqRgQ7HsKWFz0pYNzT6OzQng+9E5HmPtXWXfieyPY=)
3: 3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa (hash: 6Du7YSTsPoNmwsS5ivsTmUWMLaQgevGKBTkeY7AtcXE=)
4: 3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa (hash: bS9q1FM6zKkGNpPUTupzPD0zpUyeZPD5xrJMwSlvCZ4=)
5: 3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (hash: DI8mGUi19aF12orHykc0S36TC5G+Qtw+wyOAf8XRRXA=)
6: 3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (hash: Ln71RPP7llFU+OlGN86Ee5xV7nvZwzcjYpvm2f0lcIQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl
rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 21:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:9f:e2:a5:6e:67:d0:4d:f3:12:14:12:4e:d0:5e:f9:c2:95:6b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F
Validity
Not Before: Apr 18 14:46:15 2026 GMT
Not After : Apr 21 21:23:15 2026 GMT
Subject: CN=BCDE7D1E268022B3BC1578CF2E21726F4DEC797C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:60:0f:69:88:80:60:8e:14:04:f7:dc:b9:3f:
58:c9:a1:03:3a:19:f4:e2:85:d6:22:e9:ee:ab:b2:
4b:2a:ab:3e:ad:01:09:de:2e:54:09:d0:99:2a:4c:
cd:da:71:23:7a:a3:ed:18:ed:7e:c6:46:67:bc:6c:
38:dd:d1:27:0c:9b:0b:b8:57:7f:0f:84:03:83:9b:
ad:be:d5:4a:03:14:90:f7:00:e5:d6:a6:94:5d:69:
dd:f2:fd:4c:31:df:4c:e1:e3:79:68:59:b0:8d:7c:
a3:d1:92:f7:52:32:55:f5:b2:55:03:67:56:b3:ed:
74:dd:1d:13:d5:a1:d7:cf:35:e7:6e:7d:c6:61:67:
71:38:c4:17:61:7e:56:ee:1d:52:72:02:aa:2c:4f:
3b:77:e7:72:9b:06:3b:e9:8e:16:0f:1d:60:db:a7:
b1:40:97:40:16:eb:6b:a9:8c:80:d8:38:70:78:f3:
6c:1d:d1:82:3e:7a:4d:ae:db:52:bd:bb:96:2c:a1:
67:94:2d:a7:db:f5:76:47:16:e7:89:e1:fb:c4:b3:
31:f5:47:32:61:ee:84:f0:53:77:b6:8e:fd:32:62:
48:8a:aa:4c:ee:8f:ad:06:14:8c:38:88:6f:1d:b6:
29:a4:2e:c1:b7:58:ce:b2:f4:3a:c3:49:ad:df:25:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DE:7D:1E:26:80:22:B3:BC:15:78:CF:2E:21:72:6F:4D:EC:79:7C
X509v3 Authority Key Identifier:
keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fc:a4:91:55:97:20:7a:2f:60:80:4e:cc:16:ea:d2:37:20:
0a:14:a6:87:47:72:05:f5:81:e2:a5:6f:5e:89:c9:9f:04:0b:
57:cf:7b:84:98:e0:dc:53:22:77:47:06:a5:ce:c1:2c:4f:1a:
b9:52:ef:0e:42:35:cb:c6:f2:a5:b0:35:5b:93:eb:e3:7c:1d:
6b:b3:3a:6b:7e:31:26:b2:28:47:06:f7:c7:57:73:3b:bf:ba:
93:e7:7e:6e:ac:63:ce:3e:3f:82:9d:f3:cc:a4:bd:f8:a8:8a:
28:6a:79:2f:38:87:b4:fd:a4:c6:60:3e:e5:df:ed:8c:10:2d:
6f:d6:54:36:3b:97:f5:db:22:e4:47:77:e6:4f:ab:6f:eb:99:
16:09:2a:df:80:b4:e1:86:da:90:b2:7c:ff:11:54:28:54:63:
11:b1:93:6d:b5:c4:44:af:8e:96:7c:75:9c:c0:67:47:5b:60:
01:f5:b3:53:f0:0c:07:2c:2b:18:1b:f8:e7:62:ed:2e:e6:81:
92:5b:64:00:0b:0a:97:62:70:5a:2f:83:cc:55:5b:c8:73:90:
7e:90:4c:7e:c5:11:3a:bf:89:17:02:cb:6a:7b:de:8d:bb:a8:
05:09:e0:b3:1d:b6:62:21:84:bf:c7:e0:68:47:dc:fe:1f:9a:
d7:ef:c3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:29 2026 by rpki-client