
$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
File: 37EECBD045CA279ED50372AC86831099D2FD896F.mft (raw, json)
Hash identifier: ocy6ff4z8LhG0CNBEkaYbA3nhylzZLPFGOGNvyDl8rs=
Subject key identifier: FF:4E:A9:CE:F9:F5:51:EE:47:29:58:84:49:67:A5:3F:9A:E6:F3:1D
Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F
Certificate issuer: /CN=37EECBD045CA279ED50372AC86831099D2FD896F
Certificate serial: 23A90C0C76C35AC09787893CEAC091773976E62D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
Manifest number: 0269
Signing time: Mon 02 Mar 2026 02:11:14 +0000
Manifest this update: Mon 02 Mar 2026 02:06:14 +0000
Manifest next update: Thu 05 Mar 2026 02:26:14 +0000
Files and hashes: 1: 3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa (hash: bS9q1FM6zKkGNpPUTupzPD0zpUyeZPD5xrJMwSlvCZ4=)
2: 37EECBD045CA279ED50372AC86831099D2FD896F.crl (hash: e0kvSRHeQ5vOWtHN1DkmRF3bhqVhsXnSfrfQN7Nimeo=)
3: 3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa (hash: yhwWUdoC9WOjTwRDGH2Rztn+XXc2WVSICSdxr6revGQ=)
4: 3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (hash: DI8mGUi19aF12orHykc0S36TC5G+Qtw+wyOAf8XRRXA=)
5: 3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (hash: Ln71RPP7llFU+OlGN86Ee5xV7nvZwzcjYpvm2f0lcIQ=)
6: 3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa (hash: 6Du7YSTsPoNmwsS5ivsTmUWMLaQgevGKBTkeY7AtcXE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl
rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:26:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:a9:0c:0c:76:c3:5a:c0:97:87:89:3c:ea:c0:91:77:39:76:e6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F
Validity
Not Before: Mar 2 02:06:14 2026 GMT
Not After : Mar 5 02:26:14 2026 GMT
Subject: CN=FF4EA9CEF9F551EE472958844967A53F9AE6F31D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:6f:48:8e:7d:0d:65:f4:d9:e7:95:e5:9e:
31:07:ac:03:f5:85:d9:4f:a3:f4:f2:65:1e:50:22:
52:8d:47:70:ec:46:76:a9:3b:b7:06:08:d9:05:d9:
db:9b:b9:e8:e5:51:de:3d:78:69:1f:13:85:0b:a5:
ab:55:d0:5f:cb:fd:d0:e4:e7:e4:49:82:9a:21:61:
ba:6a:d7:02:71:4f:82:da:e5:21:55:7b:ce:2c:da:
56:68:18:6e:7f:3a:cb:d2:ec:db:23:24:f0:18:c6:
c1:b9:39:94:62:56:92:d4:86:31:e3:66:fd:0b:72:
95:8d:b8:0d:7c:f7:f6:90:fe:95:c8:f4:b5:d7:07:
34:40:be:d3:ca:c9:13:4c:cb:1a:50:68:cb:e0:a0:
88:70:38:5b:1c:e4:08:68:7a:86:f2:73:56:15:d3:
34:f8:b7:13:a0:b6:0f:14:a9:6e:44:00:5d:81:4a:
a5:4a:26:59:1e:26:5a:53:57:f6:9d:12:28:1e:d7:
ca:c2:50:43:9e:e3:f2:7b:d4:ec:cd:e3:42:22:30:
78:df:33:37:8a:08:cc:30:f5:0e:0a:a5:f0:83:1b:
aa:9a:e1:da:39:1f:2f:26:46:11:63:3e:88:03:e0:
93:53:b6:a7:47:d9:a8:cd:fd:f3:22:f3:47:40:39:
50:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4E:A9:CE:F9:F5:51:EE:47:29:58:84:49:67:A5:3F:9A:E6:F3:1D
X509v3 Authority Key Identifier:
keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3c:eb:49:c8:a0:b4:69:07:26:e0:a8:79:4e:ec:16:0c:b0:
5b:41:31:13:81:78:f8:a9:c3:60:a6:e7:2b:9f:f8:01:cc:51:
46:92:f8:19:bf:12:24:bb:86:da:a5:43:30:b3:90:59:bd:2e:
9e:6e:a7:cb:3f:45:94:ac:23:d4:74:77:40:f5:71:9f:da:45:
ba:d4:d6:7f:ad:18:70:67:43:8a:8c:02:22:95:5c:eb:f6:39:
37:47:13:eb:3f:02:d1:18:4d:51:6d:91:bb:9d:2e:75:2f:f6:
ff:31:52:8a:12:76:1e:db:6c:42:4f:28:d9:32:17:8e:b3:60:
bc:82:37:b3:b6:7e:64:b2:b2:24:b2:92:00:ed:87:fe:a7:71:
4e:fd:6f:72:9c:38:ca:6d:a2:69:18:20:8f:cd:7b:3f:a4:8e:
f6:b1:6e:ab:5f:ba:1f:97:3c:e0:45:d4:f2:08:1b:62:f2:31:
c8:06:3d:7c:8a:42:d3:d8:93:80:44:d3:e5:aa:cd:fb:40:eb:
34:14:45:d7:7d:a6:b8:50:4c:0d:38:33:25:6b:f1:67:f1:ea:
fc:fe:af:b9:a3:9c:8c:17:5e:bc:dd:fb:b6:b4:f1:86:29:0d:
10:84:3c:9a:59:e5:a8:36:2a:1c:01:e1:89:1f:53:f1:d1:2b:
17:43:96:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:30 2026 by rpki-client