
$ rpki-client -vvf repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft
File: 27A3131BB606D93657151019C1A9735DF861C9D4.mft (raw, json)
Hash identifier: CfmlvlYEVNGL7Ih7NGSCWqsmHRF4jxsbCWDPNhIjILc=
Subject key identifier: 6C:DA:6F:94:51:50:59:E8:9C:86:81:06:15:B9:24:B0:0E:CB:69:FB
Authority key identifier: 27:A3:13:1B:B6:06:D9:36:57:15:10:19:C1:A9:73:5D:F8:61:C9:D4
Certificate issuer: /CN=27A3131BB606D93657151019C1A9735DF861C9D4
Certificate serial: 47BCA73DCF85F8A755DE95FF68D353BF17D86A54
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft
Manifest number: 033C
Signing time: Sat 28 Feb 2026 11:21:10 +0000
Manifest this update: Sat 28 Feb 2026 11:16:10 +0000
Manifest next update: Tue 03 Mar 2026 23:17:10 +0000
Files and hashes: 1: 3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa (hash: encpHXfOglU+n5zC00TevMjvjDMOpcW1MtPZsrVdOCI=)
2: 27A3131BB606D93657151019C1A9735DF861C9D4.crl (hash: kRy3mCNcMfiXfCaj2iH1y9FZc/M1uk2HRDP+e2RDI/Q=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.crl
rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 23:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:bc:a7:3d:cf:85:f8:a7:55:de:95:ff:68:d3:53:bf:17:d8:6a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27A3131BB606D93657151019C1A9735DF861C9D4
Validity
Not Before: Feb 28 11:16:10 2026 GMT
Not After : Mar 3 23:17:10 2026 GMT
Subject: CN=6CDA6F94515059E89C86810615B924B00ECB69FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:7e:26:a9:44:5e:5e:14:7d:1f:25:0a:1f:
43:49:99:c3:b5:ed:c2:c5:f7:da:12:12:17:f4:03:
b5:2d:6f:99:d7:cc:ef:4b:67:9e:e1:61:43:3d:7e:
3b:71:a0:79:cf:8c:e8:0e:8f:f3:26:ab:f6:c2:b1:
b4:a7:4c:9c:91:2a:25:fb:5a:08:54:34:02:5c:16:
32:ef:19:46:1b:9a:90:42:88:d0:d9:f8:54:90:0c:
ea:20:bb:74:06:61:7d:8f:6a:fc:55:f7:53:2a:84:
25:8b:12:e0:e9:f6:99:3a:2e:79:10:0a:a5:84:ec:
32:4b:73:c7:de:14:49:8a:3f:f3:49:65:b1:0a:e2:
e8:f7:5b:cd:f6:da:71:6e:5c:0b:8e:05:20:7b:43:
d6:ea:cf:79:a5:cc:7e:b8:c7:78:66:45:84:6d:17:
ec:0c:16:69:cf:6a:82:39:b4:83:d7:3f:cf:ea:6e:
61:43:f2:8e:7c:6d:4d:f4:31:a9:bb:58:1f:17:85:
af:46:e0:d6:59:4d:6c:65:48:12:67:e6:ea:d9:f2:
46:4f:c6:84:75:ae:80:fb:21:9f:78:9f:0c:9d:5b:
5a:54:66:08:52:92:94:9f:4b:b6:c5:b5:66:e0:5d:
b7:7c:8f:05:39:f2:e4:e1:a5:d2:dc:2e:01:d9:1d:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DA:6F:94:51:50:59:E8:9C:86:81:06:15:B9:24:B0:0E:CB:69:FB
X509v3 Authority Key Identifier:
keyid:27:A3:13:1B:B6:06:D9:36:57:15:10:19:C1:A9:73:5D:F8:61:C9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a1:99:ff:58:42:5c:f4:b2:2b:fb:20:4b:04:84:4c:35:a3:
68:ef:2f:be:b2:3e:c8:94:25:87:3d:06:97:6a:05:52:57:53:
43:2b:06:e1:c7:fc:38:0b:bf:78:6f:0d:47:be:c0:bf:15:eb:
22:e2:6b:cf:56:37:29:17:4b:d8:60:bf:07:81:b6:bd:ab:ad:
7e:8b:fd:62:4c:0b:48:11:fd:ca:dd:af:c0:09:05:40:20:47:
25:b3:4f:45:55:31:2b:63:3d:bd:d0:25:6a:c6:d0:84:82:bf:
60:01:5a:70:99:f2:f7:a7:09:bc:b8:b8:eb:98:aa:0a:c9:32:
30:0c:85:0e:7a:26:2e:ec:0c:5d:0b:7a:1c:63:31:20:52:fe:
e0:e1:92:69:d2:0c:ad:2d:a6:62:c3:55:06:82:fc:6d:45:e4:
f3:61:be:fb:66:e6:65:de:d4:fc:cb:36:a0:71:45:2b:85:45:
58:a4:5e:e7:5f:5e:7b:f9:a4:d2:da:61:b4:4d:fe:94:d6:13:
ef:da:23:96:40:f5:81:c3:60:e0:5d:ac:88:b2:c2:d1:c3:7e:
68:a0:ce:ec:2d:4c:74:ea:f1:47:11:db:b5:c6:ac:d9:66:a3:
af:8f:78:66:2e:2b:f8:4b:5c:12:f2:1a:70:cc:25:e6:b9:c8:
8b:b5:56:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:30 2026 by rpki-client