
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft
File: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft (raw, json)
Hash identifier: 5UAGj9TwopvhuLRxYuLtqhpkuIosGH2jN45C6l9HFpg=
Subject key identifier: 01:6D:1D:16:A8:40:01:AB:AC:61:F9:C9:9A:A7:B9:F1:49:88:D0:F9
Authority key identifier: 2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E
Certificate issuer: /CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E
Certificate serial: 7558EB5310CDA70C62665AAE037098DE4D7626E2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft
Manifest number: 81
Signing time: Fri 17 Apr 2026 10:12:14 +0000
Manifest this update: Fri 17 Apr 2026 10:07:14 +0000
Manifest next update: Mon 20 Apr 2026 15:20:14 +0000
Files and hashes: 1: 3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa (hash: 745SbMdhMmIVd9+YwllDATXoMHy8b7XWNJsce0BNxUE=)
2: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl (hash: zNSgbGMV7tfVqmserIaiY9mLAa8VmeC/wCLg7ApuP2A=)
3: 3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa (hash: 6F2YD7bfpsvy9ZCzb1NRXMUO3qP13tF9eyDHsH0IzEg=)
4: 3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa (hash: 4LokQzzFwf4xC5LYRIdk1nOZ26P5gcvOND0Okjnr1uo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl
rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 15:20:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:58:eb:53:10:cd:a7:0c:62:66:5a:ae:03:70:98:de:4d:76:26:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E
Validity
Not Before: Apr 17 10:07:14 2026 GMT
Not After : Apr 20 15:20:14 2026 GMT
Subject: CN=016D1D16A84001ABAC61F9C99AA7B9F14988D0F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:a5:12:b0:a4:74:e4:af:11:3e:f2:78:a4:
b0:16:56:c8:87:60:57:f6:46:1d:df:6b:6d:dd:6f:
f2:5b:a7:7c:d6:12:a4:5d:b7:f2:b7:d2:eb:ff:78:
5f:1d:19:72:f4:2e:ed:5d:16:cf:ee:46:f8:67:99:
81:d8:a0:c0:11:59:ec:d6:ab:46:77:26:58:99:11:
40:50:4b:7d:16:aa:98:cd:54:08:67:7c:dc:6f:73:
d3:fb:db:90:d0:e5:7a:ec:59:30:f1:c0:fb:34:6a:
67:a9:7b:5b:48:47:43:ff:eb:8b:43:74:bd:d0:5e:
a9:f0:66:89:79:66:ae:80:bf:fd:a1:dc:82:40:16:
72:73:52:a8:9c:8d:33:c5:77:d4:19:39:fe:92:d1:
79:5c:cb:89:e2:2a:64:63:25:41:3b:fe:81:9d:c5:
04:c9:fc:ab:ac:49:bb:8e:b8:fe:9a:dc:8b:ff:1c:
25:1d:1b:17:7d:b3:81:9d:29:c8:ee:f6:d6:0d:6d:
04:a7:54:96:d5:ec:50:0b:7a:ba:e3:bf:a3:60:50:
1c:de:c5:e8:c1:d4:bc:4d:db:a6:85:b6:d9:75:17:
f6:6e:92:35:f2:b6:d5:86:29:bd:1f:2c:9b:7d:79:
83:df:a1:01:14:f6:6b:b2:c8:c2:7f:cb:2d:62:04:
84:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6D:1D:16:A8:40:01:AB:AC:61:F9:C9:9A:A7:B9:F1:49:88:D0:F9
X509v3 Authority Key Identifier:
keyid:2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:80:d8:b0:04:2e:35:03:84:f9:28:20:14:ba:48:a6:58:61:
bc:d5:2a:40:4e:55:be:f6:69:fe:8e:61:0f:ac:2c:a1:5b:1a:
05:33:ec:96:a0:98:20:ee:6c:ce:94:00:81:38:0c:a0:d4:92:
55:08:a0:ba:66:b3:c3:e7:a2:af:b2:0d:c6:0e:ef:88:97:f8:
fc:e6:02:91:b8:fa:d8:2e:11:12:94:25:76:f4:c2:7c:33:08:
cf:33:8e:23:d3:f7:bd:e9:24:8c:e6:71:de:b3:80:79:3f:3a:
51:95:1a:4a:09:1e:40:4e:d3:fe:47:fc:33:88:ad:a2:e9:88:
dd:42:4a:b4:9b:db:6e:5e:91:d9:3e:1c:dd:94:d3:2c:c0:9e:
44:65:2b:2a:32:5b:6b:6b:b4:2d:41:6e:24:2f:ba:6b:a6:b1:
e4:bb:66:14:d2:58:9b:e4:a0:3e:13:55:33:cc:00:89:2d:11:
cf:60:9d:a1:fb:b5:6f:c6:c8:f8:d7:35:0b:a5:87:91:97:6f:
13:59:9c:e6:d5:e6:cc:23:f8:e2:5b:0e:20:37:1c:bb:ac:ee:
ff:e5:60:df:86:e4:dc:3b:f9:b1:6a:12:2c:22:b6:18:f5:f7:
c7:bf:55:03:eb:91:9e:dc:87:5b:30:c3:f4:89:db:de:14:6e:
0f:e6:15:96
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdVjrUxDNpwxiZlquA3CY3k12JuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VC
MjFDNDk4RTAeFw0yNjA0MTcxMDA3MTRaFw0yNjA0MjAxNTIwMTRaMDMxMTAvBgNV
BAMTKDAxNkQxRDE2QTg0MDAxQUJBQzYxRjlDOTlBQTdCOUYxNDk4OEQwRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2IqUSsKR05K8RPvJ4pLAWVsiH
YFf2Rh3fa23db/Jbp3zWEqRdt/K30uv/eF8dGXL0Lu1dFs/uRvhnmYHYoMARWezW
q0Z3JliZEUBQS30WqpjNVAhnfNxvc9P725DQ5XrsWTDxwPs0amepe1tIR0P/64tD
dL3QXqnwZol5Zq6Av/2h3IJAFnJzUqicjTPFd9QZOf6S0Xlcy4niKmRjJUE7/oGd
xQTJ/KusSbuOuP6a3Iv/HCUdGxd9s4GdKcju9tYNbQSnVJbV7FALerrjv6NgUBze
xejB1LxN26aFttl1F/ZukjXyttWGKb0fLJt9eYPfoQEU9muyyMJ/yy1iBIQHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAW0dFqhAAausYfnJmqe58UmI0PkwHwYDVR0j
BBgwFoAULCeg2d0lMevvHi7FasvLzrIcSY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZmYwOTU4NC05MTEwLTRiMGQtOGY2ZC0yY2U1MjU4ZTg0NmIvMC8yQzI3QTBEOURE
MjUzMUVCRUYxRTJFQzU2QUNCQ0JDRUIyMUM0OThFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VCMjFD
NDk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm
NmQtMmNlNTI1OGU4NDZiLzAvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNC
Q0VCMjFDNDk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC+A2LAELjUDhPkoIBS6SKZYYbzVKkBOVb72
af6OYQ+sLKFbGgUz7JagmCDubM6UAIE4DKDUklUIoLpms8Pnoq+yDcYO74iX+Pzm
ApG4+tguERKUJXb0wnwzCM8zjiPT973pJIzmcd6zgHk/OlGVGkoJHkBO0/5H/DOI
raLpiN1CSrSb225ekdk+HN2U0yzAnkRlKyoyW2trtC1BbiQvumumseS7ZhTSWJvk
oD4TVTPMAIktEc9gnaH7tW/GyPjXNQulh5GXbxNZnObV5swj+OJbDiA3HLus7v/l
YN+G5Nw7+bFqEiwithj198e/VQPrkZ7ch1sww/SJ294Ubg/mFZY=
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:23:22 2026 by rpki-client