
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
File: 27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft (raw, json)
Hash identifier: B/6V5mKYP4zUMq4jJm0w/nWrpoosJbnsrj+bd0tiW28=
Subject key identifier: 38:66:C3:99:25:6E:51:E5:7B:11:78:94:06:E9:70:94:BF:63:74:36
Authority key identifier: 27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1
Certificate issuer: /CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
Certificate serial: 16AF32357855B1EB624B3C79F6F205508930865A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
Manifest number: 0207
Signing time: Sat 28 Feb 2026 14:51:08 +0000
Manifest this update: Sat 28 Feb 2026 14:46:08 +0000
Manifest next update: Tue 03 Mar 2026 22:00:08 +0000
Files and hashes: 1: 3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa (hash: KEbEalVEafBDzV3MLE/Git/FoIDPkOruC23YgT8hoVA=)
2: 3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa (hash: f2QS2bkCAnvcHZRI/qOVoXk+1PJl2qNtEtgN6wxB1DM=)
3: 27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl (hash: z+uZb3vlWCwoTady2xuamGI/4hi6CnWYvUMOYXpbhxQ=)
4: 3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa (hash: Lqk7sZKV0+hi1szgYX9YILOG01YWWyBiUC0FX+79Zro=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl
rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 22:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:af:32:35:78:55:b1:eb:62:4b:3c:79:f6:f2:05:50:89:30:86:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
Validity
Not Before: Feb 28 14:46:08 2026 GMT
Not After : Mar 3 22:00:08 2026 GMT
Subject: CN=3866C399256E51E57B11789406E97094BF637436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:6c:ce:1e:96:71:d0:38:14:3c:35:24:65:
10:3f:5e:1b:1a:c6:d7:8c:90:0b:ba:30:ae:91:e8:
de:89:65:66:2d:e5:49:89:5b:00:7e:db:82:24:63:
b2:42:5b:4f:58:99:ae:15:52:54:ef:f0:b1:b1:a9:
82:7a:80:bf:03:17:10:f8:be:37:e4:52:90:74:f3:
ba:82:a8:b4:8d:e5:4d:3d:d0:f1:7f:14:30:2d:ed:
17:a2:03:2a:ff:dc:6f:6b:0f:86:25:71:02:5a:3a:
24:97:60:78:94:c7:c0:f7:4a:bb:64:dc:62:e2:d5:
a2:7c:73:6e:28:17:9c:71:ec:58:ba:5a:51:d5:21:
7b:55:64:92:27:1b:f2:8e:87:65:33:22:fe:56:88:
fd:6d:d3:5c:59:15:7e:d8:b7:7e:21:a1:76:ed:ab:
65:ec:d9:1b:2d:1b:31:f0:ef:75:99:5c:87:2a:ef:
a1:04:41:3d:8b:10:fa:88:3e:0a:99:b6:30:fc:ff:
9a:2d:98:73:e5:b7:ed:49:ec:6c:48:69:82:e0:fd:
04:66:b0:7a:e5:5d:c9:bb:46:64:d3:70:a7:4a:4f:
a2:fb:b3:de:e2:3d:74:bf:ae:fa:4c:67:6c:a9:b4:
2b:62:20:67:52:03:8d:51:47:d3:6e:9c:85:d7:92:
ea:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:66:C3:99:25:6E:51:E5:7B:11:78:94:06:E9:70:94:BF:63:74:36
X509v3 Authority Key Identifier:
keyid:27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:44:0e:d2:e8:3f:57:3d:9b:f8:4a:66:b5:cc:2e:59:30:8b:
9d:f2:23:9f:f6:32:97:c8:0d:3e:36:aa:4e:bd:b9:78:32:1b:
ae:91:42:fd:e3:10:a5:17:f4:a1:f0:98:ff:ab:4d:dc:29:7e:
43:7e:f2:cc:b8:6c:08:9e:fb:a3:26:4f:9c:11:90:eb:82:25:
13:03:97:d3:4d:eb:08:9d:78:12:6d:aa:f3:1d:2b:0b:eb:ea:
c2:4f:31:f2:b0:01:a8:fa:88:70:de:19:d5:b2:a8:6a:7d:50:
59:34:77:30:94:95:c8:14:c6:22:42:92:1a:64:66:ee:68:39:
c8:00:5b:48:b3:7d:29:a8:e5:f5:3f:99:ef:87:99:58:a9:b2:
16:62:71:3e:15:20:23:0a:26:29:4e:28:d4:dd:a8:b2:3f:1f:
a0:db:ea:63:6a:14:cc:4f:83:a9:89:a9:b9:d4:f2:20:31:1f:
94:b6:63:44:a6:bd:26:63:ce:53:f3:a6:bf:09:b2:72:9e:67:
2e:91:cf:5e:e9:96:c2:d8:2c:a1:18:d6:53:b7:0d:8f:d6:59:
53:2a:f6:38:d7:27:0f:1d:ca:fb:76:33:9c:22:76:3c:9c:6f:
80:9b:04:c8:54:83:30:36:05:5f:40:2c:54:97:26:c3:ea:c5:
9d:fe:f3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:17:29 2026 by rpki-client