
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft
File: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft (raw, json)
Hash identifier: lAzFcijhFdBHA71oBkEXLuoqoovJhSWext4tYUKOOaQ=
Subject key identifier: 28:11:59:FE:C2:1E:3B:A1:BA:9D:DC:0D:65:0B:83:90:2E:27:8C:D9
Authority key identifier: 81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52
Certificate issuer: /CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652
Certificate serial: 0E7DACF3950F1E75298CB2888E257B99E32D0F21
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft
Manifest number: 032B
Signing time: Thu 16 Apr 2026 23:02:45 +0000
Manifest this update: Thu 16 Apr 2026 22:57:45 +0000
Manifest next update: Mon 20 Apr 2026 03:30:45 +0000
Files and hashes: 1: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: aeR78T4SgFq62LUVaHNT0OWQnz8U1jUNL74Pz+jaUQ8=)
2: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: 39I2VRz2Pwheop/Q/95GW6wOO98caUDbgzZuoNjlDio=)
3: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl (hash: a8qpAHpWAJLLrBhbxR1kv+Rbl1MQu6OEaYvEjy3j5PU=)
4: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: yyP1s7Drm4K7i/5vyWhbMeYMvkp/vo6vSFKCXgZUuLI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl
rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 03:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:7d:ac:f3:95:0f:1e:75:29:8c:b2:88:8e:25:7b:99:e3:2d:0f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652
Validity
Not Before: Apr 16 22:57:45 2026 GMT
Not After : Apr 20 03:30:45 2026 GMT
Subject: CN=281159FEC21E3BA1BA9DDC0D650B83902E278CD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:cf:6f:44:d6:b3:69:92:96:4b:72:6e:b4:
89:d4:7c:52:74:bf:7d:42:e2:d8:5b:98:d2:52:b1:
45:14:56:bd:ec:49:22:4e:49:9a:b0:56:5f:17:e7:
3f:1f:1d:ff:ac:1f:0b:80:ca:f4:28:b0:05:c7:b4:
7a:ba:3e:42:1e:05:c5:3e:2b:48:b4:a2:cd:0d:22:
05:19:98:cc:72:d1:ba:a1:d6:a0:f8:a9:c2:7e:ec:
12:11:75:eb:d6:94:62:64:b5:05:d9:ee:04:cc:43:
5a:8e:b5:ea:78:28:0d:75:e3:94:03:09:4c:d6:2f:
aa:9d:dd:d2:53:18:e5:b3:fa:1e:81:b7:6b:de:98:
07:55:19:dd:96:76:45:cf:2d:0b:a7:17:e4:5c:00:
e4:71:a6:d8:66:a0:bf:01:bc:17:e1:14:99:f1:21:
e1:8b:40:d6:64:2b:94:89:f8:f6:24:3e:1c:16:01:
e9:3d:2a:4f:81:2f:e1:6e:38:7b:c5:46:e8:7f:9a:
a4:dd:63:28:6d:a7:32:f5:e8:17:f2:a7:22:1e:18:
f3:44:9d:8d:f8:33:e5:3d:7f:21:74:2c:f4:8d:fa:
8d:e7:b1:61:34:29:21:47:b3:60:95:4e:dc:87:9f:
78:83:50:1a:46:59:74:fe:9f:08:a0:1b:dd:f0:8a:
e3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:11:59:FE:C2:1E:3B:A1:BA:9D:DC:0D:65:0B:83:90:2E:27:8C:D9
X509v3 Authority Key Identifier:
keyid:81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:81:6f:e9:45:c7:05:7e:30:39:f6:34:a2:42:18:40:7b:fe:
aa:35:08:ab:14:f3:80:8f:0c:92:9a:0b:68:03:59:0d:59:ff:
c7:e7:c6:40:f4:0a:93:38:32:e6:66:d8:f3:f2:b4:48:f6:4d:
f1:c8:a4:15:71:aa:ef:ea:c4:b3:36:af:3e:ad:e4:17:01:62:
3b:41:4b:90:03:fa:96:76:fe:d9:eb:7b:1d:89:a1:6d:80:44:
42:e6:f9:84:94:11:d6:12:a9:01:8b:0a:87:5e:13:28:7a:34:
c6:30:a9:ad:b3:21:53:ee:99:ec:89:31:4e:8f:fa:2a:7a:83:
63:77:c6:d7:6a:09:c6:e2:7b:21:51:1f:a3:99:53:40:c7:39:
33:77:eb:04:cf:7c:7b:5c:70:37:40:75:ce:a6:a1:b6:74:d2:
8d:2d:b1:e3:66:64:33:1b:6f:4d:d3:ad:08:07:5c:36:a8:2d:
35:d7:24:10:63:ec:7b:18:d3:21:2f:0f:c5:ab:71:36:00:8a:
0f:8c:c7:f1:ab:20:80:99:45:69:9c:7f:0d:01:63:10:b6:e2:
64:1c:09:f2:aa:76:89:12:f6:b3:5b:5d:f5:04:2a:87:51:69:
e6:6d:c9:9c:32:79:e3:10:f9:71:b3:f3:03:34:f7:85:22:11:
bb:de:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:15 2026 by rpki-client