
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft
File: 581E644EEC44F9523CF189893E102BCC6008F9BE.mft (raw, json)
Hash identifier: VlxJuNLnYruRCWmQVvjh3ck3/FiNm5+unLtjAXRhDbE=
Subject key identifier: 33:13:06:18:B8:20:2F:8D:C0:13:DA:1F:41:56:95:A7:C3:98:64:C4
Authority key identifier: 58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE
Certificate issuer: /CN=581E644EEC44F9523CF189893E102BCC6008F9BE
Certificate serial: 73E735A900FB915167FF8F2C22D7090CA2E825B8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft
Manifest number: 0231
Signing time: Wed 15 Apr 2026 23:30:01 +0000
Manifest this update: Wed 15 Apr 2026 23:25:01 +0000
Manifest next update: Sun 19 Apr 2026 05:08:01 +0000
Files and hashes: 1: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (hash: BD1xmKcIfvv53+qbSsqU41j3RH48RKcR2IUwYcDCVHU=)
2: 581E644EEC44F9523CF189893E102BCC6008F9BE.crl (hash: dwlf9jpluvdRdE+fQy24LnhT7J0X6nIGLcto9wmyXBw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl
rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 05:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:e7:35:a9:00:fb:91:51:67:ff:8f:2c:22:d7:09:0c:a2:e8:25:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581E644EEC44F9523CF189893E102BCC6008F9BE
Validity
Not Before: Apr 15 23:25:01 2026 GMT
Not After : Apr 19 05:08:01 2026 GMT
Subject: CN=33130618B8202F8DC013DA1F415695A7C39864C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:61:09:55:c0:68:ef:fa:87:d2:22:ba:b9:98:
6c:53:6a:99:61:d9:f8:1b:20:1a:fc:23:5f:33:93:
7d:67:de:02:fd:1e:65:80:d7:e8:9d:71:30:13:23:
6b:73:12:74:1c:77:f0:6c:34:49:a3:b5:98:61:e1:
0c:d4:ec:4c:43:42:38:22:70:fa:55:b4:ee:48:f7:
76:bf:3d:96:e0:08:99:bd:43:94:f0:55:61:66:0e:
95:2f:25:d7:48:ca:95:10:e8:96:a6:fa:94:6c:0f:
81:06:bc:30:e1:aa:ad:e5:e5:5a:94:2f:69:51:61:
b4:82:4b:15:86:89:37:42:ac:a2:97:d2:30:6d:b0:
26:b3:f9:3c:01:29:f2:f0:1c:12:81:1a:44:a9:b7:
f4:82:05:33:f5:62:f7:d9:9f:8e:e7:20:cc:43:14:
a6:e6:a1:59:7d:5f:ac:97:ca:92:91:23:53:9b:58:
c2:cf:86:2c:7f:d5:0d:40:c4:fb:cc:2a:5c:b3:bc:
4a:04:35:36:84:05:2f:93:f6:d6:97:27:b5:06:c6:
84:22:3d:c8:ea:eb:de:ca:d7:a6:08:c2:9c:5b:96:
30:14:89:d5:2a:e3:5a:55:16:06:74:d6:a1:22:17:
86:e4:18:21:22:59:11:4d:8c:19:a6:51:ae:6b:f2:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:13:06:18:B8:20:2F:8D:C0:13:DA:1F:41:56:95:A7:C3:98:64:C4
X509v3 Authority Key Identifier:
keyid:58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:cd:da:d6:3e:1d:81:58:16:8e:0e:d3:46:41:cc:4c:2f:38:
47:d9:4a:db:16:b6:f0:fd:c8:4e:1b:b7:cf:6f:8e:89:77:8e:
d5:86:51:33:97:bb:f1:00:e5:1a:42:34:f9:f7:45:d5:1c:bf:
27:52:be:d5:35:e2:52:7f:1e:26:a3:6f:42:bd:bd:bc:14:80:
13:cb:95:d8:54:61:99:ef:5a:5b:cf:f1:07:00:14:01:4f:06:
80:e7:f5:97:9a:d8:52:35:d6:eb:35:dc:ab:1a:52:78:57:b0:
33:cc:53:67:19:76:24:ed:1d:38:89:2c:96:ae:5d:45:3a:d7:
3b:f2:23:8c:cf:f1:90:59:d3:04:69:19:1a:a6:17:bb:f0:fd:
5a:b6:92:67:59:ec:59:0e:1f:aa:bf:ca:e8:34:7c:06:9b:93:
44:44:ac:c6:68:5a:45:a9:e5:95:cb:95:e5:f8:a5:bd:b8:27:
6f:66:09:d3:4a:28:12:9b:39:ea:10:85:fc:32:2d:12:1b:ac:
84:ef:38:d3:20:81:22:7c:19:3a:91:6f:94:ae:c2:83:aa:a0:
73:3b:fe:b6:07:70:29:2a:df:6b:7d:b7:7c:35:66:e2:0b:4e:
91:95:4a:1b:05:e6:5f:30:b1:d2:32:97:de:05:28:89:f1:04:
59:28:8b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:05:39 2026 by rpki-client