
$ rpki-client -vvf repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft
File: 81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft (raw, json)
Hash identifier: HJBgifo+2fAP8nlwHPJmlSIF2ofvFlKahIVaEwaXtJI=
Subject key identifier: 57:5E:B1:86:AC:3F:A3:DE:87:84:6B:B2:C6:38:97:6B:6D:2C:C6:73
Authority key identifier: 81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45
Certificate issuer: /CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45
Certificate serial: 7A5CACB4983B36BFCBA3AF626031A20A329B367F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft
Manifest number: 0553
Signing time: Sun 01 Mar 2026 17:31:59 +0000
Manifest this update: Sun 01 Mar 2026 17:26:59 +0000
Manifest next update: Wed 04 Mar 2026 19:05:59 +0000
Files and hashes: 1: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (hash: RbGIdOLWBU5xVV9K0LoZOkwEhMFKzskG/yrpat5y7rY=)
2: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (hash: P4tF/toC2yTvcWCVKc3kDK6iTGruhcVaRl9T+qXARgU=)
3: 81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl (hash: +YE9kbsjGWOTnG0M+VFEJ6LZO1BPXLoxwiLpmHnUYCw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl
rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 19:05:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:5c:ac:b4:98:3b:36:bf:cb:a3:af:62:60:31:a2:0a:32:9b:36:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45
Validity
Not Before: Mar 1 17:26:59 2026 GMT
Not After : Mar 4 19:05:59 2026 GMT
Subject: CN=575EB186AC3FA3DE87846BB2C638976B6D2CC673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:ca:74:d1:69:31:0a:0e:f6:ed:75:99:23:
a9:b0:4d:0e:b0:e8:2c:1d:e1:bb:39:56:68:9d:48:
19:6f:65:67:d7:76:fe:6b:f4:6c:d6:c4:b4:60:19:
49:9c:3e:ad:32:06:22:de:6c:14:17:bb:de:48:65:
43:db:67:1f:aa:bb:f6:07:18:cc:a9:f6:dd:f4:92:
00:a1:8c:e5:09:00:30:e7:cc:cc:1f:43:5e:fb:7b:
67:46:96:80:40:0a:89:61:90:e4:f3:7f:7c:19:79:
16:64:11:2c:a7:04:67:3b:73:74:6d:6d:94:f2:2f:
20:e7:26:18:09:0e:fb:c6:1e:45:62:30:4e:68:48:
ec:0d:71:e8:01:e0:2b:cc:3b:75:dc:cf:f8:d7:d4:
6d:ff:1c:03:56:c3:b6:f9:5c:ba:24:1c:35:9b:31:
7c:9f:95:a7:7c:62:7a:a3:1c:98:2c:20:68:44:9a:
e9:c9:82:24:a2:27:47:85:cc:45:f4:fc:60:e2:86:
97:8c:2a:a7:91:9c:62:0d:3a:1b:e0:a7:91:60:e0:
86:33:45:c9:df:75:93:55:5f:3b:5d:f7:8d:b1:ce:
da:a9:e7:cc:bd:2a:b8:68:3b:aa:ba:ea:db:e1:fa:
75:12:dd:44:c6:b9:89:4d:03:03:1e:6f:1d:8c:79:
55:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5E:B1:86:AC:3F:A3:DE:87:84:6B:B2:C6:38:97:6B:6D:2C:C6:73
X509v3 Authority Key Identifier:
keyid:81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c4:b5:a1:4f:9d:03:69:db:ad:de:c0:64:27:70:dc:01:02:
54:8d:51:39:b9:27:fc:0b:6b:74:16:36:22:25:e8:22:06:b0:
37:e6:6b:e1:32:b3:a9:4f:93:de:82:ab:5f:5a:67:7e:da:fb:
06:8f:80:58:76:0f:61:45:63:98:32:83:86:85:8f:fd:fa:9e:
d9:f8:b0:c0:5b:d3:e5:ce:f4:c1:48:82:4a:e8:2a:78:c9:05:
6a:c4:e9:9f:ad:95:d5:2a:f2:10:3b:9f:9c:e3:39:cd:2c:cc:
95:a5:9d:b0:e8:eb:6e:b1:61:e4:9c:6b:eb:78:41:12:a6:16:
6c:4a:d1:5a:e7:6b:2c:28:c6:81:6c:77:a0:4f:28:2d:fe:35:
28:b9:07:25:20:01:2d:12:64:68:c7:fb:b7:1a:e0:51:8c:f9:
ed:5e:24:cd:5f:9f:98:e6:04:ae:fb:59:4b:d7:f8:54:3c:22:
07:95:8a:87:43:29:c8:c5:13:54:02:61:33:65:bf:5d:65:89:
af:4d:f4:fa:da:8c:f8:2f:fe:ed:a6:34:64:10:7e:3f:5a:38:
bb:dd:fa:a0:72:cb:e7:73:21:09:da:46:c9:d5:e1:d1:b9:34:
91:f2:8c:db:78:9a:91:41:7e:e3:97:6a:4b:c8:f4:32:af:cf:
9d:97:a4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:50 2026 by rpki-client