$ rpki-client -vvf repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft File: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft (raw, json) Hash identifier: H6k6Qn1z7/0S70OcZ5d0HOlbPLBJBiZryVy8bCwt3ks= Subject key identifier: F1:E6:A4:09:4F:04:6C:18:7A:41:48:0C:F3:CC:C0:52:27:3F:00:CB Authority key identifier: 81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 Certificate issuer: /CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Certificate serial: 4E1D60CCB74BD2D9FB3CE4B5C89FAF0950CC592E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft Manifest number: 0321 Signing time: Wed 25 Mar 2026 10:42:40 +0000 Manifest this update: Wed 25 Mar 2026 10:37:40 +0000 Manifest next update: Sat 28 Mar 2026 22:06:40 +0000 Files and hashes: 1: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: aeR78T4SgFq62LUVaHNT0OWQnz8U1jUNL74Pz+jaUQ8=) 2: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: yyP1s7Drm4K7i/5vyWhbMeYMvkp/vo6vSFKCXgZUuLI=) 3: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl (hash: XyVisPoU9209D3JAnMKrYpKP+Iyml/xNm+BD48wVWxg=) 4: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: 39I2VRz2Pwheop/Q/95GW6wOO98caUDbgzZuoNjlDio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:1d:60:cc:b7:4b:d2:d9:fb:3c:e4:b5:c8:9f:af:09:50:cc:59:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Validity Not Before: Mar 25 10:37:40 2026 GMT Not After : Mar 28 22:06:40 2026 GMT Subject: CN=F1E6A4094F046C187A41480CF3CCC052273F00CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:99:a5:fb:de:3d:c4:2e:5e:5b:48:01:dc:bf: ff:dd:f5:80:ab:f7:67:e9:d9:44:ce:84:29:f6:6c: 04:3c:64:99:bd:2c:88:7a:00:ab:0c:ee:08:60:16: d8:c3:84:18:a6:13:20:83:7e:a2:72:11:15:8c:94: c7:4d:27:11:79:38:41:d6:59:61:d2:88:52:26:8c: 2a:5b:49:93:19:68:b8:83:8b:85:42:a2:f4:d5:9a: 2c:bc:d8:11:91:df:22:13:d1:93:6c:ae:cb:9b:d9: 95:90:54:4d:73:8f:f9:7c:30:f0:55:7e:f9:03:e0: 11:46:d1:e9:3a:2e:db:e2:c6:bf:77:95:6e:23:f7: 33:3f:36:28:92:cb:8c:b0:18:ee:a9:2a:26:66:60: 60:64:d6:aa:c4:a1:56:2f:2f:cb:7e:b1:82:52:e0: 95:61:9a:93:bd:49:de:70:fc:2d:75:c5:d9:79:18: ac:25:66:ec:f4:24:3b:08:22:62:f5:45:c4:94:71: ef:ea:78:0c:e1:94:a3:11:4d:a6:d6:24:cd:34:ba: ba:ae:52:13:ac:7f:16:2a:23:ac:aa:86:9f:37:00: b8:0e:e3:45:a5:e4:44:7e:7d:40:59:fc:a6:78:6a: ca:75:b4:05:15:fe:22:fe:3d:01:1f:bf:d4:b0:17: ee:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E6:A4:09:4F:04:6C:18:7A:41:48:0C:F3:CC:C0:52:27:3F:00:CB X509v3 Authority Key Identifier: keyid:81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:13:35:92:ef:7a:91:e5:70:2c:58:73:bf:5e:28:69:ee:22: bb:ff:55:2a:92:95:b4:28:d0:e7:8d:de:c4:3a:f9:bd:17:5c: c7:26:62:fe:28:13:fc:bd:4e:ce:d9:3d:fb:d5:4f:59:ea:1b: f2:1e:81:c1:7e:eb:1a:19:b6:bd:40:80:e0:20:b1:c6:d3:e5: 2b:3b:85:06:78:f9:85:31:48:8f:21:9b:59:8f:f3:b1:03:e1: 1e:38:5c:79:2e:8d:4a:56:31:cf:5e:0b:da:07:68:a5:a6:5f: 2b:69:c7:4e:f8:d1:4e:4e:d6:8e:71:51:ec:56:75:38:ea:82: 13:67:53:8b:a3:09:32:6c:29:11:78:9f:f5:35:b5:58:db:b1: 74:ee:d2:49:13:86:74:fb:64:ef:0c:cc:16:bb:5e:d5:8c:b7: e5:80:c2:48:b0:f3:bb:c8:1b:0b:47:2c:70:74:58:e9:91:23: 74:90:65:51:8e:66:be:41:59:2a:f4:d1:10:9c:aa:16:97:e3: 6f:53:dc:34:4b:a2:57:d1:f2:a7:cc:08:ac:6d:3f:88:9c:32: aa:cd:0b:5a:3f:6a:fc:0c:0e:41:dd:9f:43:00:36:48:ac:51: 8c:76:31:03:98:ad:be:67:bb:fb:ae:35:43:f5:28:f4:81:99: 47:62:a1:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTh1gzLdL0tn7POS1yJ+vCVDMWS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3 NEMwQTY1MjAeFw0yNjAzMjUxMDM3NDBaFw0yNjAzMjgyMjA2NDBaMDMxMTAvBgNV BAMTKEYxRTZBNDA5NEYwNDZDMTg3QTQxNDgwQ0YzQ0NDMDUyMjczRjAwQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmaX73j3ELl5bSAHcv//d9YCr 92fp2UTOhCn2bAQ8ZJm9LIh6AKsM7ghgFtjDhBimEyCDfqJyERWMlMdNJxF5OEHW WWHSiFImjCpbSZMZaLiDi4VCovTVmiy82BGR3yIT0ZNsrsub2ZWQVE1zj/l8MPBV fvkD4BFG0ek6Ltvixr93lW4j9zM/NiiSy4ywGO6pKiZmYGBk1qrEoVYvL8t+sYJS 4JVhmpO9Sd5w/C11xdl5GKwlZuz0JDsIImL1RcSUce/qeAzhlKMRTabWJM00urqu UhOsfxYqI6yqhp83ALgO40Wl5ER+fUBZ/KZ4asp1tAUV/iL+PQEfv9SwF+7vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8eakCU8EbBh6QUgM88zAUic/AMswHwYDVR0j BBgwFoAUgclL6ZjsvdLviXv+jo5RuHTAplIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDIzNGQ1MC02N2UxLTQxOWMtODViYS02NGJhOGMxMTEyMjUvMC84MUM5NEJFOTk4 RUNCREQyRUY4OTdCRkU4RThFNTFCODc0QzBBNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3NEMw QTY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyMzRkNTAtNjdlMS00MTljLTg1 YmEtNjRiYThjMTExMjI1LzAvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUx Qjg3NEMwQTY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHETNZLvepHlcCxYc79eKGnuIrv/VSqSlbQo 0OeN3sQ6+b0XXMcmYv4oE/y9Ts7ZPfvVT1nqG/IegcF+6xoZtr1AgOAgscbT5Ss7 hQZ4+YUxSI8hm1mP87ED4R44XHkujUpWMc9eC9oHaKWmXytpx0740U5O1o5xUexW dTjqghNnU4ujCTJsKRF4n/U1tVjbsXTu0kkThnT7ZO8MzBa7XtWMt+WAwkiw87vI GwtHLHB0WOmRI3SQZVGOZr5BWSr00RCcqhaX429T3DRLolfR8qfMCKxtP4icMqrN C1o/avwMDkHdn0MANkisUYx2MQOYrb5nu/uuNUP1KPSBmUdiobA= -----END CERTIFICATE-----Generated at Thu Mar 26 21:17:11 2026 by rpki-client