$ rpki-client -vvf repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft File: 81498B85C0E2937290B9B2119B132DEADBB24A5C.mft (raw, json) Hash identifier: XVWQ4j2UaSusqvX3KY8iw47APd9fUf0gTPwuySsqOlE= Subject key identifier: DD:FE:E2:DE:3E:AF:2A:AA:37:6C:2C:48:17:59:ED:6D:CE:83:98:1E Authority key identifier: 81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C Certificate issuer: /CN=81498B85C0E2937290B9B2119B132DEADBB24A5C Certificate serial: 0389BBEF1E91C42788E8D6A3575D206EA6BBF024 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft Manifest number: 0249 Signing time: Wed 25 Mar 2026 04:11:02 +0000 Manifest this update: Wed 25 Mar 2026 04:06:02 +0000 Manifest next update: Sat 28 Mar 2026 08:16:02 +0000 Files and hashes: 1: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (hash: 49uJeHF+k8HvLvLuvnXcFDfrAZMvN78Q5XdfyLfe2TU=) 2: 81498B85C0E2937290B9B2119B132DEADBB24A5C.crl (hash: o7xqxF/9aGp40e7KTj7Y62G0oBa/HMF01m+nGX54/ac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:89:bb:ef:1e:91:c4:27:88:e8:d6:a3:57:5d:20:6e:a6:bb:f0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81498B85C0E2937290B9B2119B132DEADBB24A5C Validity Not Before: Mar 25 04:06:02 2026 GMT Not After : Mar 28 08:16:02 2026 GMT Subject: CN=DDFEE2DE3EAF2AAA376C2C481759ED6DCE83981E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:54:27:80:e1:6b:f1:5e:f6:7b:f3:a5:5a: 82:f9:39:b2:93:82:81:a1:7f:bb:ea:47:7c:15:48: b1:f9:1c:ad:55:cc:f0:65:5d:78:12:b0:d5:8c:0e: 24:55:4f:f2:9e:0d:69:33:ac:be:7c:09:71:16:2b: 25:8d:bb:12:f0:3d:2e:fd:b5:10:3a:76:b7:ca:28: f9:da:d0:31:2f:6b:38:12:35:7a:46:72:cb:45:1f: 5b:cd:74:dd:7d:b5:8e:ce:89:9f:d2:eb:b8:a2:29: c1:7a:f1:d9:cf:da:5d:6e:d1:66:e9:47:3c:5e:da: a1:cc:e8:72:79:d4:d5:6a:bf:63:04:f9:dd:10:71: d1:30:87:8b:4c:da:dd:75:b0:ba:59:24:6b:84:c7: 81:57:7c:9b:e1:d9:d9:4f:0f:65:1b:dd:f2:58:c5: 15:6a:7a:6c:67:06:3e:0f:a9:51:55:e0:be:28:1a: 66:b9:76:67:6d:ff:7e:00:85:8e:42:c1:37:41:cd: 74:f7:42:92:3f:e5:d3:f2:dd:69:76:02:c1:32:7a: e6:72:ff:0e:d0:50:cb:7e:33:ac:74:51:73:12:ff: 51:98:0f:99:d6:75:be:2f:e1:f6:65:d6:96:7b:23: 0c:84:b7:de:5e:3d:9d:11:70:8f:b9:5c:ca:7a:b8: aa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FE:E2:DE:3E:AF:2A:AA:37:6C:2C:48:17:59:ED:6D:CE:83:98:1E X509v3 Authority Key Identifier: keyid:81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:8f:a1:36:6c:2c:09:26:c4:da:19:94:a3:d9:0c:2d:e5:c7: bd:12:04:d7:b4:38:66:a3:af:cc:c0:5c:14:bd:51:5f:ac:05: 47:e1:fc:32:38:6f:40:61:2f:ff:9f:7c:61:2a:87:b1:ef:9f: b0:92:5e:7e:f7:94:38:0f:ed:93:27:1b:30:7d:b5:90:aa:5b: 0e:81:6f:66:12:d8:14:c1:02:1d:43:c3:2f:f7:79:5e:f4:93: 81:8b:e3:41:b3:e0:3d:67:5e:44:cc:fb:93:8a:ac:d9:ed:34: 95:e5:f5:9c:f5:be:0f:9f:ed:46:5d:26:77:42:65:79:a2:51: c9:7c:5b:15:68:e2:7d:24:4f:51:f7:80:86:f7:76:47:9a:33: 88:5f:34:32:d1:0f:68:38:e5:25:47:6a:a7:fe:93:58:98:15: 23:48:7d:09:fd:8f:bb:bb:f7:d0:f7:4d:c5:77:1a:a6:2c:35: 17:c3:0e:41:e3:81:e9:c7:3f:5d:89:8e:43:c8:e0:5f:25:d3: c7:ad:83:0f:fc:b6:96:04:1b:a4:8e:69:6c:b4:df:5f:6c:c5: 6d:e1:ae:78:81:3e:2b:55:10:49:09:3e:bc:76:78:b7:db:1f: 85:e8:00:05:31:6a:5d:f9:39:ce:91:47:28:13:36:05:a8:d5: 3a:4a:41:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA4m77x6RxCeI6NajV10gbqa78CQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJERUFE QkIyNEE1QzAeFw0yNjAzMjUwNDA2MDJaFw0yNjAzMjgwODE2MDJaMDMxMTAvBgNV BAMTKERERkVFMkRFM0VBRjJBQUEzNzZDMkM0ODE3NTlFRDZEQ0U4Mzk4MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+1QngOFr8V72e/OlWoL5ObKT goGhf7vqR3wVSLH5HK1VzPBlXXgSsNWMDiRVT/KeDWkzrL58CXEWKyWNuxLwPS79 tRA6drfKKPna0DEvazgSNXpGcstFH1vNdN19tY7OiZ/S67iiKcF68dnP2l1u0Wbp Rzxe2qHM6HJ51NVqv2ME+d0QcdEwh4tM2t11sLpZJGuEx4FXfJvh2dlPD2Ub3fJY xRVqemxnBj4PqVFV4L4oGma5dmdt/34AhY5CwTdBzXT3QpI/5dPy3Wl2AsEyeuZy /w7QUMt+M6x0UXMS/1GYD5nWdb4v4fZl1pZ7IwyEt95ePZ0RcI+5XMp6uKpPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3f7i3j6vKqo3bCxIF1ntbc6DmB4wHwYDVR0j BBgwFoAUgUmLhcDik3KQubIRmxMt6tuySlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTQ4YjIyMi02ZGVkLTQyOGEtODg4Zi0xMDQ1NGIwODgwYzIvMC84MTQ5OEI4NUMw RTI5MzcyOTBCOUIyMTE5QjEzMkRFQURCQjI0QTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJERUFEQkIy NEE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE0OGIyMjItNmRlZC00MjhhLTg4 OGYtMTA0NTRiMDg4MGMyLzAvODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJE RUFEQkIyNEE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuPoTZsLAkmxNoZlKPZDC3lx70SBNe0OGaj r8zAXBS9UV+sBUfh/DI4b0BhL/+ffGEqh7Hvn7CSXn73lDgP7ZMnGzB9tZCqWw6B b2YS2BTBAh1Dwy/3eV70k4GL40Gz4D1nXkTM+5OKrNntNJXl9Zz1vg+f7UZdJndC ZXmiUcl8WxVo4n0kT1H3gIb3dkeaM4hfNDLRD2g45SVHaqf+k1iYFSNIfQn9j7u7 99D3TcV3GqYsNRfDDkHjgenHP12JjkPI4F8l08etgw/8tpYEG6SOaWy0319sxW3h rniBPitVEEkJPrx2eLfbH4XoAAUxal35Oc6RRygTNgWo1TpKQaM= -----END CERTIFICATE-----Generated at Thu Mar 26 21:25:00 2026 by rpki-client