$ rpki-client -vvf repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft File: 581E644EEC44F9523CF189893E102BCC6008F9BE.mft (raw, json) Hash identifier: Z3qiXjZ5lcjTGrj5SyUKUDa6uT4vyIVXDseSZSjK830= Subject key identifier: FA:09:05:69:34:95:52:7D:22:92:10:C0:3E:A1:F5:6D:B1:CB:D4:D1 Authority key identifier: 58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE Certificate issuer: /CN=581E644EEC44F9523CF189893E102BCC6008F9BE Certificate serial: 0FF767237B9BE8BBBE4577E95C3F6C06BB3FB041 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft Manifest number: 0227 Signing time: Tue 24 Mar 2026 11:00:01 +0000 Manifest this update: Tue 24 Mar 2026 10:55:01 +0000 Manifest next update: Fri 27 Mar 2026 20:14:01 +0000 Files and hashes: 1: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (hash: BD1xmKcIfvv53+qbSsqU41j3RH48RKcR2IUwYcDCVHU=) 2: 581E644EEC44F9523CF189893E102BCC6008F9BE.crl (hash: sABkNFYcEpjESZf16SZX9OMMabjrcGjO3buVCM5t/u0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f7:67:23:7b:9b:e8:bb:be:45:77:e9:5c:3f:6c:06:bb:3f:b0:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581E644EEC44F9523CF189893E102BCC6008F9BE Validity Not Before: Mar 24 10:55:01 2026 GMT Not After : Mar 27 20:14:01 2026 GMT Subject: CN=FA0905693495527D229210C03EA1F56DB1CBD4D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:da:8d:67:7e:06:ce:af:63:07:ba:b3:9d:a2: 1a:e0:2c:62:bc:68:c8:11:30:2b:d0:bb:8c:b4:21: 65:9c:a8:da:84:ab:2c:43:73:bd:ca:39:f6:d1:d4: 22:f6:13:89:f7:5a:13:fc:52:46:65:f1:2d:4e:4e: 97:f8:54:6a:da:3e:74:2f:a5:1a:f8:a4:13:be:f3: 15:4e:ab:fd:48:af:d9:4f:e8:ab:94:41:99:51:eb: 07:d3:81:a3:d2:ec:22:20:d2:2e:37:a7:1f:60:47: 96:82:ba:67:35:05:cd:7a:71:70:20:d2:56:91:34: d6:dd:f6:45:17:0d:b4:0e:41:24:89:50:ad:0b:5e: c8:1c:5b:26:af:20:8d:7e:3a:6e:eb:4e:1e:cb:24: 87:8b:6f:51:b1:e8:7f:c4:c7:0b:50:5f:f3:b9:4f: af:71:c1:09:9e:30:35:d4:a5:f6:9e:c4:b9:cd:19: 1f:ad:cf:96:2a:af:60:fa:c4:63:a7:f8:bd:d1:6a: 57:82:05:25:34:ca:3d:43:00:dc:ac:2b:74:4a:24: 7d:8d:f1:f7:23:9a:db:88:10:99:90:f8:e0:cc:b3: b5:3f:31:0a:2f:eb:fe:51:17:f7:9d:38:76:09:d5: fc:58:5e:9f:7a:8f:89:c5:61:4a:23:06:6c:4f:42: dc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:09:05:69:34:95:52:7D:22:92:10:C0:3E:A1:F5:6D:B1:CB:D4:D1 X509v3 Authority Key Identifier: keyid:58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2d:8b:c2:1f:6f:c2:60:9f:2a:c5:92:cc:75:30:b6:7d:7a: 51:3c:40:ca:59:5e:d0:5e:05:9a:49:89:9e:8b:92:fd:88:25: 4e:18:a5:0e:fb:68:cd:55:00:e7:07:ff:84:37:e1:fc:4d:02: e7:80:4f:82:4b:3a:2a:93:31:f2:ae:56:43:7c:02:bd:99:d6: 12:9d:58:80:17:55:54:77:ed:43:43:68:c0:64:79:8b:23:90: 66:d7:48:64:0c:63:30:67:57:9f:6d:f7:48:ac:d8:f0:b1:d2: 3b:d3:66:53:28:5f:a3:ce:ab:04:df:b1:88:b4:5e:a3:f0:bd: 49:fa:c4:09:5e:81:e4:d8:89:20:71:8b:31:22:60:a2:05:2d: 96:94:99:ff:b4:c1:27:31:b7:62:c7:6a:3e:4d:5d:b1:68:40: 84:c4:52:cf:ab:69:e1:a3:ac:e6:d4:93:0a:18:56:b5:15:5c: 83:29:38:11:72:e6:54:01:3f:6a:b5:13:4d:ff:68:4c:04:7e: aa:2a:6b:12:19:04:c0:57:e2:fa:a2:83:7c:4e:b1:5a:61:b2: b8:66:f1:e5:66:8b:ab:02:72:03:66:5d:64:4d:c9:b8:af:cf: 7f:73:a3:60:0b:5b:52:8f:14:aa:ad:0f:9c:0e:e8:78:ec:af: 05:6e:f7:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/dnI3ub6Lu+RXfpXD9sBrs/sEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJCQ0M2 MDA4RjlCRTAeFw0yNjAzMjQxMDU1MDFaFw0yNjAzMjcyMDE0MDFaMDMxMTAvBgNV BAMTKEZBMDkwNTY5MzQ5NTUyN0QyMjkyMTBDMDNFQTFGNTZEQjFDQkQ0RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe2o1nfgbOr2MHurOdohrgLGK8 aMgRMCvQu4y0IWWcqNqEqyxDc73KOfbR1CL2E4n3WhP8UkZl8S1OTpf4VGraPnQv pRr4pBO+8xVOq/1Ir9lP6KuUQZlR6wfTgaPS7CIg0i43px9gR5aCumc1Bc16cXAg 0laRNNbd9kUXDbQOQSSJUK0LXsgcWyavII1+Om7rTh7LJIeLb1Gx6H/ExwtQX/O5 T69xwQmeMDXUpfaexLnNGR+tz5Yqr2D6xGOn+L3RaleCBSU0yj1DANysK3RKJH2N 8fcjmtuIEJmQ+ODMs7U/MQov6/5RF/edOHYJ1fxYXp96j4nFYUojBmxPQtyhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+gkFaTSVUn0ikhDAPqH1bbHL1NEwHwYDVR0j BBgwFoAUWB5kTuxE+VI88YmJPhArzGAI+b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yjc5NDdhYS1jZTY5LTQwMTMtYTI1Ni01ODc5OWE1NjU4MWMvMC81ODFFNjQ0RUVD NDRGOTUyM0NGMTg5ODkzRTEwMkJDQzYwMDhGOUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJCQ0M2MDA4 RjlCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3OTQ3YWEtY2U2OS00MDEzLWEy NTYtNTg3OTlhNTY1ODFjLzAvNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJC Q0M2MDA4RjlCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0ti8Ifb8JgnyrFksx1MLZ9elE8QMpZXtBe BZpJiZ6Lkv2IJU4YpQ77aM1VAOcH/4Q34fxNAueAT4JLOiqTMfKuVkN8Ar2Z1hKd WIAXVVR37UNDaMBkeYsjkGbXSGQMYzBnV59t90is2PCx0jvTZlMoX6POqwTfsYi0 XqPwvUn6xAlegeTYiSBxizEiYKIFLZaUmf+0wScxt2LHaj5NXbFoQITEUs+raeGj rObUkwoYVrUVXIMpOBFy5lQBP2q1E03/aEwEfqoqaxIZBMBX4vqig3xOsVphsrhm 8eVmi6sCcgNmXWRNybivz39zo2ALW1KPFKqtD5wO6HjsrwVu93k= -----END CERTIFICATE-----Generated at Thu Mar 26 20:45:46 2026 by rpki-client