
$ rpki-client -vvf repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft
File: 81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft (raw, json)
Hash identifier: CEIK7F418yYIUy1tQ0ArO21fW5IahoopZwl531jEFa4=
Subject key identifier: D9:71:45:4B:AB:46:21:41:C1:FC:FB:D8:6B:1D:7F:87:49:8E:80:9D
Authority key identifier: 81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45
Certificate issuer: /CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45
Certificate serial: 472C6386369169CA24770D4C41F617A5E839BC80
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft
Manifest number: 055E
Signing time: Wed 25 Mar 2026 12:32:02 +0000
Manifest this update: Wed 25 Mar 2026 12:27:02 +0000
Manifest next update: Sat 28 Mar 2026 21:57:02 +0000
Files and hashes: 1: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (hash: RbGIdOLWBU5xVV9K0LoZOkwEhMFKzskG/yrpat5y7rY=)
2: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (hash: P4tF/toC2yTvcWCVKc3kDK6iTGruhcVaRl9T+qXARgU=)
3: 81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl (hash: d+XbUJpuAB/y9jZdUCKERaUCAg8mn0hXQ+Am9VzvYIU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl
rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 21:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:2c:63:86:36:91:69:ca:24:77:0d:4c:41:f6:17:a5:e8:39:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45
Validity
Not Before: Mar 25 12:27:02 2026 GMT
Not After : Mar 28 21:57:02 2026 GMT
Subject: CN=D971454BAB462141C1FCFBD86B1D7F87498E809D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:d2:2c:6f:b7:d5:cf:f2:dd:9f:9a:a9:0d:
14:c7:ef:4a:43:04:c7:3e:39:e6:24:e0:4f:03:fb:
e2:9f:8c:f6:56:21:f1:39:7b:d1:fe:72:0e:ac:15:
b6:2e:19:26:14:aa:b0:9b:5e:fb:ce:b7:c6:20:0f:
6b:b1:17:87:b3:be:16:69:a9:0d:8a:7a:56:25:22:
dd:1d:1c:28:cf:52:fd:bf:91:bb:7e:b8:21:4c:d2:
76:f8:6d:ad:d4:b8:c5:de:b7:63:82:d5:6a:4e:e5:
1c:d8:93:64:d9:9f:ea:51:e7:14:a8:12:a3:8f:61:
19:bd:14:1b:1e:0d:51:6a:e2:17:32:c6:98:6b:a2:
d9:9c:db:4c:09:ab:ca:3c:e9:4e:7c:aa:09:0b:e5:
19:10:a0:84:a7:a8:a7:ca:59:88:56:82:01:9f:b4:
5c:06:7b:db:77:59:fa:35:b0:4e:8f:1f:49:1c:2b:
73:2b:b1:77:de:70:93:70:7f:0d:5a:f4:8a:9f:92:
f7:c5:29:f0:0b:75:f7:69:23:20:12:9d:45:a6:27:
6d:c0:ad:48:72:25:6c:f3:7b:b9:ae:74:e5:d0:9e:
33:a5:e2:ca:db:d5:08:2e:78:0a:bd:8c:aa:8d:3a:
c4:7d:ae:0f:2d:a4:c7:c7:4e:c0:61:41:1f:da:9b:
d9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:71:45:4B:AB:46:21:41:C1:FC:FB:D8:6B:1D:7F:87:49:8E:80:9D
X509v3 Authority Key Identifier:
keyid:81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f6:84:33:67:8d:31:f5:5c:4b:d6:fd:29:75:97:7f:af:64:
99:06:9a:4a:eb:67:c7:06:09:37:2d:85:1e:95:fc:6e:b2:c5:
d8:e0:85:de:8a:6a:f8:af:9d:06:d2:2d:03:43:e1:d2:7b:44:
05:03:24:bb:82:ef:38:b3:5b:e1:ec:92:9c:32:44:09:e2:1b:
02:b5:98:49:83:18:12:60:79:3f:e7:00:94:dd:87:a4:28:37:
d4:62:f0:f6:ea:4e:26:a7:88:69:26:49:86:ba:0f:3c:7e:26:
09:c7:00:ba:3b:9c:8a:04:8e:de:be:f6:50:48:db:80:fd:21:
66:13:3a:ec:f0:7a:2c:c0:8c:82:f5:3c:78:36:74:62:fd:56:
66:26:3d:ef:41:af:89:8d:ba:cf:12:f9:0e:f7:d3:e8:6f:d6:
97:77:05:15:b3:a2:48:8b:c7:73:dc:22:8d:b8:2e:86:54:59:
91:b3:d6:46:bc:03:1b:b5:2c:63:cb:e0:40:77:be:ee:ed:ab:
99:4b:88:87:0d:48:7a:f7:75:41:dd:2a:d4:22:c4:4c:36:0c:
b3:0c:09:30:f2:f4:03:7f:7c:7d:dd:5c:e7:9c:72:21:28:4c:
b9:0c:66:d5:bd:95:4d:41:40:30:b6:00:44:6c:1b:6b:d6:7a:
c1:5b:c8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:03:27 2026 by rpki-client