
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft
File: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft (raw, json)
Hash identifier: 170lIf1qKmuOxXTSbfhSxcq7SLHrFL4gzVsfuCOWgJQ=
Subject key identifier: 13:66:FD:4C:30:EF:BF:B7:B7:32:95:6E:AC:C9:8F:8D:42:2B:99:76
Authority key identifier: 81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52
Certificate issuer: /CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652
Certificate serial: 73E0B16F692A654A5F4674997C8B0A952872E124
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft
Manifest number: 031E
Signing time: Wed 18 Mar 2026 07:02:39 +0000
Manifest this update: Wed 18 Mar 2026 06:57:39 +0000
Manifest next update: Sat 21 Mar 2026 14:59:39 +0000
Files and hashes: 1: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: yyP1s7Drm4K7i/5vyWhbMeYMvkp/vo6vSFKCXgZUuLI=)
2: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: 39I2VRz2Pwheop/Q/95GW6wOO98caUDbgzZuoNjlDio=)
3: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: aeR78T4SgFq62LUVaHNT0OWQnz8U1jUNL74Pz+jaUQ8=)
4: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl (hash: DgRvwdw7I5d2XMDJk6sxxwhENoEY2ZcyXWCUlWbQfDw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl
rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:e0:b1:6f:69:2a:65:4a:5f:46:74:99:7c:8b:0a:95:28:72:e1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652
Validity
Not Before: Mar 18 06:57:39 2026 GMT
Not After : Mar 21 14:59:39 2026 GMT
Subject: CN=1366FD4C30EFBFB7B732956EACC98F8D422B9976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:56:8b:e3:52:1c:d7:f5:46:fc:eb:98:00:
f6:f0:45:75:67:5d:67:8a:3a:bb:be:52:cb:b0:d5:
52:60:7a:dd:a8:f3:c7:b2:37:f1:81:46:71:ae:e7:
f9:8d:3b:49:c4:70:0b:eb:b6:7b:8e:56:66:7e:cf:
ad:cb:86:6b:5d:1f:ba:0e:c1:de:7f:e9:0a:55:8c:
e4:f8:46:77:dc:51:26:57:25:85:04:41:3b:4c:c8:
92:87:ec:19:66:99:74:79:ae:f4:55:2b:8d:67:29:
64:0a:e8:ab:f4:f6:e8:fe:3f:d6:50:da:b6:16:2b:
db:4c:9e:f5:48:c7:5c:06:a5:9b:67:bf:14:56:97:
7a:e1:db:99:49:e0:70:3b:c2:f3:94:04:34:fb:fa:
09:b2:ff:da:85:b9:25:30:cb:2a:a1:2b:9a:89:2e:
54:1a:ce:85:a9:40:7d:df:9c:6f:c5:2f:1a:86:6d:
05:8f:52:3c:5f:22:ab:96:98:98:9c:55:79:86:54:
08:58:45:c5:3b:60:58:36:86:cc:f0:df:9c:02:9e:
31:96:6f:e7:77:14:a5:f5:fc:aa:6d:50:be:c9:8d:
2b:57:31:0c:76:f5:a8:8d:56:7f:81:f0:ca:d7:1f:
39:d2:36:a0:1b:07:0e:a6:9e:83:48:4a:77:b6:60:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:66:FD:4C:30:EF:BF:B7:B7:32:95:6E:AC:C9:8F:8D:42:2B:99:76
X509v3 Authority Key Identifier:
keyid:81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ea:69:07:f1:0e:43:35:32:68:fd:e7:8e:18:e6:05:fc:ed:
6a:fc:06:37:ae:83:cb:94:22:72:5d:a6:f6:b1:10:67:56:c2:
05:ad:2a:8e:e0:1a:87:82:53:6d:a3:27:cb:bf:3e:f1:d2:77:
9e:87:0c:db:d4:86:3c:fb:b4:65:10:b2:59:70:aa:20:4f:35:
8f:68:8c:b4:90:7b:9f:6f:58:ed:5d:89:3f:7e:eb:23:06:3d:
c6:b4:65:54:63:b5:45:71:72:28:c9:5f:b5:7a:56:1d:63:e6:
e3:12:e1:52:73:94:c6:25:b4:6c:2f:d4:68:e5:de:bb:aa:7a:
c9:85:49:50:ee:60:1e:7e:aa:3a:87:eb:11:d5:a9:75:dc:4d:
97:99:b2:03:48:9f:e4:5b:34:10:10:3d:62:cf:88:39:8c:91:
44:3c:b2:c5:aa:9e:46:c3:64:08:f0:fa:a2:4b:d4:12:fe:5b:
46:64:8a:dd:0d:35:61:7a:d0:e8:0b:83:93:34:1c:a5:3a:ae:
62:c9:a9:21:58:cf:22:0f:1f:3d:94:fc:41:02:c0:7d:31:8d:
7a:18:57:d2:21:ee:d0:df:7b:b5:3e:b8:7b:e3:88:99:d5:45:
27:79:e5:9d:57:06:f6:dc:87:6c:2d:fe:76:ea:33:0d:59:19:
71:9a:83:f4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc+Cxb2kqZUpfRnSZfIsKlShy4SQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3
NEMwQTY1MjAeFw0yNjAzMTgwNjU3MzlaFw0yNjAzMjExNDU5MzlaMDMxMTAvBgNV
BAMTKDEzNjZGRDRDMzBFRkJGQjdCNzMyOTU2RUFDQzk4RjhENDIyQjk5NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV2FaL41Ic1/VG/OuYAPbwRXVn
XWeKOru+Usuw1VJget2o88eyN/GBRnGu5/mNO0nEcAvrtnuOVmZ+z63LhmtdH7oO
wd5/6QpVjOT4RnfcUSZXJYUEQTtMyJKH7BlmmXR5rvRVK41nKWQK6Kv09uj+P9ZQ
2rYWK9tMnvVIx1wGpZtnvxRWl3rh25lJ4HA7wvOUBDT7+gmy/9qFuSUwyyqhK5qJ
LlQazoWpQH3fnG/FLxqGbQWPUjxfIquWmJicVXmGVAhYRcU7YFg2hszw35wCnjGW
b+d3FKX1/KptUL7JjStXMQx29aiNVn+B8MrXHznSNqAbBw6mnoNISne2YGXhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUE2b9TDDvv7e3MpVurMmPjUIrmXYwHwYDVR0j
BBgwFoAUgclL6ZjsvdLviXv+jo5RuHTAplIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZDIzNGQ1MC02N2UxLTQxOWMtODViYS02NGJhOGMxMTEyMjUvMC84MUM5NEJFOTk4
RUNCREQyRUY4OTdCRkU4RThFNTFCODc0QzBBNjUyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUxQjg3NEMw
QTY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyMzRkNTAtNjdlMS00MTljLTg1
YmEtNjRiYThjMTExMjI1LzAvODFDOTRCRTk5OEVDQkREMkVGODk3QkZFOEU4RTUx
Qjg3NEMwQTY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHvqaQfxDkM1Mmj9544Y5gX87Wr8Bjeug8uU
InJdpvaxEGdWwgWtKo7gGoeCU22jJ8u/PvHSd56HDNvUhjz7tGUQsllwqiBPNY9o
jLSQe59vWO1diT9+6yMGPca0ZVRjtUVxcijJX7V6Vh1j5uMS4VJzlMYltGwv1Gjl
3ruqesmFSVDuYB5+qjqH6xHVqXXcTZeZsgNIn+RbNBAQPWLPiDmMkUQ8ssWqnkbD
ZAjw+qJL1BL+W0Zkit0NNWF60OgLg5M0HKU6rmLJqSFYzyIPHz2U/EECwH0xjXoY
V9Ih7tDfe7U+uHvjiJnVRSd55Z1XBvbch2wt/nbqMw1ZGXGag/Q=
-----END CERTIFICATE-----
Generated at Thu Mar 19 15:08:32 2026 by rpki-client