
$ rpki-client -vvf repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft
File: 81498B85C0E2937290B9B2119B132DEADBB24A5C.mft (raw, json)
Hash identifier: eArvzxgAAvCZneZ9JjiY6WgUkzKjf35dA2muCMSu3ZQ=
Subject key identifier: 72:6F:88:76:A3:3C:1A:08:54:6E:FB:D2:58:6C:F0:28:5D:12:0B:66
Authority key identifier: 81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C
Certificate issuer: /CN=81498B85C0E2937290B9B2119B132DEADBB24A5C
Certificate serial: 31E4823AA45E0B1F9829746558B826E4A3E6C77A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft
Manifest number: 0246
Signing time: Wed 18 Mar 2026 08:11:07 +0000
Manifest this update: Wed 18 Mar 2026 08:06:07 +0000
Manifest next update: Sat 21 Mar 2026 17:27:07 +0000
Files and hashes: 1: 81498B85C0E2937290B9B2119B132DEADBB24A5C.crl (hash: NhUvhSpxJ06cheeBuvsGjOKVeFgHfQRJGokKbkho8bw=)
2: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (hash: 49uJeHF+k8HvLvLuvnXcFDfrAZMvN78Q5XdfyLfe2TU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl
rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 17:27:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e4:82:3a:a4:5e:0b:1f:98:29:74:65:58:b8:26:e4:a3:e6:c7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81498B85C0E2937290B9B2119B132DEADBB24A5C
Validity
Not Before: Mar 18 08:06:07 2026 GMT
Not After : Mar 21 17:27:07 2026 GMT
Subject: CN=726F8876A33C1A08546EFBD2586CF0285D120B66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:0e:b2:24:89:50:ab:7c:e3:bf:1a:77:0e:
19:d4:9c:ab:ca:81:b1:54:3a:7e:60:77:a9:a7:c5:
10:df:32:47:d6:54:34:6d:44:5a:37:52:cc:f5:06:
cf:d2:ef:85:7d:14:f2:f8:11:98:bd:66:eb:52:8c:
01:2f:28:9d:cd:5f:9f:5d:2f:c4:2f:a5:2b:66:f8:
ae:a8:b8:91:bc:b9:2a:16:e5:6f:eb:70:32:e0:41:
6a:fa:23:7b:33:f6:f8:52:c2:e0:36:f8:06:ed:c3:
f7:72:73:06:97:15:1b:06:48:6e:43:dd:28:c6:ad:
0f:09:71:03:5c:6e:f5:d4:f2:62:24:5b:0b:7e:58:
3e:e9:70:81:36:76:41:25:06:b2:cd:9f:e8:f5:74:
e2:c9:ff:4c:d7:3c:d4:d0:bb:0f:20:f3:87:38:d5:
31:70:e3:28:ae:16:9b:6d:1c:ed:c2:57:f9:2f:f8:
c5:83:83:88:bd:b8:76:29:2c:80:d7:d7:d0:71:37:
a7:88:d2:d2:00:6d:3b:f3:c4:3b:49:11:3a:c0:83:
f2:1d:9e:30:be:08:b8:54:78:4d:3e:1c:9b:53:7b:
15:cb:3f:fc:ce:53:28:f8:e0:e5:27:96:6c:20:44:
51:67:5b:95:21:84:46:e7:dd:2d:11:87:c4:6e:39:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6F:88:76:A3:3C:1A:08:54:6E:FB:D2:58:6C:F0:28:5D:12:0B:66
X509v3 Authority Key Identifier:
keyid:81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f1:4d:51:54:68:df:f0:b8:51:e6:cf:9c:9a:38:0d:00:dc:
39:8d:de:bd:31:36:ff:53:68:14:86:68:51:a7:11:e3:d0:69:
21:d0:eb:bb:cf:22:41:d1:9a:42:fc:44:37:90:a4:b1:34:fe:
c8:80:bd:a6:23:64:6b:51:15:16:33:57:0a:6e:cd:85:ff:36:
d3:85:c3:02:9f:87:2b:b1:2d:96:47:1f:86:f9:52:be:6d:be:
f6:d7:11:cb:f6:22:ab:31:42:0a:9d:23:b4:ee:b2:08:6c:a2:
36:91:d1:4f:b0:f7:08:ba:61:d3:b3:e6:e4:f9:2e:6f:81:29:
4c:9e:0c:f1:1f:50:47:24:92:c2:e4:07:b6:3b:b6:fe:5d:df:
1d:07:ed:16:d2:61:96:e0:c9:f5:a2:22:b7:d7:b7:30:8b:a2:
9e:00:bc:cc:ae:45:ca:b5:d6:39:83:bd:c5:e4:2c:de:e3:de:
c4:89:ff:6e:98:2d:1a:46:54:a8:d1:76:8a:de:c0:cc:62:2a:
55:b9:30:a1:dd:6b:ed:04:03:b8:17:af:b9:5b:43:f8:9c:3b:
a1:fb:a2:34:ec:f8:21:b6:90:31:36:21:4b:ce:7f:d1:2e:7a:
18:93:bc:9c:8e:e2:f9:44:10:ab:1b:c3:87:03:73:f3:f0:5e:
6a:20:47:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:42:33 2026 by rpki-client