$ rpki-client -vvf repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft File: 581E644EEC44F9523CF189893E102BCC6008F9BE.mft (raw, json) Hash identifier: bFz3vBtJca4CWl8QKapszP6VwNZp2H1NttxDLvzDyYk= Subject key identifier: E9:88:B5:7F:D8:1C:32:3D:EE:F8:7C:A9:F9:5A:8F:F0:E7:25:FA:FE Authority key identifier: 58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE Certificate issuer: /CN=581E644EEC44F9523CF189893E102BCC6008F9BE Certificate serial: 7DFFFF5EE7724D64F1036ABFD2DDC5BA2966F2B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft Manifest number: 0225 Signing time: Fri 20 Mar 2026 00:30:01 +0000 Manifest this update: Fri 20 Mar 2026 00:25:01 +0000 Manifest next update: Mon 23 Mar 2026 06:44:01 +0000 Files and hashes: 1: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (hash: BD1xmKcIfvv53+qbSsqU41j3RH48RKcR2IUwYcDCVHU=) 2: 581E644EEC44F9523CF189893E102BCC6008F9BE.crl (hash: 4uIyZm9O2u7nAlnglRv3OhfN/SAuN6zkSnWnWlclC44=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 06:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ff:ff:5e:e7:72:4d:64:f1:03:6a:bf:d2:dd:c5:ba:29:66:f2:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581E644EEC44F9523CF189893E102BCC6008F9BE Validity Not Before: Mar 20 00:25:01 2026 GMT Not After : Mar 23 06:44:01 2026 GMT Subject: CN=E988B57FD81C323DEEF87CA9F95A8FF0E725FAFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4c:1a:f0:db:c8:5d:d8:a1:a5:be:39:d2:32: 8d:3e:cc:58:08:8a:5e:3d:18:51:31:46:c2:9e:7b: a1:94:c3:4d:7c:7d:3e:0f:9b:cd:15:46:05:3d:a9: ec:a3:b6:f9:86:e5:ad:c2:4f:6c:aa:99:c4:c5:e4: 8f:ec:d8:d0:bc:7e:1e:45:c0:1c:eb:37:20:e9:ea: 0e:73:19:73:32:aa:98:39:9d:04:c0:96:b4:01:f3: 9b:e0:9b:a8:80:3c:98:e5:5c:53:03:01:ff:78:d1: 47:65:ac:bb:b6:3d:f0:63:d3:3b:32:53:d3:0d:d4: 25:52:7f:4d:27:db:30:5b:10:ba:49:4c:55:45:b8: c8:de:d4:31:ed:b9:99:67:c0:a1:38:ca:13:cc:fc: c1:fe:68:93:78:cc:c7:4c:1a:a1:62:ef:87:0c:5c: 01:dd:52:f8:57:bb:4b:50:64:0f:a0:45:f6:3b:a1: 0c:3c:e8:98:5c:ab:28:27:b9:e6:8c:3f:16:d7:85: 13:9e:58:56:23:21:ab:62:bd:bc:2c:98:cd:5d:7f: ce:65:29:f1:85:60:06:46:f4:96:1e:6b:3e:d6:c7: fa:a4:40:8b:dc:30:93:cc:72:c6:ff:63:6d:8e:e2: 72:2c:40:b0:26:a2:83:62:fb:c6:05:64:d2:93:55: 91:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:88:B5:7F:D8:1C:32:3D:EE:F8:7C:A9:F9:5A:8F:F0:E7:25:FA:FE X509v3 Authority Key Identifier: keyid:58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:43:b9:0f:53:ca:5d:fc:1c:50:8f:73:3a:1c:bb:98:96:df: 8e:f0:c3:4e:83:bb:af:04:4e:1c:89:f7:31:34:eb:52:1d:cf: 0b:86:c6:12:79:9b:6b:21:12:b6:4f:d7:87:6d:1c:77:3b:4f: 69:44:1a:36:ca:02:73:0c:bd:21:b3:de:d3:b1:3b:20:e1:9b: af:61:52:21:b3:8a:79:3d:7e:3d:62:8e:5f:3a:55:33:f2:f7: 2c:42:79:be:2f:5a:6a:29:cc:11:af:35:16:5c:76:51:4f:1a: 11:ef:cb:ff:2f:ed:f8:75:72:e6:fc:d7:cd:47:ce:b7:c2:e6: bd:7d:af:65:ac:bb:b4:19:95:52:f8:7c:fb:ed:f8:7a:08:09: 4f:9e:42:57:4a:10:9d:f3:cd:e4:2e:4d:df:dc:ef:92:2f:81: b8:c1:50:35:27:1c:55:43:bb:0a:e2:21:3d:59:3c:9e:c9:0d: f9:9c:8f:74:8f:07:c6:58:49:0f:69:0c:fe:e4:4f:33:7e:ff: 83:a9:e4:46:01:da:da:83:fd:69:8b:39:a9:db:3c:cb:27:85: ef:09:82:d7:84:35:bf:2c:2c:bd:04:c5:32:e0:f8:9d:42:64: 24:c6:7a:c3:59:8f:10:6c:e8:89:c2:26:c6:73:a6:70:d7:bd: 7a:65:7e:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUff//XudyTWTxA2q/0t3Fuilm8rkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJCQ0M2 MDA4RjlCRTAeFw0yNjAzMjAwMDI1MDFaFw0yNjAzMjMwNjQ0MDFaMDMxMTAvBgNV BAMTKEU5ODhCNTdGRDgxQzMyM0RFRUY4N0NBOUY5NUE4RkYwRTcyNUZBRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDITBrw28hd2KGlvjnSMo0+zFgI il49GFExRsKee6GUw018fT4Pm80VRgU9qeyjtvmG5a3CT2yqmcTF5I/s2NC8fh5F wBzrNyDp6g5zGXMyqpg5nQTAlrQB85vgm6iAPJjlXFMDAf940UdlrLu2PfBj0zsy U9MN1CVSf00n2zBbELpJTFVFuMje1DHtuZlnwKE4yhPM/MH+aJN4zMdMGqFi74cM XAHdUvhXu0tQZA+gRfY7oQw86JhcqygnueaMPxbXhROeWFYjIativbwsmM1df85l KfGFYAZG9JYeaz7Wx/qkQIvcMJPMcsb/Y22O4nIsQLAmooNi+8YFZNKTVZFhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Yi1f9gcMj3u+Hyp+VqP8Ocl+v4wHwYDVR0j BBgwFoAUWB5kTuxE+VI88YmJPhArzGAI+b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yjc5NDdhYS1jZTY5LTQwMTMtYTI1Ni01ODc5OWE1NjU4MWMvMC81ODFFNjQ0RUVD NDRGOTUyM0NGMTg5ODkzRTEwMkJDQzYwMDhGOUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJCQ0M2MDA4 RjlCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3OTQ3YWEtY2U2OS00MDEzLWEy NTYtNTg3OTlhNTY1ODFjLzAvNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJC Q0M2MDA4RjlCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVDuQ9Tyl38HFCPczocu5iW347ww06Du68E ThyJ9zE061IdzwuGxhJ5m2shErZP14dtHHc7T2lEGjbKAnMMvSGz3tOxOyDhm69h UiGzink9fj1ijl86VTPy9yxCeb4vWmopzBGvNRZcdlFPGhHvy/8v7fh1cub8181H zrfC5r19r2Wsu7QZlVL4fPvt+HoICU+eQldKEJ3zzeQuTd/c75IvgbjBUDUnHFVD uwriIT1ZPJ7JDfmcj3SPB8ZYSQ9pDP7kTzN+/4Op5EYB2tqD/WmLOanbPMsnhe8J gteENb8sLL0ExTLg+J1CZCTGesNZjxBs6InCJsZzpnDXvXplfp0= -----END CERTIFICATE-----Generated at Sat Mar 21 00:19:31 2026 by rpki-client