
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft
File: 181AE15A381C4B158527A37B5B320F08B7BB589F.mft (raw, json)
Hash identifier: fKUhVVgQumxipEAZ82tMSBQqgj3JHpb8JsA9f0yqyUw=
Subject key identifier: 98:35:85:8C:98:F1:37:B8:4E:24:EC:3F:33:FE:95:16:86:87:45:40
Authority key identifier: 18:1A:E1:5A:38:1C:4B:15:85:27:A3:7B:5B:32:0F:08:B7:BB:58:9F
Certificate issuer: /CN=181AE15A381C4B158527A37B5B320F08B7BB589F
Certificate serial: 4E605AFF19C1B910E27411504B9BB7F48CA2FAA1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 14:32:51 +0000
Manifest this update: Tue 02 Jun 2026 14:27:51 +0000
Manifest next update: Wed 03 Jun 2026 17:23:51 +0000
Files and hashes: 1: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: Bsl+Ml+xMEPfhqeDDIHDIbx421tKnpSF2bvwWW1cG4s=)
2: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: Ga2+EVu47dnfQahsKF64XntgkRzRqvyvpZlCrIJX5DE=)
3: 181AE15A381C4B158527A37B5B320F08B7BB589F.crl (hash: 7/LieHCTlj6Bl0QcOiMKCgzKWspu5f1RINuF/2gpV6g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.crl
rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:60:5a:ff:19:c1:b9:10:e2:74:11:50:4b:9b:b7:f4:8c:a2:fa:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=181AE15A381C4B158527A37B5B320F08B7BB589F
Validity
Not Before: Jun 2 14:27:51 2026 GMT
Not After : Jun 3 17:23:51 2026 GMT
Subject: CN=9835858C98F137B84E24EC3F33FE951686874540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:cd:e8:14:b6:06:2d:f4:f1:25:ef:28:3b:
85:e3:ff:8d:ec:5b:d4:18:d5:79:7d:62:dc:9a:66:
88:14:cf:c5:71:ac:6d:e6:30:f3:f4:86:b6:f5:3a:
3d:a7:10:83:48:f7:63:15:a1:ea:12:5e:2d:25:f8:
d1:4a:eb:bb:2e:c3:bb:df:13:d6:ea:cb:d0:c7:31:
af:ab:89:35:a7:0e:90:36:4f:85:90:e8:14:a9:6f:
2d:c0:7b:6f:18:7f:8a:79:4e:e1:4f:8b:f1:b3:de:
45:46:2b:ab:c3:4a:20:eb:11:d1:b1:60:3d:81:d2:
78:1d:d4:e5:1f:21:6c:e5:cc:73:ba:af:17:71:8c:
fa:0f:d6:87:01:e3:24:65:4d:7b:c6:49:51:cf:d2:
f5:ec:22:ca:ce:92:41:9e:79:44:29:5f:1c:89:3a:
bf:4d:15:f1:75:80:a8:0c:71:ca:d4:55:46:72:0a:
8e:3d:a0:c8:16:37:b9:44:cb:36:e2:da:73:d0:e1:
e1:42:e3:c5:19:12:0e:e0:0e:91:74:19:a5:ea:d4:
6b:44:e6:15:1d:64:d3:9f:ab:cc:11:ed:31:17:76:
02:c9:5f:fd:30:a0:98:ce:d3:40:10:70:43:ae:65:
67:2b:be:4a:e2:00:3b:a2:02:b2:33:2f:10:98:c7:
43:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:35:85:8C:98:F1:37:B8:4E:24:EC:3F:33:FE:95:16:86:87:45:40
X509v3 Authority Key Identifier:
keyid:18:1A:E1:5A:38:1C:4B:15:85:27:A3:7B:5B:32:0F:08:B7:BB:58:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7f:20:84:7e:44:fa:3d:16:54:f0:4b:00:b3:1b:13:e3:7c:
67:53:6e:23:ef:64:66:b3:51:62:59:55:5e:f1:bb:f1:49:61:
8f:66:36:f0:f9:99:44:e9:ce:2f:c7:22:32:64:05:1c:3e:9d:
d8:73:b0:fe:6b:a7:c3:e1:da:4a:3b:3e:8e:82:e9:b8:ca:d1:
12:c6:2d:03:f8:57:31:32:87:26:16:14:30:e0:32:eb:a8:5d:
96:ff:86:34:cb:b1:48:d6:33:82:49:64:7b:bd:3e:73:47:76:
43:c2:0d:37:3b:43:e6:7d:f3:29:2c:e4:44:9b:1f:16:80:a7:
99:e1:f2:1e:bf:0b:52:cb:24:a3:b1:2e:14:f6:1c:df:3d:8a:
a1:29:ce:c1:61:ed:15:2e:54:c1:43:49:79:b2:54:fd:5b:62:
5a:ad:3c:95:a0:64:5f:1c:68:df:4d:cd:82:b9:6a:d0:a5:9f:
7c:4c:ef:be:ea:6a:72:38:3c:4f:96:ce:f4:94:3a:37:95:1a:
72:81:3c:12:ac:52:c9:a3:1c:a2:28:4d:94:99:ab:c4:30:23:
34:64:43:09:d6:3d:52:b8:1d:a5:93:6d:75:da:75:01:01:37:
e2:19:66:23:98:49:e8:63:aa:b4:9f:ab:fb:c0:94:06:0e:9b:
35:64:eb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:19:43 2026 by rpki-client