
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft
File: 181AE15A381C4B158527A37B5B320F08B7BB589F.mft (raw, json)
Hash identifier: EEISt1RyMKTqMDIAuizhQCJEwct0+vlVqGA/LDXAHI4=
Subject key identifier: 61:AE:E1:F0:1B:84:C6:06:2B:DE:4C:B2:93:B1:1F:15:E0:70:8F:0E
Authority key identifier: 18:1A:E1:5A:38:1C:4B:15:85:27:A3:7B:5B:32:0F:08:B7:BB:58:9F
Certificate issuer: /CN=181AE15A381C4B158527A37B5B320F08B7BB589F
Certificate serial: 7C56A1E4434466458C09FB1D6E23879552A5211A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft
Manifest number: A5
Signing time: Wed 02 Sep 2026 15:52:23 +0000
Manifest this update: Wed 02 Sep 2026 15:47:23 +0000
Manifest next update: Thu 03 Sep 2026 15:59:23 +0000
Files and hashes: 1: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: Ga2+EVu47dnfQahsKF64XntgkRzRqvyvpZlCrIJX5DE=)
2: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: Bsl+Ml+xMEPfhqeDDIHDIbx421tKnpSF2bvwWW1cG4s=)
3: 181AE15A381C4B158527A37B5B320F08B7BB589F.crl (hash: z9vxYR24QqM1hdGfNXWSttjzHc9VEtoGaCufl16dHz0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.crl
rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 15:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:56:a1:e4:43:44:66:45:8c:09:fb:1d:6e:23:87:95:52:a5:21:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=181AE15A381C4B158527A37B5B320F08B7BB589F
Validity
Not Before: Sep 2 15:47:23 2026 GMT
Not After : Sep 3 15:59:23 2026 GMT
Subject: CN=61AEE1F01B84C6062BDE4CB293B11F15E0708F0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:e0:3f:c3:b2:77:d2:df:70:39:ed:de:63:
af:39:cb:f5:c7:4d:88:af:15:c0:32:aa:cb:92:4a:
2e:db:38:b0:f0:04:ac:05:92:b3:33:b5:42:fd:a5:
40:86:73:3b:20:34:93:45:47:e0:a6:b5:0d:ec:55:
67:69:90:80:22:84:9e:09:4c:06:ea:6f:f8:21:69:
21:2a:35:63:ac:e4:a4:f5:4e:7a:08:67:f2:ff:47:
e1:a8:e5:b5:ca:ee:61:b2:30:e2:54:57:74:95:e6:
c8:7d:c1:d3:ad:b4:0c:a2:7f:96:f3:18:2a:26:c5:
31:fc:e3:52:57:3b:ae:e5:ed:6e:88:94:20:8b:9f:
6f:d7:48:08:8c:d4:1b:cd:ed:a8:c9:f7:77:62:7c:
21:f1:b3:3a:af:c9:74:e1:dc:d2:02:db:be:f7:96:
5f:65:07:69:62:7e:77:91:2f:a8:da:a7:73:62:e1:
01:84:1a:6a:c6:d7:bb:b4:d6:4d:97:6a:64:00:b2:
10:7d:aa:5b:9c:74:24:b0:bd:9e:9c:2d:a7:15:77:
b3:74:9a:6b:61:47:40:d8:c1:4d:40:c9:15:f7:99:
93:9c:00:9d:c6:8d:51:4f:69:49:68:64:97:96:21:
2e:8c:9a:a7:2c:9c:d7:3e:6b:5b:d5:ba:3a:72:8d:
f7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AE:E1:F0:1B:84:C6:06:2B:DE:4C:B2:93:B1:1F:15:E0:70:8F:0E
X509v3 Authority Key Identifier:
keyid:18:1A:E1:5A:38:1C:4B:15:85:27:A3:7B:5B:32:0F:08:B7:BB:58:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:75:9f:09:73:8e:e8:31:e2:05:cc:fb:4d:2a:bd:b8:33:7d:
e8:be:26:30:67:fb:8d:da:30:0a:2e:ea:06:ce:ed:8a:41:45:
0a:c2:8b:79:d6:0b:2e:21:b2:31:de:c8:1f:e1:ca:90:42:56:
3a:0d:3f:08:d9:bb:74:ac:54:da:28:04:db:78:c7:e9:c6:52:
8f:96:14:85:0f:6a:0f:b9:d9:20:ae:b4:52:e4:4f:d3:9b:93:
a5:68:13:66:4b:bc:e8:ee:aa:42:0b:9b:b0:ab:2b:7f:a1:39:
69:ec:67:0b:da:ab:63:6a:85:ff:db:ba:20:a3:25:bb:af:19:
21:aa:b6:f0:be:7e:8c:b8:1b:48:54:de:82:ce:fb:8b:90:ae:
c6:af:14:ee:d7:21:1c:a4:ef:5f:60:1a:b1:89:fd:5e:0a:25:
b6:8a:c3:91:75:c0:bd:43:28:73:a6:88:b9:4b:f7:88:40:50:
f8:53:b3:c6:12:54:4e:d3:8a:85:a0:68:c1:47:55:50:33:d4:
65:2a:72:3f:bc:c3:c6:ff:80:9d:6e:97:fd:95:8d:33:07:77:
e7:96:d5:83:b8:32:fd:1c:18:86:d0:5a:70:ff:ae:41:b4:78:
0d:52:0d:c5:ec:ba:14:b7:b0:a4:c4:09:3f:4c:34:a7:72:de:
0a:67:24:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:11:51 2026 by rpki-client