
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft
File: 181AE15A381C4B158527A37B5B320F08B7BB589F.mft (raw, json)
Hash identifier: 6kAH1UUT4Z6QgB9dinwwncAW3yXEeQyNv1Gq5J8105E=
Subject key identifier: 24:5C:6D:B9:5C:DE:B3:9F:D9:A2:B5:CD:CD:98:E2:99:26:1F:DE:F7
Authority key identifier: 18:1A:E1:5A:38:1C:4B:15:85:27:A3:7B:5B:32:0F:08:B7:BB:58:9F
Certificate issuer: /CN=181AE15A381C4B158527A37B5B320F08B7BB589F
Certificate serial: 6E56656599BAAA20614893D6093A0DC5C443DED8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 08:15:53 +0000
Manifest this update: Thu 24 Sep 2026 08:10:53 +0000
Manifest next update: Fri 25 Sep 2026 11:45:53 +0000
Files and hashes: 1: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: Bsl+Ml+xMEPfhqeDDIHDIbx421tKnpSF2bvwWW1cG4s=)
2: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: Ga2+EVu47dnfQahsKF64XntgkRzRqvyvpZlCrIJX5DE=)
3: 181AE15A381C4B158527A37B5B320F08B7BB589F.crl (hash: 8mxOEFIQ/6F44GpEYDlUh1wdMXoWtOWYxNn2CD+EsZs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.crl
rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:56:65:65:99:ba:aa:20:61:48:93:d6:09:3a:0d:c5:c4:43:de:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=181AE15A381C4B158527A37B5B320F08B7BB589F
Validity
Not Before: Sep 24 08:10:53 2026 GMT
Not After : Sep 25 11:45:53 2026 GMT
Subject: CN=245C6DB95CDEB39FD9A2B5CDCD98E299261FDEF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0c:ee:9b:4a:30:f0:b9:f1:30:74:9b:69:bf:
04:62:95:67:d8:6f:29:f1:12:da:26:c2:63:50:9d:
da:9d:a5:2c:3d:7a:9e:a9:48:57:2e:53:c8:93:4e:
6e:68:ad:bd:85:7a:76:80:ed:36:cb:87:e3:2d:d4:
a6:fc:83:db:78:9c:ee:d4:a3:31:7e:d8:d0:47:c6:
bf:ff:f8:f5:94:6c:46:64:50:30:d1:0d:35:25:dc:
85:ba:dc:46:0b:f7:4e:c8:95:83:f8:22:24:25:52:
76:62:27:f0:5d:59:4a:4c:79:89:42:37:e7:f1:72:
f9:03:0c:95:7b:12:ab:15:b9:97:97:66:6f:9d:ea:
b5:ae:41:08:d7:bf:24:f2:47:92:d0:c9:f4:6b:4b:
36:3d:08:2c:80:4e:12:dc:f5:8d:75:c1:d8:6e:78:
77:6c:0b:d6:4b:0d:b9:65:d4:50:5a:33:5d:f1:bc:
6b:3b:39:56:b5:68:66:b3:48:60:40:8b:16:fa:78:
ea:94:bc:58:10:e3:db:6e:7f:34:3a:24:06:d3:2e:
60:0e:95:99:4e:35:f9:61:1a:46:14:36:dd:ce:c5:
91:d3:6e:a6:07:d3:ff:4c:a0:d3:d2:e4:42:d8:69:
8b:86:a8:9a:3e:d6:6f:cf:2f:73:a3:1f:5f:eb:96:
e2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5C:6D:B9:5C:DE:B3:9F:D9:A2:B5:CD:CD:98:E2:99:26:1F:DE:F7
X509v3 Authority Key Identifier:
keyid:18:1A:E1:5A:38:1C:4B:15:85:27:A3:7B:5B:32:0F:08:B7:BB:58:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:44:6c:eb:6a:3c:ce:b7:a7:bf:3f:ff:03:48:78:fb:54:c1:
33:b2:55:64:66:dc:39:fd:d3:5b:55:89:51:0f:1e:4e:4c:ea:
19:1b:5e:00:ed:ea:00:9e:58:6d:33:ea:64:e1:7b:33:e8:44:
b0:2b:ab:53:e5:11:b0:f8:7b:7a:b7:7e:f8:6b:71:1e:03:d6:
a0:cf:e7:6e:09:37:f6:6b:ad:ee:7a:31:21:56:0a:fc:78:2f:
8f:95:98:bb:51:da:6a:1f:51:57:6b:9f:b1:85:18:71:5a:ca:
21:03:37:96:47:f3:b4:b6:58:4a:b5:41:db:bb:15:2c:31:6b:
2a:06:84:49:c8:c5:b8:3a:d8:62:76:03:ff:1d:31:ec:7c:65:
f4:0d:57:b8:af:e8:63:ab:c3:01:8d:07:72:96:3b:7f:e4:e1:
a7:1a:28:35:e2:6c:7d:ba:e1:5d:cf:14:0c:fb:dc:f9:99:53:
f4:ea:65:63:44:9f:e7:4d:a3:2b:2d:23:59:95:02:73:a4:7b:
65:4e:94:56:f6:c3:04:6c:9d:8c:ec:71:ea:48:7d:7a:24:b3:
72:7e:a2:e9:d3:6a:29:b7:f5:24:48:bf:5d:c2:b2:9d:a6:f4:
48:66:26:3d:af:ef:5e:4c:e7:34:1c:87:be:10:6c:50:e1:90:
05:01:93:78
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUblZlZZm6qiBhSJPWCToNxcRD3tgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTgxQUUxNUEzODFDNEIxNTg1MjdBMzdCNUIzMjBGMDhC
N0JCNTg5RjAeFw0yNjA5MjQwODEwNTNaFw0yNjA5MjUxMTQ1NTNaMDMxMTAvBgNV
BAMTKDI0NUM2REI5NUNERUIzOUZEOUEyQjVDRENEOThFMjk5MjYxRkRFRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeDO6bSjDwufEwdJtpvwRilWfY
bynxEtomwmNQndqdpSw9ep6pSFcuU8iTTm5orb2FenaA7TbLh+Mt1Kb8g9t4nO7U
ozF+2NBHxr//+PWUbEZkUDDRDTUl3IW63EYL907IlYP4IiQlUnZiJ/BdWUpMeYlC
N+fxcvkDDJV7EqsVuZeXZm+d6rWuQQjXvyTyR5LQyfRrSzY9CCyAThLc9Y11wdhu
eHdsC9ZLDbll1FBaM13xvGs7OVa1aGazSGBAixb6eOqUvFgQ49tufzQ6JAbTLmAO
lZlONflhGkYUNt3OxZHTbqYH0/9MoNPS5ELYaYuGqJo+1m/PL3OjH1/rluJDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJFxtuVzes5/ZorXNzZjimSYf3vcwHwYDVR0j
BBgwFoAUGBrhWjgcSxWFJ6N7WzIPCLe7WJ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWU4OWYxYjQtZWY2My00NTM5LTg0NTUtOThjNjcxOTk1Y2NmLzAvMTgxQUUxNUEz
ODFDNEIxNTg1MjdBMzdCNUIzMjBGMDhCN0JCNTg5Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xODFBRTE1QTM4MUM0QjE1ODUyN0EzN0I1QjMyMEYwOEI3QkI1
ODlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0
NTUtOThjNjcxOTk1Y2NmLzAvMTgxQUUxNUEzODFDNEIxNTg1MjdBMzdCNUIzMjBG
MDhCN0JCNTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAF9EbOtqPM63p78//wNIePtUwTOyVWRm3Dn9
01tViVEPHk5M6hkbXgDt6gCeWG0z6mThezPoRLArq1PlEbD4e3q3fvhrcR4D1qDP
524JN/Zrre56MSFWCvx4L4+VmLtR2mofUVdrn7GFGHFayiEDN5ZH87S2WEq1Qdu7
FSwxayoGhEnIxbg62GJ2A/8dMex8ZfQNV7iv6GOrwwGNB3KWO3/k4acaKDXibH26
4V3PFAz73PmZU/TqZWNEn+dNoystI1mVAnOke2VOlFb2wwRsnYzscepIfXoks3J+
ounTaim39SRIv13Csp2m9EhmJj2v715M5zQch74QbFDhkAUBk3g=
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:08:05 2026 by rpki-client