Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft
File:                     181AE15A381C4B158527A37B5B320F08B7BB589F.mft (raw, json)
Hash identifier:          qpVWE9v6qg2CG6H2HDWLWDuOookvPEnlLynKqV7t1IA=
Subject key identifier:   34:8B:FC:9F:93:87:CA:CA:75:B6:97:5B:F6:8C:0C:4B:3E:E9:71:0E
Authority key identifier: 18:1A:E1:5A:38:1C:4B:15:85:27:A3:7B:5B:32:0F:08:B7:BB:58:9F
Certificate issuer:       /CN=181AE15A381C4B158527A37B5B320F08B7BB589F
Certificate serial:       07019297E9417146581AE14D075867AE1DB2FD39
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft
Manifest number:          BF
Signing time:             Tue 22 Sep 2026 03:46:11 +0000
Manifest this update:     Tue 22 Sep 2026 03:41:11 +0000
Manifest next update:     Wed 23 Sep 2026 04:01:11 +0000
Files and hashes:         1: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: Ga2+EVu47dnfQahsKF64XntgkRzRqvyvpZlCrIJX5DE=)
                          2: 181AE15A381C4B158527A37B5B320F08B7BB589F.crl (hash: N28HDuYrCSPPIE/opo7nnHMGPf+7g0FpjCMMeaR1BhI=)
                          3: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: Bsl+Ml+xMEPfhqeDDIHDIbx421tKnpSF2bvwWW1cG4s=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.crl
                          rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 04:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:01:92:97:e9:41:71:46:58:1a:e1:4d:07:58:67:ae:1d:b2:fd:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181AE15A381C4B158527A37B5B320F08B7BB589F
        Validity
            Not Before: Sep 22 03:41:11 2026 GMT
            Not After : Sep 23 04:01:11 2026 GMT
        Subject: CN=348BFC9F9387CACA75B6975BF68C0C4B3EE9710E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:0a:4e:be:f5:bb:ff:56:32:10:19:01:03:
                    75:18:5f:94:08:c3:52:93:fb:9f:1c:c9:4a:b7:69:
                    0d:6f:21:21:12:c8:3b:46:59:d6:97:2f:52:91:77:
                    25:b4:b7:79:df:c6:45:db:fd:23:ec:59:f0:4c:f2:
                    9b:45:00:80:fe:2b:b2:66:af:2f:0e:51:b9:4a:dc:
                    31:25:03:3a:2e:c1:44:ca:52:8a:1b:c4:ad:3a:fa:
                    99:ea:32:38:32:e0:e3:00:08:c8:fe:68:ce:ec:67:
                    2d:11:51:0e:93:9d:ac:92:39:8f:07:f2:9a:92:44:
                    eb:e7:f3:40:2c:5e:06:4a:ed:bc:dc:7b:a5:2c:33:
                    3a:48:1d:9a:f2:54:d1:9c:44:8e:f8:c8:0d:07:68:
                    d2:5a:83:d1:b8:c8:da:ba:0d:da:82:0a:d9:b0:0c:
                    a4:3d:e9:e4:81:c6:24:f8:02:90:e8:09:08:f3:2b:
                    0c:f5:98:04:4d:c0:6a:f2:08:31:d6:1e:49:99:4d:
                    0e:19:c6:df:ce:b6:41:c2:f3:6a:17:86:02:b6:ad:
                    0a:36:ff:a7:c0:ef:ff:79:03:d6:24:f9:55:aa:da:
                    a9:35:26:b2:d4:9d:2a:60:50:07:34:ff:f2:08:0a:
                    53:f7:a6:4f:b2:09:7b:2c:49:2a:68:f4:7b:af:6c:
                    21:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8B:FC:9F:93:87:CA:CA:75:B6:97:5B:F6:8C:0C:4B:3E:E9:71:0E
            X509v3 Authority Key Identifier:
                keyid:18:1A:E1:5A:38:1C:4B:15:85:27:A3:7B:5B:32:0F:08:B7:BB:58:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c3:b1:18:a6:87:95:27:b9:23:a1:2b:bc:ef:b6:9b:7e:5d:
         7f:7f:59:49:c5:c0:b3:3c:28:df:5d:d8:49:5d:49:84:65:89:
         05:b8:71:25:11:4b:94:88:d3:fd:4a:cc:09:cf:02:01:7d:09:
         77:bf:a0:f0:9a:72:87:cf:3e:08:0c:ba:9a:b8:8e:c2:1c:9b:
         2f:b1:60:28:f6:98:28:78:29:06:b5:44:bb:bd:4d:f3:d5:31:
         41:d3:73:54:8f:31:ae:5d:f9:5e:e4:c9:15:c2:af:0e:f0:4e:
         b2:28:f1:08:fc:73:49:af:58:75:1e:73:6a:32:c6:94:5c:9e:
         3c:9a:32:9a:91:c6:fc:b8:5d:a3:86:a1:db:79:fb:ab:09:79:
         19:b3:e3:81:0b:29:8c:73:33:25:da:47:fa:9d:57:e3:bb:d1:
         16:97:58:d5:62:10:24:87:83:88:20:b9:e0:31:fe:ce:40:25:
         a8:3a:91:95:02:3d:50:e3:81:9e:f2:2c:94:e7:ff:d5:e0:b8:
         72:24:eb:0b:de:5b:df:1b:8e:eb:26:d3:c4:bb:74:ec:24:46:
         c5:3c:cc:cb:50:88:93:c5:a1:09:6a:31:41:d0:29:6f:ad:d3:
         80:fa:f4:a1:80:ca:53:30:34:f7:0d:3a:fe:1e:12:d4:07:75:
         cb:f9:23:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:25:03 2026 by rpki-client