Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft
File:                     41E81C122CFE1947633AAA5A517B7923E1A78966.mft (raw, json)
Hash identifier:          aY6Q2IhLuZ2bQYYyM5T6NjszWA1YeMaJOYvMulJMSw0=
Subject key identifier:   57:0B:65:86:D8:B2:2D:6C:45:AB:A0:CA:F0:E9:5D:19:77:7B:60:AA
Authority key identifier: 41:E8:1C:12:2C:FE:19:47:63:3A:AA:5A:51:7B:79:23:E1:A7:89:66
Certificate issuer:       /CN=41E81C122CFE1947633AAA5A517B7923E1A78966
Certificate serial:       6E878DC98099D02CC0CB75097800174D49A399BB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft
Manifest number:          BF
Signing time:             Tue 22 Sep 2026 06:03:59 +0000
Manifest this update:     Tue 22 Sep 2026 05:58:59 +0000
Manifest next update:     Wed 23 Sep 2026 07:16:59 +0000
Files and hashes:         1: 323430333a653338303a3a2f33322d3332203d3e20313334363337.roa (hash: h8pC3O5UrBoUEC6ODx88QnSAsLryVqTwUJG85o9TxOg=)
                          2: 323430333a653338303a313030333a3a2f34382d3438203d3e20313334363337.roa (hash: fMmCbOIL8nMLpF5EKmFyyb/z/cATeDIy9MshfGEYHeY=)
                          3: 323430333a653338303a313030313a3a2f34382d3438203d3e20313334363337.roa (hash: lJflPziRVDWpYcvwsJpkfkZb2ca8llttOjutgGe2gos=)
                          4: 323430333a653338303a313030323a3a2f34382d3438203d3e20313334363337.roa (hash: ZuDxVEAObBxaFOm5uYmRAI9eGu8SevvOVjp9rp2cMH8=)
                          5: 41E81C122CFE1947633AAA5A517B7923E1A78966.crl (hash: kZVywm99dqTwOg0SbNDcdRCaOvuIasFtJoNr6XI+rcg=)
                          6: 3230322e3136302e3133392e302f32342d3234203d3e20313439363735.roa (hash: HGoEshpetOpXhNr6v4Rw31C6lvgZLfHje+0mfpy78fU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.crl
                          rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 07:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:87:8d:c9:80:99:d0:2c:c0:cb:75:09:78:00:17:4d:49:a3:99:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E81C122CFE1947633AAA5A517B7923E1A78966
        Validity
            Not Before: Sep 22 05:58:59 2026 GMT
            Not After : Sep 23 07:16:59 2026 GMT
        Subject: CN=570B6586D8B22D6C45ABA0CAF0E95D19777B60AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1b:0e:c3:38:51:a4:0b:68:e3:55:38:f3:6b:
                    7b:6b:5f:46:01:32:ad:b8:d9:17:a9:04:ab:7e:32:
                    46:b6:c7:de:a8:db:65:9f:04:4b:04:85:d6:1a:b5:
                    02:71:1d:18:47:f0:85:79:56:86:c0:d9:ac:1c:09:
                    94:7a:1d:39:ec:69:a4:a6:f3:c5:d7:61:a5:87:25:
                    e5:86:fb:d1:8b:47:eb:51:44:5b:f8:bd:ae:6f:9d:
                    ba:96:a6:6d:75:18:35:c8:44:d7:f7:5a:fa:af:06:
                    b7:39:56:4f:3c:a0:ba:b6:f1:5e:5f:48:23:38:3e:
                    a7:47:22:5d:3c:bd:bb:a2:76:61:c6:cc:67:a2:90:
                    b3:5a:db:3b:47:4c:81:e1:f0:42:cf:30:09:2d:50:
                    81:20:4c:a3:48:02:17:81:ad:f9:ba:c1:41:b6:71:
                    dd:9d:57:c3:eb:05:f9:7e:da:16:08:c8:b8:d5:4b:
                    43:67:7e:ed:c1:fb:a8:64:75:bc:7c:0c:c4:06:f3:
                    12:35:88:ab:36:c8:46:e2:fe:ce:fa:9c:a6:46:43:
                    95:9f:65:5c:a8:46:51:0f:e7:00:3b:5e:7e:16:b3:
                    0d:13:b5:90:e5:68:ab:41:59:1b:9e:a6:9c:21:f0:
                    f1:aa:41:b0:a7:b6:0b:87:06:89:79:12:a6:d0:38:
                    1a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0B:65:86:D8:B2:2D:6C:45:AB:A0:CA:F0:E9:5D:19:77:7B:60:AA
            X509v3 Authority Key Identifier:
                keyid:41:E8:1C:12:2C:FE:19:47:63:3A:AA:5A:51:7B:79:23:E1:A7:89:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ea:ca:58:c4:0e:e1:13:b4:1f:d9:7d:cb:0d:2f:97:52:b0:
         3b:ad:94:15:60:13:ff:47:ad:f3:b5:af:61:f9:ac:fb:21:7a:
         12:be:6c:e9:ab:9e:b6:2d:6a:8f:6f:5f:01:57:b4:70:ba:78:
         4a:b4:83:9b:51:17:da:4a:98:85:db:4b:c7:65:18:06:43:e8:
         20:39:e4:5c:30:36:f4:9e:e3:c3:ce:13:d2:55:37:e5:3a:99:
         4c:32:a7:e0:16:af:7a:c8:ce:5b:63:33:64:cb:b6:1d:fb:67:
         f7:bc:0d:c4:ff:5e:8a:b3:9b:fa:b7:f2:38:75:b6:17:d4:49:
         18:95:8f:7a:0b:44:83:9e:dc:b0:39:95:e5:d1:72:6d:94:a2:
         1e:c7:55:0a:f2:9f:04:b3:ad:71:12:55:04:37:ea:ac:13:60:
         f6:ce:f0:59:df:fd:c3:23:90:bb:e0:df:21:9b:86:fa:67:7a:
         5a:18:9f:5b:1d:ce:e4:0d:70:03:9b:c4:39:1a:f9:fa:47:c4:
         2f:c9:31:a8:6a:e9:7a:e1:92:29:ec:3a:45:41:c4:1c:cf:ba:
         29:e6:9c:d1:8a:67:76:6c:6d:bc:6b:02:39:83:58:73:47:7f:
         cb:4a:e2:1d:41:ea:c5:99:e7:d0:a8:79:16:b7:f6:6f:48:15:
         9d:e6:03:cc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUboeNyYCZ0CzAy3UJeAAXTUmjmbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFFODFDMTIyQ0ZFMTk0NzYzM0FBQTVBNTE3Qjc5MjNF
MUE3ODk2NjAeFw0yNjA5MjIwNTU4NTlaFw0yNjA5MjMwNzE2NTlaMDMxMTAvBgNV
BAMTKDU3MEI2NTg2RDhCMjJENkM0NUFCQTBDQUYwRTk1RDE5Nzc3QjYwQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGw7DOFGkC2jjVTjza3trX0YB
Mq242RepBKt+Mka2x96o22WfBEsEhdYatQJxHRhH8IV5VobA2awcCZR6HTnsaaSm
88XXYaWHJeWG+9GLR+tRRFv4va5vnbqWpm11GDXIRNf3WvqvBrc5Vk88oLq28V5f
SCM4PqdHIl08vbuidmHGzGeikLNa2ztHTIHh8ELPMAktUIEgTKNIAheBrfm6wUG2
cd2dV8PrBfl+2hYIyLjVS0Nnfu3B+6hkdbx8DMQG8xI1iKs2yEbi/s76nKZGQ5Wf
ZVyoRlEP5wA7Xn4Wsw0TtZDlaKtBWRueppwh8PGqQbCntguHBol5EqbQOBoRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVwtlhtiyLWxFq6DK8OldGXd7YKowHwYDVR0j
BBgwFoAUQegcEiz+GUdjOqpaUXt5I+GniWYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDc0ZjIxNGEtYmY1NS00MDQ4LTg0NWQtMjA2NzVmYjVmMmE0LzAvNDFFODFDMTIy
Q0ZFMTk0NzYzM0FBQTVBNTE3Qjc5MjNFMUE3ODk2Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MUU4MUMxMjJDRkUxOTQ3NjMzQUFBNUE1MTdCNzkyM0UxQTc4
OTY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDc0ZjIxNGEtYmY1NS00MDQ4LTg0
NWQtMjA2NzVmYjVmMmE0LzAvNDFFODFDMTIyQ0ZFMTk0NzYzM0FBQTVBNTE3Qjc5
MjNFMUE3ODk2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIfqyljEDuETtB/ZfcsNL5dSsDutlBVgE/9H
rfO1r2H5rPshehK+bOmrnrYtao9vXwFXtHC6eEq0g5tRF9pKmIXbS8dlGAZD6CA5
5FwwNvSe48POE9JVN+U6mUwyp+AWr3rIzltjM2TLth37Z/e8DcT/Xoqzm/q38jh1
thfUSRiVj3oLRIOe3LA5leXRcm2Uoh7HVQrynwSzrXESVQQ36qwTYPbO8Fnf/cMj
kLvg3yGbhvpneloYn1sdzuQNcAObxDka+fpHxC/JMahq6XrhkinsOkVBxBzPuinm
nNGKZ3ZsbbxrAjmDWHNHf8tK4h1B6sWZ59CoeRa39m9IFZ3mA8w=
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:34:58 2026 by rpki-client