Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft
File:                     78E0160248ABDDA316B054457CAC9C2878172E3F.mft (raw, json)
Hash identifier:          DzDvniaD61pzenewwIkAVNG6kv/vJXQ+gnqR6C2oG2U=
Subject key identifier:   9E:F5:23:92:3C:45:35:DA:45:B5:64:38:A0:38:17:A9:73:10:A8:B8
Authority key identifier: 78:E0:16:02:48:AB:DD:A3:16:B0:54:45:7C:AC:9C:28:78:17:2E:3F
Certificate issuer:       /CN=78E0160248ABDDA316B054457CAC9C2878172E3F
Certificate serial:       161E2D9DBB511AD0940550D1B6259B586840794A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft
Manifest number:          BF
Signing time:             Mon 21 Sep 2026 09:17:58 +0000
Manifest this update:     Mon 21 Sep 2026 09:12:58 +0000
Manifest next update:     Tue 22 Sep 2026 10:26:58 +0000
Files and hashes:         1: 3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa (hash: VA9x1JUvw0UogZupkAioG4JuD1sEwt/f57IrckxZ3dI=)
                          2: 323430363a333834303a3a2f33322d3438203d3e20313430343438.roa (hash: 2+XchGapSoCutP6h9YZdHEQH9u3BfkhAjpO15GhIZ5w=)
                          3: 78E0160248ABDDA316B054457CAC9C2878172E3F.crl (hash: rtiolZ8dg3bIz9ENskg0BAywzteFJFBCoA2K5v7af9o=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.crl
                          rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1e:2d:9d:bb:51:1a:d0:94:05:50:d1:b6:25:9b:58:68:40:79:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78E0160248ABDDA316B054457CAC9C2878172E3F
        Validity
            Not Before: Sep 21 09:12:58 2026 GMT
            Not After : Sep 22 10:26:58 2026 GMT
        Subject: CN=9EF523923C4535DA45B56438A03817A97310A8B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:3d:84:b5:c0:ce:3d:5a:92:34:66:ac:69:
                    d4:c1:a9:eb:20:33:8a:b5:d8:1f:89:fd:86:cd:bc:
                    ad:c6:ff:7d:4d:5c:48:e3:0f:ca:4b:ad:2a:32:07:
                    6e:55:97:1f:14:ed:fd:7f:67:70:e8:24:17:6a:bf:
                    95:45:f7:f1:24:cc:3e:2d:3b:86:ce:8f:2d:77:d7:
                    01:7e:01:85:f3:78:d0:58:d9:3a:1e:91:de:90:05:
                    ce:c6:e1:c2:96:1b:07:52:b3:a8:ef:88:55:8a:ab:
                    61:51:3a:26:68:a4:bd:21:75:d2:bc:e9:17:12:f7:
                    1b:03:8f:f6:0d:31:d9:27:bd:1b:0b:ca:88:28:96:
                    ee:3b:f8:ce:d8:fd:55:ee:3e:91:5f:cf:00:04:28:
                    12:b9:f8:bc:05:f4:62:74:a5:87:28:7b:f5:96:b6:
                    62:7d:9a:f5:d8:d0:94:e3:66:17:22:2d:26:f5:9f:
                    c5:36:19:c2:1c:0a:53:e1:d3:95:4b:7c:36:e7:b1:
                    37:38:d4:db:e1:9f:4d:58:34:da:b9:26:6b:0b:01:
                    3c:de:71:35:66:45:4e:01:e3:94:ed:35:77:00:f6:
                    fb:e3:89:06:3f:4b:5b:23:1d:f5:91:47:01:c7:ab:
                    df:e5:27:b5:5e:4a:42:c7:b1:7d:87:3d:a8:2a:97:
                    0e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F5:23:92:3C:45:35:DA:45:B5:64:38:A0:38:17:A9:73:10:A8:B8
            X509v3 Authority Key Identifier:
                keyid:78:E0:16:02:48:AB:DD:A3:16:B0:54:45:7C:AC:9C:28:78:17:2E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:7e:fb:3e:ff:ab:e0:06:91:38:20:8b:af:ad:14:a3:7c:77:
         c6:b5:c0:0a:7b:9d:fa:d4:7d:d6:ff:e8:b1:a4:87:94:53:cc:
         70:aa:44:3d:29:db:ff:c5:c9:2f:fa:d1:db:14:f2:db:7d:3f:
         a0:42:d8:f1:e6:1a:e6:5f:8d:5e:f9:d1:79:9e:13:a9:70:fb:
         4a:b5:6e:bd:2d:59:bd:2c:68:d9:65:b0:69:02:ce:4b:84:7e:
         b8:89:ce:ab:f1:5b:12:9f:40:0d:7c:8d:a9:71:b7:f1:1d:0f:
         14:e9:51:b8:b8:28:38:bb:88:bb:db:69:ca:28:b9:c4:a2:9f:
         fc:fd:77:a3:82:1e:44:7a:12:57:76:ec:9f:1e:fe:a1:f9:09:
         5c:00:90:fa:b3:0e:e7:40:0e:e3:25:30:39:18:2e:3b:c7:4b:
         5b:f6:3b:7f:44:34:18:77:9a:1f:71:39:c7:66:a8:cf:7d:f5:
         8b:16:28:e3:a3:56:0e:43:09:08:74:1c:dd:2a:62:dd:c3:8d:
         e2:68:21:49:da:1e:e8:5d:7f:81:a1:1a:bc:c1:07:2c:72:73:
         a3:35:2e:b6:29:45:3c:8d:68:a7:8d:d1:8a:6a:8f:61:25:29:
         d0:c9:26:84:b9:34:3b:7a:39:31:7c:a3:45:1f:7d:97:90:8f:
         a7:50:80:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:36:43 2026 by rpki-client