Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.mft
File:                     7091DC8336BC57D39C24D1C393F2B14780B192CD.mft (raw, json)
Hash identifier:          iu+cDmJPPt22LTt6+Fwpls4OCCFaCa0TpZWUWscb1iY=
Subject key identifier:   2F:8F:AB:10:93:B6:53:3E:77:A3:09:92:00:7E:70:44:D3:EA:46:FE
Authority key identifier: 70:91:DC:83:36:BC:57:D3:9C:24:D1:C3:93:F2:B1:47:80:B1:92:CD
Certificate issuer:       /CN=7091DC8336BC57D39C24D1C393F2B14780B192CD
Certificate serial:       1D7B53C754639619FC69F016023CE8A6F12D10A7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7091DC8336BC57D39C24D1C393F2B14780B192CD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.mft
Manifest number:          C0
Signing time:             Mon 21 Sep 2026 22:49:53 +0000
Manifest this update:     Mon 21 Sep 2026 22:44:53 +0000
Manifest next update:     Wed 23 Sep 2026 01:07:53 +0000
Files and hashes:         1: 3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa (hash: Q0OtuE0x+1dg20GdJHzojtIIWvsVtWVNvAlS/PxOJuA=)
                          2: 7091DC8336BC57D39C24D1C393F2B14780B192CD.crl (hash: dvVoOtyKAG8l0u5gPoObfsgSoB7p93fILlVb1HaZRuA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.crl
                          rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7091DC8336BC57D39C24D1C393F2B14780B192CD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 23:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7b:53:c7:54:63:96:19:fc:69:f0:16:02:3c:e8:a6:f1:2d:10:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7091DC8336BC57D39C24D1C393F2B14780B192CD
        Validity
            Not Before: Sep 21 22:44:53 2026 GMT
            Not After : Sep 23 01:07:53 2026 GMT
        Subject: CN=2F8FAB1093B6533E77A30992007E7044D3EA46FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:31:5b:62:91:f9:dd:df:f6:41:1e:a9:6b:
                    22:11:81:fb:c6:ef:c2:36:5a:d0:71:98:8f:1a:65:
                    74:52:dd:7d:d1:4a:33:93:59:e3:88:86:5c:b6:e0:
                    26:6a:f7:81:46:4c:1b:55:ef:0a:8d:e5:1c:d6:30:
                    db:e4:24:5d:f1:e1:fa:6e:a7:e7:be:32:3f:20:3e:
                    e6:55:5f:1d:5b:4f:35:90:ea:43:42:30:1a:81:b3:
                    41:21:09:b6:b2:5b:1e:f7:77:70:97:5b:34:0c:e9:
                    63:3c:64:41:69:c0:1c:24:84:ce:d2:e0:69:73:bb:
                    b4:71:eb:f5:54:4c:d6:4a:b0:ad:14:28:8f:b9:a4:
                    db:fb:27:ec:86:da:c4:9c:f8:82:04:c4:1e:5f:d0:
                    75:81:70:dc:9d:3b:3c:0a:b3:00:d7:87:6a:ba:3b:
                    3b:ee:9e:8a:d6:aa:d9:18:a5:7b:9c:97:f1:42:9c:
                    c1:1d:93:1d:65:b5:fb:6c:ca:7b:92:17:ec:e1:2f:
                    ca:3f:7c:56:55:02:49:87:9a:d0:80:6f:2d:ae:2b:
                    7c:19:85:73:16:f3:74:5d:50:11:87:16:98:bf:46:
                    04:0f:6d:a2:3e:e3:1e:f0:94:42:4c:5f:ac:db:78:
                    eb:b7:07:d9:17:80:db:70:21:38:04:42:27:4e:cb:
                    6c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8F:AB:10:93:B6:53:3E:77:A3:09:92:00:7E:70:44:D3:EA:46:FE
            X509v3 Authority Key Identifier:
                keyid:70:91:DC:83:36:BC:57:D3:9C:24:D1:C3:93:F2:B1:47:80:B1:92:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7091DC8336BC57D39C24D1C393F2B14780B192CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:2f:3b:9f:3b:ed:fb:70:2f:62:c8:65:ab:fc:16:c4:19:c1:
         d0:fd:8d:99:7a:b6:20:37:8e:37:a6:ee:2f:08:21:98:c4:98:
         ba:ae:04:ce:e2:bc:6f:15:be:3d:02:c5:d8:46:7d:b1:04:b4:
         7e:2d:32:23:dd:95:ca:2b:3b:c6:24:e4:14:d4:77:cf:e4:06:
         40:e2:4f:2d:07:0e:9a:f2:d6:c6:b9:8a:7c:ee:a9:2a:0d:4f:
         6f:e1:f4:15:bc:92:59:62:11:9b:9b:74:55:75:85:27:71:c8:
         1c:28:54:ad:bf:c7:cc:a2:89:7a:f7:03:32:8e:db:b6:08:07:
         5f:ac:21:8e:9d:f3:df:dc:e3:bc:9c:c5:11:f1:da:bf:b6:4c:
         51:2d:39:b7:3f:f3:1d:59:56:21:57:f0:84:a4:9e:34:85:f5:
         77:a6:ec:23:c1:53:33:18:01:c1:54:48:a1:93:fc:01:69:66:
         d0:fe:2a:16:f3:55:72:71:45:8e:b0:bb:17:37:2e:4b:e3:5c:
         d5:27:e7:cc:19:42:80:44:de:4c:23:40:63:54:80:3f:27:d1:
         7a:eb:07:fa:f4:a6:51:8e:58:eb:0a:d0:47:91:41:a2:9d:6a:
         31:49:5b:bf:6f:c4:4f:7f:b3:a2:18:32:a2:ad:53:f5:60:77:
         b4:eb:f9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:25:55 2026 by rpki-client