Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/764459401ADCADC43CBC178909A7059A11D15CFE.mft
File:                     764459401ADCADC43CBC178909A7059A11D15CFE.mft (raw, json)
Hash identifier:          50YC0iJCSahse5C8D9/DJwiBjkFj0P7B4uRLXZjjfXs=
Subject key identifier:   8A:D0:AA:53:1E:C9:2D:14:54:F7:D7:F1:2E:DF:85:B1:F2:1F:DB:30
Authority key identifier: 76:44:59:40:1A:DC:AD:C4:3C:BC:17:89:09:A7:05:9A:11:D1:5C:FE
Certificate issuer:       /CN=764459401ADCADC43CBC178909A7059A11D15CFE
Certificate serial:       062F5BB4F9E3D0630DB8931FE19334EE99CC0DD9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/764459401ADCADC43CBC178909A7059A11D15CFE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/764459401ADCADC43CBC178909A7059A11D15CFE.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 10:19:19 +0000
Manifest this update:     Mon 21 Sep 2026 10:14:19 +0000
Manifest next update:     Tue 22 Sep 2026 11:23:19 +0000
Files and hashes:         1: 764459401ADCADC43CBC178909A7059A11D15CFE.crl (hash: d6hrfZ9O6TSLX80nYRe+gw1mZPvzj1ef/w84pXfnvXA=)
                          2: 3130332e3138312e3235342e302f32332d3234203d3e20313431313435.roa (hash: 0k0iHga0ooX1dAAS++ohUi7V+YobrgqLZDjxs3/3BT4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/764459401ADCADC43CBC178909A7059A11D15CFE.crl
                          rsync://rpki-rsync.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/764459401ADCADC43CBC178909A7059A11D15CFE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/764459401ADCADC43CBC178909A7059A11D15CFE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2f:5b:b4:f9:e3:d0:63:0d:b8:93:1f:e1:93:34:ee:99:cc:0d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764459401ADCADC43CBC178909A7059A11D15CFE
        Validity
            Not Before: Sep 21 10:14:19 2026 GMT
            Not After : Sep 22 11:23:19 2026 GMT
        Subject: CN=8AD0AA531EC92D1454F7D7F12EDF85B1F21FDB30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:44:06:7c:81:28:74:c7:64:0f:65:47:76:b3:
                    89:b8:06:07:09:f5:77:9b:2d:f6:ca:3f:b3:83:04:
                    cf:10:af:79:c1:a3:54:e0:bf:6a:dc:b3:b6:3d:9e:
                    6f:ee:19:09:1a:03:34:c1:e8:a1:de:3d:48:aa:1b:
                    7a:85:33:6a:69:1e:7c:ec:49:fd:fe:90:2e:e9:65:
                    ea:11:db:9f:d6:ad:8a:d5:ab:1e:21:7b:4c:f7:39:
                    9e:8c:53:2a:24:97:3f:0f:35:c7:2f:26:5b:3d:79:
                    7a:dc:04:6b:a7:3f:bb:ab:56:a1:44:62:82:1c:25:
                    b4:c4:01:de:b4:10:50:4e:5d:e1:3c:5d:5a:96:2c:
                    a6:bb:24:10:b6:28:cf:93:e3:ff:2c:57:58:dd:1e:
                    31:a8:30:91:45:9f:d9:cd:2a:ec:43:c0:22:d1:68:
                    03:ee:14:2e:71:94:9a:fd:06:c2:e8:af:58:a7:fa:
                    d3:f8:59:ec:24:c2:40:3a:6f:0e:f8:4a:32:96:6b:
                    5f:2e:0c:b0:10:d7:71:c2:6a:eb:7e:5d:dc:c8:b5:
                    e6:55:6f:38:7d:72:4c:2d:4e:50:b5:c8:73:95:78:
                    be:fa:28:76:20:00:cc:ef:0d:6d:c9:d6:fb:1b:1c:
                    8d:6f:ff:61:3c:4a:37:a0:cb:53:82:6c:23:94:8c:
                    ea:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D0:AA:53:1E:C9:2D:14:54:F7:D7:F1:2E:DF:85:B1:F2:1F:DB:30
            X509v3 Authority Key Identifier:
                keyid:76:44:59:40:1A:DC:AD:C4:3C:BC:17:89:09:A7:05:9A:11:D1:5C:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/764459401ADCADC43CBC178909A7059A11D15CFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/764459401ADCADC43CBC178909A7059A11D15CFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/764459401ADCADC43CBC178909A7059A11D15CFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:91:84:9b:df:7a:8e:3c:7f:4b:a4:b4:6f:9a:64:d4:c5:3e:
         ef:d5:3b:c5:b6:ec:dc:11:f0:05:56:fd:09:e7:2f:21:ac:1d:
         a5:f5:0e:68:c3:6f:c6:02:27:b7:f8:f6:99:cc:b3:db:e4:a8:
         55:a1:46:93:d3:a4:40:14:8a:8a:af:51:9c:bc:cf:31:10:fd:
         0d:9f:2f:01:67:ef:2a:b6:40:e4:7c:e4:ca:32:12:9f:18:52:
         bc:cf:8a:70:95:d4:14:17:b2:02:6a:48:db:a3:59:aa:b5:28:
         fb:2d:0f:5d:62:f3:c1:4a:f2:0f:95:54:f3:9c:86:4a:91:dd:
         8a:80:d0:40:d3:ec:0d:e0:de:71:40:2b:b5:d3:ff:22:6e:f7:
         8f:a5:1c:12:c0:4a:83:1f:f5:a5:73:ce:e2:bd:72:d1:5a:39:
         6a:79:bf:11:69:34:22:fd:1c:34:54:91:23:15:26:19:d7:c5:
         28:41:b1:ce:ad:83:f8:b4:27:13:37:8f:d3:53:14:30:1c:a1:
         9b:8d:be:df:0d:46:03:5b:7c:49:c9:5c:2a:c5:98:69:f5:f7:
         da:09:58:6c:01:3b:2b:d4:44:34:b2:89:9c:55:b2:00:74:44:
         14:b5:2b:7b:98:1c:8d:52:8e:eb:4c:a7:08:c6:65:de:e6:ff:
         d4:f4:de:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:47:13 2026 by rpki-client