Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft
File:                     BA80E957332B450B1641062F6C02C57C817FFCB6.mft (raw, json)
Hash identifier:          mY0J9fFm7C3ZZRpvdcXzbhqPC9t9dFeJEJmPndvEh18=
Subject key identifier:   F0:05:51:47:5D:38:13:5B:17:72:33:CA:6B:21:F4:B4:FE:AE:C0:4D
Authority key identifier: BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6
Certificate issuer:       /CN=BA80E957332B450B1641062F6C02C57C817FFCB6
Certificate serial:       04D40A629CEE73ED857DB5E76669DEC21FE64440
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 08:21:52 +0000
Manifest this update:     Mon 21 Sep 2026 08:16:52 +0000
Manifest next update:     Tue 22 Sep 2026 08:28:52 +0000
Files and hashes:         1: 3130332e3135322e39342e302f32342d3234203d3e203435333132.roa (hash: vdfBPceXwpY5dy9UQmH5kp+LVhfFpi2lPvmv6OBSPuw=)
                          2: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (hash: oeu8Yxj+v1wvdi72zoiErwEhlqXcs2n8V9EKs/WYb/M=)
                          3: BA80E957332B450B1641062F6C02C57C817FFCB6.crl (hash: 99BB2VhJA2FIsQPIPXLHVYKxoxzcKYpq/19GxvV317U=)
                          4: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (hash: fmZr6mR64+/oamhPKvoeeSHz1zG8LAjl2Kt18+AfseI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl
                          rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d4:0a:62:9c:ee:73:ed:85:7d:b5:e7:66:69:de:c2:1f:e6:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA80E957332B450B1641062F6C02C57C817FFCB6
        Validity
            Not Before: Sep 21 08:16:52 2026 GMT
            Not After : Sep 22 08:28:52 2026 GMT
        Subject: CN=F00551475D38135B177233CA6B21F4B4FEAEC04D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:06:0f:89:db:55:a5:32:66:80:b2:18:9d:
                    32:62:16:5f:2c:63:8b:ff:09:7c:6a:fc:98:35:49:
                    7b:8f:bb:b7:6e:8a:b7:4b:db:b7:54:88:fb:a4:12:
                    d5:cf:c8:e2:55:f8:09:90:40:9b:18:0d:a4:23:82:
                    46:e6:2c:28:1d:8d:13:ae:d3:e8:1b:4f:49:c6:26:
                    ca:b5:df:3f:5d:db:2b:c8:33:a9:60:4b:78:40:e9:
                    d6:c4:34:95:1a:c0:6a:f1:1a:d0:f4:a8:94:76:bf:
                    0d:24:8b:2f:53:52:18:05:fa:a1:b4:f8:a1:bd:f9:
                    37:5a:6b:e3:06:05:d7:96:b6:85:d8:d2:aa:49:99:
                    06:06:fd:5c:ba:8d:a7:81:b8:2d:7d:b6:6b:9a:14:
                    b1:82:c2:bd:83:85:7c:eb:2f:68:76:96:19:bc:99:
                    43:48:bc:e3:7d:8a:24:0c:60:ca:c9:aa:f1:76:ee:
                    58:09:8d:06:1e:bb:72:0c:d3:0c:8a:13:29:cd:d6:
                    0c:50:fb:79:89:1a:f5:4d:c4:7c:86:a1:12:e4:aa:
                    02:c7:59:e6:f9:b1:61:82:28:45:54:13:98:b8:ad:
                    51:ef:9d:d5:02:0f:a9:3a:28:c9:83:1a:6e:22:37:
                    34:20:67:df:87:8e:68:38:10:69:62:dc:56:07:5c:
                    61:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:05:51:47:5D:38:13:5B:17:72:33:CA:6B:21:F4:B4:FE:AE:C0:4D
            X509v3 Authority Key Identifier:
                keyid:BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9c:57:84:25:d6:44:2b:cd:58:0c:d2:5f:6e:3d:5c:87:a4:
         7a:b2:7e:13:9f:96:e8:79:df:4c:8b:e3:35:1c:5c:5f:8b:3b:
         82:cc:72:f0:66:6e:a8:53:33:2b:10:8f:22:28:95:e3:b4:42:
         f3:af:a9:8d:a7:03:0c:a9:38:be:36:52:c6:99:73:99:8c:63:
         6c:ab:42:10:83:57:5c:51:69:19:cf:01:65:23:6a:1a:cd:59:
         a1:65:63:84:30:fc:82:68:c8:e9:04:47:88:c6:eb:f3:55:94:
         08:ea:18:47:45:df:4c:f8:f7:08:34:fa:2e:95:bb:4b:93:51:
         bc:6c:c5:11:69:47:a9:2c:7f:d9:f0:d2:7b:3d:d1:2f:0a:c2:
         18:56:d4:9e:31:b7:6d:c6:36:57:d0:93:55:6f:52:bf:58:06:
         58:53:70:c3:ba:f7:bb:72:23:c7:cd:fa:d0:1e:dc:96:b8:a7:
         97:f5:8d:d3:df:38:31:27:8f:92:f3:8d:f5:4d:7a:03:a4:cd:
         4b:e4:e6:a7:62:6d:51:0c:de:55:dc:a6:04:bd:c6:6a:3f:ef:
         26:10:c3:a2:b0:0a:43:db:23:80:97:a8:24:92:62:40:57:9b:
         a7:05:a6:67:f3:77:54:4a:cd:f9:c9:eb:60:19:50:b6:e7:16:
         d3:46:36:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:44:57 2026 by rpki-client