Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft
File:                     B677F5476721449C1CB3D8F67673665A0A038595.mft (raw, json)
Hash identifier:          I+D89zg39zYXA1/0xyDdfgwoPKJIhQB2W4XHwGXavbU=
Subject key identifier:   C1:4A:15:74:7E:24:D2:07:98:D5:88:8E:42:B5:C6:A2:8A:E1:3C:3E
Authority key identifier: B6:77:F5:47:67:21:44:9C:1C:B3:D8:F6:76:73:66:5A:0A:03:85:95
Certificate issuer:       /CN=B677F5476721449C1CB3D8F67673665A0A038595
Certificate serial:       260ABC1FE0C8C397D8352183F64889AF1BA3B0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 14:29:31 +0000
Manifest this update:     Mon 21 Sep 2026 14:24:31 +0000
Manifest next update:     Tue 22 Sep 2026 15:38:31 +0000
Files and hashes:         1: B677F5476721449C1CB3D8F67673665A0A038595.crl (hash: kAkqy6taW3S4j4dBj2SAyAI21RDOuYt4t0nTngNSQwE=)
                          2: 3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa (hash: lRUuWcUd02IZlpdvWX9KHM1+gKLrQM+l0jBHsP+smvs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.crl
                          rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0a:bc:1f:e0:c8:c3:97:d8:35:21:83:f6:48:89:af:1b:a3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B677F5476721449C1CB3D8F67673665A0A038595
        Validity
            Not Before: Sep 21 14:24:31 2026 GMT
            Not After : Sep 22 15:38:31 2026 GMT
        Subject: CN=C14A15747E24D20798D5888E42B5C6A28AE13C3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cf:0a:d5:dd:3d:10:09:ee:22:6a:c9:fe:95:
                    5b:ce:9a:5a:46:e3:16:5f:12:64:94:ed:ea:fe:25:
                    5f:e4:27:b3:17:4f:63:ff:d5:ae:95:38:54:ab:4e:
                    f7:29:ae:51:d7:d6:46:7b:da:e1:64:5e:d3:69:af:
                    e8:9f:d7:a4:a8:6b:5d:41:a8:96:e3:76:5c:8f:70:
                    89:c8:c9:07:e2:e5:ee:a5:91:6b:3f:83:8e:9a:e8:
                    f4:f6:b5:e8:bf:c7:a0:31:ee:dd:af:3d:e0:66:93:
                    69:e5:ad:5c:e8:14:82:1f:30:26:ef:c9:02:e2:97:
                    67:7e:25:84:c2:7b:23:92:db:d3:22:5c:40:e9:b6:
                    94:84:9c:8f:51:2c:61:12:68:bd:e8:2b:a2:83:1c:
                    cf:3b:2d:fc:c2:2a:2a:98:b4:7a:e7:b1:cc:66:7c:
                    c0:a1:08:82:b4:1c:7c:07:1a:f4:93:f5:0c:73:3f:
                    25:b8:26:2c:46:93:f2:43:59:a5:ce:a8:d7:14:d5:
                    0f:49:55:28:bd:38:85:da:e2:3e:b7:50:97:6c:aa:
                    b7:14:da:e5:7b:b0:e9:c7:15:fc:57:9a:2e:b0:bf:
                    21:1d:4e:15:7c:7b:0d:c9:f1:5b:93:f8:e5:7c:f1:
                    6b:11:e1:82:8c:d1:21:54:e2:c0:01:48:64:de:f8:
                    5b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4A:15:74:7E:24:D2:07:98:D5:88:8E:42:B5:C6:A2:8A:E1:3C:3E
            X509v3 Authority Key Identifier:
                keyid:B6:77:F5:47:67:21:44:9C:1C:B3:D8:F6:76:73:66:5A:0A:03:85:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3c:97:01:f9:16:0a:21:20:a9:49:09:0a:96:84:f2:41:3b:
         68:59:65:90:38:41:0f:f0:5e:8e:96:7a:63:d5:dd:35:ff:fc:
         12:34:bf:2a:f3:bc:36:a7:3b:2a:c1:fc:ec:92:6d:f4:ef:61:
         d4:b1:39:96:0f:1d:5a:0b:7d:95:91:72:7d:ec:de:0f:8d:13:
         f3:75:b4:a4:06:89:58:fb:4a:7f:40:88:a0:08:cc:13:35:16:
         fd:6c:a9:7e:21:1c:79:1d:4d:a9:d2:be:a9:0e:28:6e:0e:ff:
         c2:09:14:4f:df:75:c0:c6:9c:ba:cc:67:6c:14:c4:96:71:3e:
         a5:1d:76:54:50:8e:a8:01:25:a5:a7:37:52:f8:98:47:5c:7e:
         9f:6a:56:8c:93:58:35:e1:9a:f9:55:ba:a0:1f:8a:5a:fc:e1:
         9d:7b:1e:b3:ea:f7:ae:87:a1:8d:3d:d5:0c:0e:62:b3:38:1f:
         6f:f6:a2:c7:87:58:93:d8:e9:ab:47:5e:d3:08:60:0d:a8:76:
         d0:e9:d8:4f:18:f3:1e:e6:f5:31:fa:7e:25:90:d4:26:5e:aa:
         bf:16:fa:fc:62:4c:fc:58:03:fb:8f:4e:54:5c:a3:1a:03:4d:
         b2:87:12:aa:69:0c:ac:da:32:33:b0:95:4e:70:5a:4f:5a:81:
         44:b0:17:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:49:15 2026 by rpki-client