Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
File:                     E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft (raw, json)
Hash identifier:          z0fEyocgBle18l/sdMzuO15RuTK0yzyLT9i2zF4xuzY=
Subject key identifier:   AC:5E:E5:90:0F:26:A5:16:91:F3:84:D1:D4:CE:61:12:E4:6E:5E:86
Authority key identifier: E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60
Certificate issuer:       /CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60
Certificate serial:       1D1CE9EFC3733E0D9DE2312BB8663C7ACA14EC24
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
Manifest number:          BF
Signing time:             Mon 21 Sep 2026 04:22:01 +0000
Manifest this update:     Mon 21 Sep 2026 04:17:01 +0000
Manifest next update:     Tue 22 Sep 2026 07:16:01 +0000
Files and hashes:         1: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: Q+Zpu9s7FFAblJfI/9bq1CU9BNldDzB+MO83xGJv/O8=)
                          2: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: aDinqjPhgNq50kNy+lg2Iba0bDegBSFkr3DIakb0nTU=)
                          3: E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl (hash: /FaItu1mZ9vvOuBd50Do0CqOIfjJq23WTos5PNsTmXo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl
                          rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:1c:e9:ef:c3:73:3e:0d:9d:e2:31:2b:b8:66:3c:7a:ca:14:ec:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60
        Validity
            Not Before: Sep 21 04:17:01 2026 GMT
            Not After : Sep 22 07:16:01 2026 GMT
        Subject: CN=AC5EE5900F26A51691F384D1D4CE6112E46E5E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a6:1e:cb:d0:1a:eb:b1:cc:c7:9f:cb:13:f1:
                    52:85:1a:f8:e5:2d:0b:99:21:27:c2:1d:e9:b2:a7:
                    d3:28:52:a9:3b:02:9a:97:38:52:9b:e3:d2:a8:56:
                    00:46:48:91:22:5a:3f:71:1b:41:cc:de:b2:6a:01:
                    56:1d:08:a3:f0:92:fb:f5:7e:f0:79:e9:0b:a4:5c:
                    58:bd:35:11:32:95:d2:24:e7:4f:72:c8:91:ae:5a:
                    ce:2f:23:af:f9:9b:4f:ef:98:6f:31:3b:08:71:80:
                    db:e8:7a:f7:b3:c1:60:57:86:13:a4:d2:a5:e3:99:
                    ae:5b:88:17:86:f8:cc:c4:63:96:13:ef:c4:2b:17:
                    d6:71:72:08:0f:48:88:96:b8:b6:3f:47:0f:87:d6:
                    00:ab:c5:fd:ab:85:b4:c2:f4:54:1c:fa:18:2d:1d:
                    05:e5:4a:08:f8:fd:9f:63:ba:a9:61:e8:75:a4:77:
                    ab:85:22:53:c0:ab:54:5c:09:a8:20:8d:33:4d:ab:
                    a7:11:90:98:bf:a6:03:04:c1:11:8c:49:10:70:5b:
                    c9:58:11:f0:10:a7:f5:f7:19:90:06:14:c5:14:a1:
                    fe:0e:1d:87:c7:34:ab:0e:fd:78:a6:a5:ca:cc:b6:
                    73:e4:c8:72:e5:05:c9:e3:e6:11:2a:74:95:66:47:
                    9d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5E:E5:90:0F:26:A5:16:91:F3:84:D1:D4:CE:61:12:E4:6E:5E:86
            X509v3 Authority Key Identifier:
                keyid:E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:51:03:51:70:20:2f:d1:b2:5c:ae:b0:31:e7:11:40:fe:a3:
         2b:66:8c:ad:cd:a3:19:55:3b:e0:cf:e1:d0:1f:99:e9:54:4a:
         f4:1e:67:51:b8:fd:2c:90:90:bf:46:3d:1a:76:ff:67:02:5f:
         98:79:ee:bb:84:8b:06:f4:88:db:d8:79:92:b5:d1:85:63:5c:
         8e:e0:90:be:e6:f7:22:cd:b6:98:b0:df:f0:7f:ec:4f:19:45:
         8f:f4:d5:9f:f1:35:6b:7d:93:8d:75:c1:a7:72:9b:98:e5:ba:
         df:26:d9:d2:3f:91:26:11:1f:8a:0e:5a:c2:b4:17:48:6f:35:
         f9:1d:b1:50:17:5b:01:3b:01:82:bb:fb:31:39:a3:d7:9a:cd:
         bf:26:81:f8:3c:58:82:ca:26:56:4f:64:40:6c:83:63:b2:5a:
         98:f6:fd:d8:23:42:71:4c:c1:94:29:3e:75:d9:5a:cd:29:ae:
         09:73:fc:4d:84:59:cc:fa:a5:48:b9:c7:54:16:88:b3:c7:51:
         3d:16:da:c8:b9:92:b3:93:ee:28:74:62:b0:65:08:3a:88:a1:
         d4:db:f5:17:f1:3a:b9:d9:06:d8:b7:47:0c:9c:76:6e:33:63:
         cd:bb:f3:47:24:ed:e2:52:c9:40:be:34:f0:e3:a4:86:93:fc:
         d4:15:7d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:28:05 2026 by rpki-client