Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft
File:                     1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft (raw, json)
Hash identifier:          qXJ3F2JChSBgEiEUlcQB7UNyKrC3FvWLxSQ09Nu/RdI=
Subject key identifier:   68:1F:27:DB:2F:59:CF:3C:E3:5D:6B:26:A1:69:C9:43:F6:36:E3:CE
Authority key identifier: 1A:45:31:57:4F:EF:FD:9E:22:1D:E0:D8:2C:E6:57:85:3E:4C:EE:3A
Certificate issuer:       /CN=1A4531574FEFFD9E221DE0D82CE657853E4CEE3A
Certificate serial:       2A7CF42281E34EDA0795A1A7EB5CCFD93723B23A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 23:30:52 +0000
Manifest this update:     Mon 21 Sep 2026 23:25:52 +0000
Manifest next update:     Wed 23 Sep 2026 02:07:52 +0000
Files and hashes:         1: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: r8bhwMyuWK8pro2AJ6O3DeDhHxZkOZDkQzVfsAiQ4HM=)
                          2: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: oJAKvIjQYUnV4YiPQwgQNfHdtV+ujtVQM+Xex28JGbg=)
                          3: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: Ulhe7SBzoKXa0nbHiYWTSM2UW8Ne9l9FUM0Zzr+5Taw=)
                          4: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: dioQduQ3RsGsXcF2fvN/JbmBfWyTlyf1+yoiwspl0zk=)
                          5: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: 2RFM120BK2x+ijcQiQQFduH+zaBhpG83qp16mYO7vG8=)
                          6: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: JVFHSqzVsgqy22qJbtrvNEyG8V0kzJkVnI2PAp64X94=)
                          7: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: 6p/psu31RGuXqE6YHMjc6bPnb3I31ZolmJJogTJhucY=)
                          8: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: 1Xw8ZcmhMagcycv6RIC2nnyQd9l0Ss7PGPzzLHbvNJI=)
                          9: 1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl (hash: P2ECwhFTDzR5IDToMcZL06UQ02sz0snR3pIF2tHLxjM=)
                          10: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: MAqDcQzKsQ7AU2jwczXNTkd2KAp2lSq7hYrm+mz5mbc=)
                          11: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: MRJCCb3fXe1PqSBXHNtZ+I4+QxuZf0FtTfzRiqIoYFg=)
                          12: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: uwXs1B2vENHoFPXzX6L0y7II8AePyfh6rZF6h22vRrA=)
                          13: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: 99QIwzzuN/Z0qUxV3WwSxtLTN6hnTR8mitqHt39iQf4=)
                          14: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: NsEUBjEg4RvBD7zitmsA9BrE/lRHRKsCpJUJlO5IUjE=)
                          15: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: 8bY1t1WWG1ycFYAnepDoYlqaZY4Ueot1JfgflfLyzZA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl
                          rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 02:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7c:f4:22:81:e3:4e:da:07:95:a1:a7:eb:5c:cf:d9:37:23:b2:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A4531574FEFFD9E221DE0D82CE657853E4CEE3A
        Validity
            Not Before: Sep 21 23:25:52 2026 GMT
            Not After : Sep 23 02:07:52 2026 GMT
        Subject: CN=681F27DB2F59CF3CE35D6B26A169C943F636E3CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7e:09:13:7c:35:f2:4c:7c:e0:75:37:38:17:
                    27:9e:82:58:da:fc:c5:80:e0:1f:da:b6:9b:77:6a:
                    5d:9f:48:46:31:36:e2:e3:7d:3b:ee:c7:dc:43:4e:
                    fe:20:51:b7:c8:e3:5e:ee:60:b6:6f:a3:aa:d7:44:
                    97:af:f2:23:78:15:6f:52:4b:2d:cd:4e:51:60:c3:
                    ec:1a:82:8f:e1:31:47:1f:7d:2d:66:83:0f:24:3f:
                    fb:f1:12:92:30:3d:00:38:c3:e7:f6:68:a1:bf:ec:
                    ef:ce:11:17:ad:3b:d7:62:e8:90:d6:cc:5f:68:37:
                    2b:7f:7c:85:bc:ab:83:72:55:91:cc:3c:01:fa:3f:
                    4e:74:d2:db:c4:8f:9a:3c:9f:81:91:be:42:46:7b:
                    d6:68:bd:ce:42:8c:01:4d:e3:67:56:53:03:7d:d7:
                    2e:02:71:62:95:7e:d2:e6:95:3d:6e:58:d0:ec:6a:
                    15:b6:22:98:50:fd:80:3d:f8:47:da:8a:a9:c1:18:
                    ff:95:15:09:e6:a2:51:26:06:69:49:4a:29:a9:1d:
                    de:35:46:c8:2a:4c:44:5b:6e:cf:b3:03:a5:60:c5:
                    75:ac:9f:d0:94:71:6c:be:6f:05:bf:e5:6f:2c:f8:
                    1e:59:f6:7c:ef:27:9a:f7:0d:a0:b6:5d:9b:b8:6c:
                    d0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1F:27:DB:2F:59:CF:3C:E3:5D:6B:26:A1:69:C9:43:F6:36:E3:CE
            X509v3 Authority Key Identifier:
                keyid:1A:45:31:57:4F:EF:FD:9E:22:1D:E0:D8:2C:E6:57:85:3E:4C:EE:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e8:27:36:49:39:15:cc:cf:59:a6:7f:21:a9:59:5d:5f:72:
         02:29:5a:c9:81:20:b1:22:2c:95:3f:d6:05:73:3e:5c:fc:b5:
         6d:3f:8f:df:c5:b4:da:af:c5:0f:1e:2e:ca:81:b7:23:08:94:
         74:f1:63:7f:71:61:34:5d:5b:a8:e7:2f:8d:e4:c6:bb:fc:0c:
         97:3e:2f:06:ce:5d:82:86:42:d7:dc:ae:f5:ef:49:ca:4b:4c:
         90:6d:e2:bd:a3:2d:21:cf:f9:65:31:36:b5:a0:92:6d:df:d2:
         1d:c8:a3:68:10:f8:5f:1e:ab:2d:a4:9e:4c:7b:93:39:2c:db:
         48:31:4f:07:5b:2a:db:0f:ad:d8:57:4c:f5:88:c3:2f:1c:fb:
         7d:2a:be:22:c5:f6:a9:a6:7b:f3:a5:79:70:cd:8e:b2:87:98:
         d6:8b:47:48:0a:3b:e6:bc:ca:19:5e:85:b3:00:fe:d1:32:2d:
         c7:3d:c9:36:37:53:bd:b5:f4:85:93:15:5e:94:f0:d7:75:96:
         32:72:c8:ae:f2:db:7e:39:e4:25:d6:09:03:c1:ca:fc:d4:08:
         a4:bd:71:63:39:9e:40:6c:ff:df:0a:18:cb:86:82:29:42:ab:
         0f:40:c7:cb:b9:82:33:3c:11:ab:fb:53:80:19:da:eb:ef:78:
         d4:02:00:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:04:11 2026 by rpki-client