Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.mft
File:                     F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.mft (raw, json)
Hash identifier:          20sw9mHy8FTW01jhXjrhJJA+K+TLKQGg5F3nLdJR6L0=
Subject key identifier:   CF:FE:53:A7:6C:22:13:3D:F2:44:F4:54:DB:89:D5:E1:8B:EA:8C:0C
Authority key identifier: F7:E0:25:17:9C:2F:AE:7B:5C:DC:0D:2E:CA:C0:B9:58:37:B2:42:3D
Certificate issuer:       /CN=F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D
Certificate serial:       793887EA456737211046F574F2F4B8F5744308B6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.mft
Manifest number:          BC
Signing time:             Sun 20 Sep 2026 14:45:17 +0000
Manifest this update:     Sun 20 Sep 2026 14:40:17 +0000
Manifest next update:     Mon 21 Sep 2026 15:14:17 +0000
Files and hashes:         1: F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.crl (hash: zKqFIlhQ9PmUlPBBse5znsUZHhFYHRMLBcd9TrxXO04=)
                          2: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (hash: k/K1jFj/VvSwfTvq1VNLpQ0GgYuMHptjXlWEbYgtnfA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.crl
                          rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 15:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:38:87:ea:45:67:37:21:10:46:f5:74:f2:f4:b8:f5:74:43:08:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D
        Validity
            Not Before: Sep 20 14:40:17 2026 GMT
            Not After : Sep 21 15:14:17 2026 GMT
        Subject: CN=CFFE53A76C22133DF244F454DB89D5E18BEA8C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a0:21:29:e2:22:08:7e:f1:8a:3c:ac:63:c1:
                    c0:ab:68:96:be:76:58:f8:06:e2:65:e7:15:4c:97:
                    ed:93:a1:8c:82:64:d6:db:e5:f7:1d:95:8d:90:3b:
                    27:16:32:b0:85:ea:3c:e4:d6:cb:b9:9c:65:da:9c:
                    03:8d:1a:49:6f:82:c4:00:11:e5:50:3d:b5:49:07:
                    f5:73:4b:ce:9c:a7:a5:e0:00:c3:af:43:9b:d5:53:
                    0b:15:1a:93:30:d1:9c:11:69:65:d1:0e:ef:5d:a6:
                    ff:96:88:5d:b4:7e:d0:5d:bd:35:4c:8b:e8:c0:c6:
                    f5:7d:78:af:d4:28:6d:98:f0:3c:30:af:a1:1f:9d:
                    71:05:24:89:d2:ae:f4:d6:51:07:5a:24:08:a9:18:
                    e8:f0:0e:f1:ac:25:94:d5:60:6d:9f:27:1c:2f:bf:
                    58:d1:08:89:9f:65:0b:fc:d2:1e:0e:8d:e6:25:ed:
                    b9:0d:1f:19:ff:91:a1:15:d9:a4:36:44:70:b8:8e:
                    7a:dd:79:fb:97:7a:20:ec:5b:96:49:99:c3:7c:c5:
                    a3:ae:c5:58:c4:2a:28:ee:ee:cf:70:d6:a1:7f:07:
                    6e:f9:88:24:2e:46:59:1f:84:69:46:c1:15:41:ef:
                    c9:51:ef:3d:8f:41:8b:5e:14:64:95:88:2f:0f:8d:
                    79:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FE:53:A7:6C:22:13:3D:F2:44:F4:54:DB:89:D5:E1:8B:EA:8C:0C
            X509v3 Authority Key Identifier:
                keyid:F7:E0:25:17:9C:2F:AE:7B:5C:DC:0D:2E:CA:C0:B9:58:37:B2:42:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e2:e5:e3:d4:7e:70:44:b4:96:76:82:eb:61:ff:43:86:9d:
         09:c7:d9:6a:dd:29:7c:10:d3:a1:98:79:16:3d:00:10:b9:2e:
         6a:ef:44:7e:36:a3:2c:99:31:6d:42:f5:bb:75:83:d1:32:dd:
         2f:20:d0:3a:d4:2c:fc:00:b9:73:dd:c7:5d:47:46:1c:6c:89:
         76:40:fe:e7:b8:3a:66:cf:c1:19:ee:0c:8f:5d:91:6e:9b:54:
         f2:9c:cf:33:db:18:0e:97:aa:7a:fd:4a:63:fd:64:9e:b2:67:
         cf:31:f8:bd:8d:d8:9a:3e:4d:bf:a9:c1:1d:77:17:d2:06:81:
         ba:be:21:af:83:f8:5f:4f:ce:d6:db:2b:4e:a0:87:30:f5:8c:
         57:79:f0:26:63:4d:b8:85:96:40:a1:13:1d:31:a1:aa:fd:3f:
         8f:4f:cc:73:fc:ec:d1:bf:21:5a:32:78:c6:ba:31:15:0d:e3:
         82:38:1f:f1:11:44:00:e4:59:18:a5:e1:30:ee:db:0e:97:24:
         35:0b:53:70:ef:fe:dd:6a:a4:dc:7d:58:03:41:82:7a:87:6c:
         8c:59:f1:f0:8b:9c:89:64:f4:57:9c:45:43:5e:a6:ea:6e:a4:
         ef:92:c9:67:f8:a2:a3:cc:ed:98:a7:e1:bf:1e:1c:59:5c:1f:
         2a:c3:5f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:39:09 2026 by rpki-client