Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft
File:                     F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft (raw, json)
Hash identifier:          FqnXaaMyrGxmB2bp0vjq7clArI4ZM1IADv5tQ5ukvn0=
Subject key identifier:   F8:A1:A3:B8:BF:5B:15:6A:8B:A2:1C:7E:ED:27:4B:0F:EB:26:ED:4F
Authority key identifier: F4:93:B4:B7:B6:C0:93:2E:D4:59:0B:DF:81:32:9D:0E:AE:5E:EB:68
Certificate issuer:       /CN=F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68
Certificate serial:       74E518CEF3B415CC6A7C994400CC9A767F3B259D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 09:18:01 +0000
Manifest this update:     Mon 21 Sep 2026 09:13:01 +0000
Manifest next update:     Tue 22 Sep 2026 09:55:01 +0000
Files and hashes:         1: F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.crl (hash: 5DBoCEQQ9Sll7IzvZoM3j0gPCZ29W7aAqNEw2VQ4UQ0=)
                          2: 3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (hash: f3wJQDXGzu3D9hBo8GBwbAPITCCR387RhleY4wa8/xI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.crl
                          rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 09:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e5:18:ce:f3:b4:15:cc:6a:7c:99:44:00:cc:9a:76:7f:3b:25:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68
        Validity
            Not Before: Sep 21 09:13:01 2026 GMT
            Not After : Sep 22 09:55:01 2026 GMT
        Subject: CN=F8A1A3B8BF5B156A8BA21C7EED274B0FEB26ED4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:90:dc:f5:4a:e6:6e:cf:da:22:be:3a:0a:1f:
                    a3:ed:63:59:92:cc:0d:8f:47:52:44:17:60:83:b8:
                    15:02:22:34:bb:cd:c2:93:e1:b9:87:26:b7:18:70:
                    26:10:d1:34:14:71:f0:4b:3c:c6:58:40:a9:d3:68:
                    b4:b5:a2:e8:a1:bf:ff:4f:f8:41:31:ee:53:61:f6:
                    b6:57:83:df:70:ba:93:70:81:42:fd:09:1d:3d:ef:
                    6c:fc:9b:5c:d4:3f:43:89:58:1d:e7:93:d5:5a:e3:
                    64:14:3a:50:9d:ca:14:f4:5a:58:67:f7:49:a2:53:
                    9d:ec:23:44:cc:91:c5:aa:12:1a:7f:ed:e1:c7:99:
                    a4:c3:2f:af:c3:3b:69:71:3d:10:61:cf:bf:f4:72:
                    b8:0f:13:c9:0d:87:61:67:14:47:68:25:a0:de:e7:
                    53:75:b5:e2:23:72:81:c4:db:ef:99:b8:2a:d2:6f:
                    d8:ea:2f:87:7e:ba:35:ce:1a:e8:2d:3c:92:b9:d7:
                    a3:2f:fa:98:5a:9c:c2:a8:47:f7:c7:75:c7:d4:71:
                    d7:1a:2f:db:1e:74:6b:22:38:e9:a9:b2:9a:e3:1e:
                    6a:1c:4a:49:ac:6e:1c:2e:e4:61:d6:9b:f4:4a:69:
                    fa:7a:1f:c9:96:bd:15:f7:0b:6b:1e:b4:84:42:b3:
                    87:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A1:A3:B8:BF:5B:15:6A:8B:A2:1C:7E:ED:27:4B:0F:EB:26:ED:4F
            X509v3 Authority Key Identifier:
                keyid:F4:93:B4:B7:B6:C0:93:2E:D4:59:0B:DF:81:32:9D:0E:AE:5E:EB:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:41:29:d9:6e:83:5a:05:41:78:1f:78:53:ef:7c:4f:02:b8:
         9a:01:99:88:ae:80:e8:25:de:c5:f6:39:76:1c:6a:f3:00:ab:
         1c:84:8c:25:eb:13:45:25:c4:cc:6a:ce:cc:dc:a6:d2:6c:4f:
         6c:6d:12:8b:64:0a:f8:e5:71:02:0f:ad:0b:bb:93:de:5e:92:
         8c:b8:84:62:7d:cd:d7:55:d9:10:34:33:fc:6e:46:3c:40:e0:
         33:9b:a5:08:d7:af:72:3c:77:d9:ee:7a:9a:d1:a9:8c:25:4f:
         53:b1:f8:99:be:67:e2:69:5f:64:b7:b3:ac:76:91:d0:5d:c6:
         4d:3e:c2:0a:4f:65:6e:88:49:8b:5b:e3:6f:54:99:b0:40:20:
         08:7b:b2:cf:ba:9c:d2:c6:c4:12:48:46:19:ea:95:fa:f5:7a:
         bc:00:6a:05:09:03:8e:11:2b:d8:72:b8:e7:ee:2d:1d:95:07:
         8c:12:9e:a8:84:20:8f:e1:02:b6:af:eb:fa:8b:46:1a:48:e7:
         73:a1:44:92:a4:da:d9:21:98:09:f9:25:66:8c:7c:1f:95:df:
         c3:d3:e2:d6:d5:3f:3e:c9:90:c0:a4:dd:fc:ab:56:42:cf:35:
         13:29:20:80:96:b7:ea:c0:66:e3:26:77:8b:44:d9:94:42:54:
         fb:56:aa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:25:25 2026 by rpki-client