Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/7835F7081DDA4FE045A4471EB06CBB09259803A0.mft
File:                     7835F7081DDA4FE045A4471EB06CBB09259803A0.mft (raw, json)
Hash identifier:          5gKdhIPUeFNT7lE/6vnSF6JGI5afZ4d4r9KTZMGUZIc=
Subject key identifier:   DF:6C:A2:5C:82:39:4A:A9:62:2E:1C:4D:B4:5D:D0:0F:D3:5C:28:40
Authority key identifier: 78:35:F7:08:1D:DA:4F:E0:45:A4:47:1E:B0:6C:BB:09:25:98:03:A0
Certificate issuer:       /CN=7835F7081DDA4FE045A4471EB06CBB09259803A0
Certificate serial:       11D8EEEFFDA6CF31F87859E3B0ADAD8E1C42EE59
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7835F7081DDA4FE045A4471EB06CBB09259803A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/7835F7081DDA4FE045A4471EB06CBB09259803A0.mft
Manifest number:          BF
Signing time:             Tue 22 Sep 2026 01:18:02 +0000
Manifest this update:     Tue 22 Sep 2026 01:13:02 +0000
Manifest next update:     Wed 23 Sep 2026 03:38:02 +0000
Files and hashes:         1: 3130332e3135352e3139302e302f32342d3234203d3e20313431303637.roa (hash: 5bgzqBg4VxSCd9Inageocz0jXdGq4gttaGEwc75Knv4=)
                          2: 7835F7081DDA4FE045A4471EB06CBB09259803A0.crl (hash: TP/z9afbvomqS0aKhv/B3SaUtMa4hbfPejmzlieUzOw=)
                          3: 323430363a373534303a3a2f33322d3332203d3e20313431303637.roa (hash: FYauunKANl/uJOdMm9h5JGBN5ujukRIc+0gZpC60p2I=)
                          4: 3130332e3135352e3139312e302f32342d3234203d3e20313431303637.roa (hash: uh/jFwHbr7m5vL9/Sv5J8F4TeOnWvUIQeDl9wVzPk+I=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/7835F7081DDA4FE045A4471EB06CBB09259803A0.crl
                          rsync://rpki-rsync.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/7835F7081DDA4FE045A4471EB06CBB09259803A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7835F7081DDA4FE045A4471EB06CBB09259803A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 03:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d8:ee:ef:fd:a6:cf:31:f8:78:59:e3:b0:ad:ad:8e:1c:42:ee:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7835F7081DDA4FE045A4471EB06CBB09259803A0
        Validity
            Not Before: Sep 22 01:13:02 2026 GMT
            Not After : Sep 23 03:38:02 2026 GMT
        Subject: CN=DF6CA25C82394AA9622E1C4DB45DD00FD35C2840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:45:07:48:b3:5e:e9:24:0e:b8:8e:e5:29:
                    24:d5:d2:24:5a:66:ad:cb:cd:35:45:75:a7:b8:15:
                    bd:21:05:49:d2:a2:60:bf:7c:80:cc:09:76:f5:a7:
                    71:fc:93:fc:c0:b5:0f:0e:b2:69:62:36:26:42:e7:
                    d3:2b:31:dc:0c:71:aa:b4:83:c1:56:30:f0:1b:39:
                    f3:e2:a2:e9:22:8f:8b:fe:7f:ac:11:1d:ad:a6:53:
                    a0:b6:20:ad:ce:d7:8d:f2:f0:6f:b7:c5:d4:d1:4f:
                    0b:40:c9:9b:1f:47:4c:8f:00:34:17:ba:42:56:3e:
                    54:53:92:6a:d7:e9:92:4d:3b:6d:90:4f:95:18:33:
                    e8:4f:35:b1:ac:20:2b:80:7f:23:d9:f1:34:fe:34:
                    40:21:89:bf:35:e0:d8:18:15:a7:a9:56:a0:df:69:
                    a0:2f:1d:3e:35:ae:05:45:d1:0a:3c:f6:ac:97:a4:
                    07:81:2a:de:29:0d:50:72:9d:94:06:17:25:5b:7a:
                    a9:02:be:60:ff:51:9b:ef:0e:1b:4c:11:9d:1f:de:
                    8d:21:a8:4d:f7:ff:a4:c7:e6:ec:bc:63:2e:31:52:
                    6e:ef:78:64:fe:b6:43:cd:13:c9:02:a0:87:4e:a3:
                    59:48:7f:85:58:a9:07:1a:d3:82:13:67:75:2b:2e:
                    f4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6C:A2:5C:82:39:4A:A9:62:2E:1C:4D:B4:5D:D0:0F:D3:5C:28:40
            X509v3 Authority Key Identifier:
                keyid:78:35:F7:08:1D:DA:4F:E0:45:A4:47:1E:B0:6C:BB:09:25:98:03:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/7835F7081DDA4FE045A4471EB06CBB09259803A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7835F7081DDA4FE045A4471EB06CBB09259803A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/7835F7081DDA4FE045A4471EB06CBB09259803A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a0:ca:59:0f:68:77:13:08:e3:c6:12:52:39:aa:d2:0d:7e:
         f7:3f:b7:e0:7f:94:95:3c:35:e2:76:79:fe:01:f7:68:44:14:
         d5:63:6a:e7:ab:ef:ff:80:77:7a:d8:af:0f:69:b2:be:d7:a4:
         27:4d:25:ce:f2:af:88:2d:d5:bb:2b:5f:f6:49:1d:d9:38:d4:
         8e:11:82:dd:42:f3:38:48:4d:09:5f:6f:40:a9:a2:27:d0:c9:
         00:3a:f4:98:6c:88:62:3c:5b:1d:1a:91:fd:de:b8:58:92:c6:
         26:5b:0e:1a:9d:20:88:1d:4f:e3:da:2d:6d:40:de:8c:6d:8f:
         5a:42:4d:f4:ab:7c:4c:27:01:d5:51:66:bf:7c:85:44:d9:2c:
         37:28:91:19:e6:14:49:b4:19:d3:f7:4c:57:f1:55:2b:ec:8d:
         0d:cd:23:46:f7:23:98:5c:74:d4:d1:69:e1:bb:82:5f:03:6b:
         2f:93:08:4f:88:7f:e2:5d:66:53:74:b8:3c:9a:c4:d0:7f:f6:
         d5:46:34:d3:ff:e8:21:c3:9a:93:d4:f2:48:f0:73:19:67:76:
         c6:6c:20:1a:32:dc:cc:0e:de:46:ba:c5:2d:64:cb:a8:b6:87:
         46:6a:7a:d0:e9:92:0b:d5:16:de:80:1b:2a:d9:a5:f0:8e:1c:
         d0:66:f9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:09:01 2026 by rpki-client