Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
File:                     E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft (raw, json)
Hash identifier:          yUUkmtoR+zyM+v/T2ixPkdpPY9Mcd+O5g7oGI1e8IRI=
Subject key identifier:   3C:4E:15:48:2B:06:4F:12:6C:BE:3B:9C:C9:D8:25:67:E1:91:42:C5
Authority key identifier: E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9
Certificate issuer:       /CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
Certificate serial:       6769DEB4FD93831785BDDB550401C6B404A1844C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
Manifest number:          BE
Signing time:             Sun 20 Sep 2026 20:47:38 +0000
Manifest this update:     Sun 20 Sep 2026 20:42:38 +0000
Manifest next update:     Mon 21 Sep 2026 21:34:38 +0000
Files and hashes:         1: 3230332e38302e31342e302f32342d3234203d3e203234323034.roa (hash: 4fpWKKYBY0nnGQkJs0R+bmSKgdPRaMES9zE1728pF2E=)
                          2: 3230332e38302e31332e302f32342d3234203d3e203234323034.roa (hash: v5fNxHZnP1wOLH3moKO1JSlLZXs/nZienvrRCarDRlk=)
                          3: 3230332e38302e31302e302f32342d3234203d3e203234323034.roa (hash: 1WqLfIO26zKRMIVkfVN7TnPFzjNdo3+29X6uUFeeV7A=)
                          4: 3230332e38302e31312e302f32342d3234203d3e203234323034.roa (hash: Z8294bGV1BqnPHshmggOhT7N0D0yzpQrvHBjc8hglpQ=)
                          5: 3230332e38302e392e302f32342d3234203d3e203234323034.roa (hash: ctsdmpn5r5VUvDq4FMqshtD+HVeYmHxVfhu5eYtcuDY=)
                          6: 3230332e38302e31322e302f32342d3234203d3e203234323034.roa (hash: h2tT8uN39aiQAWcw3BdGn9c/xBwZZb5nFDTta01r+Os=)
                          7: E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl (hash: DM7bsA/Qm0+sfw8OSeC/eYEc7uBEBQqLnOmPE+JePRc=)
                          8: 323430353a386530303a3a2f33322d3332203d3e203234323034.roa (hash: sqWc0G+az7rG1OKeMlrjkBetXfc6E3+lsrE6DeDNqXY=)
                          9: 3230332e38302e382e302f32342d3234203d3e203234323034.roa (hash: 0Yyl1JFAblaXf8Yb0JCPy2SmOr5D/U6YS39l5rE81q0=)
                          10: 3230332e38302e31352e302f32342d3234203d3e203234323034.roa (hash: nN8alNrnuAC96uGmiPX7P2NYnsdlkO57xsP55iMfUwk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl
                          rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 21:34:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:69:de:b4:fd:93:83:17:85:bd:db:55:04:01:c6:b4:04:a1:84:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
        Validity
            Not Before: Sep 20 20:42:38 2026 GMT
            Not After : Sep 21 21:34:38 2026 GMT
        Subject: CN=3C4E15482B064F126CBE3B9CC9D82567E19142C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5d:28:92:fc:d1:b0:7a:54:e6:10:58:1f:32:
                    b6:0c:97:4a:2a:78:d2:df:41:65:6b:ae:9c:25:e8:
                    b3:fc:0f:25:da:8a:92:0a:60:20:ad:06:fd:f1:33:
                    05:a9:20:0b:af:e1:2a:8d:dd:66:44:0f:04:c0:48:
                    fe:e0:be:5d:c5:37:c3:9d:2a:a5:90:2c:61:f2:13:
                    2c:7e:6d:8a:f5:4a:c9:14:33:81:42:1c:4c:ea:45:
                    29:b3:d5:b2:fe:c3:bf:c9:27:e0:a1:e2:bd:6b:ce:
                    ea:d8:24:23:5f:1c:02:be:63:c0:5d:80:47:9e:76:
                    aa:f0:0e:e7:74:d1:8e:32:32:8c:6b:ec:e2:ff:31:
                    41:34:10:2e:a7:c9:b0:1d:65:2e:b6:b1:a5:ed:2f:
                    d2:e5:fb:d2:39:a8:b3:74:3d:c4:d8:d3:ff:0f:8f:
                    ee:eb:29:6c:07:44:21:d8:81:d5:01:fe:bc:0a:32:
                    a2:0a:a2:88:2a:51:bf:06:7a:07:e6:24:12:f5:72:
                    c9:4c:f1:49:4a:6a:a6:54:c1:a4:ba:5a:0f:8b:0b:
                    06:a8:ed:95:4a:47:6b:3f:e5:cd:91:cf:26:36:86:
                    08:dc:b6:1e:1b:a3:72:26:9e:5f:2c:eb:09:48:8e:
                    ff:d7:ed:49:02:ca:ce:85:cc:08:d2:54:08:35:5e:
                    32:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4E:15:48:2B:06:4F:12:6C:BE:3B:9C:C9:D8:25:67:E1:91:42:C5
            X509v3 Authority Key Identifier:
                keyid:E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:59:5b:a9:40:0c:5b:0f:7a:6f:3f:f5:d3:c4:d3:64:e8:1d:
         88:2d:8c:a1:6d:63:49:19:07:f5:ed:2d:ec:77:6e:f5:83:e9:
         62:05:25:90:af:5e:8e:fa:78:f1:cb:fe:2e:c6:b0:5c:f7:05:
         93:86:37:c1:f5:9d:59:39:9c:8c:e2:14:76:8a:82:37:cc:3a:
         ee:50:c1:f9:eb:02:03:2f:c0:26:f7:f0:f1:c5:6b:15:d3:eb:
         77:c8:48:0b:c6:5e:cd:8f:ab:aa:a4:2d:57:4a:45:0b:35:cc:
         ea:f2:1f:3d:14:db:77:07:8a:ff:ac:c6:9f:c8:62:af:d9:33:
         57:ba:eb:78:e6:d7:17:24:80:ec:cf:48:e8:6f:c8:3e:dc:4e:
         9c:76:25:9e:4b:51:36:af:26:ed:5e:9c:01:ef:4c:17:9b:9f:
         36:ed:dd:5c:a5:2d:c4:35:c2:f2:2b:e3:b8:08:84:6e:c4:15:
         0e:e6:46:41:a4:f7:37:4f:63:a1:e2:f8:71:8f:bc:c9:b5:10:
         7b:0b:fd:8f:3c:51:af:b3:73:f3:f9:b5:4d:01:3f:a3:e6:24:
         cf:74:20:df:cf:ca:df:f9:fe:e0:a8:94:5a:a5:86:ad:a3:07:
         c9:98:95:e3:50:31:cb:cc:74:42:7a:f1:4e:bb:58:3b:1e:91:
         bc:f7:aa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:10:26 2026 by rpki-client