Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
File:                     65DBBEC678177B7159AD901A4023BA57AA4096DC.mft (raw, json)
Hash identifier:          gfh9fUjFDq7FYJKg7llmHJm9TatyWDk9aJXf2ro9wVg=
Subject key identifier:   D8:53:60:28:40:FE:7A:B2:BE:57:68:9F:27:C7:FF:1F:7D:0B:61:FB
Authority key identifier: 65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC
Certificate issuer:       /CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
Certificate serial:       78BBDB41C20A4F2D92ED97A411DA18642DF836E3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 09:33:17 +0000
Manifest this update:     Mon 21 Sep 2026 09:28:17 +0000
Manifest next update:     Tue 22 Sep 2026 12:22:17 +0000
Files and hashes:         1: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: S4EP1lFYVTju24ot1ck+7kHJylZlYJvHzPIKURDcI5k=)
                          2: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: AMuay0c5oSMPzmQyIJxb21rH75gJq04Z09sxFsI2gX8=)
                          3: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: WJ8WqvkTLbC87sRVwP0S84GR9M75HVASRazE6C4BxN8=)
                          4: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: aAelOJ+yvf4qi4zR02tVF6ytUGxSBShT/+GgUk24frk=)
                          5: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: tvyLyjFncuafaNsnPRjTIe3OmM+u2yeMnvd+JSKf+OI=)
                          6: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: uoDjto4Bon7pce7gaQoVwabXxUeeyeeN7W67OfZu0pY=)
                          7: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: Os0dOUCAo82Ro4JJGXlWsdYmgpvswgP/lGrJ/rFU8kQ=)
                          8: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: ryDBz/OArSkajCTSmWMTBuq6yxPVuRRR4FSfEXo1xKg=)
                          9: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: RES+IzVfinBoTB3WoZkBb0K0PMLwmwjFh6203Hnv7Fk=)
                          10: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: 2tjc/8qrga6+39EQjimW3zf16UfFL3aN5h4lRF828pQ=)
                          11: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: ahy9pgYJ/JRzmM8+Ec6KtXzoFXDTJf+AENe9YjQMlak=)
                          12: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: HYOwWEsyIVZXnK4eLcj02fPXUV54e21APLG1OWqeK6Y=)
                          13: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: uq0XahCuPwPF6uONqKm2eLZO4OTWzUiViXqNuFHYT+4=)
                          14: 65DBBEC678177B7159AD901A4023BA57AA4096DC.crl (hash: qeX8JoQ6Qqdh9tvHgnKrHp3QZZ30M0KTzPym5K7KHFo=)
                          15: 3130332e3135352e3138372e302f32342d3234203d3e20313534373739.roa (hash: acD4T9xX0RNOsIt+Dk7srNJFPhM3fLBMG+7sX11SPrM=)
                          16: 3130332e3135352e3138362e302f32342d3234203d3e203234313938.roa (hash: qLyqBtZOi6bzPzQ5YmenFV5BuE3tMCCGIzP66ZoAfsE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl
                          rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bb:db:41:c2:0a:4f:2d:92:ed:97:a4:11:da:18:64:2d:f8:36:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
        Validity
            Not Before: Sep 21 09:28:17 2026 GMT
            Not After : Sep 22 12:22:17 2026 GMT
        Subject: CN=D853602840FE7AB2BE57689F27C7FF1F7D0B61FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a0:24:23:90:4a:b1:3f:e7:cc:e1:bb:bc:b0:
                    50:82:08:79:e1:26:fa:59:ac:66:df:3a:0e:5c:6e:
                    19:78:71:91:61:d6:11:17:86:37:71:a0:f7:ac:e4:
                    b1:69:d5:10:82:fb:c6:81:1d:70:2d:8e:8b:3b:ff:
                    75:89:05:65:03:09:03:a2:d9:a3:b8:b0:fe:bd:93:
                    ee:11:ab:bd:5f:72:22:48:ee:12:4f:67:1c:1f:41:
                    91:69:c0:74:bf:44:7b:6d:5f:08:e0:fe:d5:6e:c2:
                    cf:90:96:59:c0:1d:bc:10:c7:bf:e7:aa:56:54:9d:
                    c6:05:36:10:cf:ed:8b:35:22:86:56:ae:29:78:7e:
                    78:80:6d:3d:72:05:b1:27:83:58:e1:9b:81:a0:c7:
                    7f:ba:cc:e0:f0:43:90:5a:9e:85:57:85:05:e7:0e:
                    a3:a4:37:17:8e:b2:d4:95:a3:d8:13:d7:b9:51:f1:
                    d1:f3:9b:73:fd:b2:32:d4:43:9e:8b:7f:54:7c:bf:
                    eb:09:7d:da:0c:5f:21:f0:f9:78:27:1b:e8:bc:1e:
                    52:c5:06:a6:31:05:50:02:a2:95:6f:a6:76:c6:7a:
                    a1:f4:7d:c9:f7:de:87:87:4f:f8:f9:0d:b8:ea:21:
                    d5:10:df:b7:92:8e:35:26:71:2f:f4:0b:43:99:84:
                    fb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:53:60:28:40:FE:7A:B2:BE:57:68:9F:27:C7:FF:1F:7D:0B:61:FB
            X509v3 Authority Key Identifier:
                keyid:65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:5d:42:e0:c3:5c:02:93:b0:d3:af:bb:ee:60:26:6c:ab:f9:
         c6:cc:89:d1:f4:3f:93:c6:01:7a:f9:87:f4:2c:5b:96:96:59:
         2e:42:57:0a:50:d5:72:8f:71:ea:ef:3d:4c:07:75:e9:0e:5d:
         ab:73:71:57:a7:fd:41:4a:d4:06:cd:92:95:19:71:1b:bc:c5:
         84:02:9c:3d:05:37:4f:f9:ca:29:8c:37:4f:63:e1:5c:31:de:
         32:af:66:a2:7e:25:23:66:1f:e8:43:c5:71:c3:13:3a:5f:8f:
         28:e6:1b:ff:bd:b5:c2:3b:55:4e:85:51:b6:73:58:6b:91:44:
         22:42:45:7f:c7:28:5a:d5:61:9f:1d:ea:62:44:44:a1:16:84:
         de:f4:cc:9a:dc:73:84:d6:ff:52:da:2c:45:5b:42:27:26:f5:
         95:20:d5:8a:aa:6f:94:ca:e0:11:2d:88:c2:a5:59:c7:5f:db:
         3e:cf:c0:7a:4a:a4:fe:4a:65:38:c7:80:9a:7a:92:a3:72:d8:
         1b:6a:ef:89:d9:d7:c2:90:6a:4d:73:5c:e1:54:7a:b8:12:4f:
         fd:bd:51:58:e4:5d:67:f2:63:00:d8:85:bd:53:73:4f:01:e5:
         e1:b8:6c:66:ed:69:0f:88:d4:f9:69:2c:7e:ee:c2:e8:a1:5c:
         bb:01:27:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:41:08 2026 by rpki-client