Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/E594107BADC6C8DBED3F533855138968247BB6AF.mft
File:                     E594107BADC6C8DBED3F533855138968247BB6AF.mft (raw, json)
Hash identifier:          ZKSpjyr6RNNI2ltvsmb8G5RDcL39WLUuC39odFlWTAY=
Subject key identifier:   DF:F7:1B:43:B3:DB:B7:D7:D3:89:FF:A3:DC:03:82:98:35:3F:44:C0
Authority key identifier: E5:94:10:7B:AD:C6:C8:DB:ED:3F:53:38:55:13:89:68:24:7B:B6:AF
Certificate issuer:       /CN=E594107BADC6C8DBED3F533855138968247BB6AF
Certificate serial:       04F2837D1BB17158CE996DC38C7362B579E10AB2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E594107BADC6C8DBED3F533855138968247BB6AF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/E594107BADC6C8DBED3F533855138968247BB6AF.mft
Manifest number:          C0
Signing time:             Tue 22 Sep 2026 17:48:33 +0000
Manifest this update:     Tue 22 Sep 2026 17:43:33 +0000
Manifest next update:     Wed 23 Sep 2026 19:55:33 +0000
Files and hashes:         1: E594107BADC6C8DBED3F533855138968247BB6AF.crl (hash: Fm+K0CCwr68HPzVo6fN32oqMmJyBwK6P2RAczZ1wrx8=)
                          2: 3135372e32302e3135362e302f32332d3234203d3e20313532343131.roa (hash: EwbiWmhldgu2k+5LdUuHuGepn6bmBxTKHuu9s+kl8SY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/E594107BADC6C8DBED3F533855138968247BB6AF.crl
                          rsync://rpki-rsync.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/E594107BADC6C8DBED3F533855138968247BB6AF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E594107BADC6C8DBED3F533855138968247BB6AF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 15:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f2:83:7d:1b:b1:71:58:ce:99:6d:c3:8c:73:62:b5:79:e1:0a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E594107BADC6C8DBED3F533855138968247BB6AF
        Validity
            Not Before: Sep 22 17:43:33 2026 GMT
            Not After : Sep 23 19:55:33 2026 GMT
        Subject: CN=DFF71B43B3DBB7D7D389FFA3DC038298353F44C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ba:06:76:82:e4:7c:a1:c6:a8:7b:04:ff:11:
                    73:95:ed:60:3b:e0:ce:e7:4b:80:2b:50:4b:a6:86:
                    7a:40:0b:b6:68:8d:51:28:85:51:33:70:a1:2e:68:
                    76:25:7f:7b:13:3e:19:db:0b:46:79:b1:cf:55:71:
                    1a:b6:55:02:b1:86:ad:37:b9:43:9f:4b:22:1b:04:
                    db:e4:db:e8:40:4f:77:a8:c1:6d:ab:59:6b:2f:32:
                    99:0e:7e:0b:4a:ee:af:f5:00:bd:f8:27:32:77:94:
                    d3:e6:a3:d2:95:72:25:42:e3:7d:64:af:55:75:4a:
                    25:ad:39:0b:f8:e6:d7:e3:ec:77:93:bc:0e:83:ed:
                    25:44:a4:02:21:0b:9b:94:70:2c:9e:5d:87:85:33:
                    4d:99:d7:71:5c:42:22:42:f9:dd:b7:a9:94:03:47:
                    17:92:75:fa:fe:0c:5b:6f:ce:b0:a2:74:37:71:c7:
                    4d:02:65:00:48:7f:be:63:bd:82:e1:82:35:5d:bf:
                    6c:37:e8:f8:de:3f:cb:c1:94:e1:6c:09:de:1e:7d:
                    77:6b:a4:3a:b6:c6:f4:6e:3f:68:09:5c:23:ef:9d:
                    81:e2:fb:b8:95:2e:09:1b:99:b5:d6:1e:b4:c8:4b:
                    df:8c:6e:f2:d0:a1:bf:9a:fe:a9:ea:30:25:8e:73:
                    62:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F7:1B:43:B3:DB:B7:D7:D3:89:FF:A3:DC:03:82:98:35:3F:44:C0
            X509v3 Authority Key Identifier:
                keyid:E5:94:10:7B:AD:C6:C8:DB:ED:3F:53:38:55:13:89:68:24:7B:B6:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/E594107BADC6C8DBED3F533855138968247BB6AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E594107BADC6C8DBED3F533855138968247BB6AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/E594107BADC6C8DBED3F533855138968247BB6AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:81:88:ef:11:c7:4f:20:6b:32:b2:6a:f6:ae:61:c8:f0:d1:
         c8:a0:eb:fe:01:fa:85:1a:fc:87:89:05:64:c3:48:93:75:68:
         49:6c:f3:dd:ee:c0:41:6e:ab:e6:4c:07:df:3a:4c:b6:0c:db:
         71:19:eb:48:44:aa:e3:75:a0:26:74:26:91:23:26:85:3b:87:
         1b:c6:6e:8a:86:4f:e4:bb:fc:c9:4b:03:a3:84:02:ce:92:71:
         43:06:13:3c:8e:56:24:92:ff:d0:a0:41:99:f4:3b:84:e4:85:
         9f:60:2d:67:9f:5b:25:d0:e6:d1:cf:94:9e:cd:7a:0c:62:b6:
         89:2a:ba:16:8f:4a:1b:cc:89:20:f3:b1:51:a5:26:c9:6e:fc:
         bb:86:fc:f9:ec:8f:21:7c:68:ef:9c:cd:4e:fb:82:cc:f6:94:
         f0:88:04:11:69:19:e7:ac:1e:20:5d:a4:18:4d:18:f0:bc:6c:
         07:ea:92:04:a1:23:a0:75:ea:92:ee:86:17:40:49:ba:02:9d:
         b4:39:4c:19:b7:12:69:66:6f:f5:c4:eb:75:55:d5:dd:fe:2f:
         18:d9:0e:9b:79:02:8b:af:2b:9c:4a:d8:a2:41:5d:1a:7f:f8:
         30:02:65:fb:fb:49:20:c8:8e:97:27:90:bb:1e:82:c8:2e:a6:
         44:df:f7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:23:56 2026 by rpki-client