Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft
File:                     101B41766786F11711DBC574AEB99665E513B990.mft (raw, json)
Hash identifier:          rFkCkmYlz7d5FssFb/oC6dV2h3gx8tw/MEAHOzbH+jo=
Subject key identifier:   CF:F6:B1:50:F0:6D:DE:2E:56:F2:A0:E8:A5:FF:2C:BC:8B:09:7B:04
Authority key identifier: 10:1B:41:76:67:86:F1:17:11:DB:C5:74:AE:B9:96:65:E5:13:B9:90
Certificate issuer:       /CN=101B41766786F11711DBC574AEB99665E513B990
Certificate serial:       7082A894A82B5F2CB16BEC74A136C50230AB0C6A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101B41766786F11711DBC574AEB99665E513B990.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft
Manifest number:          CE
Signing time:             Sun 27 Sep 2026 07:49:11 +0000
Manifest this update:     Sun 27 Sep 2026 07:44:11 +0000
Manifest next update:     Mon 28 Sep 2026 09:25:11 +0000
Files and hashes:         1: 3130332e3138352e35332e302f32342d3234203d3e20313339343536.roa (hash: 2/M+qS2XEYEy3c1p2wHiQjRhDZvNqtKYPCMKrPPfKqM=)
                          2: 3130332e3138352e35322e302f32332d3233203d3e203538383230.roa (hash: MocOMZvXF2Of3ZlngJI7mWGFsuJURJzlMQVT/Y0KRCw=)
                          3: 101B41766786F11711DBC574AEB99665E513B990.crl (hash: I7iCTjKOBEWDQLR+8J8HRZ7aZHRQSpHtOeVFmD3v54o=)
                          4: 3130332e3138352e35322e302f32342d3234203d3e20313339343536.roa (hash: fdgYg9Q61h2vrVunApThGuv0SA3lWQltGycDEahVHCE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.crl
                          rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101B41766786F11711DBC574AEB99665E513B990.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:82:a8:94:a8:2b:5f:2c:b1:6b:ec:74:a1:36:c5:02:30:ab:0c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101B41766786F11711DBC574AEB99665E513B990
        Validity
            Not Before: Sep 27 07:44:11 2026 GMT
            Not After : Sep 28 09:25:11 2026 GMT
        Subject: CN=CFF6B150F06DDE2E56F2A0E8A5FF2CBC8B097B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:18:d1:43:9e:c1:ed:09:b2:d3:c5:91:9f:e6:
                    2e:2e:c2:7a:3c:66:9c:12:14:20:e0:73:95:f3:03:
                    7e:ae:e9:ec:f4:fe:66:23:bc:ed:d0:9d:db:a6:1b:
                    b4:56:d9:b7:7c:d6:84:fa:a4:95:bb:9f:65:6f:10:
                    a1:2f:e4:43:e1:7f:81:5d:e1:ac:ca:31:ab:9a:52:
                    2e:36:e8:35:8a:4a:22:63:b0:34:22:c8:a6:9d:e0:
                    ec:8d:63:a1:58:1b:72:d4:8c:5f:da:6f:be:e5:c8:
                    01:bd:58:51:76:f8:fe:dd:24:7f:ad:98:98:8c:0f:
                    ed:f5:2a:02:b4:b3:d6:17:81:92:48:e5:ec:79:2c:
                    9d:89:a6:43:55:f3:da:0d:4f:59:3e:9c:8f:a6:fd:
                    0d:d3:ff:38:74:84:51:c8:09:6b:92:28:9d:0e:96:
                    44:fe:6a:d6:d2:0b:7a:26:e5:61:45:cf:26:4a:e4:
                    73:e9:77:79:0a:3b:a8:c7:3a:16:29:dd:1b:6e:ee:
                    1d:93:f8:6d:b5:85:90:24:22:ba:f6:e2:9f:51:8f:
                    8d:d2:23:fa:0c:b2:c4:c4:a4:f8:09:7b:ff:c7:2d:
                    0c:80:42:87:fb:1c:85:7c:ee:20:4f:ac:2d:6e:64:
                    6c:b6:6d:f1:a7:3f:c1:be:8a:33:4a:1d:e0:b6:7a:
                    34:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F6:B1:50:F0:6D:DE:2E:56:F2:A0:E8:A5:FF:2C:BC:8B:09:7B:04
            X509v3 Authority Key Identifier:
                keyid:10:1B:41:76:67:86:F1:17:11:DB:C5:74:AE:B9:96:65:E5:13:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101B41766786F11711DBC574AEB99665E513B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f4:29:0a:1e:cc:bd:ce:18:8a:87:9f:88:b2:ce:b0:63:ba:
         a1:19:f3:3a:ef:91:a8:7d:0e:9d:ab:92:51:c0:0c:ec:55:11:
         6d:0f:87:72:be:1b:e1:ea:61:f1:70:c5:98:03:3e:df:b8:88:
         37:31:5a:17:14:b0:22:aa:85:4f:6f:ef:c9:77:b2:01:ab:0d:
         32:a5:a8:d1:ad:f1:57:9e:82:e6:84:21:27:76:e2:53:ac:2e:
         18:fa:73:e4:9e:77:1e:fb:1a:d1:d3:15:09:ed:9d:19:75:91:
         e7:32:33:66:13:89:e2:c4:43:61:14:7c:59:42:87:c3:2b:c7:
         48:54:bd:c9:9e:fd:9f:3c:ec:da:d7:20:6a:c3:b2:04:b2:c8:
         0e:c1:22:d4:c6:f2:1e:48:b0:a0:9d:ea:dc:e9:43:50:59:fb:
         58:6c:90:c9:13:3f:f2:e3:2a:c2:db:e7:df:91:2b:57:36:29:
         ce:aa:3e:9f:70:fb:49:84:4a:a1:5a:21:02:61:8b:c3:ea:64:
         ce:96:d9:19:66:77:5c:2d:39:e8:5b:3d:60:5d:6e:6c:cd:ed:
         65:c2:71:c8:9f:aa:83:b6:a5:2f:d1:7d:7d:20:24:d7:0c:e7:
         b0:17:c9:eb:ac:a2:ea:1c:27:d5:95:8e:39:32:cb:ab:70:c7:
         63:7a:5d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:03:34 2026 by rpki-client