Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft
File:                     819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft (raw, json)
Hash identifier:          6oD9Zwtsjzjrxt1lTFKA1ysS3QN1STPu4synxwa4i28=
Subject key identifier:   D9:A8:16:17:30:59:E6:C2:39:38:24:34:0E:71:6C:89:F6:63:0C:13
Authority key identifier: 81:9B:66:89:FD:CE:BA:E5:02:AD:E7:E7:7E:A9:68:CE:EF:01:1A:D4
Certificate issuer:       /CN=819B6689FDCEBAE502ADE7E77EA968CEEF011AD4
Certificate serial:       5C41268328A78D413C7980A078E0C43634B8BC40
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 05:13:09 +0000
Manifest this update:     Mon 21 Sep 2026 05:08:09 +0000
Manifest next update:     Tue 22 Sep 2026 05:43:09 +0000
Files and hashes:         1: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: qHmMyZbiN3k/cS5UVLVJqORSDX8DOjqv/PbL7rfrzl0=)
                          2: 819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.crl (hash: fI4WA0/I4DyaIUEnp9iOW1mC1mBE3ES8SGR8ajkg4vA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.crl
                          rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:41:26:83:28:a7:8d:41:3c:79:80:a0:78:e0:c4:36:34:b8:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819B6689FDCEBAE502ADE7E77EA968CEEF011AD4
        Validity
            Not Before: Sep 21 05:08:09 2026 GMT
            Not After : Sep 22 05:43:09 2026 GMT
        Subject: CN=D9A816173059E6C2393824340E716C89F6630C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:21:36:33:f6:3f:8c:48:a9:c7:42:cd:34:ed:
                    0e:61:b3:c7:66:e6:21:64:b9:0a:4c:eb:d9:16:a8:
                    bd:dc:95:75:36:ec:0c:11:f6:76:2c:59:40:11:66:
                    b3:7c:ca:4c:54:2c:94:10:77:22:56:a9:ca:ce:55:
                    e5:e0:ea:f6:12:91:1f:c9:0d:ce:27:9d:f5:d7:9d:
                    18:ca:4e:04:a6:9d:5c:9c:83:16:71:0c:b4:bc:eb:
                    0f:46:24:53:0b:22:55:5d:ad:87:79:ba:03:1a:d5:
                    d9:02:c2:03:87:4e:c9:10:49:2a:d5:10:b2:2f:6e:
                    56:df:c2:4d:80:2a:60:8f:19:cf:d6:92:a7:0a:12:
                    99:b6:2a:d9:6c:ac:b9:27:95:36:3f:95:99:cb:9a:
                    14:f7:c3:89:ec:0e:c9:e2:cd:a7:c7:2d:75:97:6e:
                    40:35:eb:21:b0:4b:53:a3:e4:59:ac:68:28:75:80:
                    d1:f9:8e:4c:15:bb:3f:f3:0a:47:d0:ef:60:a3:9c:
                    5b:30:6b:5e:14:b3:f8:00:02:48:97:eb:30:50:47:
                    a2:b4:b3:38:f8:d4:7e:97:9c:ae:73:f9:51:8a:fb:
                    51:df:0c:02:40:0e:46:8b:81:da:8a:dd:d2:77:e1:
                    bd:10:f4:53:da:87:30:f6:5d:30:ab:b8:24:b6:00:
                    af:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A8:16:17:30:59:E6:C2:39:38:24:34:0E:71:6C:89:F6:63:0C:13
            X509v3 Authority Key Identifier:
                keyid:81:9B:66:89:FD:CE:BA:E5:02:AD:E7:E7:7E:A9:68:CE:EF:01:1A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:38:ea:d4:6d:47:82:1c:e8:67:ba:6c:da:7d:54:6d:9d:c1:
         77:2a:c7:54:23:8d:a1:b4:e6:f3:17:fc:3d:9c:48:09:61:b7:
         9c:2f:e2:55:46:8a:af:24:ed:05:29:03:00:78:7e:b7:84:ad:
         a5:28:f9:42:ea:b5:40:20:28:0e:b9:99:61:c0:59:92:5c:95:
         f5:38:fc:f3:d1:21:c4:c7:ac:53:1e:4b:02:20:20:a5:42:3e:
         8b:c2:06:6a:69:5b:65:82:51:42:92:28:92:6b:c8:82:a8:94:
         b6:ae:09:42:36:26:97:0e:c7:0a:39:d1:8c:4a:9f:9c:ad:79:
         07:7d:6f:a6:ca:14:29:45:89:69:45:21:3a:38:a3:5f:fb:5a:
         73:30:27:d2:ce:ad:fa:d6:f0:ab:ca:6f:9d:ea:28:34:a6:08:
         9d:77:fc:e3:59:2f:fd:72:c9:2c:9e:c3:95:2f:36:fb:86:bd:
         dc:04:57:07:f5:02:31:95:44:4c:6e:43:d8:8f:e8:c1:e9:16:
         76:65:9b:b1:e2:62:36:99:d4:57:94:12:4d:bd:04:8e:be:ed:
         ad:7b:ca:26:ff:48:5c:8a:b6:df:a0:50:a4:74:d7:89:bb:2c:
         30:e0:bd:66:40:8d:cf:1b:e4:6f:a8:bf:88:19:e3:49:f5:39:
         fd:41:c8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:58:13 2026 by rpki-client