Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft
File:                     BD49AA627797B2AA85CD3D0B2176243D6B624462.mft (raw, json)
Hash identifier:          7o1Ho7AjhAeL7HfnNfLeiDDO+5w57fCBaat5v79SPrc=
Subject key identifier:   CC:CE:AC:20:D4:44:62:E3:16:4B:02:C9:A9:4E:B5:56:30:C6:C0:95
Authority key identifier: BD:49:AA:62:77:97:B2:AA:85:CD:3D:0B:21:76:24:3D:6B:62:44:62
Certificate issuer:       /CN=BD49AA627797B2AA85CD3D0B2176243D6B624462
Certificate serial:       493FE3814620CE46C0D4C127D4F40D35C1FD0EC3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft
Manifest number:          BD
Signing time:             Mon 21 Sep 2026 05:02:54 +0000
Manifest this update:     Mon 21 Sep 2026 04:57:54 +0000
Manifest next update:     Tue 22 Sep 2026 07:24:54 +0000
Files and hashes:         1: BD49AA627797B2AA85CD3D0B2176243D6B624462.crl (hash: oW9Nsl0iydrPNuCo+Bl8Xkzf3wlH/T2wkIlKeqaTH5U=)
                          2: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (hash: KRxP1QVR72dMNAQENQZE70vpWpEv6vQ6dhAVnSqGThE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.crl
                          rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3f:e3:81:46:20:ce:46:c0:d4:c1:27:d4:f4:0d:35:c1:fd:0e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD49AA627797B2AA85CD3D0B2176243D6B624462
        Validity
            Not Before: Sep 21 04:57:54 2026 GMT
            Not After : Sep 22 07:24:54 2026 GMT
        Subject: CN=CCCEAC20D44462E3164B02C9A94EB55630C6C095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fc:a4:aa:a2:43:48:98:79:c8:b3:9f:44:88:
                    13:a0:a9:19:c9:f5:d7:f9:17:a5:f5:df:86:22:b2:
                    57:ad:38:d8:64:2c:e2:0b:27:6a:9f:6f:5b:77:0b:
                    c3:be:96:c9:97:fd:d1:bf:37:8a:d6:08:01:66:0c:
                    fc:24:2a:45:71:54:d5:f4:76:cf:90:aa:4c:ab:58:
                    52:77:0b:24:eb:2a:f9:b5:83:03:c0:62:b3:ff:d0:
                    2d:63:0e:72:9d:e6:3a:6d:49:6a:88:c1:18:9d:da:
                    e1:3d:0c:75:89:0d:b8:c7:bc:1d:a2:21:2e:a0:72:
                    89:86:22:aa:96:a5:25:db:93:3c:11:af:96:e2:31:
                    e0:96:66:01:10:ec:a0:ca:11:43:bb:05:b0:5a:88:
                    62:42:0f:80:b2:0b:ad:06:78:da:b2:f6:53:f7:5f:
                    0a:8d:50:6c:44:39:36:59:ff:a8:0f:c6:3d:25:c3:
                    b2:07:28:df:31:73:e9:23:9c:67:a3:52:d9:c2:3c:
                    eb:ea:89:e1:1c:20:a3:6b:7f:80:80:77:58:4e:e8:
                    04:08:6a:86:ec:12:7a:2e:79:3f:c0:fa:19:55:ee:
                    04:3f:dd:15:06:f1:ea:ab:64:47:e5:45:3b:a9:e6:
                    5f:19:ac:35:de:34:58:b5:32:49:f5:5f:35:fd:fa:
                    52:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CE:AC:20:D4:44:62:E3:16:4B:02:C9:A9:4E:B5:56:30:C6:C0:95
            X509v3 Authority Key Identifier:
                keyid:BD:49:AA:62:77:97:B2:AA:85:CD:3D:0B:21:76:24:3D:6B:62:44:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:6b:3e:60:17:ee:35:e7:6a:8d:cf:df:f5:69:cd:24:df:13:
         f0:e4:f7:97:6f:5c:9e:7a:7b:f3:4c:ce:26:fd:46:3b:c5:98:
         2b:ea:79:5f:8d:4f:dd:d9:a2:c7:fc:a7:29:a4:ee:cd:48:10:
         6b:a8:d9:e2:ed:99:b0:d1:c0:02:dc:01:d1:93:64:33:d8:7c:
         07:26:2d:72:c5:0c:fd:60:94:50:58:7e:3d:6c:96:69:44:2f:
         a8:83:c9:f9:07:05:7a:6e:d0:75:cc:eb:f4:23:c4:3d:6b:41:
         84:de:39:14:5a:19:da:f3:93:43:4e:4f:e5:f6:82:e6:9a:9d:
         4a:f6:0d:30:4b:90:d0:ed:7e:74:fe:d8:42:9d:fe:89:23:13:
         d4:43:69:31:cb:7a:91:99:b2:ea:2c:d0:48:83:4a:4d:5f:be:
         8d:c2:e9:bc:30:1e:29:f1:9a:f7:fb:75:81:bc:0f:48:09:0b:
         22:ac:40:10:fc:35:20:e1:54:f1:89:62:1a:f4:b0:fa:2d:7d:
         93:33:8c:f5:96:d9:d7:0e:bf:00:ee:b4:4c:de:4a:0e:4f:20:
         50:0c:76:54:47:d7:ca:65:3d:e6:3d:45:bb:b0:79:ee:3c:5b:
         df:d1:b5:e7:1e:7d:35:94:a5:86:32:1f:ff:08:91:d4:d7:7d:
         67:5a:64:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:14:34 2026 by rpki-client