Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft
File:                     7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft (raw, json)
Hash identifier:          NTjEeRVPuQbxfU88yloua9zKrN+hnI3JvXNW0P4OY80=
Subject key identifier:   C7:D1:B9:CA:D3:BC:8C:20:A6:80:DB:3F:2C:B4:7B:05:17:DD:16:7D
Authority key identifier: 7C:58:06:FF:2C:62:AF:2C:C9:65:E8:88:A4:5E:C4:BA:4F:BF:26:C2
Certificate issuer:       /CN=7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2
Certificate serial:       75B0319141DE5D3EAFF9E610C9A50860F4D61C63
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft
Manifest number:          BC
Signing time:             Mon 21 Sep 2026 12:16:27 +0000
Manifest this update:     Mon 21 Sep 2026 12:11:27 +0000
Manifest next update:     Tue 22 Sep 2026 13:48:27 +0000
Files and hashes:         1: 3130332e34312e3138382e302f32322d3234203d3e203538333937.roa (hash: KuY5wEri7u4war8JSwekkctUjVu/WQ12XivwVmrP91A=)
                          2: 7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.crl (hash: tGRFYnhbJcGojNu0eNG8kXCZrpuR3ALtQGtNbY26oww=)
                          3: 3131372e35332e34342e302f32322d3234203d3e203538333937.roa (hash: WWLsIusOSv+8Jaml9M27MqcNs+gTxLH2Htlcij04EDM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.crl
                          rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b0:31:91:41:de:5d:3e:af:f9:e6:10:c9:a5:08:60:f4:d6:1c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2
        Validity
            Not Before: Sep 21 12:11:27 2026 GMT
            Not After : Sep 22 13:48:27 2026 GMT
        Subject: CN=C7D1B9CAD3BC8C20A680DB3F2CB47B0517DD167D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9b:43:88:a3:94:5b:b4:30:df:37:fd:05:a7:
                    68:e6:16:81:48:ea:bf:ea:e5:93:ba:93:9b:fe:7a:
                    80:d8:5d:d1:ea:a0:36:94:ef:1c:0a:58:2b:98:44:
                    b0:9f:0b:b2:4b:a5:b5:c1:48:d6:49:53:bb:75:95:
                    ac:80:7e:7f:c5:e3:f2:99:c5:02:73:11:90:8b:d0:
                    b3:fa:fb:a5:27:63:00:60:16:10:82:db:bf:8e:d8:
                    d4:0a:09:b2:96:86:3e:df:1d:84:ce:9b:97:32:15:
                    7d:97:bc:56:c0:89:b1:03:76:4d:da:5e:77:a4:7c:
                    60:ff:97:b9:90:6f:41:2b:3b:43:3a:71:dd:47:96:
                    3f:ea:42:d1:3d:5f:3a:4a:85:f1:f0:e4:27:c7:72:
                    68:44:d4:40:f0:a7:b3:6a:36:25:8e:09:0f:13:76:
                    1e:d0:ea:da:f1:17:88:0a:e9:9f:64:16:c8:66:b2:
                    2c:0d:b9:3e:63:a1:d3:32:b8:68:52:f4:48:b6:28:
                    1c:52:de:f2:ee:de:9a:92:f0:ee:ee:8b:12:0a:31:
                    e0:19:09:d8:02:b3:6d:91:40:35:ff:1d:9a:d3:90:
                    6c:e1:54:47:0e:8a:40:74:92:9d:5e:83:f1:03:cc:
                    fb:80:d6:83:7f:2f:5f:dc:9e:41:ab:f7:dd:0a:4a:
                    5a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D1:B9:CA:D3:BC:8C:20:A6:80:DB:3F:2C:B4:7B:05:17:DD:16:7D
            X509v3 Authority Key Identifier:
                keyid:7C:58:06:FF:2C:62:AF:2C:C9:65:E8:88:A4:5E:C4:BA:4F:BF:26:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:6a:84:75:6f:5e:37:91:ef:42:da:38:88:b7:d9:f7:df:3c:
         cd:b6:1b:aa:41:2c:74:68:83:c9:ed:ba:fa:31:7b:71:f5:5c:
         3b:bc:96:94:8c:71:ee:f7:a9:36:c6:a4:d8:9c:d0:e7:e1:fd:
         f1:dd:90:59:57:d1:87:a1:9e:8e:ea:8d:43:5f:e8:2b:fb:3d:
         44:d5:79:1d:09:ae:28:92:c9:31:ff:69:93:20:df:f8:ae:97:
         83:a3:16:83:e4:ab:db:26:7c:f1:d1:45:f2:e5:ba:ea:a3:1a:
         65:ec:63:df:12:15:34:37:fb:78:c0:0d:f4:86:6c:10:2d:87:
         6b:4f:df:f2:92:40:9a:20:dc:c6:e7:1d:db:46:d7:c3:cd:53:
         23:df:cf:84:c4:c7:12:76:9e:59:ab:1e:ab:0d:59:2b:3b:90:
         c5:de:1d:66:21:d0:e8:07:98:66:92:81:18:36:64:a4:e6:8e:
         4e:de:49:6d:ca:5b:96:96:5a:99:0d:09:81:ec:66:3d:f1:0f:
         b6:35:f6:0c:8c:1d:f4:ac:87:39:ac:9e:89:ee:81:46:23:47:
         6f:38:d2:56:6a:5b:d5:d2:5c:86:c3:1e:3f:60:1b:f7:35:af:
         d1:32:d1:b9:bb:38:06:73:7a:92:a0:82:c6:4a:86:0a:32:f5:
         b8:0d:3b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:48:35 2026 by rpki-client