Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
File:                     1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft (raw, json)
Hash identifier:          AkwvV8UMCtSowLsU/F0EPB3kW7pHAbriG0S55hjv794=
Subject key identifier:   53:DB:75:81:9D:4E:9B:43:24:90:48:D8:EE:19:48:85:31:B9:87:9D
Authority key identifier: 1D:4E:21:B5:B0:6F:E9:A0:46:43:A7:02:C7:2B:96:16:D4:50:DE:8E
Certificate issuer:       /CN=1D4E21B5B06FE9A04643A702C72B9616D450DE8E
Certificate serial:       3533811F125710C6DCCED953F36451562F4A814E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
Manifest number:          D4
Signing time:             Thu 08 Oct 2026 00:06:47 +0000
Manifest this update:     Thu 08 Oct 2026 00:01:47 +0000
Manifest next update:     Fri 09 Oct 2026 01:46:47 +0000
Files and hashes:         1: 1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl (hash: vApM05S24U/+thsra+LEvUCVcX7UfoQTq+6OEAVlOIA=)
                          2: 3130332e3232382e31382e302f32342d3234203d3e20313530393835.roa (hash: SYMIAQW6lQfm+rZplODVm3xwEprXIfjqtxhwRoNnM10=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl
                          rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 01:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:33:81:1f:12:57:10:c6:dc:ce:d9:53:f3:64:51:56:2f:4a:81:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4E21B5B06FE9A04643A702C72B9616D450DE8E
        Validity
            Not Before: Oct  8 00:01:47 2026 GMT
            Not After : Oct  9 01:46:47 2026 GMT
        Subject: CN=53DB75819D4E9B43249048D8EE19488531B9879D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:f5:5a:39:6f:a2:30:28:8b:b5:7a:f1:da:
                    ed:82:83:bc:56:68:0e:ec:a0:0c:7c:bf:d0:9a:02:
                    ed:57:8b:21:a0:b1:c4:85:6d:f9:5f:44:e2:2f:4e:
                    cb:5a:d0:00:69:81:10:c8:79:f2:4a:22:4d:ac:35:
                    93:b5:05:a5:50:53:20:5f:79:8b:0d:a3:96:f0:ac:
                    00:8a:40:0e:14:ab:1d:39:14:8b:02:fa:9d:a2:70:
                    0d:99:a8:6a:82:1c:91:3d:9f:c9:03:9f:34:99:31:
                    87:6c:ca:87:2e:78:4f:0d:22:c1:82:22:1b:e5:5e:
                    db:b2:87:cc:ba:c5:3d:96:b1:6f:f1:13:7f:63:6f:
                    c3:3c:d9:de:c3:7e:26:73:94:db:2c:1f:9c:45:12:
                    e9:2f:a8:9f:d5:91:ac:53:e0:4e:c4:91:6e:8b:06:
                    22:e8:a4:9e:5b:97:8d:92:25:23:5f:a7:2d:5d:f8:
                    2e:b0:7a:88:96:16:c9:77:95:b0:66:e7:ec:83:a1:
                    31:a0:3c:a3:26:65:8e:b5:83:7a:d8:74:b8:ca:fa:
                    b6:6a:d6:30:f0:c8:a2:b4:e1:fb:8b:ae:26:76:42:
                    7d:98:d0:7c:d5:d7:eb:a9:9e:87:c0:a0:be:be:3c:
                    7a:2c:1e:fc:9c:f8:25:58:1f:61:b5:f5:17:aa:57:
                    ea:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DB:75:81:9D:4E:9B:43:24:90:48:D8:EE:19:48:85:31:B9:87:9D
            X509v3 Authority Key Identifier:
                keyid:1D:4E:21:B5:B0:6F:E9:A0:46:43:A7:02:C7:2B:96:16:D4:50:DE:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:68:ca:d8:ef:3c:d2:38:86:72:77:c0:bb:c1:98:e9:0d:17:
         9e:c5:a7:64:cc:06:40:dc:c8:49:4a:ae:1e:d2:9a:a3:df:b4:
         3c:c9:55:8c:58:22:5b:c8:17:84:85:81:5e:70:7a:98:b0:09:
         fb:3b:23:ad:76:79:ab:04:40:c1:a8:34:44:8c:be:79:98:28:
         ee:67:30:04:29:c9:85:a6:66:82:0b:26:12:bc:ad:21:80:51:
         90:c7:f3:36:c0:8e:e7:de:29:bc:b0:f4:f8:9c:6b:ea:21:f1:
         65:fc:01:c7:3f:55:8a:51:d4:a1:16:82:38:44:44:1d:0e:58:
         ea:78:69:ca:e5:65:9e:99:7b:b8:1e:24:00:85:af:31:b3:ff:
         b4:8a:bf:4f:09:89:a2:26:07:22:22:93:f6:8e:69:3f:8e:47:
         c2:14:97:83:16:0e:5d:d3:70:ab:03:b8:80:87:9a:e1:c5:11:
         96:0d:ed:c7:80:27:b3:79:3a:53:29:2e:2d:73:f6:f6:bb:c5:
         36:95:c7:31:1e:4e:38:90:43:7c:40:22:10:43:1b:ba:45:0b:
         40:4d:26:6e:ce:29:01:ea:dd:62:af:bd:38:75:c3:09:fa:50:
         24:7e:fe:57:9f:35:51:65:3e:59:71:ef:2e:83:a0:7e:1c:0e:
         86:80:92:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:06:35 2026 by rpki-client