Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
File:                     C771ADE0100457DC61EB95A71BB4E63885DC542F.mft (raw, json)
Hash identifier:          HX+gb8QA1ivE46zbFjIpJgj3dmd604pPY1NkOqO51Aw=
Subject key identifier:   50:2B:3C:B4:12:33:5A:B2:2F:AF:62:03:CC:F0:19:B7:DC:F7:FD:38
Authority key identifier: C7:71:AD:E0:10:04:57:DC:61:EB:95:A7:1B:B4:E6:38:85:DC:54:2F
Certificate issuer:       /CN=C771ADE0100457DC61EB95A71BB4E63885DC542F
Certificate serial:       504C20BBE4D650A662A666355FC1D147FD02E646
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
Manifest number:          BC
Signing time:             Sun 20 Sep 2026 21:33:41 +0000
Manifest this update:     Sun 20 Sep 2026 21:28:41 +0000
Manifest next update:     Mon 21 Sep 2026 23:01:41 +0000
Files and hashes:         1: C771ADE0100457DC61EB95A71BB4E63885DC542F.crl (hash: SEr1DX/JfJOXcIJ5KSM7KT9FldqEuHGedK8M7LfIoKU=)
                          2: 3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa (hash: cnrnucshQjB1HR7ilM8foFskZiCRkLLcdgQGq/I0/j4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.crl
                          rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 23:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4c:20:bb:e4:d6:50:a6:62:a6:66:35:5f:c1:d1:47:fd:02:e6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C771ADE0100457DC61EB95A71BB4E63885DC542F
        Validity
            Not Before: Sep 20 21:28:41 2026 GMT
            Not After : Sep 21 23:01:41 2026 GMT
        Subject: CN=502B3CB412335AB22FAF6203CCF019B7DCF7FD38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1a:98:ed:5e:e9:84:14:e0:5f:ae:b0:d6:0c:
                    ad:5f:2f:9c:27:67:1a:25:b6:d0:67:8a:53:05:51:
                    5b:c2:58:22:64:1f:91:52:b6:09:61:c6:0a:27:11:
                    d9:ce:d3:c8:72:df:6f:cb:17:d9:5e:03:ed:cd:cf:
                    09:09:ed:a5:26:77:e6:af:cf:c0:d3:c1:33:bc:8e:
                    62:c3:d8:2e:34:06:3b:14:f2:25:3e:6c:34:27:da:
                    e4:8e:cc:a5:f8:0e:39:50:fb:73:a3:04:3f:f0:81:
                    6d:8d:a9:27:c7:4d:18:19:d9:49:a8:bf:2e:08:ef:
                    a5:0e:11:38:40:1a:ff:52:8b:79:1b:14:cf:ac:93:
                    74:e8:17:df:88:0e:34:73:a2:e3:8c:37:00:a7:05:
                    ec:f5:23:ee:2c:17:33:b7:92:b6:f2:63:e2:b2:57:
                    56:34:cd:22:4e:d7:a7:a8:1b:de:a0:2b:ac:e2:ba:
                    fc:95:8c:0e:18:f5:f2:9e:e3:e8:11:f7:f0:e2:5c:
                    eb:d8:19:6b:01:08:eb:19:3f:18:5c:6c:21:cc:be:
                    7c:3d:3b:60:f1:4e:70:a8:8d:31:d3:5b:d2:62:a2:
                    8e:ae:a5:a7:7a:07:7d:a2:fe:7b:f0:c6:e9:4b:63:
                    c1:ae:98:d2:8d:cb:0d:92:d8:d8:91:39:29:01:a5:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2B:3C:B4:12:33:5A:B2:2F:AF:62:03:CC:F0:19:B7:DC:F7:FD:38
            X509v3 Authority Key Identifier:
                keyid:C7:71:AD:E0:10:04:57:DC:61:EB:95:A7:1B:B4:E6:38:85:DC:54:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b7:8f:d4:38:00:49:19:6c:ea:d9:59:60:ec:a6:9a:56:88:
         67:5c:b5:97:47:0d:17:6c:61:4e:10:f2:50:66:2d:49:6a:5c:
         e5:db:49:19:1c:61:0f:14:a1:90:9b:5b:59:ad:07:ff:a2:4c:
         b9:8c:39:53:10:3b:87:00:aa:07:35:42:70:b0:28:fc:17:b6:
         1b:89:34:47:47:4f:5e:c9:4c:41:a2:5f:14:2c:6b:b1:29:cd:
         f9:88:92:42:04:04:8d:11:3c:65:67:ee:48:04:31:fe:de:da:
         d6:f2:b5:af:83:d7:d4:6d:d6:db:a3:f5:12:4b:d1:67:93:75:
         db:5e:00:88:a0:28:e7:2b:52:a1:c4:d3:a5:bf:8c:e6:a7:30:
         ff:a8:78:bb:83:26:a7:f9:07:c8:61:35:19:71:c9:35:d8:73:
         04:7b:dc:6a:1a:74:62:27:0c:5d:d1:d3:01:dd:5c:1e:fd:91:
         3d:e7:ec:54:24:7f:23:f7:76:e6:0f:18:19:99:de:e3:33:05:
         cc:36:89:3a:00:98:bf:45:8b:33:26:4d:9e:3d:5d:e6:ad:1d:
         5b:70:c0:78:24:c0:a4:ab:d4:e2:68:6c:2a:6d:a7:24:e6:3c:
         0b:a7:8c:93:26:80:69:9a:0e:84:c2:58:34:8c:0b:55:f3:76:
         1b:18:b5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:23:56 2026 by rpki-client