Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft
File:                     405E6B7463BC0531CCD985CD4D468E60B5078B16.mft (raw, json)
Hash identifier:          OxMBiI33hmXFv6YXiypjBRSEezGRu1xlkgZPrl/cxpI=
Subject key identifier:   D6:A0:F0:11:14:7D:61:B9:57:28:8B:43:09:28:C6:4C:54:AE:3E:DC
Authority key identifier: 40:5E:6B:74:63:BC:05:31:CC:D9:85:CD:4D:46:8E:60:B5:07:8B:16
Certificate issuer:       /CN=405E6B7463BC0531CCD985CD4D468E60B5078B16
Certificate serial:       59217A20D94C2E0DCA0A2F04982AE690236ADDD3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft
Manifest number:          BB
Signing time:             Sun 20 Sep 2026 22:29:42 +0000
Manifest this update:     Sun 20 Sep 2026 22:24:42 +0000
Manifest next update:     Mon 21 Sep 2026 22:40:42 +0000
Files and hashes:         1: 405E6B7463BC0531CCD985CD4D468E60B5078B16.crl (hash: XFOgVV1bh2E5xL5lSHYxq0/gKtJ5MHc6eql66K5zYJM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.crl
                          rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 22:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:21:7a:20:d9:4c:2e:0d:ca:0a:2f:04:98:2a:e6:90:23:6a:dd:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405E6B7463BC0531CCD985CD4D468E60B5078B16
        Validity
            Not Before: Sep 20 22:24:42 2026 GMT
            Not After : Sep 21 22:40:42 2026 GMT
        Subject: CN=D6A0F011147D61B957288B430928C64C54AE3EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:6d:83:ca:e8:48:3c:ab:ad:a7:78:20:b1:
                    45:a5:5a:3d:6b:5b:b1:b4:4e:d3:42:6a:65:0b:2b:
                    da:48:11:00:3d:7e:6b:fc:10:e2:5a:34:b5:36:35:
                    cf:e5:18:e9:34:1c:10:71:94:03:e4:ad:5e:90:ba:
                    5a:79:81:4e:e9:5b:27:ab:ab:c2:5a:15:5e:3f:6c:
                    7a:6d:02:a9:9c:d9:7e:90:40:40:4a:cd:af:52:ee:
                    8e:db:8e:23:46:5c:9b:6d:e0:1f:2e:9d:b7:c5:de:
                    8a:b0:31:1d:16:20:b5:f7:dc:58:dd:e8:37:10:bf:
                    62:60:7d:3d:11:ac:68:7b:79:6c:67:96:a0:e7:93:
                    5c:45:5e:8a:d7:33:b2:f8:59:ff:9f:af:90:3c:8c:
                    6d:1f:83:61:58:2f:34:af:c7:d7:4a:cf:06:d5:a6:
                    b7:09:21:44:65:6e:fd:8b:ed:cc:19:33:d1:e6:44:
                    32:36:03:1c:c2:f8:56:5f:5d:f6:e8:4e:44:f9:0e:
                    9b:60:93:dd:40:ce:d0:8e:62:17:4d:50:9f:a7:4e:
                    b8:07:a3:47:b5:2c:e8:f3:55:fc:32:3a:86:0d:23:
                    76:4d:b3:99:29:3c:62:ce:c6:ea:13:1d:f3:27:15:
                    fd:f7:85:c3:bd:c1:bd:8f:60:b1:c0:94:21:e2:22:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A0:F0:11:14:7D:61:B9:57:28:8B:43:09:28:C6:4C:54:AE:3E:DC
            X509v3 Authority Key Identifier:
                keyid:40:5E:6B:74:63:BC:05:31:CC:D9:85:CD:4D:46:8E:60:B5:07:8B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:95:7b:40:32:89:7b:89:b2:4e:fc:73:83:c0:06:58:e1:77:
         a1:f2:00:de:b5:fb:80:1b:09:2e:d7:f0:5c:0e:a8:e2:e8:07:
         74:e1:09:55:38:2b:e9:ee:39:07:4e:38:07:1f:f8:0a:27:55:
         a7:74:1e:57:0f:76:e6:dd:53:dc:0c:f0:ab:aa:d0:e1:50:ba:
         b4:b5:48:57:84:1d:53:2a:07:f2:59:92:12:5f:49:79:e1:16:
         49:ad:78:10:9f:66:8b:78:b8:ab:aa:dc:54:f9:6a:1e:ed:09:
         c9:9e:31:bf:9d:79:01:76:ab:bf:14:a3:7e:a0:b6:0a:77:23:
         5e:09:ce:55:88:56:63:99:fa:62:4d:d3:19:2e:f9:f5:5b:48:
         34:92:05:15:ec:4e:b2:9a:e6:26:36:e6:3f:8d:f9:3a:37:83:
         88:c1:e7:17:01:86:6b:7b:b2:e4:82:1e:3d:d4:77:00:21:18:
         b5:95:85:4e:66:27:91:9e:61:e6:ef:75:ac:b3:91:f0:1a:6c:
         69:4e:b6:76:9b:d8:3d:2d:cf:37:84:ae:57:09:e3:de:75:df:
         54:5e:c7:a8:f3:43:85:ba:21:51:95:91:af:f0:65:51:78:08:
         dc:89:3f:dd:47:5a:0a:4e:af:54:76:fe:91:a9:bb:8c:35:e0:
         4a:80:2b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:09:28 2026 by rpki-client