Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
File:                     94036675301DBECEA598F27C69DCB2391E3C2886.mft (raw, json)
Hash identifier:          p5BKIIr/6k2Was+dW1QlFnq+CoEjzqEkgrCI56AkKco=
Subject key identifier:   66:3B:7B:0A:7A:FD:86:E8:E1:C9:6D:1B:83:39:8F:11:84:08:A3:A8
Authority key identifier: 94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86
Certificate issuer:       /CN=94036675301DBECEA598F27C69DCB2391E3C2886
Certificate serial:       6156AEB0E2824F2B35899E41B672E0320DC3580D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
Manifest number:          0107
Signing time:             Sat 14 Nov 2026 23:59:12 +0000
Manifest this update:     Sat 14 Nov 2026 23:54:12 +0000
Manifest next update:     Mon 16 Nov 2026 02:54:12 +0000
Files and hashes:         1: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: Ll1O0jrLBRiezZCuRZRt8vBzf1LiXokuLQkKXN01bA8=)
                          2: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: /165UFjNpwWW+EZFcjl+71+ujJPspyfJC04aoRjZsKo=)
                          3: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: 63RFUP20PHT95cd0UVwx1h2yICgt0oulTqYaR5p2Hfk=)
                          4: 94036675301DBECEA598F27C69DCB2391E3C2886.crl (hash: 1kZw95kCPzQtdMSkhYEqlHBilg/BTAv/4/6OLznseNs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl
                          rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 02:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:56:ae:b0:e2:82:4f:2b:35:89:9e:41:b6:72:e0:32:0d:c3:58:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94036675301DBECEA598F27C69DCB2391E3C2886
        Validity
            Not Before: Nov 14 23:54:12 2026 GMT
            Not After : Nov 16 02:54:12 2026 GMT
        Subject: CN=663B7B0A7AFD86E8E1C96D1B83398F118408A3A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:98:c1:94:03:0b:59:9e:76:ff:90:07:45:2f:
                    3a:44:35:1c:fb:1b:4f:eb:77:70:93:44:09:ea:0e:
                    00:7e:c8:ad:21:fb:fd:cd:8a:1c:5a:63:e7:6b:31:
                    84:cc:d0:3e:cc:85:53:87:b6:d4:f8:23:e7:dc:f6:
                    51:fd:f5:1e:1c:79:cb:3f:f4:a0:1e:b5:5b:7d:1b:
                    a8:48:0e:9c:77:d0:41:f9:84:d9:bd:c5:e4:12:82:
                    62:08:bf:3c:98:b1:1d:fe:78:1c:da:d0:e9:b4:09:
                    7f:6d:16:23:2f:32:eb:e9:8b:71:77:9f:6a:a7:5c:
                    15:ab:50:18:36:b9:fd:02:60:01:51:24:6c:c9:e7:
                    40:49:1d:cd:97:d8:6c:a2:b2:15:d3:11:31:c0:9a:
                    5d:8b:6e:f8:17:04:f5:11:99:6a:8e:97:a6:a9:38:
                    a8:03:46:e9:a3:e3:93:33:1e:0f:1e:d3:b8:9e:5e:
                    4b:19:fb:fd:d7:9c:7b:dc:01:b2:e9:6b:da:b2:fb:
                    f8:e8:2c:db:ee:0f:e0:10:a0:31:0b:db:9d:11:05:
                    5b:eb:ab:57:62:72:d9:b2:4a:f5:41:a9:ce:a7:08:
                    fa:17:48:0c:59:e8:8d:fd:4e:00:56:5f:e9:f7:03:
                    92:15:3d:10:9d:50:e7:1a:92:c0:8f:48:76:0a:e8:
                    af:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3B:7B:0A:7A:FD:86:E8:E1:C9:6D:1B:83:39:8F:11:84:08:A3:A8
            X509v3 Authority Key Identifier:
                keyid:94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d7:ae:03:0b:58:a2:98:a7:95:09:ed:c3:67:c7:61:96:5b:
         78:2c:09:86:0d:01:e0:b5:87:f2:ba:af:ca:52:50:87:73:66:
         20:02:4a:94:a9:75:cf:a2:33:d1:d8:6b:4a:9a:92:d6:b9:81:
         39:db:b7:00:e4:11:5f:4e:42:7c:58:cb:d7:ce:24:87:ee:b8:
         3b:a1:00:d1:e5:5d:93:7c:d9:1f:fc:47:54:2d:90:41:02:1d:
         94:d9:14:bb:70:76:1c:bc:66:2c:22:63:17:9b:d7:4d:0a:ea:
         fe:1e:4d:37:23:53:a3:6c:13:00:b9:7e:04:c2:ef:7a:2d:1f:
         e4:8c:60:64:0c:bf:a1:76:cf:13:65:e2:0b:e0:c3:f8:8b:d5:
         9c:7e:ec:cb:89:55:b9:67:46:82:49:bf:b3:d8:ec:de:54:57:
         37:0b:0c:49:08:30:98:49:ae:8f:e1:f6:fe:96:e0:20:f2:8f:
         45:46:59:93:50:d1:4b:c5:af:e8:2c:ef:5c:cf:5e:6b:a6:32:
         40:3e:d4:8e:ee:48:77:6e:d5:de:b0:e7:ad:c4:fb:dc:9e:71:
         03:34:8d:e1:27:fb:b4:87:59:6e:1b:77:bd:2d:e0:9d:12:31:
         ed:ba:eb:db:c7:36:4a:d4:4e:e4:29:f4:68:2c:03:9f:8f:56:
         d0:9d:f0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:44:16 2026 by rpki-client