Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft
File:                     8369683C9C4A77F4B5AB05185F01C3C810502D34.mft (raw, json)
Hash identifier:          zWsW2y3vtFptE7e1sTUPnNT1bEUvppfaAkZZu27Mv9w=
Subject key identifier:   17:D3:BB:A7:80:D9:25:85:E2:72:14:E5:EF:84:17:EA:25:70:77:5A
Authority key identifier: 83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34
Certificate issuer:       /CN=8369683C9C4A77F4B5AB05185F01C3C810502D34
Certificate serial:       1627219814FD58C75B20DB8A81C0590DB25040F1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft
Manifest number:          BC
Signing time:             Sun 20 Sep 2026 04:53:15 +0000
Manifest this update:     Sun 20 Sep 2026 04:48:15 +0000
Manifest next update:     Mon 21 Sep 2026 06:40:15 +0000
Files and hashes:         1: 8369683C9C4A77F4B5AB05185F01C3C810502D34.crl (hash: dfeuQygSi1HPdMvmaDI9dwiTgfJj3EGnMIbDoDjiG0g=)
                          2: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (hash: fnlL5zMOPvGAUBk55QrgutXcZXU5BAm+3sV40oQEUJw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl
                          rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 06:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:27:21:98:14:fd:58:c7:5b:20:db:8a:81:c0:59:0d:b2:50:40:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8369683C9C4A77F4B5AB05185F01C3C810502D34
        Validity
            Not Before: Sep 20 04:48:15 2026 GMT
            Not After : Sep 21 06:40:15 2026 GMT
        Subject: CN=17D3BBA780D92585E27214E5EF8417EA2570775A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7b:88:a6:1b:f7:5a:67:d4:1b:02:c1:87:19:
                    9a:1a:06:37:b8:48:0e:2a:ca:14:e3:b6:ca:28:00:
                    72:76:c4:a4:12:bc:82:d4:ad:36:50:54:40:3a:cd:
                    06:aa:86:ec:11:44:3b:7b:c1:cc:a3:71:23:46:36:
                    cf:a9:63:e0:b7:9c:0b:48:e0:47:5b:cc:76:2c:16:
                    29:25:c3:a6:1e:52:17:1f:56:97:c9:3f:ea:bd:f1:
                    3b:6a:82:5c:e3:e0:ed:b6:1f:b0:23:66:5e:f6:72:
                    28:c2:af:96:37:8c:1e:9d:d1:58:a8:da:e9:b5:d9:
                    5f:fb:3b:4d:ab:55:12:a0:2a:82:ec:19:c4:5f:fe:
                    ab:03:a0:bd:3d:cf:77:ab:e4:08:f8:37:1b:93:09:
                    13:09:be:03:b2:5c:6a:26:23:e7:69:67:e3:9a:de:
                    5a:c6:a2:98:88:37:52:38:bb:d3:36:e6:21:ee:a9:
                    2e:00:d5:7d:03:31:08:4b:ca:e8:73:c0:95:c5:51:
                    eb:1e:39:0c:81:f2:19:99:a1:a5:af:40:c8:aa:ee:
                    c0:85:1a:56:cf:2b:d8:a5:5a:f2:4f:d1:46:00:77:
                    89:e3:37:42:1e:90:cd:a8:11:1d:13:c9:9f:09:65:
                    24:da:9e:c2:22:f4:55:67:f4:c3:a4:da:b5:25:de:
                    07:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D3:BB:A7:80:D9:25:85:E2:72:14:E5:EF:84:17:EA:25:70:77:5A
            X509v3 Authority Key Identifier:
                keyid:83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:24:5e:16:33:47:42:ae:0b:90:73:6a:15:f7:f6:21:fa:d3:
         ff:22:00:64:03:3b:e0:8c:62:67:78:3b:10:7d:df:93:0c:71:
         27:9c:7a:62:be:23:8e:72:5c:c3:e6:05:43:ef:d8:6e:16:ae:
         d0:fa:f5:bd:51:69:fc:29:9f:03:a3:e8:17:f2:65:37:eb:33:
         4a:80:81:be:fc:9b:5f:67:e9:96:28:2f:c9:12:96:92:5e:49:
         3a:46:b9:6f:a0:84:dd:38:5e:3b:6a:65:45:41:ff:61:08:54:
         a2:28:b2:9f:6c:ed:08:67:0f:43:f9:13:22:10:48:93:46:ed:
         b8:1f:4a:8e:75:67:8a:3a:49:98:a7:8f:3d:4a:1c:c2:03:b0:
         0f:f3:94:d3:7d:79:d1:cc:16:8c:36:aa:e1:fb:c6:59:25:cc:
         00:b3:6f:20:ba:af:54:fc:8a:2f:67:8e:32:1d:3c:d1:e7:7d:
         be:da:37:88:e6:db:0b:38:ce:6c:c4:df:c6:04:f6:75:29:f1:
         b6:c5:dd:73:02:30:f4:da:02:f6:8d:60:a7:eb:cb:f3:43:e8:
         26:85:19:f5:6c:2a:52:ce:1e:51:17:20:94:5c:14:b9:e1:fe:
         7c:da:7c:8b:14:51:90:5e:43:61:89:1b:38:6a:f9:d8:2d:13:
         66:17:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:15:31 2026 by rpki-client