Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
File:                     50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft (raw, json)
Hash identifier:          KaU/h8IXQ+1ku61YtaWJqWMZ+gVKsu99yfwMDvni3Bc=
Subject key identifier:   94:0D:3D:DD:5B:CC:6A:39:87:3C:3A:E8:65:9A:F0:0E:BD:22:FA:10
Authority key identifier: 50:34:1E:A1:7A:6C:EE:93:9B:2C:DF:A8:32:DC:03:24:F6:C6:4D:51
Certificate issuer:       /CN=50341EA17A6CEE939B2CDFA832DC0324F6C64D51
Certificate serial:       703807DDDE340D86BF57953653202C7E490953DD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
Manifest number:          0106
Signing time:             Sun 15 Nov 2026 06:06:42 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:42 +0000
Manifest next update:     Mon 16 Nov 2026 06:09:42 +0000
Files and hashes:         1: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: WGwf4ZheCNstu5sMth6N0foU0qrM+z/FwSG3oFHTVv4=)
                          2: 50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl (hash: a3b2ywsJZxIIcJtARl2vSjrn0K3/0E6w8ZLswTjTqjI=)
                          3: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: cxf9fFshB4+bhjoui5wSDBBSpnsVcVvhifdGqqzNgz4=)
                          4: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: QGPTzA7izmVWKWGQGI0Tmi8hRyZZX/Yh7zilSro+/Yc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl
                          rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 06:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:38:07:dd:de:34:0d:86:bf:57:95:36:53:20:2c:7e:49:09:53:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50341EA17A6CEE939B2CDFA832DC0324F6C64D51
        Validity
            Not Before: Nov 15 06:01:42 2026 GMT
            Not After : Nov 16 06:09:42 2026 GMT
        Subject: CN=940D3DDD5BCC6A39873C3AE8659AF00EBD22FA10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:d1:57:33:dd:82:5c:05:6f:45:58:9e:dc:
                    1f:d0:9a:43:da:a9:97:54:33:46:7f:42:40:ce:c8:
                    13:51:1a:88:bc:a8:5c:6e:42:2f:a9:16:d0:85:bc:
                    1b:c5:14:ad:40:60:57:2b:3a:e4:6e:1b:a2:7b:43:
                    f5:fb:47:dd:53:c9:a6:e7:54:31:fb:c7:3a:61:8a:
                    ed:60:2b:79:d4:16:0b:c4:a7:df:12:d2:f5:1c:5c:
                    7e:b3:6a:c4:50:d4:f5:73:21:5a:0d:db:6d:b3:e0:
                    8d:9a:bc:15:22:43:f2:59:51:bc:60:1f:17:29:76:
                    05:6a:5e:c0:bc:6f:11:1e:08:a0:7f:3d:2e:63:62:
                    2b:58:83:b7:f5:ac:77:21:e9:72:75:ef:8e:2e:04:
                    42:99:c5:82:03:0d:87:59:73:10:e3:d1:88:a8:b1:
                    3d:f4:cc:82:2e:52:ac:3f:3a:89:6b:5e:0f:12:b5:
                    b8:ea:f1:4c:ee:63:3a:0f:ca:b5:f9:fa:6f:94:2b:
                    d6:7e:59:82:3e:b1:f9:a3:5d:c1:ab:cc:e9:39:79:
                    e1:73:c9:23:fb:43:38:5c:05:57:5b:e3:60:43:9a:
                    0f:de:dc:f3:57:52:73:ce:e6:11:b4:d8:1f:35:c3:
                    94:d9:58:69:37:c0:23:8a:62:8c:d0:65:c3:0f:25:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0D:3D:DD:5B:CC:6A:39:87:3C:3A:E8:65:9A:F0:0E:BD:22:FA:10
            X509v3 Authority Key Identifier:
                keyid:50:34:1E:A1:7A:6C:EE:93:9B:2C:DF:A8:32:DC:03:24:F6:C6:4D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:66:6b:a6:2e:e2:ed:5e:14:db:80:3c:2e:19:3f:08:fd:95:
         42:1b:49:3d:66:be:67:d8:09:3c:ad:b0:5a:a1:68:95:dc:19:
         d4:89:b8:f6:e7:00:63:07:86:7f:a1:9e:61:a9:89:de:37:2d:
         e1:6a:5c:d3:9e:b3:60:63:f0:0e:7f:0c:ab:e6:b1:cb:bc:7a:
         bd:9e:7b:ce:ef:ce:0c:61:34:e7:dc:0b:2b:af:36:ff:1e:97:
         15:db:df:fc:f1:ea:09:e2:83:ad:71:ec:31:fb:8d:47:27:2e:
         65:a4:0c:50:db:9a:70:92:74:b8:76:45:94:b0:4f:9c:56:ce:
         44:0a:77:05:71:bc:ae:c6:27:28:49:96:df:84:36:1b:0d:bd:
         e1:55:7b:57:b5:11:a4:09:d4:97:27:05:c5:43:07:c0:3d:e6:
         40:bb:1d:17:77:ba:13:eb:88:13:a3:e9:d2:59:37:75:3b:c1:
         46:da:88:23:ab:97:de:68:ea:22:ad:56:fa:4e:80:7a:29:30:
         b9:47:4f:ee:e4:5d:22:d1:6a:45:e5:68:da:2e:06:1e:76:bd:
         2f:1e:91:e2:75:d1:9c:61:db:fd:55:47:17:81:19:6b:07:44:
         3f:07:e1:12:03:52:37:0a:6c:53:a8:a1:16:7d:92:57:5d:cb:
         f2:72:6f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:42:43 2026 by rpki-client