Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft
File:                     5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft (raw, json)
Hash identifier:          fbRiYW3VlDN+wBaq/nRQQiEVOxgPKazpPHrBZv5s2No=
Subject key identifier:   5B:1A:1D:08:6D:14:70:79:47:97:61:FE:82:2E:C4:2F:51:19:3E:E3
Authority key identifier: 5D:77:8C:6B:5A:83:CF:E3:42:83:BD:94:95:BB:B4:8B:E3:D5:95:63
Certificate issuer:       /CN=5D778C6B5A83CFE34283BD9495BBB48BE3D59563
Certificate serial:       2CC76F541282D1E28CED17336F6439B715060B85
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft
Manifest number:          D8
Signing time:             Sun 11 Oct 2026 05:23:30 +0000
Manifest this update:     Sun 11 Oct 2026 05:18:30 +0000
Manifest next update:     Mon 12 Oct 2026 05:28:30 +0000
Files and hashes:         1: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: YZJGRKgbn++QjdW/BYBy5zi4Iey6oxaZnIjLCUOoVQY=)
                          2: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: pW9Xq+VRLYCTvIh/TcwaaDaFgakUuCARpznvzAbxTXo=)
                          3: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: KDqog2rfiubYaTHJcE3FAsBqz6lLLEZTtq7kD9KAXRw=)
                          4: 5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl (hash: Ds/iu1X5GLoDKxnGVtNiuApOtXowTKB3Q02XzQRLePc=)
                          5: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: WcflqBWiLgPAZ9Y0v7/46V6GV1t5xWnWDOoYXcwaOd8=)
                          6: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: BrA2AYWTFSxj+vqtiSjtdleZMLMTR+csvmqEcgKBW48=)
                          7: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: xLjlTIflH6sc0X3Sbj2zzWpljnqqaMPM3eUOug3XrMk=)
                          8: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: FSc1aeAh2Rt+5JPB4WOEH2O9AvnjApvUD4AoU6qwI3k=)
                          9: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o74QhQczERNJ9zjSUZ37A/5NOrH2tv7P/NXYzzpKIyQ=)
                          10: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: M9GmOl7DSf3JgqEI4OyXiGmMeRs5OMlGvZJmwiVp3yA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl
                          rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 05:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c7:6f:54:12:82:d1:e2:8c:ed:17:33:6f:64:39:b7:15:06:0b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D778C6B5A83CFE34283BD9495BBB48BE3D59563
        Validity
            Not Before: Oct 11 05:18:30 2026 GMT
            Not After : Oct 12 05:28:30 2026 GMT
        Subject: CN=5B1A1D086D147079479761FE822EC42F51193EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:33:5b:f6:e0:ec:12:bb:03:b9:38:51:07:
                    ea:45:4d:cd:64:94:ef:73:4d:bb:ab:15:97:5a:7f:
                    b1:8e:1c:c9:b4:0f:cb:8e:a7:27:6a:c1:cc:c6:d1:
                    f6:81:51:eb:f8:27:f6:a1:de:fa:db:44:84:c0:4c:
                    29:c5:87:62:95:ac:67:04:2d:87:ba:b6:f7:df:25:
                    73:29:0a:c2:62:cf:33:e2:2a:6f:79:fd:ed:32:01:
                    0d:e9:ae:52:b6:45:f4:77:ca:34:2d:72:2a:01:1e:
                    39:62:16:a8:60:47:da:80:4e:ae:fd:a2:83:03:1a:
                    a5:5e:5e:ca:e5:57:aa:54:b0:11:52:e9:cc:12:ae:
                    4a:01:71:f6:ce:94:05:21:b2:80:5a:07:5c:27:d0:
                    37:a2:fd:48:3e:bf:9f:fe:89:e1:6a:0d:a1:71:d9:
                    91:3e:bc:af:a0:9f:ba:c2:08:98:de:1e:ee:b9:f1:
                    3d:d2:ad:ac:83:c3:35:69:d4:74:73:05:76:07:73:
                    97:6b:f7:62:41:f4:8b:3a:28:de:da:fa:63:f6:b7:
                    ed:47:88:9e:56:d8:fb:8c:ee:ad:8a:24:a3:6b:01:
                    2d:eb:87:61:90:0e:3c:67:9b:19:df:9c:20:6d:5a:
                    45:d9:d5:ac:0a:8d:81:2d:9f:3a:6b:b3:ff:e2:e7:
                    17:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1A:1D:08:6D:14:70:79:47:97:61:FE:82:2E:C4:2F:51:19:3E:E3
            X509v3 Authority Key Identifier:
                keyid:5D:77:8C:6B:5A:83:CF:E3:42:83:BD:94:95:BB:B4:8B:E3:D5:95:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c7:5b:6c:cd:24:a4:3f:76:85:a0:d7:8c:7b:d1:24:16:a1:
         ca:fb:40:c6:df:d7:b1:f5:5c:4d:14:9f:cb:7c:59:73:0f:7f:
         3c:1d:cf:3a:17:0c:8b:ac:14:48:9d:7b:51:0b:bf:4a:08:ef:
         be:7c:fd:44:3b:c5:16:9b:97:6f:db:72:7c:47:0f:b5:04:01:
         73:76:17:69:11:82:36:a2:56:c2:9d:04:bc:87:26:be:50:76:
         67:16:f0:da:32:93:00:81:e4:ec:5b:fd:c9:51:53:d0:89:a2:
         21:e8:47:9e:93:84:c4:f8:df:f1:65:13:ca:a9:57:db:58:9e:
         18:9b:d7:4e:b8:40:67:6c:82:20:62:65:f3:3a:fa:ed:5b:fa:
         6b:49:7a:88:7c:48:76:2e:9f:18:6f:43:02:f9:f8:9b:e5:0c:
         65:92:ec:0d:6b:ea:10:b1:af:a0:a1:6b:02:fb:c4:a6:75:4e:
         81:8a:7c:cd:20:fb:6e:35:aa:d1:11:e3:7d:1e:96:c4:3a:9b:
         63:7f:73:5f:2e:b8:e2:26:a3:92:df:bc:d8:e8:58:2a:4d:12:
         a4:94:fa:1b:b5:ca:15:80:a0:bc:1a:dd:eb:c2:b7:be:fc:63:
         bc:bc:cd:90:7a:c7:c1:a6:38:9e:c6:51:56:6c:52:32:0b:a1:
         a4:14:35:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:52:27 2026 by rpki-client