Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.mft
File:                     11B59A73410511C9A6E01CB13423495DDC1B58CE.mft (raw, json)
Hash identifier:          rVfal9nqP3VonHHxVxuWpW1jVHia0c75wu2I2edUAP4=
Subject key identifier:   7B:48:DC:7F:B1:F8:52:3B:1F:43:65:04:54:A9:0F:C0:46:64:EA:45
Authority key identifier: 11:B5:9A:73:41:05:11:C9:A6:E0:1C:B1:34:23:49:5D:DC:1B:58:CE
Certificate issuer:       /CN=11B59A73410511C9A6E01CB13423495DDC1B58CE
Certificate serial:       54490A43B4B4805C278DDBBED9ED59B771FFEDFF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11B59A73410511C9A6E01CB13423495DDC1B58CE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.mft
Manifest number:          BD
Signing time:             Mon 21 Sep 2026 14:03:57 +0000
Manifest this update:     Mon 21 Sep 2026 13:58:57 +0000
Manifest next update:     Tue 22 Sep 2026 17:50:57 +0000
Files and hashes:         1: 11B59A73410511C9A6E01CB13423495DDC1B58CE.crl (hash: mzJDfuAKq/A9IBRq4ZEl52JnFTI4eeonTpDIHPIINSo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.crl
                          rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11B59A73410511C9A6E01CB13423495DDC1B58CE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:49:0a:43:b4:b4:80:5c:27:8d:db:be:d9:ed:59:b7:71:ff:ed:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11B59A73410511C9A6E01CB13423495DDC1B58CE
        Validity
            Not Before: Sep 21 13:58:57 2026 GMT
            Not After : Sep 22 17:50:57 2026 GMT
        Subject: CN=7B48DC7FB1F8523B1F43650454A90FC04664EA45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:ba:35:f5:42:dd:a9:f3:0f:a5:88:b5:b8:
                    19:04:9b:38:38:e3:bc:50:39:8e:e5:57:1b:5f:e9:
                    f4:14:c6:0f:bf:c4:95:36:57:53:8c:2b:27:5e:ff:
                    84:a9:1d:4f:0d:62:40:71:16:f4:71:29:9a:d9:63:
                    44:e3:e8:c5:60:49:1f:70:90:07:53:3c:2a:8e:dd:
                    35:3a:fd:79:82:0e:95:f9:4c:cb:db:e0:7c:ef:ef:
                    15:44:30:5e:53:df:8a:b7:08:4b:3c:5c:3c:65:b3:
                    5b:57:72:cc:64:fd:e9:3a:3a:7d:1c:12:44:d7:c9:
                    13:ca:1b:af:47:99:f7:66:ff:84:33:75:0c:ad:a7:
                    11:e9:8b:48:15:fe:4c:7e:05:d4:ec:44:02:68:b4:
                    df:17:f6:61:1c:68:c9:a9:17:90:fb:16:ba:09:10:
                    b2:1e:c1:ec:0b:d5:c2:ba:c7:d8:b5:7f:ed:57:87:
                    cc:a5:c6:c1:e6:54:5c:c7:32:50:d8:80:ed:99:76:
                    67:52:7c:ef:25:23:4e:26:82:dc:78:c8:b6:98:f5:
                    c5:41:f7:a7:78:dc:49:12:db:3b:f4:97:8d:88:4c:
                    be:2f:f4:fc:fe:85:ef:d6:1b:07:7b:d4:5c:1d:d6:
                    4f:df:34:86:4c:a1:5d:33:76:9d:aa:41:2f:30:3e:
                    ed:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:48:DC:7F:B1:F8:52:3B:1F:43:65:04:54:A9:0F:C0:46:64:EA:45
            X509v3 Authority Key Identifier:
                keyid:11:B5:9A:73:41:05:11:C9:A6:E0:1C:B1:34:23:49:5D:DC:1B:58:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11B59A73410511C9A6E01CB13423495DDC1B58CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:89:7d:f6:db:57:ea:73:42:3c:c7:6a:b1:3a:72:a9:7d:0b:
         9f:62:16:2f:65:2b:d1:e4:81:f3:9f:54:57:22:76:83:a5:19:
         c5:d4:2a:20:53:15:9a:38:02:a5:94:c4:30:a7:e2:ea:79:4b:
         aa:39:bb:13:b8:f2:55:6a:f9:71:d5:65:ca:a5:78:42:0b:ec:
         06:ec:b5:da:a4:e5:ac:c9:27:51:e5:22:36:52:81:5e:f4:3c:
         9e:13:30:2a:ba:81:72:82:ea:20:b0:54:96:7b:a5:b5:dd:c6:
         93:08:33:db:b6:50:b0:fd:8f:80:4b:f8:6f:9d:6d:11:f4:ef:
         16:81:1b:34:63:27:1f:52:f1:0e:99:00:d4:36:27:63:e5:d1:
         4b:7f:ef:8d:41:d4:cc:ca:69:88:27:bc:69:24:be:dc:ff:dd:
         18:09:13:c3:62:d4:6d:2a:6a:09:12:5e:d3:a4:63:08:19:d0:
         51:c7:2c:5a:3d:82:45:ef:bf:43:7d:7d:a1:b3:11:d9:a7:62:
         13:7b:07:55:1c:ed:72:15:46:fa:b4:6e:a8:3a:71:c8:77:cf:
         e5:a7:31:07:f1:91:4b:cc:7c:44:40:a0:07:e6:d0:98:99:5c:
         62:58:4f:a8:98:29:ff:28:65:fe:18:f2:ae:23:76:d1:0c:4d:
         bf:79:1d:4a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVEkKQ7S0gFwnjdu+2e1Zt3H/7f8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFCNTlBNzM0MTA1MTFDOUE2RTAxQ0IxMzQyMzQ5NURE
QzFCNThDRTAeFw0yNjA5MjExMzU4NTdaFw0yNjA5MjIxNzUwNTdaMDMxMTAvBgNV
BAMTKDdCNDhEQzdGQjFGODUyM0IxRjQzNjUwNDU0QTkwRkMwNDY2NEVBNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtcro19ULdqfMPpYi1uBkEmzg4
47xQOY7lVxtf6fQUxg+/xJU2V1OMKyde/4SpHU8NYkBxFvRxKZrZY0Tj6MVgSR9w
kAdTPCqO3TU6/XmCDpX5TMvb4Hzv7xVEMF5T34q3CEs8XDxls1tXcsxk/ek6On0c
EkTXyRPKG69Hmfdm/4QzdQytpxHpi0gV/kx+BdTsRAJotN8X9mEcaMmpF5D7FroJ
ELIewewL1cK6x9i1f+1Xh8ylxsHmVFzHMlDYgO2ZdmdSfO8lI04mgtx4yLaY9cVB
96d43EkS2zv0l42ITL4v9Pz+he/WGwd71Fwd1k/fNIZMoV0zdp2qQS8wPu1lAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUe0jcf7H4UjsfQ2UEVKkPwEZk6kUwHwYDVR0j
BBgwFoAUEbWac0EFEcmm4ByxNCNJXdwbWM4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzRkNDEwMDMtMTJiMC00ZTZhLWIwODUtNTZiYzJkMTlkYWE4LzAvMTFCNTlBNzM0
MTA1MTFDOUE2RTAxQ0IxMzQyMzQ5NUREQzFCNThDRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMUI1OUE3MzQxMDUxMUM5QTZFMDFDQjEzNDIzNDk1RERDMUI1
OENFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw
ODUtNTZiYzJkMTlkYWE4LzAvMTFCNTlBNzM0MTA1MTFDOUE2RTAxQ0IxMzQyMzQ5
NUREQzFCNThDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALWJffbbV+pzQjzHarE6cql9C59iFi9lK9Hk
gfOfVFcidoOlGcXUKiBTFZo4AqWUxDCn4up5S6o5uxO48lVq+XHVZcqleEIL7Abs
tdqk5azJJ1HlIjZSgV70PJ4TMCq6gXKC6iCwVJZ7pbXdxpMIM9u2ULD9j4BL+G+d
bRH07xaBGzRjJx9S8Q6ZANQ2J2Pl0Ut/741B1MzKaYgnvGkkvtz/3RgJE8Ni1G0q
agkSXtOkYwgZ0FHHLFo9gkXvv0N9faGzEdmnYhN7B1Uc7XIVRvq0bqg6cch3z+Wn
MQfxkUvMfERAoAfm0JiZXGJYT6iYKf8oZf4Y8q4jdtEMTb95HUo=
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:42:49 2026 by rpki-client