Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/0162FB1D75470A2F01326C3FB94D24AE036CD51B.mft
File:                     0162FB1D75470A2F01326C3FB94D24AE036CD51B.mft (raw, json)
Hash identifier:          io/sEH7htRlnN+CzqBhi4ruV8NYGessH+stQyyavutA=
Subject key identifier:   B1:30:F9:D2:FE:C5:7D:46:07:92:20:82:A8:49:48:F0:AA:05:FB:1C
Authority key identifier: 01:62:FB:1D:75:47:0A:2F:01:32:6C:3F:B9:4D:24:AE:03:6C:D5:1B
Certificate issuer:       /CN=0162FB1D75470A2F01326C3FB94D24AE036CD51B
Certificate serial:       10F6A86E8350B0F919DB12EA4D662C127C6B36E4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0162FB1D75470A2F01326C3FB94D24AE036CD51B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/0162FB1D75470A2F01326C3FB94D24AE036CD51B.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 07:25:54 +0000
Manifest this update:     Mon 21 Sep 2026 07:20:54 +0000
Manifest next update:     Tue 22 Sep 2026 10:49:54 +0000
Files and hashes:         1: 323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa (hash: KDB1vgz24V6jO9kZYB3ErSpRDu8elj5x7idj8z4mIMU=)
                          2: 0162FB1D75470A2F01326C3FB94D24AE036CD51B.crl (hash: 2fi7lAvxLrjVKj1n6ua0Egl2NX1uZ4oa0f1SgiDAnxM=)
                          3: 3130332e32312e36342e302f32332d3233203d3e20313530393832.roa (hash: 2JHS4OqjToarhUAET0YKeJasI4sOq05DshsqFud+E74=)
                          4: 3130332e32312e36342e302f32342d3234203d3e20313530393832.roa (hash: h/bTXRoKRlwmUHLhAGDVWkvVC1V8xs42wjGl9LBBkfM=)
                          5: 3130332e32312e36352e302f32342d3234203d3e20313530393832.roa (hash: /sF5VOZ/4puGRHZZXWBYQ2s8R3sZ2hziRjycZGzoDyg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/0162FB1D75470A2F01326C3FB94D24AE036CD51B.crl
                          rsync://rpki-rsync.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/0162FB1D75470A2F01326C3FB94D24AE036CD51B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0162FB1D75470A2F01326C3FB94D24AE036CD51B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f6:a8:6e:83:50:b0:f9:19:db:12:ea:4d:66:2c:12:7c:6b:36:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0162FB1D75470A2F01326C3FB94D24AE036CD51B
        Validity
            Not Before: Sep 21 07:20:54 2026 GMT
            Not After : Sep 22 10:49:54 2026 GMT
        Subject: CN=B130F9D2FEC57D4607922082A84948F0AA05FB1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:94:ef:22:60:4e:56:4d:41:8c:52:69:77:93:
                    06:28:96:b0:31:24:3e:e1:2d:68:d6:84:38:bb:38:
                    98:3f:d0:ea:0d:b5:d5:56:9e:91:8c:6e:c8:ec:b1:
                    08:d8:fe:96:8d:61:a4:2b:80:49:22:27:6f:8a:72:
                    8f:f1:25:3a:d5:ae:5d:cb:14:4a:43:79:37:a9:3f:
                    00:c9:f7:3d:bf:57:82:42:3f:0d:f9:f0:b5:27:dc:
                    ed:e5:30:b7:3f:98:25:48:3c:50:14:43:af:69:ef:
                    2b:02:1d:ab:5c:81:b3:09:ab:f2:d7:b8:3c:6f:92:
                    38:b6:7a:db:c1:f6:93:71:04:08:46:86:e8:e3:81:
                    36:26:41:5f:95:65:fd:26:86:5f:eb:90:93:c0:36:
                    c9:e6:1e:7e:11:8c:a2:7f:00:8d:6e:c7:98:8e:4b:
                    e8:d8:75:21:b2:35:33:d7:77:2a:2c:bc:ed:78:ed:
                    1c:b7:d3:f3:1f:48:d8:16:c3:bf:cd:a1:ed:0a:d6:
                    5e:39:9d:3a:61:e5:07:04:db:5d:30:1d:23:ba:ea:
                    31:48:c8:50:c0:7f:ef:fd:f3:c2:4c:5b:4a:60:c6:
                    a6:52:91:af:5f:ee:0c:6b:5f:61:57:6a:b3:6c:0b:
                    94:fc:7d:f8:3f:9c:70:2b:24:01:ff:1e:db:85:22:
                    85:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:30:F9:D2:FE:C5:7D:46:07:92:20:82:A8:49:48:F0:AA:05:FB:1C
            X509v3 Authority Key Identifier:
                keyid:01:62:FB:1D:75:47:0A:2F:01:32:6C:3F:B9:4D:24:AE:03:6C:D5:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/0162FB1D75470A2F01326C3FB94D24AE036CD51B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0162FB1D75470A2F01326C3FB94D24AE036CD51B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/0162FB1D75470A2F01326C3FB94D24AE036CD51B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c4:52:8d:3c:6e:81:66:dd:ae:3f:47:27:f9:9c:68:4d:e6:
         a9:ff:2c:d1:9d:5b:7f:21:c5:21:c1:54:9d:9a:8e:4f:c9:41:
         b0:f2:50:48:9f:8e:48:ee:ea:f6:10:c5:bf:84:2e:73:1e:b7:
         8f:a7:77:43:f0:ee:3e:7a:d9:55:85:a9:0d:7d:03:f1:d1:e7:
         ab:0c:97:01:8f:dd:36:2d:2a:2a:bf:c5:98:82:29:67:68:b2:
         49:3e:df:1c:86:69:9e:f8:a5:71:00:48:75:5b:71:d4:1e:68:
         40:b9:20:db:98:21:bc:68:96:9f:10:d8:07:eb:d9:fa:1f:0a:
         75:6f:8f:ee:3f:3d:91:0a:c2:9c:56:7c:1a:a1:ce:08:f5:26:
         44:b6:22:30:cb:17:1b:47:6f:58:5a:94:d3:31:18:0d:99:01:
         91:d5:f5:89:38:de:93:70:3e:69:d5:b1:51:c3:31:18:fb:c6:
         f1:6f:7b:8a:63:6e:a1:82:7b:29:a2:08:08:15:0e:6f:07:a3:
         18:50:5e:0f:a1:48:fb:6b:c0:5f:eb:8d:60:6e:ed:e2:d1:81:
         9f:c1:80:93:1e:27:e3:78:42:f1:cd:84:fd:a9:61:a8:f6:69:
         36:26:16:d4:9f:18:c6:79:98:2f:41:3e:4e:6c:ce:f5:43:0f:
         b6:f2:f7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:17:08 2026 by rpki-client