Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft
File:                     FBA3638DA562505698B924E173281E46359B1617.mft (raw, json)
Hash identifier:          DpIcyQeeliuuy6GTh/mjuHWflZSe5fOogNUPrJ3DscI=
Subject key identifier:   FF:EA:B1:18:4C:E7:19:7B:68:45:F9:17:32:16:03:E8:C2:30:A7:E3
Authority key identifier: FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17
Certificate issuer:       /CN=FBA3638DA562505698B924E173281E46359B1617
Certificate serial:       503206FA17D253A3750CED15086C1D7FBFDB50A6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 18:19:16 +0000
Manifest this update:     Mon 21 Sep 2026 18:14:16 +0000
Manifest next update:     Tue 22 Sep 2026 20:12:16 +0000
Files and hashes:         1: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (hash: 5FPAtwhecwsubL80r6cuw6LZHftwyRq85ZxJM6Kqd/0=)
                          2: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (hash: tNCHVLpKWfY3fZ8ZfZRRYmaRD6tD5GGqANd/n3olcLk=)
                          3: 3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (hash: aWv2LNdALgBBdR5J3vxMwq5LFZy/FvWsDrFbKxxFcx4=)
                          4: FBA3638DA562505698B924E173281E46359B1617.crl (hash: DxUrln6yG5XKwlVexBirHAuYcLXwiUt9jOKzF0Hr+1U=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.crl
                          rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 20:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:32:06:fa:17:d2:53:a3:75:0c:ed:15:08:6c:1d:7f:bf:db:50:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBA3638DA562505698B924E173281E46359B1617
        Validity
            Not Before: Sep 21 18:14:16 2026 GMT
            Not After : Sep 22 20:12:16 2026 GMT
        Subject: CN=FFEAB1184CE7197B6845F917321603E8C230A7E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:56:4c:68:8e:a8:5f:f4:eb:17:06:f2:16:
                    29:2e:1c:b9:72:90:b9:b1:75:23:ca:b1:fb:5a:39:
                    45:2c:da:78:3b:25:d0:2f:fb:50:41:6d:6d:f4:5b:
                    1e:aa:7a:10:f7:fd:72:f6:88:5b:fd:dc:ab:4e:8a:
                    b0:7e:eb:3a:05:dc:4d:e2:eb:16:8a:5b:3d:07:61:
                    55:c0:f2:6d:17:85:63:4a:8c:36:5d:61:fe:d9:65:
                    c4:cc:af:6b:5b:9d:50:8c:dd:b5:b1:1a:28:93:5e:
                    33:71:2f:36:a3:80:7b:93:70:ac:1d:84:ee:81:60:
                    67:ff:8f:94:bf:e1:45:75:16:d1:8a:cd:3e:7e:7e:
                    7b:dd:9f:8a:8a:09:0b:88:c1:86:b1:d0:72:b9:bf:
                    8c:fd:57:76:ec:10:11:f6:95:d0:d6:95:0a:56:97:
                    03:5c:e9:ce:15:63:ae:8b:91:0c:b1:7c:1a:3e:dc:
                    45:f5:dc:80:b0:1e:05:a1:27:3c:72:64:5e:9b:83:
                    74:3f:90:70:e2:dd:3e:ec:8d:f6:e4:8f:29:35:71:
                    da:2d:6d:e9:c4:95:a0:d7:a5:49:bf:b5:eb:12:81:
                    6d:af:b9:2f:2c:7b:d0:9e:c1:ff:64:c9:81:73:fb:
                    f4:b7:ab:23:7a:2b:cf:b1:7b:05:58:ab:fb:5a:7b:
                    78:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EA:B1:18:4C:E7:19:7B:68:45:F9:17:32:16:03:E8:C2:30:A7:E3
            X509v3 Authority Key Identifier:
                keyid:FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:0c:5f:35:d6:fe:fa:41:f6:92:66:3c:7a:d3:34:c8:57:24:
         3f:90:60:4a:72:39:8c:8b:2a:3b:f7:0b:e2:73:36:c7:e9:a7:
         8e:af:1d:0e:1c:c0:39:2d:0f:fa:a9:b4:70:c3:dd:66:00:18:
         7e:0d:25:5f:5f:9c:10:d7:f3:01:f4:12:bd:ad:e3:d5:60:16:
         bf:16:67:8d:99:90:b2:53:44:77:41:76:4a:dd:c8:b3:57:9b:
         ee:63:36:2f:53:c4:33:ca:93:c6:54:9f:0b:8f:43:9c:d0:06:
         7e:81:03:d1:63:a9:e5:95:73:07:12:7d:49:db:c8:9c:3f:61:
         59:ef:44:8f:68:07:d6:45:8d:26:e9:08:81:da:65:2f:ed:79:
         da:e8:c6:da:11:7a:f1:b3:ed:26:3d:93:c4:80:9a:fe:77:bf:
         c8:2d:05:d3:c8:02:bd:25:a3:93:02:51:41:91:35:8b:d5:0d:
         d3:45:39:98:00:31:8d:29:5c:27:2e:65:91:31:1f:9f:51:65:
         40:fb:cb:09:c0:57:63:1d:bf:84:ed:20:e0:a5:29:14:b5:35:
         c2:3f:16:5b:c0:27:57:a0:6e:a3:e8:8d:10:d9:5d:44:03:fa:
         e8:01:50:4b:5b:d0:71:9a:08:9d:16:6f:46:43:1b:59:d0:09:
         9a:fe:ca:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:22:21 2026 by rpki-client