Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft
File:                     0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft (raw, json)
Hash identifier:          Aw++3lO2MAuYBfao0cq7UKXzcVScJN06izWS04Ww8ak=
Subject key identifier:   41:56:A0:AF:F9:4D:0F:15:E1:81:A7:D4:19:02:3A:43:A3:79:25:DB
Authority key identifier: 0D:3C:CC:7A:B1:67:58:20:A7:FD:BC:CF:45:02:97:1C:50:B5:29:F6
Certificate issuer:       /CN=0D3CCC7AB1675820A7FDBCCF4502971C50B529F6
Certificate serial:       27DABD462750B96722191FEC6C17B3DBE6AD5C7F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft
Manifest number:          BE
Signing time:             Sun 20 Sep 2026 20:52:44 +0000
Manifest this update:     Sun 20 Sep 2026 20:47:44 +0000
Manifest next update:     Mon 21 Sep 2026 22:45:44 +0000
Files and hashes:         1: 3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa (hash: juymzIKjppYynqQQ7FDS68cI4msLoCrbwsScpp65U+4=)
                          2: 0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.crl (hash: a57/RX4zPyS3VZ4KcuaL0Fye9pF4Z455c3mT6yiCjRk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.crl
                          rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 22:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:da:bd:46:27:50:b9:67:22:19:1f:ec:6c:17:b3:db:e6:ad:5c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D3CCC7AB1675820A7FDBCCF4502971C50B529F6
        Validity
            Not Before: Sep 20 20:47:44 2026 GMT
            Not After : Sep 21 22:45:44 2026 GMT
        Subject: CN=4156A0AFF94D0F15E181A7D419023A43A37925DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c6:f1:52:3f:bf:ca:89:07:f7:f8:1a:4b:5e:
                    bb:c7:e6:4a:91:d9:87:4a:a4:da:c0:34:ac:7d:c8:
                    61:b1:39:a4:53:b2:98:71:8d:44:4b:5a:3c:99:95:
                    c5:c2:2e:c6:18:44:ba:1b:c0:7d:f5:ec:f9:81:63:
                    df:0e:3b:95:f5:bb:32:36:c2:95:86:e6:ca:ac:e3:
                    70:1b:dd:cf:d6:4f:f2:06:fc:98:da:ac:9d:c1:c0:
                    c2:33:b6:ca:6c:74:4a:88:ff:74:51:7e:39:62:e7:
                    d4:88:dd:e8:ef:4b:e4:eb:04:dd:5e:f5:86:83:52:
                    77:a4:15:ff:89:14:43:0f:9a:0f:07:74:b2:14:02:
                    c5:83:e2:b9:05:14:af:87:91:a0:ad:38:53:e6:66:
                    9e:d5:d0:46:f4:f4:4b:d8:98:24:62:58:e9:d3:91:
                    fc:72:81:8f:c8:b0:e6:f7:de:37:9f:55:87:e7:88:
                    7d:8e:d8:aa:87:0d:ec:3d:5d:69:95:47:da:c7:b5:
                    9b:1c:dd:1d:73:d9:cb:20:0b:2a:10:e9:00:55:a2:
                    30:dd:72:a6:e8:86:48:b7:87:7c:7c:8c:7f:04:52:
                    30:e4:d8:32:7a:4a:bf:fa:1e:83:ed:3c:da:c1:e9:
                    bb:0b:fe:e3:9c:fc:db:1f:ea:13:70:33:fb:82:20:
                    1d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:56:A0:AF:F9:4D:0F:15:E1:81:A7:D4:19:02:3A:43:A3:79:25:DB
            X509v3 Authority Key Identifier:
                keyid:0D:3C:CC:7A:B1:67:58:20:A7:FD:BC:CF:45:02:97:1C:50:B5:29:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c2:03:c2:45:8a:a7:c5:72:96:0b:b2:e3:f0:94:f5:3e:b8:
         b7:5e:07:fd:0c:c1:78:c8:16:77:93:3a:29:ea:b8:cf:8d:10:
         02:e1:ba:b0:03:28:19:72:be:63:f8:07:96:79:b0:d7:a1:39:
         ba:5c:ae:9c:00:bc:82:66:b0:3b:3a:5a:4e:3a:2a:42:91:e7:
         99:e9:87:0d:74:9e:35:90:09:20:6d:96:35:c0:a6:97:92:e6:
         56:1f:07:1e:80:bf:ca:01:c5:4b:5d:86:a8:60:19:65:eb:71:
         67:15:c9:45:c2:a2:49:68:47:29:f3:b8:9a:09:98:a5:53:ba:
         96:1d:2f:ae:da:36:a8:58:f6:cc:63:ce:42:f7:9b:76:70:70:
         66:b6:67:c7:04:2a:7f:ba:85:7e:5c:ce:9b:a5:60:c6:5d:76:
         62:35:c5:a1:64:62:05:ca:30:e5:86:ee:a2:fe:5c:af:96:26:
         10:ce:da:4c:34:a4:d1:65:40:25:77:9b:44:a3:f4:f4:65:38:
         9c:b5:d8:b8:a4:94:a8:76:e4:a4:fc:0b:69:72:76:ad:fc:7a:
         91:0d:22:dc:49:40:43:61:7d:ac:ac:c2:3e:0b:b5:0c:e1:c1:
         f6:9d:f4:0a:35:6f:e7:d4:61:db:2b:d4:70:57:16:c9:c4:aa:
         30:36:c9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:21:23 2026 by rpki-client