Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft
File:                     A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft (raw, json)
Hash identifier:          JG6f8/FRIJQY/7JRbNNSVGdyigMKcgedninxipBMiyI=
Subject key identifier:   A1:07:68:67:62:B2:A0:BF:9E:34:1B:0A:E7:06:12:75:11:38:62:4B
Authority key identifier: A4:3C:61:0C:15:26:2A:F1:F9:93:3E:16:0A:30:AE:3D:98:59:DD:A3
Certificate issuer:       /CN=A43C610C15262AF1F9933E160A30AE3D9859DDA3
Certificate serial:       3D24A156003656BD3B1D263C7B43AF15995290D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A43C610C15262AF1F9933E160A30AE3D9859DDA3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft
Manifest number:          BF
Signing time:             Mon 21 Sep 2026 19:25:30 +0000
Manifest this update:     Mon 21 Sep 2026 19:20:30 +0000
Manifest next update:     Tue 22 Sep 2026 23:07:30 +0000
Files and hashes:         1: 3130332e3131332e32362e302f32342d3234203d3e20313337333339.roa (hash: YWJzGjODoThVoKPyccsDqAnY6JX/6P8ILYIH216SRNI=)
                          2: A43C610C15262AF1F9933E160A30AE3D9859DDA3.crl (hash: GnNeq7pInw0Wqnt+RHUBeb5qzESSJtAsT9FMxT4e9sA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.crl
                          rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A43C610C15262AF1F9933E160A30AE3D9859DDA3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 23:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:24:a1:56:00:36:56:bd:3b:1d:26:3c:7b:43:af:15:99:52:90:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43C610C15262AF1F9933E160A30AE3D9859DDA3
        Validity
            Not Before: Sep 21 19:20:30 2026 GMT
            Not After : Sep 22 23:07:30 2026 GMT
        Subject: CN=A107686762B2A0BF9E341B0AE70612751138624B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fa:3f:0e:1f:11:69:f6:b9:04:cc:23:7c:f8:
                    ad:37:16:87:cb:c8:2e:ba:1e:06:54:85:ec:f9:b0:
                    b7:9b:9e:94:e1:55:2e:3b:d5:69:96:a1:bf:ef:48:
                    81:eb:77:99:a8:e0:ad:ce:50:9a:5a:ce:01:93:b4:
                    40:83:3d:20:36:50:29:1b:77:61:d6:b5:f8:ab:5e:
                    ee:97:2b:4a:a5:7a:76:a9:7e:32:50:b0:96:99:21:
                    e5:c1:5c:a6:9c:bd:99:2c:28:7d:14:ab:79:ea:85:
                    d9:e9:47:6e:4a:44:40:e2:c2:18:c3:26:50:7e:dd:
                    a0:a3:0d:5d:95:67:3d:a4:f9:b8:47:e4:61:92:86:
                    04:b1:89:42:b7:53:2e:cb:93:44:ce:36:ac:c8:26:
                    0d:84:db:1a:1e:1f:fe:81:db:bf:da:90:70:39:92:
                    3d:16:1e:83:79:18:f2:d6:bc:5e:81:cd:63:93:2b:
                    7a:26:96:f1:3a:54:06:1b:21:78:4d:ef:47:a4:d1:
                    09:ee:de:9e:42:96:3e:36:2e:f3:75:88:65:28:ba:
                    c6:fc:fb:3a:07:dc:84:a1:0b:0b:6c:1a:db:6e:0b:
                    01:c5:ae:ee:19:82:0c:7b:c3:09:1b:2d:9f:05:2d:
                    d0:ea:b7:36:99:5f:37:1e:be:ad:c3:e6:6f:47:b9:
                    b6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:07:68:67:62:B2:A0:BF:9E:34:1B:0A:E7:06:12:75:11:38:62:4B
            X509v3 Authority Key Identifier:
                keyid:A4:3C:61:0C:15:26:2A:F1:F9:93:3E:16:0A:30:AE:3D:98:59:DD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A43C610C15262AF1F9933E160A30AE3D9859DDA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:b5:e7:ef:33:7f:d6:7c:80:40:c5:76:33:d0:f4:7b:0b:e2:
         3e:ed:ec:8d:f5:2d:f0:ba:6a:2c:84:7b:15:da:09:02:0f:a1:
         fd:e7:3e:d6:54:81:6c:07:48:13:4c:f4:b7:c6:d9:75:c6:59:
         6a:29:f2:86:ec:08:a1:a5:a0:56:c5:ae:fe:53:2e:10:45:02:
         2e:42:de:99:02:e2:b8:b5:6d:a2:bc:59:bd:ef:0f:c3:0c:48:
         d4:60:3f:2a:3c:b4:f7:52:5f:bd:e7:29:ef:3c:20:4c:ee:12:
         3c:37:cc:bc:62:f2:51:b4:27:58:a4:6b:cc:c6:e0:d0:a2:74:
         51:e1:96:81:e9:d3:c3:d5:d6:38:aa:b6:86:fd:98:de:6a:a8:
         b9:92:90:a2:71:4a:19:e6:55:47:5f:f3:4c:a6:3c:94:d6:11:
         f9:25:e9:b7:8e:38:16:2c:99:f9:b7:38:c8:f7:47:f4:fd:f0:
         66:72:15:fd:37:8b:3e:16:d6:8d:c1:fa:09:42:67:b4:4c:e4:
         70:29:80:ee:08:fa:5d:4c:c9:e3:f8:80:a3:65:07:5b:31:20:
         6c:7f:38:1c:77:ee:f3:46:d5:a9:00:8c:e3:a9:58:a8:98:af:
         ac:7f:46:8b:1f:58:bc:62:39:05:c6:20:05:bd:4f:4a:c5:56:
         8b:74:8c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:27:48 2026 by rpki-client