Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft
File:                     02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft (raw, json)
Hash identifier:          8ziKYNFFF0MlXwQqGptUqzZMrY+GCowPRpuVPAk1v9M=
Subject key identifier:   DE:AC:21:4F:F4:49:85:19:59:2B:5E:8B:68:2A:53:9D:D4:71:AC:E7
Authority key identifier: 02:A3:40:15:CF:1F:98:FC:B2:24:0C:5F:C9:1E:82:6B:CA:AE:C1:67
Certificate issuer:       /CN=02A34015CF1F98FCB2240C5FC91E826BCAAEC167
Certificate serial:       7748BDD9AFC0808E1826DC8AC8A3E3104ECFC5B1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft
Manifest number:          BE
Signing time:             Sun 20 Sep 2026 16:17:09 +0000
Manifest this update:     Sun 20 Sep 2026 16:12:09 +0000
Manifest next update:     Mon 21 Sep 2026 19:25:09 +0000
Files and hashes:         1: 3130332e3138352e3235322e302f32342d3234203d3e20313439393132.roa (hash: oJ8l8dMFPY8CyTy4Q0yxOCLUg4RyDgditXXqmbGk6Sg=)
                          2: 02A34015CF1F98FCB2240C5FC91E826BCAAEC167.crl (hash: 4BW2rRt8LbOVqEMQmdisKT6fUvSHxk+MVIIkPzSPah0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.crl
                          rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 17:28:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:48:bd:d9:af:c0:80:8e:18:26:dc:8a:c8:a3:e3:10:4e:cf:c5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A34015CF1F98FCB2240C5FC91E826BCAAEC167
        Validity
            Not Before: Sep 20 16:12:09 2026 GMT
            Not After : Sep 21 19:25:09 2026 GMT
        Subject: CN=DEAC214FF4498519592B5E8B682A539DD471ACE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:93:c8:fd:22:b9:10:1f:f2:ce:19:33:b1:52:
                    ec:dd:a0:34:4b:ad:00:9b:f1:41:c8:3e:4f:fb:92:
                    ba:ce:d9:0f:0f:d5:38:07:f8:eb:7b:87:bf:43:d4:
                    a1:74:ab:81:ca:be:7a:cb:20:1e:51:21:1f:45:d9:
                    bc:49:27:e4:ba:60:c1:93:75:d4:dc:03:86:7c:9f:
                    3c:aa:64:c0:f0:2d:61:7b:95:ae:9a:23:4e:19:a4:
                    b3:8d:ed:41:ca:3a:33:6d:8d:c6:58:37:b4:b0:b6:
                    50:da:92:54:23:9c:82:6b:f7:ff:cb:2d:97:21:9a:
                    d4:74:f2:0b:52:3c:fc:90:1c:43:3e:5a:ca:d6:5f:
                    98:6d:e5:65:5a:fe:93:20:b6:0a:39:f6:f8:e6:ac:
                    32:95:a5:52:2e:a9:65:02:0e:17:b0:0d:3d:24:aa:
                    56:b4:8f:89:27:2f:3d:dc:59:1c:0d:90:91:43:9f:
                    c1:51:67:5c:15:0a:56:b8:28:d5:75:a5:fb:ee:64:
                    cb:19:77:cd:42:e4:c5:0a:ef:5a:45:9b:b2:ef:2d:
                    43:14:d3:94:d7:e3:37:fb:01:07:89:6c:ec:73:8b:
                    43:20:24:ae:a6:0a:44:76:9b:4e:bf:c7:42:0a:70:
                    eb:e6:91:15:68:b2:a9:2c:08:c2:ce:09:5e:75:47:
                    35:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AC:21:4F:F4:49:85:19:59:2B:5E:8B:68:2A:53:9D:D4:71:AC:E7
            X509v3 Authority Key Identifier:
                keyid:02:A3:40:15:CF:1F:98:FC:B2:24:0C:5F:C9:1E:82:6B:CA:AE:C1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a8:74:1a:56:f4:ca:ca:0d:b7:5a:b7:b9:17:d3:c8:0f:c3:
         64:59:ed:8c:1d:04:f4:61:2e:14:59:80:cb:0e:3d:74:35:18:
         64:b3:13:11:55:76:fd:30:0b:dd:b6:e4:b2:48:88:e8:33:a0:
         f0:4b:2a:5f:00:88:f5:f1:9c:89:9a:ed:16:d1:7e:8d:44:4c:
         7c:f7:8c:b8:81:6b:ed:8e:44:8d:e2:28:3b:d6:86:69:29:6e:
         2e:5a:a5:6f:ce:3a:61:1b:5e:e0:ff:d2:a6:b4:d5:a1:c6:81:
         0d:1a:8c:c3:f0:91:a6:67:75:0b:6a:35:30:ef:dc:6e:4e:c6:
         ea:2c:c6:10:81:88:fc:2f:e3:b1:03:fe:1f:bf:80:e1:c5:f3:
         50:81:3c:16:e0:28:f2:74:c1:b9:6c:48:e9:53:8f:03:49:8e:
         d9:40:80:e1:78:0c:3c:ea:7e:11:94:39:a5:bc:57:c9:0b:e0:
         b4:49:ab:29:f5:05:8a:6b:0e:cf:e5:0d:c2:dc:43:49:41:46:
         f4:3e:87:c3:0c:47:61:ba:06:a0:50:9e:f0:71:9c:19:03:eb:
         3c:30:d9:e7:aa:cb:3b:2d:20:cb:db:62:ca:40:c8:55:5f:13:
         e2:96:d5:51:90:02:9c:af:a8:cc:45:1a:70:c0:b5:8a:70:e1:
         11:29:94:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:05:47 2026 by rpki-client