Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
File:                     4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft (raw, json)
Hash identifier:          n9+pvrBn809qi06dz0pAmoNtbadcvkAl3uSKU1LK4lo=
Subject key identifier:   46:25:BC:14:47:48:86:E6:A1:BB:A5:D4:08:07:08:43:56:B9:FC:CB
Authority key identifier: 4A:E1:58:1E:C7:DF:E6:5F:5E:99:AA:61:34:75:D8:54:28:08:C4:6A
Certificate issuer:       /CN=4AE1581EC7DFE65F5E99AA613475D8542808C46A
Certificate serial:       6A03FAEB5628779EE1D5CE307534DC3305D187F9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 14:34:34 +0000
Manifest this update:     Mon 21 Sep 2026 14:29:34 +0000
Manifest next update:     Tue 22 Sep 2026 15:57:34 +0000
Files and hashes:         1: 4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl (hash: bVyTTCia3vFcN7vWiK8XB1nqKRK1r1T7+mUldWM5XUM=)
                          2: 3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa (hash: Tkh0+XsPVTypniidThAuJHBFvt6qbkv8XEWtO3EZhzc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl
                          rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:03:fa:eb:56:28:77:9e:e1:d5:ce:30:75:34:dc:33:05:d1:87:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AE1581EC7DFE65F5E99AA613475D8542808C46A
        Validity
            Not Before: Sep 21 14:29:34 2026 GMT
            Not After : Sep 22 15:57:34 2026 GMT
        Subject: CN=4625BC14474886E6A1BBA5D40807084356B9FCCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3b:3f:01:58:6d:6e:13:2f:39:55:18:ad:e8:
                    00:7b:49:d9:fc:ac:3c:b6:41:54:0a:2c:25:8b:3e:
                    67:ac:8d:24:a5:ab:a8:b4:f6:9f:9f:14:82:20:c1:
                    3c:c1:8f:4e:40:2f:c0:3c:e9:dd:a9:32:ea:0f:a2:
                    20:10:82:15:6a:91:1b:b7:45:34:18:70:a8:47:43:
                    fb:36:14:fb:61:c9:91:c5:76:65:67:4f:ec:19:9e:
                    42:df:4b:d5:9e:5d:d6:6a:3c:75:d2:c5:d2:56:42:
                    bc:12:88:bc:d1:f0:f3:f3:f9:26:1b:24:fe:6b:d0:
                    27:fb:bd:a7:96:15:5c:3a:8e:4a:39:fa:6c:b0:4c:
                    fb:44:48:f4:e1:74:2b:e9:fd:8c:3e:54:2a:d9:d6:
                    04:48:38:89:a3:ae:a4:2c:0c:85:50:e8:7a:0a:00:
                    27:20:be:fc:d0:56:03:e1:f8:c4:00:52:84:07:e3:
                    2a:1a:37:28:3f:96:47:c3:3e:84:89:94:6b:37:99:
                    2d:9b:2b:09:66:0d:ac:5c:44:e4:03:d9:13:c9:5a:
                    24:0a:19:76:d9:de:fd:2e:f9:5e:c0:1c:be:d7:d8:
                    aa:b8:04:f1:2f:30:4b:7c:c5:2a:c9:6b:be:82:38:
                    8b:4c:e7:66:83:ae:d5:bc:2e:8e:03:0e:0e:eb:07:
                    b2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:25:BC:14:47:48:86:E6:A1:BB:A5:D4:08:07:08:43:56:B9:FC:CB
            X509v3 Authority Key Identifier:
                keyid:4A:E1:58:1E:C7:DF:E6:5F:5E:99:AA:61:34:75:D8:54:28:08:C4:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:82:de:a8:37:c5:bd:07:42:3f:25:53:f5:70:08:91:77:a5:
         0b:22:31:ea:2c:43:2b:fe:68:0c:43:e3:b9:af:90:fa:45:4c:
         23:14:99:ba:d9:6b:5a:84:ab:f7:81:d4:9d:d1:a3:91:ae:22:
         9b:9b:4d:7f:b3:67:aa:9e:31:a1:39:8f:d9:32:db:26:75:ae:
         ce:70:4e:f2:cb:2f:ba:2b:8f:85:15:f3:83:c5:00:00:69:c9:
         b9:fc:ea:3c:97:86:a6:08:6f:ae:57:90:f7:7b:3b:ba:d8:d2:
         e0:2e:44:e9:10:14:7c:64:c9:7c:3b:77:7d:74:a3:c6:af:b8:
         7e:ab:6d:3f:e4:90:a7:d4:2e:d4:16:42:30:6f:fd:36:64:c3:
         87:af:48:ea:5c:92:b7:a2:76:df:43:92:06:86:f4:59:2a:ab:
         50:98:13:a9:0b:4e:74:38:c9:ae:99:b9:37:4a:bc:74:aa:33:
         01:43:18:20:05:b0:4f:10:00:84:70:f0:b6:76:8c:68:bf:cb:
         c0:2a:5b:20:06:6a:fe:26:fb:9d:37:ba:b2:65:b5:4f:50:e7:
         c9:96:aa:0c:23:21:ea:94:e5:66:f9:e6:ec:3e:97:77:49:69:
         c9:c4:35:54:9d:24:36:cb:a8:a3:f3:f8:9a:59:a2:cf:c4:c0:
         5c:03:ea:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:44:12 2026 by rpki-client