Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft
File:                     16E36A76C68AD7EF73B872D0A244597711CEC92B.mft (raw, json)
Hash identifier:          /kTaOhP41IQpC75XI/j9lzRtnxsHpESyz2kNVbmJDPs=
Subject key identifier:   FB:6C:5D:60:C6:35:4D:18:5D:3C:D5:C3:62:ED:47:EB:E9:B7:7B:26
Authority key identifier: 16:E3:6A:76:C6:8A:D7:EF:73:B8:72:D0:A2:44:59:77:11:CE:C9:2B
Certificate issuer:       /CN=16E36A76C68AD7EF73B872D0A244597711CEC92B
Certificate serial:       76B6A97D23BB8C591CFE28FDB4A13E82643A139F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft
Manifest number:          A5
Signing time:             Wed 02 Sep 2026 18:04:51 +0000
Manifest this update:     Wed 02 Sep 2026 17:59:51 +0000
Manifest next update:     Thu 03 Sep 2026 20:03:51 +0000
Files and hashes:         1: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: d1VIPUB5246bc9b42k+QQyjwKQyjJBedF26BcXOCp3E=)
                          2: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: EANVJlxEg4YVe0voA5UkBVDWr1/ZEx1MsPgsXOFauYo=)
                          3: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: AGIMZGexipjyvpy+LmJUJY6hAht+8SMw5E+al1hg6Ds=)
                          4: 16E36A76C68AD7EF73B872D0A244597711CEC92B.crl (hash: cq8K3QwEHx5KLyojDDFvOoTujQ6k/aQhv/AdIrhZ0Ts=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.crl
                          rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 20:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b6:a9:7d:23:bb:8c:59:1c:fe:28:fd:b4:a1:3e:82:64:3a:13:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E36A76C68AD7EF73B872D0A244597711CEC92B
        Validity
            Not Before: Sep  2 17:59:51 2026 GMT
            Not After : Sep  3 20:03:51 2026 GMT
        Subject: CN=FB6C5D60C6354D185D3CD5C362ED47EBE9B77B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:90:f3:7f:51:17:1b:3e:f8:6c:91:ff:ce:21:
                    75:54:2a:02:3b:49:9e:c5:5c:66:fe:5d:8c:71:8c:
                    dd:b2:31:bb:42:7a:13:56:49:fa:cf:b3:18:8b:db:
                    e9:79:e0:58:0c:36:30:8a:84:c4:9c:99:81:5d:b0:
                    ee:19:a5:6d:eb:28:26:7a:b7:49:ba:d0:6b:a2:29:
                    a4:cf:36:2e:85:a0:d8:63:69:06:d6:ce:d9:db:94:
                    f3:6a:bb:0a:49:83:57:99:4e:62:8d:4d:8f:e3:0d:
                    13:00:37:4b:62:a9:67:43:ff:7d:6c:ee:cb:ab:85:
                    55:d8:6e:e1:8b:8e:c0:b9:87:64:58:4f:b2:af:91:
                    1f:a2:7b:f8:99:84:3e:b8:7b:c7:0b:6e:59:a3:a2:
                    60:90:66:44:fa:27:f9:da:6c:f0:fb:29:62:d7:e6:
                    eb:20:08:53:d6:52:04:5e:02:aa:38:cb:c6:cb:3b:
                    81:ee:a1:c7:cb:f4:69:5f:5e:c3:48:56:ea:74:5f:
                    3a:88:1c:82:ff:18:5b:21:93:32:40:f0:01:f8:6a:
                    5f:53:b4:d3:32:9b:c3:41:bc:d7:b3:7c:8b:e3:72:
                    01:b6:ef:2f:38:69:30:31:fb:9a:0e:ad:bf:cb:49:
                    71:74:50:e1:f0:5e:b5:dd:24:42:2d:56:a1:e3:8f:
                    ca:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6C:5D:60:C6:35:4D:18:5D:3C:D5:C3:62:ED:47:EB:E9:B7:7B:26
            X509v3 Authority Key Identifier:
                keyid:16:E3:6A:76:C6:8A:D7:EF:73:B8:72:D0:A2:44:59:77:11:CE:C9:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:bc:dd:e2:e6:ed:b8:7d:b7:e3:0c:e8:5e:b4:ce:ce:42:78:
         56:cb:a4:2b:90:20:89:bf:d7:64:d9:8e:2f:35:b9:fa:dd:4b:
         60:f0:02:cc:45:4c:50:2e:69:20:8d:0c:6b:55:d2:46:21:f4:
         59:a5:c1:fd:75:b7:9f:8c:79:b8:a4:5a:20:0e:9b:f7:dd:95:
         37:48:29:05:f2:0c:1b:bb:a0:b0:1c:2f:01:57:5a:fb:13:70:
         1d:50:da:de:c5:b2:5f:1a:07:f8:6c:b2:0d:3f:87:f2:44:e1:
         a7:5f:5a:89:2c:63:9d:e2:37:fe:4e:62:24:9b:75:5a:01:ef:
         4f:a1:45:2e:3b:12:7d:26:99:d2:e6:16:c1:91:7a:16:f8:a8:
         7b:a6:15:83:c9:73:fb:c7:28:cd:7c:52:20:b5:ce:72:72:34:
         da:90:6a:5e:e7:4d:9c:b9:55:c4:d1:9f:c4:32:98:35:20:d0:
         02:bc:fb:6e:88:52:ce:65:7e:f0:0f:4c:da:bd:85:5b:18:aa:
         8c:dd:be:0a:d0:b5:30:75:39:d9:6f:a1:3f:88:1c:9d:87:1e:
         b3:9f:6a:84:fa:ff:7a:07:85:a7:78:93:a9:1f:61:d2:8a:8c:
         3d:ce:80:c1:36:9c:16:28:e6:c2:a9:6e:d5:05:e2:d2:ca:c9:
         a8:66:e8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 06:28:53 2026 by rpki-client