Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft
File:                     45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft (raw, json)
Hash identifier:          p5wpwS+5NlwyaEhRIXb2O5aVbQ7v1bbBMpwHLq52c3A=
Subject key identifier:   BD:2C:E5:08:79:73:53:CD:B6:D3:65:AD:59:9C:61:46:50:2B:B5:DC
Authority key identifier: 45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B
Certificate issuer:       /CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B
Certificate serial:       4A70E645CC28211EC22167633B9454EB909E353C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft
Manifest number:          F4
Signing time:             Sun 01 Nov 2026 23:47:24 +0000
Manifest this update:     Sun 01 Nov 2026 23:42:24 +0000
Manifest next update:     Tue 03 Nov 2026 02:27:24 +0000
Files and hashes:         1: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (hash: CMIcy7X5aCAauqTlERIV8khM7hpSoP3FOk5Ar2k00es=)
                          2: 3130332e3133332e32302e302f32332d3234203d3e20313336383638.roa (hash: hd3heGYgnRZ+Tk6ekukJ3PqnB2LNr3afpBjr80SK/bw=)
                          3: 3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (hash: fCLagHzLZSaa2cnRaKpFh16Ous6QosiWWcEmtC91g9A=)
                          4: 45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl (hash: yxxg9K3XmKJ/aLpECWr9HxsE4/C4xwaVdgpnQj5gr1Y=)
                          5: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (hash: 90yPyuCjRCD5lGn6lVhrYkuTOFFoJv0X9oFwGz4Y7ak=)
                          6: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (hash: gn2qTVHIkC7GBmvI9sm3mViU/5rk6Ham6sDiRDMn4HI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl
                          rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 02:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:70:e6:45:cc:28:21:1e:c2:21:67:63:3b:94:54:eb:90:9e:35:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B
        Validity
            Not Before: Nov  1 23:42:24 2026 GMT
            Not After : Nov  3 02:27:24 2026 GMT
        Subject: CN=BD2CE508797353CDB6D365AD599C6146502BB5DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:1e:1c:a5:5c:11:ae:db:8f:a1:12:d6:55:
                    91:e9:08:b5:c2:21:4b:b8:fa:7a:c0:19:50:02:c9:
                    4f:b7:4a:fd:6a:3d:b0:84:f0:22:c4:ec:06:3b:ae:
                    ac:a6:b3:aa:eb:25:9c:6b:bb:ff:f6:02:fb:39:f9:
                    15:23:d9:4b:6c:b6:c1:e7:e5:20:81:e4:8d:ad:d2:
                    16:73:1c:28:45:8a:ba:45:fd:02:6e:80:f6:22:91:
                    a9:db:84:64:cb:45:d4:5d:92:e5:58:e1:49:ea:e8:
                    25:e5:6c:9d:4d:10:f1:bf:ce:6a:fc:f2:3b:55:b2:
                    3e:2f:45:5e:37:e0:c6:50:8c:42:a2:0f:e9:40:ba:
                    e7:99:45:5c:c4:39:33:27:cf:b2:df:6c:d3:ba:f9:
                    75:35:fc:98:5e:1b:ed:a0:f2:97:fe:b2:a0:f5:e6:
                    31:7c:03:c5:09:b8:85:e5:38:46:34:f8:78:54:90:
                    0c:31:ae:84:0e:21:9c:3e:d5:f1:97:50:aa:45:9c:
                    17:a0:08:f9:eb:fb:a6:60:4f:1c:c4:15:20:31:a2:
                    92:33:5a:80:84:a3:8c:a2:dc:19:9f:f8:5e:cf:8f:
                    07:b9:36:09:fd:ae:98:28:60:2e:e9:0d:9b:03:f1:
                    71:42:a5:1d:e0:be:e9:b4:4d:bf:24:05:28:c6:8b:
                    df:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2C:E5:08:79:73:53:CD:B6:D3:65:AD:59:9C:61:46:50:2B:B5:DC
            X509v3 Authority Key Identifier:
                keyid:45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:42:50:87:3b:94:10:fc:5c:9d:91:84:0f:86:bf:bd:50:75:
         3f:1b:49:66:64:3d:55:d8:4d:a4:cf:26:95:0b:0d:32:ae:57:
         49:86:9b:62:2b:9e:0f:1c:08:a2:d8:33:d0:f1:96:6e:2c:51:
         8c:2e:05:ed:3f:39:e6:a5:3a:82:e6:87:80:81:e7:3e:e7:6e:
         b6:b5:d9:bf:0f:2a:7b:bf:07:f4:04:40:f9:f0:a3:73:b5:82:
         cc:1c:d0:c5:d3:8f:1a:72:24:cf:bf:d2:17:3d:91:a0:fc:a8:
         e4:cf:50:67:36:4f:29:09:c9:a6:71:2a:25:11:95:14:78:e2:
         f6:26:0c:45:5d:a0:49:72:51:11:c6:19:da:19:12:e4:2e:14:
         f8:86:3d:82:73:8a:74:c4:02:e7:12:7f:bb:c0:2d:22:23:dd:
         9b:29:78:4c:4c:3c:b9:53:e9:34:76:37:1d:03:40:a0:cd:07:
         27:ab:b1:d9:76:c7:82:50:0d:5e:ec:91:eb:28:0a:e6:d0:4a:
         f2:b6:bf:f4:c6:36:db:c8:d9:0b:e2:f0:86:bc:7a:84:f0:07:
         ac:53:a6:8a:da:83:67:18:20:b6:ea:2c:bc:c8:4c:42:f5:d9:
         06:a8:e0:c3:9c:e3:08:9d:58:c1:30:b4:70:b2:44:11:8d:25:
         20:10:ea:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 10:15:07 2026 by rpki-client