Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft
File:                     1CCC9F903B0797259D4851831FDB74E850E28573.mft (raw, json)
Hash identifier:          POWXL2qwevgnNeVowGuOPW5DP0I/XnXTmfUKSkp24Jw=
Subject key identifier:   2B:6C:E2:BF:E9:27:FF:AD:CD:20:5B:D0:1B:E8:C5:08:1C:B3:39:DD
Authority key identifier: 1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73
Certificate issuer:       /CN=1CCC9F903B0797259D4851831FDB74E850E28573
Certificate serial:       7BFE63DCDCA1993735FD5A5FB4BA4077DEC21D0B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft
Manifest number:          E1
Signing time:             Sun 18 Oct 2026 13:05:39 +0000
Manifest this update:     Sun 18 Oct 2026 13:00:39 +0000
Manifest next update:     Mon 19 Oct 2026 13:10:39 +0000
Files and hashes:         1: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: 1QSTMTha75VQUavzNrm00rtAo2y/e9vazzdx0pcZJXk=)
                          2: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: zB+Gp09Xv+ze/cWNBFwHk3DIfApc6pdj5NfB2Dg0qyE=)
                          3: 1CCC9F903B0797259D4851831FDB74E850E28573.crl (hash: orz5DJmCnQ62mZLNyIJQlZrdDPAmH+zBRjIDjFNPo4U=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl
                          rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 13:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fe:63:dc:dc:a1:99:37:35:fd:5a:5f:b4:ba:40:77:de:c2:1d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CCC9F903B0797259D4851831FDB74E850E28573
        Validity
            Not Before: Oct 18 13:00:39 2026 GMT
            Not After : Oct 19 13:10:39 2026 GMT
        Subject: CN=2B6CE2BFE927FFADCD205BD01BE8C5081CB339DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:d3:a6:9b:cd:41:33:6e:8c:34:62:f1:74:
                    6d:a8:0a:80:06:bf:e3:01:cb:4e:5c:be:39:24:41:
                    59:da:23:b5:62:c8:1e:0e:62:4c:f1:61:d2:ff:af:
                    b4:e2:ab:5f:eb:cc:94:67:1e:22:56:b6:61:4c:7a:
                    b7:79:bb:bd:ac:92:6f:91:78:75:5b:6c:dd:6d:96:
                    53:ac:33:54:c4:c2:68:75:48:89:a2:59:10:4f:ee:
                    30:02:0f:09:19:d1:8b:0a:69:db:06:29:b5:af:7c:
                    55:8f:b6:72:f6:70:18:6a:b4:39:77:c4:68:f3:62:
                    8a:f4:5d:3e:d7:12:f3:6b:f4:ae:aa:90:f1:36:35:
                    9b:10:fa:0a:c0:90:e5:b3:93:3e:54:4c:31:4c:b4:
                    4d:95:d9:7a:29:7e:30:9c:e0:88:4d:c0:6f:9f:cd:
                    ad:fd:84:45:db:de:19:5d:ce:dc:8a:e2:23:3a:aa:
                    65:6d:05:ba:ff:58:e0:46:5c:0f:b9:60:de:13:f6:
                    03:90:69:ac:a9:aa:ce:9c:24:1d:3b:73:8f:d6:fa:
                    58:8c:15:03:01:f6:27:4f:4f:fd:ab:6e:ad:fd:fe:
                    47:8c:44:ae:74:cf:28:f1:6c:ff:61:f1:15:4b:fa:
                    19:e6:2a:3f:af:5e:96:11:8e:07:2c:95:16:80:f9:
                    61:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6C:E2:BF:E9:27:FF:AD:CD:20:5B:D0:1B:E8:C5:08:1C:B3:39:DD
            X509v3 Authority Key Identifier:
                keyid:1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:0d:09:e5:03:2c:e8:bc:76:66:7c:f8:4a:50:86:4f:f2:65:
         30:da:4e:61:7b:f5:7b:0c:cf:8a:88:89:32:12:98:38:95:b3:
         a7:61:7f:39:77:11:95:1e:a8:cc:93:e7:c9:02:0a:25:d1:6a:
         8e:9e:93:c5:37:9f:d5:46:07:ee:3e:97:e0:97:d8:1b:89:98:
         28:b7:12:bd:13:15:30:2e:f7:88:e6:66:ca:cd:93:cc:7f:47:
         f5:6a:d7:d5:bf:26:47:b9:2b:27:83:4a:80:19:39:f1:fe:53:
         83:57:e9:af:85:3a:b1:e6:20:ac:c5:df:e2:5d:90:73:6e:a3:
         78:0a:de:be:92:00:13:14:a3:1e:68:8f:24:3f:08:41:4c:b4:
         eb:49:b5:a0:42:62:60:2d:f9:bc:32:e2:70:75:ac:b6:15:e3:
         91:b6:89:5b:e2:df:38:e7:27:9a:bb:da:e5:ec:cb:1f:3e:4d:
         df:cc:1c:81:8a:38:fe:0a:1c:1d:b7:9a:06:01:95:3d:c4:65:
         fe:11:56:8c:57:b3:47:eb:49:b1:66:e8:40:03:3a:19:31:a1:
         d9:bb:da:1e:0f:cb:3f:af:c9:2b:43:4e:08:9f:ac:1b:3f:6f:
         03:64:da:c0:e3:57:71:ff:aa:7f:0a:2c:24:a4:f3:1f:31:44:
         ec:c5:4a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:28:05 2026 by rpki-client