Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft
File:                     330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft (raw, json)
Hash identifier:          T1eNIYsCkOhR98jaYzGe38Sjml79GjDkpT+r7Pqmqro=
Subject key identifier:   42:BC:4A:CB:71:77:65:C4:ED:FF:09:4E:76:13:53:1D:9F:3D:AE:AB
Authority key identifier: 33:0A:61:6F:2A:63:EB:F0:BB:32:E2:5E:C3:13:E1:C9:2C:E7:47:6B
Certificate issuer:       /CN=330A616F2A63EBF0BB32E25EC313E1C92CE7476B
Certificate serial:       581AE9A1C46B421C78A71DEF2EC949110D451B8B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft
Manifest number:          A5
Signing time:             Thu 03 Sep 2026 09:33:59 +0000
Manifest this update:     Thu 03 Sep 2026 09:28:59 +0000
Manifest next update:     Fri 04 Sep 2026 09:39:59 +0000
Files and hashes:         1: 330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl (hash: pn6LvCsU+d+Hr4jLiOMiHTTx5N1Ne3wz4fWDuD8SSeU=)
                          2: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: X6m+xeJ0gpaLFRDzspoO6SIub/jpD7DBy+UlBcZmfKs=)
                          3: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: ILoy/+ibUDKAFOxVMLinSZB9MoToaiC2+Ky+vT/tKdU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl
                          rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 09:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1a:e9:a1:c4:6b:42:1c:78:a7:1d:ef:2e:c9:49:11:0d:45:1b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330A616F2A63EBF0BB32E25EC313E1C92CE7476B
        Validity
            Not Before: Sep  3 09:28:59 2026 GMT
            Not After : Sep  4 09:39:59 2026 GMT
        Subject: CN=42BC4ACB717765C4EDFF094E7613531D9F3DAEAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:19:c4:3b:44:57:48:00:25:5a:51:3e:e2:c3:
                    f2:87:75:a2:61:06:5e:35:57:3d:75:f1:63:65:81:
                    3d:e1:53:b8:ad:fd:bc:37:37:ba:4d:63:cf:c5:41:
                    1a:33:71:ad:0c:d2:a8:77:54:da:79:9c:83:a0:72:
                    b8:7f:71:a4:11:51:0c:3f:dc:43:28:86:80:19:c2:
                    b2:59:c4:2f:1e:08:11:7c:ef:bb:1b:ca:c7:89:c7:
                    30:d9:26:1b:9c:cb:48:21:a5:30:9a:af:b3:4d:5f:
                    59:d8:c5:b4:4d:82:a9:13:54:88:44:21:aa:b5:43:
                    ea:4a:74:7b:05:70:95:e3:a6:d1:b8:0b:a7:f2:3b:
                    6b:66:fa:ce:48:de:aa:9b:24:04:6b:be:fd:96:bc:
                    4e:0c:be:3a:e0:81:ef:a7:e0:92:b9:62:f8:ff:a3:
                    2f:77:79:5a:47:db:ed:07:f2:06:26:e8:3d:0e:f5:
                    99:e5:d5:ff:e2:be:ba:32:50:3e:00:b1:47:fd:c1:
                    21:c5:c2:0a:f4:af:ab:99:a5:8a:bc:ce:79:be:a7:
                    a2:e5:fc:48:7a:fe:4c:88:ca:60:c1:53:c2:26:77:
                    31:c9:b0:ee:41:ad:7a:26:f3:60:13:8d:28:03:a3:
                    31:e7:7c:7b:aa:c5:46:df:7a:27:ed:f6:fd:32:27:
                    b6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BC:4A:CB:71:77:65:C4:ED:FF:09:4E:76:13:53:1D:9F:3D:AE:AB
            X509v3 Authority Key Identifier:
                keyid:33:0A:61:6F:2A:63:EB:F0:BB:32:E2:5E:C3:13:E1:C9:2C:E7:47:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:33:5d:7a:a2:56:21:e3:b1:50:a9:cc:07:bc:d5:7f:71:96:
         f2:21:89:e3:9e:68:d4:60:89:d0:e2:1f:7a:05:fc:13:44:d3:
         06:cc:6a:1d:c6:fd:1c:d5:49:2d:e3:31:54:0d:90:f8:b4:50:
         aa:10:d7:82:a3:fc:d7:54:a4:3b:9f:65:8d:11:b0:98:8a:35:
         24:79:7b:4a:8a:8a:7c:a0:d1:32:63:6d:29:b5:c9:50:a3:93:
         fa:3a:ef:59:f8:59:7b:e8:29:0d:28:72:ab:9c:de:0d:f1:6d:
         c2:62:a2:74:a1:b9:07:de:96:a4:77:12:54:be:22:d1:54:5b:
         75:6f:f5:50:80:d7:0c:90:b2:d2:59:5a:b3:64:a3:0f:96:96:
         30:70:e2:12:1b:ce:e8:75:cc:bb:37:91:39:c5:b8:44:06:bf:
         47:a4:51:e6:00:f0:8a:d8:92:d4:27:ff:41:13:ef:1b:a5:cb:
         30:3b:b4:f2:d9:02:60:d3:77:d0:b4:d1:75:f4:96:b8:fb:73:
         57:b9:0e:30:98:f3:ec:ce:b7:55:ec:ec:0a:3a:0d:cb:3f:bf:
         40:ac:e5:80:67:ce:23:4f:67:c4:27:6e:fa:26:3e:94:9b:9f:
         54:b4:e7:43:08:be:09:ab:1e:25:1a:16:02:22:58:cd:d9:94:
         0b:16:29:02
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWBrpocRrQhx4px3vLslJEQ1FG4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzMwQTYxNkYyQTYzRUJGMEJCMzJFMjVFQzMxM0UxQzky
Q0U3NDc2QjAeFw0yNjA5MDMwOTI4NTlaFw0yNjA5MDQwOTM5NTlaMDMxMTAvBgNV
BAMTKDQyQkM0QUNCNzE3NzY1QzRFREZGMDk0RTc2MTM1MzFEOUYzREFFQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoGcQ7RFdIACVaUT7iw/KHdaJh
Bl41Vz118WNlgT3hU7it/bw3N7pNY8/FQRozca0M0qh3VNp5nIOgcrh/caQRUQw/
3EMohoAZwrJZxC8eCBF877sbyseJxzDZJhucy0ghpTCar7NNX1nYxbRNgqkTVIhE
Iaq1Q+pKdHsFcJXjptG4C6fyO2tm+s5I3qqbJARrvv2WvE4Mvjrgge+n4JK5Yvj/
oy93eVpH2+0H8gYm6D0O9Znl1f/ivroyUD4AsUf9wSHFwgr0r6uZpYq8znm+p6Ll
/Eh6/kyIymDBU8ImdzHJsO5BrXom82ATjSgDozHnfHuqxUbfeift9v0yJ7ZRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQrxKy3F3ZcTt/wlOdhNTHZ89rqswHwYDVR0j
BBgwFoAUMwphbypj6/C7MuJewxPhySznR2swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjZlZDA1ODQtYWMyZC00NjY0LWJjMTEtZDAyNmRkYmZhZjdjLzAvMzMwQTYxNkYy
QTYzRUJGMEJCMzJFMjVFQzMxM0UxQzkyQ0U3NDc2Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zMzBBNjE2RjJBNjNFQkYwQkIzMkUyNUVDMzEzRTFDOTJDRTc0
NzZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZlZDA1ODQtYWMyZC00NjY0LWJj
MTEtZDAyNmRkYmZhZjdjLzAvMzMwQTYxNkYyQTYzRUJGMEJCMzJFMjVFQzMxM0Ux
QzkyQ0U3NDc2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADwzXXqiViHjsVCpzAe81X9xlvIhieOeaNRg
idDiH3oF/BNE0wbMah3G/RzVSS3jMVQNkPi0UKoQ14Kj/NdUpDufZY0RsJiKNSR5
e0qKinyg0TJjbSm1yVCjk/o671n4WXvoKQ0ocquc3g3xbcJionShuQfelqR3ElS+
ItFUW3Vv9VCA1wyQstJZWrNkow+WljBw4hIbzuh1zLs3kTnFuEQGv0ekUeYA8IrY
ktQn/0ET7xulyzA7tPLZAmDTd9C00XX0lrj7c1e5DjCY8+zOt1Xs7Ao6Dcs/v0Cs
5YBnziNPZ8QnbvomPpSbn1S050MIvgmrHiUaFgIiWM3ZlAsWKQI=
-----END CERTIFICATE-----
Generated at Thu Sep 3 13:01:34 2026 by rpki-client