Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
File:                     62201E20A182AFCB9985132733F2FBD1BB09C210.mft (raw, json)
Hash identifier:          IfooQz863yfaV2kij3hzNm3VbHq3OZ+ULHMHvxHsrxc=
Subject key identifier:   64:FD:07:D0:59:50:45:2A:1E:C2:C1:9C:5B:20:B8:E4:7E:3D:7C:3F
Authority key identifier: 62:20:1E:20:A1:82:AF:CB:99:85:13:27:33:F2:FB:D1:BB:09:C2:10
Certificate issuer:       /CN=62201E20A182AFCB9985132733F2FBD1BB09C210
Certificate serial:       62473E1978862A464E834C49CFE773F26B0F4AE8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
Manifest number:          A5
Signing time:             Wed 02 Sep 2026 20:53:30 +0000
Manifest this update:     Wed 02 Sep 2026 20:48:30 +0000
Manifest next update:     Fri 04 Sep 2026 00:44:30 +0000
Files and hashes:         1: 62201E20A182AFCB9985132733F2FBD1BB09C210.crl (hash: TKo6E4f3E/QbmQwBQdhYHByrqFUFMWLomXVpMbvzjz4=)
                          2: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: cdTAWLi8m26n5P7CJT3lqMoZoU5FXrpIaSroPqf5DL0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.crl
                          rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 00:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:47:3e:19:78:86:2a:46:4e:83:4c:49:cf:e7:73:f2:6b:0f:4a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62201E20A182AFCB9985132733F2FBD1BB09C210
        Validity
            Not Before: Sep  2 20:48:30 2026 GMT
            Not After : Sep  4 00:44:30 2026 GMT
        Subject: CN=64FD07D05950452A1EC2C19C5B20B8E47E3D7C3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8e:23:63:a5:3a:d3:76:c4:0e:74:0d:9f:70:
                    56:6d:e1:dd:d7:03:9a:67:5c:a6:9d:f6:d6:b1:ea:
                    51:b1:8c:12:f4:d0:0d:58:9e:cd:a5:b3:16:c9:82:
                    36:2e:09:3d:36:13:04:d2:6b:d1:11:58:41:08:80:
                    34:50:09:8e:b2:91:64:d9:49:65:46:6e:15:52:88:
                    a1:f4:29:49:7e:f8:16:15:0e:ca:32:5b:50:be:45:
                    82:75:00:1c:b6:4e:16:64:90:52:eb:2b:82:3a:f1:
                    4a:82:b3:48:df:42:a9:8d:82:ea:f2:7c:b3:c7:0d:
                    f3:40:37:b6:4c:7c:7f:94:64:ba:d6:f9:d2:e9:f2:
                    97:51:3d:b7:e6:d1:d1:77:44:68:42:c5:3d:88:f6:
                    fd:f5:a5:bb:57:ac:c0:69:32:5e:45:b2:9c:c2:29:
                    24:e2:50:dc:87:66:94:16:6a:64:3b:34:9e:3c:64:
                    f7:5f:3a:3c:a4:b6:dd:8a:61:c4:3e:87:b7:3e:81:
                    a1:94:2e:16:03:76:d2:17:bb:b8:7b:9d:b7:77:3d:
                    41:6e:5b:0c:80:a1:01:57:ab:bf:f3:80:df:f2:d7:
                    c5:d2:05:e6:39:06:b6:99:25:b3:02:84:43:97:ae:
                    60:dd:89:f0:f8:b2:90:ba:66:cb:c8:53:06:54:8f:
                    ef:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FD:07:D0:59:50:45:2A:1E:C2:C1:9C:5B:20:B8:E4:7E:3D:7C:3F
            X509v3 Authority Key Identifier:
                keyid:62:20:1E:20:A1:82:AF:CB:99:85:13:27:33:F2:FB:D1:BB:09:C2:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:bd:c6:e3:48:90:9c:f8:41:56:2c:87:1e:b5:76:ed:01:29:
         8c:4d:81:d9:a9:c6:53:ce:06:b0:79:0a:06:0c:4e:2e:02:13:
         70:88:da:2e:45:0e:95:a4:a4:0e:15:8c:99:00:75:c5:ae:f7:
         cc:51:5b:d7:2a:81:ed:5f:ca:43:44:9f:c8:cc:a5:cb:6d:ce:
         46:1d:45:8b:68:42:18:1c:1c:f7:a4:83:8f:a8:ea:75:3e:cf:
         81:8c:5e:1a:05:4c:28:bf:86:fb:ba:f6:ab:b3:42:b9:f1:37:
         00:8b:32:46:c2:2c:7b:fe:4a:a9:5c:f0:66:bf:bb:41:16:84:
         f5:3c:c8:1c:87:df:b7:7f:68:f3:83:ee:4c:9a:d2:79:15:30:
         e7:a2:47:c6:74:b7:a1:3b:98:4f:91:6c:a5:58:33:1b:32:1e:
         75:67:1d:70:51:07:c2:6a:14:60:34:41:c0:0c:07:a1:d6:d6:
         03:11:4e:23:e7:e1:34:2b:b0:f7:ac:39:06:0f:0a:cb:5e:dc:
         e7:40:03:b5:e0:17:37:83:16:7c:25:16:16:fd:b5:98:b7:a1:
         ce:0a:1e:6e:24:5d:19:a1:24:9e:98:54:4a:5f:38:2f:38:af:
         7e:23:1b:5a:41:39:de:1c:25:2a:3a:fe:73:60:ae:73:4f:c9:
         bf:d4:3a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 13:02:22 2026 by rpki-client