Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
File:                     781BE026701DAFA391758F44794F58BDFF3C7E68.mft (raw, json)
Hash identifier:          6AkiDMi6Cev+ctw9XAMLo9PJXdEg8bPe7g0XqcghxwA=
Subject key identifier:   AE:C0:7E:1C:DD:B5:2C:DF:58:D9:7F:CD:20:B2:8A:69:F1:50:45:C7
Authority key identifier: 78:1B:E0:26:70:1D:AF:A3:91:75:8F:44:79:4F:58:BD:FF:3C:7E:68
Certificate issuer:       /CN=781BE026701DAFA391758F44794F58BDFF3C7E68
Certificate serial:       641EF45C40EF5C728D65930C86F483AC3580783A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
Manifest number:          BA
Signing time:             Thu 17 Sep 2026 07:58:20 +0000
Manifest this update:     Thu 17 Sep 2026 07:53:20 +0000
Manifest next update:     Fri 18 Sep 2026 08:47:20 +0000
Files and hashes:         1: 781BE026701DAFA391758F44794F58BDFF3C7E68.crl (hash: 7J5AJnXmeQ2E+dd2nHVk6xBOoEQVPFNoLTD3xSTzdTM=)
                          2: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: a7s2l3O6pvc7GKZk3g5ud7YbwEz/lUPAccNQa0TiOHo=)
                          3: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: F7awc14DauajZvya1JB+aFN9Ei7NArKg1X2ILMaeIB8=)
                          4: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: e3eyP3Gqi2CIxa8B3ThMqpYr4Fy5iLHYeg/SLihyWJY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.crl
                          rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 08:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:1e:f4:5c:40:ef:5c:72:8d:65:93:0c:86:f4:83:ac:35:80:78:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781BE026701DAFA391758F44794F58BDFF3C7E68
        Validity
            Not Before: Sep 17 07:53:20 2026 GMT
            Not After : Sep 18 08:47:20 2026 GMT
        Subject: CN=AEC07E1CDDB52CDF58D97FCD20B28A69F15045C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:2b:83:47:34:7f:c1:fa:f9:b7:40:2a:53:
                    20:56:6c:cf:f7:ab:f1:98:9f:64:80:86:92:19:fd:
                    65:70:0c:f9:2a:2a:de:df:3f:48:de:23:9f:41:cb:
                    5b:fa:8d:7e:f5:ba:39:76:f9:e6:49:7e:a1:bd:d7:
                    2b:4d:b3:39:81:5b:1a:59:8f:2b:85:0c:cc:e9:7d:
                    36:8d:62:8f:f4:aa:4d:0c:a6:93:7d:1c:10:3a:f6:
                    be:9c:1f:76:d5:f7:de:94:b7:fd:35:ca:77:8a:18:
                    da:9c:63:aa:ea:c1:ec:78:cc:36:dc:75:f5:02:52:
                    ac:12:ef:7f:82:9c:75:a3:b0:4b:a8:b6:da:21:8d:
                    36:49:82:33:37:ea:b1:df:ce:09:1f:4a:3a:8f:10:
                    dc:67:b7:20:c7:d6:e5:f9:5a:c6:35:e7:21:2c:dd:
                    3b:17:d0:5c:fb:e5:24:90:2d:5a:aa:30:2e:14:43:
                    18:15:14:12:f9:54:2d:a9:f1:3c:e6:80:bf:ac:1c:
                    49:24:41:22:8f:eb:51:94:99:b3:03:1c:dd:42:57:
                    7e:94:2d:03:c7:5e:26:e0:e6:a5:8a:e4:43:da:03:
                    ac:e9:86:1a:04:15:31:66:d4:f0:cc:3d:a0:e0:94:
                    ce:92:74:78:41:20:da:bf:e9:2d:b7:6f:43:f8:35:
                    32:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C0:7E:1C:DD:B5:2C:DF:58:D9:7F:CD:20:B2:8A:69:F1:50:45:C7
            X509v3 Authority Key Identifier:
                keyid:78:1B:E0:26:70:1D:AF:A3:91:75:8F:44:79:4F:58:BD:FF:3C:7E:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:ed:e8:50:a7:a4:4f:20:df:aa:18:a0:1f:d4:1d:58:80:94:
         2b:e8:88:a0:8d:bd:b0:f9:f6:42:c9:93:60:88:85:e8:33:1e:
         a9:41:01:b9:89:cf:01:11:a4:a2:55:8a:50:7d:d9:64:d4:54:
         4a:3c:d3:04:b2:6c:b7:46:15:14:99:dd:ca:20:e7:63:cd:31:
         06:be:40:aa:43:69:a8:bc:94:13:20:5e:2e:e7:e8:23:11:d1:
         eb:3d:ed:1e:7d:3a:fb:62:38:f7:21:85:2c:d8:a2:63:45:37:
         e1:59:14:a5:0c:8c:1d:d9:52:ec:95:e4:2e:22:08:85:eb:40:
         06:c7:79:d6:98:cb:89:b8:2b:99:f3:b4:38:29:b6:72:95:70:
         4c:57:9b:d3:4a:88:fa:91:fb:cd:11:a3:36:f9:80:78:a2:49:
         88:0f:59:bc:0f:98:33:b3:a4:c8:32:f0:25:e2:58:b2:50:40:
         28:31:b6:d1:39:a8:ff:2b:a5:51:e9:1a:fb:57:78:78:c1:c8:
         7e:3c:49:a9:51:67:4b:d3:e3:01:2c:9c:20:1b:7f:ee:5d:25:
         e4:7f:a2:76:1f:03:8e:2c:27:6f:54:01:5e:ff:1d:81:59:88:
         ce:cf:09:df:53:67:f1:a1:58:76:06:dc:3e:cd:48:73:07:5b:
         cb:06:26:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:20:37 2026 by rpki-client