Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft
File:                     D69DF302479F4777A9A0892154204AF107B510B2.mft (raw, json)
Hash identifier:          VtfzpAO6SvvmwFewp2w1Q06tO1q5Pqm6cVxe6idqv0k=
Subject key identifier:   90:F0:CA:AB:68:49:E4:2B:EF:F0:7D:DA:C4:93:46:D2:04:67:81:04
Authority key identifier: D6:9D:F3:02:47:9F:47:77:A9:A0:89:21:54:20:4A:F1:07:B5:10:B2
Certificate issuer:       /CN=D69DF302479F4777A9A0892154204AF107B510B2
Certificate serial:       64551742586B13904AF4EC9FC99B5B3E367798A2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft
Manifest number:          BA
Signing time:             Wed 16 Sep 2026 15:23:10 +0000
Manifest this update:     Wed 16 Sep 2026 15:18:10 +0000
Manifest next update:     Thu 17 Sep 2026 17:40:10 +0000
Files and hashes:         1: 3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa (hash: q5uFk3VLUA+Zp9Xrj3e+V8aDF57mtzIkLAnY1xqIYg8=)
                          2: D69DF302479F4777A9A0892154204AF107B510B2.crl (hash: joWQsBm4lcaFkn+PDi/We9rJUAUYV/y3piekMRJEG9E=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.crl
                          rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 17:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:55:17:42:58:6b:13:90:4a:f4:ec:9f:c9:9b:5b:3e:36:77:98:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D69DF302479F4777A9A0892154204AF107B510B2
        Validity
            Not Before: Sep 16 15:18:10 2026 GMT
            Not After : Sep 17 17:40:10 2026 GMT
        Subject: CN=90F0CAAB6849E42BEFF07DDAC49346D204678104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5e:0c:1c:e7:b4:5b:98:5f:0f:04:fc:19:bd:
                    d1:88:7d:1e:c4:8e:81:70:a5:e6:58:d2:ae:36:7f:
                    54:ea:37:90:c6:04:1e:9b:a2:c8:ce:2d:2e:2b:c0:
                    94:77:bd:36:c3:61:63:d3:b7:a6:37:94:f9:95:db:
                    2c:ce:e8:9d:1d:32:b0:3a:aa:27:53:f8:73:cc:f6:
                    3f:59:e4:1f:6b:e6:c8:d4:5d:ff:f7:58:b0:f5:a5:
                    5d:52:39:86:e9:f1:60:62:ef:44:19:24:bd:91:45:
                    61:c4:35:a3:d0:28:07:1d:10:ce:6d:22:39:83:cb:
                    ea:5b:8f:5f:83:fc:7d:e6:98:5f:1e:fb:10:2f:15:
                    13:79:0a:a3:5e:69:cd:2a:58:fd:c7:d7:52:20:0a:
                    ef:22:7c:67:3d:1a:47:0c:78:9a:8d:5b:68:7e:a5:
                    8c:ba:14:cf:2d:1b:57:03:88:b9:ad:ad:30:7d:ef:
                    cf:69:c9:ae:f6:77:b7:8e:82:3a:89:93:81:f1:59:
                    90:a3:94:30:11:f0:54:25:40:8d:9c:2a:9c:e3:b6:
                    42:e9:e0:36:e2:ac:ee:9c:6d:05:03:1e:79:39:5a:
                    d1:d2:49:0e:d9:2e:e6:0c:af:61:11:74:b5:ad:0f:
                    6f:22:07:cc:16:da:3a:dd:35:05:1c:ef:aa:a5:d8:
                    31:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F0:CA:AB:68:49:E4:2B:EF:F0:7D:DA:C4:93:46:D2:04:67:81:04
            X509v3 Authority Key Identifier:
                keyid:D6:9D:F3:02:47:9F:47:77:A9:A0:89:21:54:20:4A:F1:07:B5:10:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:18:10:07:0e:a4:5b:29:6f:5f:2d:7d:3a:f3:11:9e:1b:77:
         d7:cb:ad:e8:ce:10:d8:6e:40:c9:db:a9:59:66:af:2b:c0:7f:
         99:6a:00:45:3a:ed:49:27:f6:f4:ba:5d:26:07:6e:cf:01:30:
         72:1c:14:e0:6b:5e:fa:a7:5b:28:00:e2:39:70:d6:8c:53:d0:
         f9:9c:cc:90:b4:f2:e1:bc:dd:73:9f:70:fb:be:d3:37:aa:a9:
         4c:af:fe:67:5a:c2:17:e7:c8:0e:bc:77:c1:e3:23:42:64:c3:
         90:24:1e:9d:10:80:c1:ee:6d:e1:f1:1c:60:1c:2b:b4:51:41:
         2a:ba:49:fe:6f:d1:92:0b:67:43:6d:66:16:f6:93:a6:84:b7:
         23:53:d7:b0:ce:79:5a:0e:11:7d:c9:de:f1:17:b0:86:5a:b9:
         2c:58:9d:f4:45:b8:58:fe:ad:2b:33:10:32:a1:20:5d:86:1d:
         d6:c8:92:e0:cb:14:4c:88:b8:00:47:f8:6c:2d:12:4a:9b:06:
         c3:e5:04:ef:f1:88:94:18:6d:f2:76:2f:5b:28:ef:75:58:8b:
         ab:fd:22:cd:bd:91:3e:b5:7d:f9:60:c6:f1:fb:de:14:2a:a3:
         b6:d7:a3:db:fc:62:06:7f:41:8f:0c:29:ed:20:d6:f3:6a:cb:
         14:33:15:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:04:20 2026 by rpki-client