Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
File:                     CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft (raw, json)
Hash identifier:          4tfPwxOa79HPlkp3jtTepYkkhFJn5TljV5sX/VRdgwQ=
Subject key identifier:   50:56:C7:C2:15:5A:6B:BF:3F:81:A5:63:38:6B:C4:04:F4:8C:01:71
Authority key identifier: CB:72:F7:26:3B:76:6A:B1:05:9A:DF:BA:5B:91:93:C2:C5:E5:85:30
Certificate issuer:       /CN=CB72F7263B766AB1059ADFBA5B9193C2C5E58530
Certificate serial:       20D284C0CA7804B7C2C7575D9DAAF5032809A450
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
Manifest number:          BB
Signing time:             Thu 17 Sep 2026 03:53:20 +0000
Manifest this update:     Thu 17 Sep 2026 03:48:20 +0000
Manifest next update:     Fri 18 Sep 2026 07:41:20 +0000
Files and hashes:         1: CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl (hash: M5QFO4cwNI21YKRI1W85gio1Ci8YfN8BRGnVtnCP0yw=)
                          2: 3130332e37392e39362e302f32342d3234203d3e203634333038.roa (hash: 9B18d/9Mq6o8AyxG94Kdqz2+xtB5eaKcmGvgMOaUWzk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl
                          rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 07:41:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d2:84:c0:ca:78:04:b7:c2:c7:57:5d:9d:aa:f5:03:28:09:a4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB72F7263B766AB1059ADFBA5B9193C2C5E58530
        Validity
            Not Before: Sep 17 03:48:20 2026 GMT
            Not After : Sep 18 07:41:20 2026 GMT
        Subject: CN=5056C7C2155A6BBF3F81A563386BC404F48C0171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:14:b6:a9:7d:f6:a5:8f:92:d4:e6:54:53:b1:
                    87:c8:40:ae:de:e0:a3:2c:42:5b:24:68:cd:e4:b8:
                    13:40:14:1d:1e:18:7a:56:52:b4:7e:70:1e:ab:01:
                    b9:b6:01:64:8f:d3:e8:9f:05:a5:39:ad:dc:ac:29:
                    4b:09:41:46:17:e9:c7:76:9e:26:7c:cf:1e:3f:a7:
                    9c:e6:e2:d3:09:72:de:e1:64:dd:89:fd:0f:61:a1:
                    6c:c8:8b:ac:ce:fb:63:2c:02:fa:92:0f:12:8f:01:
                    e2:e3:56:c0:b0:93:68:65:ba:36:1b:00:c3:64:dc:
                    4a:86:5f:38:ac:40:b9:1e:44:ba:5d:d0:63:91:cd:
                    3a:74:cd:3a:2c:50:66:e2:b8:80:cb:e4:32:ae:15:
                    ce:b4:27:94:5c:2a:e0:cb:ed:fd:82:13:26:45:45:
                    cc:bb:05:3e:d4:79:c6:4e:72:d7:06:ed:a1:61:ef:
                    aa:59:c1:f5:04:07:52:0d:89:93:1e:e3:93:36:9f:
                    34:92:7b:81:65:48:65:8d:3c:6b:8c:42:8d:be:6d:
                    4f:c1:b4:b6:39:99:d4:94:34:b3:d5:ad:bb:41:ef:
                    b1:00:9f:24:3b:5d:3b:ee:36:87:7e:b5:74:ca:ab:
                    ed:4f:74:89:dd:3a:1f:15:62:31:b2:ff:8c:59:bc:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:56:C7:C2:15:5A:6B:BF:3F:81:A5:63:38:6B:C4:04:F4:8C:01:71
            X509v3 Authority Key Identifier:
                keyid:CB:72:F7:26:3B:76:6A:B1:05:9A:DF:BA:5B:91:93:C2:C5:E5:85:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:35:f8:12:d0:e7:c1:92:4c:bc:94:89:db:9d:5a:cf:94:64:
         24:e1:d4:4f:4e:7f:0f:d4:f2:2d:dd:2d:27:52:98:80:c2:3a:
         09:05:69:be:ce:1e:f0:8e:f5:1f:6f:98:d2:a6:6e:4c:99:dc:
         4a:e0:5b:96:3f:d8:47:39:0a:60:cc:97:04:ab:81:96:0b:7b:
         a0:f2:bc:cb:66:77:4a:61:da:24:34:71:5a:f0:db:d8:2c:f4:
         f9:c7:73:ff:bd:7b:18:32:8a:d0:1f:5c:0c:4f:df:ce:4a:5f:
         55:29:f7:4e:27:2d:95:f6:a0:62:d4:a4:10:dd:fc:23:8f:89:
         dd:aa:ae:5e:57:84:34:c0:3c:33:78:7c:05:f3:e4:de:d2:a9:
         3e:41:51:be:af:85:53:b4:89:77:0f:75:6a:48:26:32:ef:02:
         3f:9f:46:06:84:86:17:fb:c8:b8:63:18:ef:26:45:3f:18:ae:
         96:87:37:57:31:55:5e:01:61:5c:3c:f6:a9:19:24:68:63:00:
         70:71:d7:d4:06:10:40:d8:a7:74:9a:19:90:66:78:0c:e7:c7:
         d1:f9:14:c5:c2:7c:6e:a6:fe:bb:89:97:c0:a9:45:a5:aa:6c:
         da:7c:d1:85:c3:c3:85:46:6c:c0:90:0f:8d:0f:a0:54:6a:ae:
         12:b7:fb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:51:54 2026 by rpki-client