Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.mft
File:                     08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.mft (raw, json)
Hash identifier:          GqDylraWQM0MzR0NBwJCd74t7Xyby8p5eq0TP/YBSY8=
Subject key identifier:   CC:97:E9:D8:44:3E:E3:04:9A:EE:32:B0:B1:EF:F5:65:A4:83:97:BE
Authority key identifier: 08:46:5F:A1:5C:F4:94:2C:9C:4C:E0:9B:FD:3D:A0:43:8F:ED:BB:38
Certificate issuer:       /CN=08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38
Certificate serial:       20E091B94F18775B2E6E30FCAD779FD6C45B3ABE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.mft
Manifest number:          EB
Signing time:             Sat 24 Oct 2026 04:55:18 +0000
Manifest this update:     Sat 24 Oct 2026 04:50:18 +0000
Manifest next update:     Sun 25 Oct 2026 07:09:18 +0000
Files and hashes:         1: 3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa (hash: 5A4dPtUK7PjCIyvsgm0TeACgqogT7kOhSEqkeVa0xLI=)
                          2: 08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.crl (hash: 68HHJhS06uxjSrILIDByekJ860sI5pa/vKtYxygw/MA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.crl
                          rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 07:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e0:91:b9:4f:18:77:5b:2e:6e:30:fc:ad:77:9f:d6:c4:5b:3a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38
        Validity
            Not Before: Oct 24 04:50:18 2026 GMT
            Not After : Oct 25 07:09:18 2026 GMT
        Subject: CN=CC97E9D8443EE3049AEE32B0B1EFF565A48397BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:59:18:3e:fc:73:87:08:cc:d4:e0:57:a3:
                    c3:33:e3:26:97:6e:10:7c:a7:9b:a5:5e:72:90:bd:
                    69:c8:c8:10:5c:05:7f:df:09:50:bd:94:40:ec:83:
                    53:9e:33:26:cf:4f:c9:58:67:86:75:90:67:31:de:
                    76:de:fe:49:4a:d3:7e:52:00:6e:51:14:ea:c6:ee:
                    98:d1:90:2b:f0:38:d6:92:5b:27:24:18:41:61:bd:
                    c6:0f:ae:e0:56:c6:99:78:fb:c3:ff:b6:6c:b3:04:
                    dc:ee:7e:8a:30:b0:f4:ff:b0:02:f1:89:23:c4:51:
                    89:46:03:96:2b:67:e1:60:e2:07:87:b7:d7:9a:9e:
                    dd:e7:42:76:be:25:a6:1c:cf:6c:b8:c9:8a:3e:23:
                    c9:ca:64:6f:46:d0:00:64:aa:15:fb:38:52:cf:95:
                    6d:34:bd:ab:14:38:b8:0b:66:f8:99:db:5c:a0:8d:
                    07:7b:19:ce:cc:67:39:90:b3:9a:82:3b:9d:b8:b2:
                    94:d5:9e:39:14:7f:b9:65:ad:ac:d6:a1:bb:b4:c6:
                    99:0f:56:f1:75:bf:a9:6d:54:c4:77:71:43:40:e4:
                    71:36:d9:37:16:ff:ea:3c:83:a7:78:b0:1e:f9:06:
                    db:ab:7f:c1:e9:d9:4e:02:16:54:a2:c2:95:43:4a:
                    3f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:97:E9:D8:44:3E:E3:04:9A:EE:32:B0:B1:EF:F5:65:A4:83:97:BE
            X509v3 Authority Key Identifier:
                keyid:08:46:5F:A1:5C:F4:94:2C:9C:4C:E0:9B:FD:3D:A0:43:8F:ED:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:68:ac:4b:f7:04:82:85:08:90:63:07:18:84:25:25:42:7c:
         e6:6c:4a:51:4e:2f:72:ad:bc:a9:e5:de:e6:31:47:0a:e7:04:
         cb:22:f3:6a:9d:d4:2a:0d:46:ba:8f:5d:a0:d5:55:49:6a:36:
         76:90:fb:09:5e:e5:ad:c2:ad:cc:63:1f:04:21:c7:6c:82:db:
         e7:c5:84:dc:1b:d0:75:52:10:09:55:ee:5b:b6:dc:91:ce:82:
         6a:ea:cd:65:6a:34:69:21:a8:10:42:4a:fc:0d:e2:45:7f:38:
         fc:46:cd:a8:26:02:9f:50:c7:c1:82:0e:b8:eb:aa:45:50:de:
         04:61:8f:f5:d7:1f:60:21:ae:46:96:d8:5e:b2:19:bf:92:4d:
         ac:10:03:f4:99:3d:cd:ef:0c:47:f7:42:22:73:bd:f0:e4:a2:
         05:61:7d:27:37:40:90:ed:72:cb:a7:95:bf:be:c7:3b:fa:27:
         94:94:19:c8:ae:d2:f7:33:88:47:34:98:ce:13:27:81:f6:39:
         a7:6e:bf:2a:f0:d7:0f:4f:65:f9:f3:b9:72:2d:67:68:bc:70:
         c8:6d:90:13:ac:bf:4e:8f:cf:a1:0a:ee:86:b6:7b:bb:8f:a6:
         dc:77:73:8c:51:8c:e9:b8:45:72:b4:35:20:50:9a:92:0d:2b:
         df:18:0e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:42:42 2026 by rpki-client