Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft
File:                     41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft (raw, json)
Hash identifier:          gS6Ysk41xBVImivHkyeojrWVRI+S3j1mk4QjS4f++MU=
Subject key identifier:   60:B8:87:CB:52:BB:E7:93:0F:3E:98:C0:79:74:98:2E:2C:C5:E0:17
Authority key identifier: 41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A
Certificate issuer:       /CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A
Certificate serial:       236212B40FDC42EED6415FDDE97E5B63933EC41C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft
Manifest number:          EC
Signing time:             Sun 25 Oct 2026 20:57:57 +0000
Manifest this update:     Sun 25 Oct 2026 20:52:57 +0000
Manifest next update:     Mon 26 Oct 2026 22:20:57 +0000
Files and hashes:         1: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: wBlZVCFHh8ftmHga3klWNVfbpWsl8jB+12tJjLB6RQ4=)
                          2: 41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl (hash: uAdqVYMiB52ReQL2D6yEG2ShnqVEobxFHEUAQ2utETo=)
                          3: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: xAsDO0flNJB0vE3TWF5f6bA3MwrWKS77T8klNMeGAzA=)
                          4: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 8dsc0TX972I5IbsCLYXNfwWF1vYKSLpqVq/U1qTtVqg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl
                          rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:62:12:b4:0f:dc:42:ee:d6:41:5f:dd:e9:7e:5b:63:93:3e:c4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A
        Validity
            Not Before: Oct 25 20:52:57 2026 GMT
            Not After : Oct 26 22:20:57 2026 GMT
        Subject: CN=60B887CB52BBE7930F3E98C07974982E2CC5E017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:db:57:d8:fb:07:79:d3:95:b6:e7:f7:e6:6e:
                    47:f5:75:80:2b:75:4e:e6:11:6e:47:9e:ac:bd:30:
                    b2:16:72:47:9e:d6:d7:62:f9:72:f8:18:d5:1b:a2:
                    f1:b1:61:3e:2c:b2:8b:5b:c3:f9:c6:90:c6:0f:97:
                    24:6b:21:ef:d0:0f:66:d7:02:40:a1:90:a2:a3:40:
                    47:50:e5:d5:ae:43:07:d7:89:d3:23:b0:26:c6:3d:
                    08:9c:4f:4d:04:cb:57:20:35:ee:a7:16:d3:85:74:
                    52:14:45:60:40:a3:40:fb:27:35:33:93:c4:0e:e7:
                    97:1a:9a:3d:e0:c0:55:c7:cd:9b:e9:12:fc:98:b8:
                    b2:90:84:52:d7:03:0f:12:39:e1:c4:23:7e:8b:3f:
                    0f:f2:e0:2a:9f:26:1d:12:56:99:0f:ee:4e:b8:2e:
                    78:5e:4c:c9:51:db:83:23:ca:2f:5e:55:c9:08:23:
                    1a:99:a4:ad:6f:85:61:45:99:da:25:62:e0:b4:8b:
                    80:7a:0b:10:43:1c:40:92:40:73:ea:8f:3c:fd:22:
                    22:50:30:42:e3:a9:99:1e:c4:e5:8a:11:ab:fc:db:
                    71:60:39:ef:0c:79:ca:78:c6:7f:db:ed:82:6b:d1:
                    ca:b3:36:5b:8d:d9:74:17:9d:08:f6:a9:5f:f9:62:
                    b4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B8:87:CB:52:BB:E7:93:0F:3E:98:C0:79:74:98:2E:2C:C5:E0:17
            X509v3 Authority Key Identifier:
                keyid:41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a9:0a:bd:ea:7d:16:c3:33:95:02:7d:da:41:80:08:73:a5:
         40:02:60:64:b3:63:c3:1d:07:43:5b:47:51:b6:87:db:48:0f:
         a2:96:ad:9a:06:e0:3c:34:60:50:81:f0:ef:69:64:c4:69:a2:
         28:ec:04:71:b8:42:70:fe:02:b3:a9:5a:fb:35:de:a9:0b:fa:
         44:9a:0e:34:ce:e1:c9:43:f6:25:ab:a6:d5:5b:1c:cc:31:69:
         bb:1f:7e:77:4b:37:53:56:96:55:5d:8e:cc:b2:f8:63:34:60:
         70:b5:80:6a:ab:f3:7c:2c:8a:40:58:ba:98:3c:a6:3f:de:8b:
         78:fb:80:b7:4b:02:f6:0f:46:db:8b:c5:f9:88:73:5a:b4:46:
         0c:88:1c:60:2f:72:f3:e3:b4:7a:7e:d1:7a:52:de:3d:78:fc:
         8a:41:cb:86:68:04:c9:1e:3a:20:e8:d6:bc:52:68:88:33:a2:
         8c:d5:88:07:18:28:02:0e:85:e2:9f:7b:04:09:ab:fc:0f:be:
         e6:10:6c:9c:57:52:e2:2f:dd:e8:76:bf:3f:68:4e:f8:54:09:
         77:5f:67:7a:ff:b8:df:6c:d6:b5:f7:85:c2:25:de:a7:32:16:
         ba:3b:b1:3f:d0:76:d5:54:a4:18:0c:fd:6c:12:a8:da:fb:88:
         30:a2:c1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:51 2026 by rpki-client