Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
File:                     A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft (raw, json)
Hash identifier:          AU7KSVRi60OAzNGv48fmoGc9VUacDX2x5WSy7F2AxlE=
Subject key identifier:   4D:51:97:9F:D7:12:62:68:56:B6:38:C2:90:92:77:42:46:32:07:78
Authority key identifier: A6:E6:83:65:1B:BB:97:D3:21:A4:2D:48:AA:16:ED:77:5E:81:B1:C4
Certificate issuer:       /CN=A6E683651BBB97D321A42D48AA16ED775E81B1C4
Certificate serial:       35227DAA243CAD2743A596E91FF2DA73318447C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
Manifest number:          EC
Signing time:             Mon 26 Oct 2026 00:22:15 +0000
Manifest this update:     Mon 26 Oct 2026 00:17:15 +0000
Manifest next update:     Tue 27 Oct 2026 03:54:15 +0000
Files and hashes:         1: 3130332e3137382e322e302f32332d3234203d3e20313431303737.roa (hash: s+sTY2aYtG/SFja7fxXnQbGi+haO9AYfperyGy23oaM=)
                          2: A6E683651BBB97D321A42D48AA16ED775E81B1C4.crl (hash: xwemZTt2ammIlW9YgxEg0eg33whuOmtx1BKI8KXFCm0=)
                          3: 3130332e3137382e322e302f32332d3233203d3e20313431303737.roa (hash: xGJx+r1ntKLFX7/fs8KLZEY5oObqr/E40CahT7/MaA0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.crl
                          rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 03:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:22:7d:aa:24:3c:ad:27:43:a5:96:e9:1f:f2:da:73:31:84:47:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E683651BBB97D321A42D48AA16ED775E81B1C4
        Validity
            Not Before: Oct 26 00:17:15 2026 GMT
            Not After : Oct 27 03:54:15 2026 GMT
        Subject: CN=4D51979FD712626856B638C29092774246320778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:a3:f0:d5:87:68:9c:64:d1:19:39:5e:9a:
                    32:0d:20:a3:75:bd:d3:95:0a:ba:05:d7:a5:f0:ec:
                    98:34:09:4a:b2:81:c3:ed:0d:9c:06:ba:fd:b9:c4:
                    74:04:39:59:1a:03:6d:fe:fd:45:5f:41:a9:bb:d1:
                    15:d1:41:e8:3d:27:47:e6:d7:6a:c2:c8:7b:fa:ac:
                    ef:95:68:fb:7c:47:33:48:57:4f:c1:a1:43:67:c4:
                    9f:c3:e1:d7:98:97:a8:61:30:c2:e5:db:a7:ac:ef:
                    79:14:1e:19:4e:c2:7f:d9:6f:8f:0a:8e:3e:dc:45:
                    e2:9f:46:d9:15:ff:12:cf:97:c1:04:ad:3b:95:0b:
                    1b:78:1a:2b:6e:ed:50:ab:34:eb:55:65:69:85:d1:
                    a2:6f:ef:a0:2a:fe:4e:3f:e1:b9:fe:00:ae:f9:36:
                    2e:f3:da:94:be:c1:4d:26:be:3b:f8:ad:ca:47:09:
                    55:5e:7d:4a:39:8c:27:f1:46:a4:ae:b6:9c:a2:1f:
                    ae:03:7d:40:23:51:bd:53:1d:ae:fd:6e:e4:07:16:
                    b8:b6:cb:7d:c5:12:f5:c0:79:d4:43:96:00:85:d9:
                    18:d4:17:eb:cf:75:58:c2:75:23:37:a5:8f:20:76:
                    c4:81:6f:ae:c8:0f:a2:74:30:f5:74:1e:33:32:40:
                    1a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:51:97:9F:D7:12:62:68:56:B6:38:C2:90:92:77:42:46:32:07:78
            X509v3 Authority Key Identifier:
                keyid:A6:E6:83:65:1B:BB:97:D3:21:A4:2D:48:AA:16:ED:77:5E:81:B1:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:7d:a1:51:ff:d1:52:35:0f:af:31:5a:ae:68:97:49:ab:1f:
         e9:ff:8c:1b:34:e7:75:ae:3e:6c:28:e2:7d:78:61:cb:18:f5:
         a4:d3:3c:8a:94:25:01:5e:9a:48:8d:e0:aa:b7:c3:bb:04:7d:
         0c:c9:bc:3c:ec:48:8c:a6:ba:f8:d9:85:74:7a:d4:c4:70:ed:
         5e:6c:8a:92:ef:6c:a1:ee:54:c5:50:87:86:15:9c:09:84:ba:
         01:2a:fd:b2:7d:bd:24:f3:1e:34:0b:c4:38:fe:27:bb:4f:99:
         b5:88:94:52:a8:66:1b:c5:08:4b:8f:52:4a:95:46:bb:bc:24:
         16:8b:00:25:3e:ab:9a:6b:c3:93:56:2b:63:b8:b3:fb:b3:0e:
         77:25:9e:fd:f0:c2:3d:df:54:b6:83:b3:71:f2:db:38:c4:0a:
         38:d4:13:89:aa:36:b0:44:3b:44:03:06:f4:c7:20:c0:58:27:
         68:18:63:1b:a5:7d:bb:19:4e:c0:78:35:1d:2c:ca:4c:bb:ce:
         7a:08:45:eb:21:9e:46:1d:e5:e7:84:db:84:b2:e2:37:8b:12:
         a2:7a:bb:6d:54:be:cd:5c:0e:ac:41:28:dc:c6:2d:f0:de:93:
         03:9f:fa:6c:83:53:aa:16:46:aa:b7:88:63:12:bb:39:f6:78:
         a3:83:42:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:53:39 2026 by rpki-client