Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft
File:                     4156BE0E036363A596E1CBC310489AB801DFF941.mft (raw, json)
Hash identifier:          m8NCERny2vHv94K3DTxBJU9US4JXB+DUd1C7zbBCzIg=
Subject key identifier:   76:9B:55:04:0D:C1:01:6E:3D:7E:BE:74:A9:FF:16:DC:29:21:AD:9A
Authority key identifier: 41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41
Certificate issuer:       /CN=4156BE0E036363A596E1CBC310489AB801DFF941
Certificate serial:       4A54ADB5F9113A6F75B60986003EB4FD0806EBC8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft
Manifest number:          E9
Signing time:             Sat 24 Oct 2026 13:15:32 +0000
Manifest this update:     Sat 24 Oct 2026 13:10:32 +0000
Manifest next update:     Sun 25 Oct 2026 16:40:32 +0000
Files and hashes:         1: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: 6peX0JDNzT6rMcQu54Lce5kAols1rJU3rJxRvgulacM=)
                          2: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: 80LRBswxlIwyMdrBKKN8zHcPB67XbaBw69GuBUvFeh0=)
                          3: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: HaFV5pJV86ftGAnPRTRMjv8zuoil0malPe+dc/Qoh5c=)
                          4: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: rSHHS2SVXYFIsnKnswkfD0W9wcSIKHSwcE57Ly7QYSU=)
                          5: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: BnEjvX1TV7mzZcLsswA7EKyiNtfAnyBE1cK3RYLFuSA=)
                          6: 4156BE0E036363A596E1CBC310489AB801DFF941.crl (hash: JQxjlNwLmiiliJnBOi48Xl8mC5EX3/PhswonA++2Kv0=)
                          7: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: 1Jti76r9T9UKwdcEcYvsPgmo/iaRRGG2B+UGXQ8BTSc=)
                          8: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fBaq5SB6brHrX1BQRg7cuUdo6I/tHMTxRcN1nuTWvWU=)
                          9: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: HmJs2PjyM55f07/63Txr+Z06mPwICEzHB4ScF1m3HOs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl
                          rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 16:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:54:ad:b5:f9:11:3a:6f:75:b6:09:86:00:3e:b4:fd:08:06:eb:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4156BE0E036363A596E1CBC310489AB801DFF941
        Validity
            Not Before: Oct 24 13:10:32 2026 GMT
            Not After : Oct 25 16:40:32 2026 GMT
        Subject: CN=769B55040DC1016E3D7EBE74A9FF16DC2921AD9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:86:22:f3:73:0d:57:cd:87:d2:cd:c3:e8:
                    9c:54:a0:09:ca:f0:bb:7f:02:85:99:3e:cf:be:ae:
                    7c:f4:ea:8e:af:ca:cf:74:d4:12:84:21:b8:e5:b6:
                    ff:a9:12:0e:20:16:3d:ca:bd:70:e7:7f:ed:56:d3:
                    73:90:60:1f:9f:f7:4f:31:cc:24:92:06:ed:52:03:
                    53:09:ef:0c:c8:f3:29:56:ae:4a:23:53:40:c1:0c:
                    5b:b4:7e:a7:d7:33:11:ae:9a:4c:6c:13:34:87:a8:
                    f1:01:e6:de:69:b9:cd:16:ed:88:80:f4:89:6c:72:
                    29:f3:70:60:8a:cb:ce:63:30:1a:8c:23:9a:6c:9c:
                    53:03:cf:81:7d:03:e2:9c:4e:83:a3:15:f5:ea:9d:
                    d6:61:96:f2:99:07:cd:ef:c0:b8:7e:92:fe:07:aa:
                    95:d2:90:a2:53:b4:c8:71:32:66:0e:05:77:10:86:
                    2c:d6:1a:3e:dc:10:2f:d8:74:84:8e:0c:1e:0d:60:
                    1b:32:b6:2b:f9:60:5a:d0:2b:fa:fd:d9:83:5c:9b:
                    c3:5e:86:c3:82:b1:b2:6c:0d:4c:fc:10:85:04:a0:
                    4f:b4:a5:18:af:b8:48:e0:95:61:6e:61:61:6e:03:
                    01:e0:fa:f3:c8:91:2c:4c:35:ce:46:eb:40:37:17:
                    ac:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9B:55:04:0D:C1:01:6E:3D:7E:BE:74:A9:FF:16:DC:29:21:AD:9A
            X509v3 Authority Key Identifier:
                keyid:41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d1:57:99:16:8f:49:87:bc:10:a8:41:e4:91:7c:2f:d7:76:
         ed:36:9f:37:4e:99:d5:c7:f2:60:e1:98:a1:e0:23:d9:03:15:
         52:c1:ea:a2:1b:93:ff:0f:a3:38:69:08:79:c3:a2:74:27:01:
         bc:ee:fb:d9:1d:19:a5:49:f0:ea:91:06:a0:f9:cf:dc:51:f2:
         c2:98:1f:8d:f3:41:c5:f0:a6:57:a8:fb:07:33:6a:5b:ef:23:
         5f:9c:8f:fd:05:28:ac:55:5c:74:9d:35:d4:b2:14:3b:90:60:
         98:69:98:0a:8f:52:10:22:95:43:03:99:55:11:0c:b0:49:9c:
         dd:e4:e3:ef:3f:bd:35:77:f6:e4:a7:48:60:21:93:59:b8:a0:
         7c:b8:8b:d2:9f:0c:81:86:fa:00:59:43:18:0f:1c:e4:29:e0:
         c8:53:96:44:15:8c:db:67:b3:fc:fb:af:f7:ad:a8:5d:29:02:
         2c:c1:ed:fa:70:a4:26:61:e7:93:13:49:08:f6:7b:b5:95:07:
         32:e1:8c:53:68:00:83:5c:13:1a:1f:0f:0f:86:ac:aa:83:4d:
         4e:c1:1a:d1:66:67:e6:2a:b5:9f:9c:56:48:08:dc:35:10:a9:
         de:68:1c:8c:d4:2d:84:02:db:15:07:1f:9f:bf:49:a5:fa:d5:
         86:e7:9e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:43:32 2026 by rpki-client