Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft
File:                     27A90045CBA22331AEF929C017271A7936688C97.mft (raw, json)
Hash identifier:          UuZmoYmErAZJKGxBkNfG/PMj9oObD35hTPyh5T63deA=
Subject key identifier:   72:F4:C4:4D:AE:85:3E:19:BD:DA:C1:3A:9B:3D:A2:B5:DC:F4:C9:7F
Authority key identifier: 27:A9:00:45:CB:A2:23:31:AE:F9:29:C0:17:27:1A:79:36:68:8C:97
Certificate issuer:       /CN=27A90045CBA22331AEF929C017271A7936688C97
Certificate serial:       4BD9DE4371E09042B06B1593B3B87325E14D820C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27A90045CBA22331AEF929C017271A7936688C97.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft
Manifest number:          40
Signing time:             Thu 18 Jun 2026 07:16:02 +0000
Manifest this update:     Thu 18 Jun 2026 07:11:02 +0000
Manifest next update:     Fri 19 Jun 2026 07:50:02 +0000
Files and hashes:         1: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: wxG5u0knwwtRFwXPMgfrz2l9Xi2Prxv/dPiLuDPGtJo=)
                          2: 27A90045CBA22331AEF929C017271A7936688C97.crl (hash: E6Dj6E0O16Fxpgkj7v1jv+ZkNCJTII32imv5qUaMRAg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.crl
                          rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27A90045CBA22331AEF929C017271A7936688C97.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 07:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d9:de:43:71:e0:90:42:b0:6b:15:93:b3:b8:73:25:e1:4d:82:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27A90045CBA22331AEF929C017271A7936688C97
        Validity
            Not Before: Jun 18 07:11:02 2026 GMT
            Not After : Jun 19 07:50:02 2026 GMT
        Subject: CN=72F4C44DAE853E19BDDAC13A9B3DA2B5DCF4C97F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:a8:81:2b:26:e5:40:87:02:de:2c:b6:b1:
                    31:d6:9c:8d:9f:52:3b:67:e8:64:43:d2:4c:8e:29:
                    96:9d:22:5c:30:5c:32:61:2e:46:1f:e9:0d:f7:2e:
                    5d:e3:21:ad:22:97:9f:fb:7d:b0:fc:75:6c:76:a2:
                    b1:d4:32:98:b5:2e:d1:f6:ff:95:59:1c:78:13:37:
                    e8:b6:f4:bf:c2:85:39:91:30:f6:ea:12:42:43:99:
                    bd:d1:e4:68:c7:4f:6b:c9:11:ac:5d:51:a1:7b:7d:
                    a1:0a:51:7d:d3:59:62:b0:75:b1:d5:33:1f:87:e5:
                    92:c3:66:c5:fd:fb:3c:ba:1d:9a:b2:32:83:a8:6c:
                    c2:df:c2:86:80:39:a7:08:66:12:7e:3e:42:3d:a3:
                    be:f1:05:af:6c:fe:73:96:ba:f2:3d:42:88:13:37:
                    88:6d:51:ab:79:5f:b3:dd:cb:2b:68:d5:b2:56:97:
                    4a:f7:94:65:1b:c6:2e:da:d7:b8:33:c1:6e:f9:fc:
                    88:f9:fc:72:a8:d8:b5:57:a6:25:60:6e:75:d0:b4:
                    28:f3:f4:63:27:f3:25:52:92:b7:d1:76:57:67:d2:
                    28:86:39:84:9d:f2:e1:01:78:a6:e9:8b:71:8d:92:
                    13:b5:19:a3:f5:84:ca:06:65:a6:51:e1:34:c4:a9:
                    72:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F4:C4:4D:AE:85:3E:19:BD:DA:C1:3A:9B:3D:A2:B5:DC:F4:C9:7F
            X509v3 Authority Key Identifier:
                keyid:27:A9:00:45:CB:A2:23:31:AE:F9:29:C0:17:27:1A:79:36:68:8C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27A90045CBA22331AEF929C017271A7936688C97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ec:61:65:f8:d1:8b:b6:6f:0e:73:57:b1:f8:41:82:e9:a5:
         d7:76:ab:26:35:08:fd:04:25:c1:58:8b:de:77:6e:92:51:b3:
         a5:56:d8:a5:b2:bc:ed:76:e4:4c:b1:46:de:ec:d4:55:70:f6:
         6f:5c:06:f0:e2:e0:27:df:24:b0:5f:8f:2b:e5:f5:16:2f:07:
         f1:d8:c9:97:5f:56:aa:52:99:ec:b8:a4:f2:ec:b0:d6:c0:8a:
         02:57:44:ea:c8:b8:ad:20:2b:4c:1e:ba:37:5f:8e:2b:25:12:
         42:1d:d0:3e:43:16:42:e3:3d:36:13:9c:ef:90:11:73:e3:b1:
         81:d8:2d:71:06:67:fa:c2:5a:f1:77:a0:f2:6a:02:88:ef:f1:
         de:b5:5e:5d:80:33:0d:ed:a8:7b:2b:28:4d:8a:0b:32:6a:7a:
         a6:58:74:4d:f7:88:eb:0c:aa:5f:73:09:58:cc:0e:c2:85:96:
         88:cc:62:5f:8d:8f:b0:57:39:bf:ed:b7:30:c4:5e:03:e6:67:
         a9:5f:24:31:a9:c1:d7:d7:31:99:96:e7:14:9e:7f:6f:06:99:
         d2:65:78:28:b4:87:fa:ae:98:cb:cd:2f:4f:6c:d8:47:df:da:
         a1:3e:16:33:db:02:a2:ee:4d:0a:bf:8d:e8:99:bf:6e:a8:34:
         67:23:e5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:03 2026 by rpki-client