Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
File:                     50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft (raw, json)
Hash identifier:          UxaVpU8fXNGxRMDwpRlCOWSG0SKxeifNnkLT9jf6zDo=
Subject key identifier:   82:51:40:CF:4F:C8:DC:83:82:D0:81:CA:2C:40:E2:4F:8F:4C:BE:45
Authority key identifier: 50:34:1E:A1:7A:6C:EE:93:9B:2C:DF:A8:32:DC:03:24:F6:C6:4D:51
Certificate issuer:       /CN=50341EA17A6CEE939B2CDFA832DC0324F6C64D51
Certificate serial:       02FAA65D485CC15C15020981C667AF2A7D104955
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
Manifest number:          DC
Signing time:             Wed 14 Oct 2026 18:27:58 +0000
Manifest this update:     Wed 14 Oct 2026 18:22:58 +0000
Manifest next update:     Thu 15 Oct 2026 18:54:58 +0000
Files and hashes:         1: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: WGwf4ZheCNstu5sMth6N0foU0qrM+z/FwSG3oFHTVv4=)
                          2: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: cxf9fFshB4+bhjoui5wSDBBSpnsVcVvhifdGqqzNgz4=)
                          3: 50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl (hash: nlZ+BFNLFrKsOeFZ1cDe0OXo0aHLt5x49tWSt0U/HJU=)
                          4: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: QGPTzA7izmVWKWGQGI0Tmi8hRyZZX/Yh7zilSro+/Yc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl
                          rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 18:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fa:a6:5d:48:5c:c1:5c:15:02:09:81:c6:67:af:2a:7d:10:49:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50341EA17A6CEE939B2CDFA832DC0324F6C64D51
        Validity
            Not Before: Oct 14 18:22:58 2026 GMT
            Not After : Oct 15 18:54:58 2026 GMT
        Subject: CN=825140CF4FC8DC8382D081CA2C40E24F8F4CBE45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d7:ec:54:cf:c9:f9:44:07:ce:d4:79:44:0b:
                    61:ed:e3:04:99:49:7d:85:43:2e:df:89:a0:f5:a4:
                    8e:22:bc:70:ab:d4:9a:b5:02:72:c4:ad:bf:b2:eb:
                    03:54:24:2b:54:90:17:d4:98:1e:a9:81:44:c0:87:
                    00:45:6b:05:eb:f4:ec:a8:4a:f5:24:99:ae:e7:80:
                    7f:15:24:d3:61:ed:f5:e5:23:9d:fd:10:00:72:36:
                    f3:6f:f3:2b:e7:d8:a3:7b:81:06:09:17:54:31:38:
                    f8:9f:50:90:04:f8:84:d2:19:27:c0:4e:68:97:2f:
                    24:74:0e:87:1c:a1:6b:d7:18:6f:f2:2f:4a:d1:b9:
                    41:e3:76:ce:30:d4:bf:02:95:51:a0:d7:4e:7c:40:
                    a2:42:eb:c4:37:88:3e:90:73:48:62:81:c1:76:b6:
                    ec:6b:5b:84:8f:96:6f:1b:3e:95:8f:68:0c:9c:4a:
                    ed:ad:70:eb:5b:fd:df:7e:6f:f6:8b:e5:b3:2c:a1:
                    aa:7e:ba:61:7c:18:26:c6:37:a7:39:77:d4:38:25:
                    c8:02:b5:c7:5d:07:7b:3d:bb:b0:f5:f5:ab:99:e8:
                    ad:4d:02:db:28:60:98:71:e3:1a:54:37:0d:df:54:
                    5a:ce:26:0b:55:6f:31:0e:b2:ff:93:df:2b:39:af:
                    1b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:51:40:CF:4F:C8:DC:83:82:D0:81:CA:2C:40:E2:4F:8F:4C:BE:45
            X509v3 Authority Key Identifier:
                keyid:50:34:1E:A1:7A:6C:EE:93:9B:2C:DF:A8:32:DC:03:24:F6:C6:4D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:78:ec:03:6c:f9:f0:a8:b4:51:b3:ad:bf:35:18:9b:10:42:
         5a:c1:73:ac:73:a3:95:d4:10:7e:4c:9a:cc:e7:4b:fe:d0:44:
         a7:7b:65:da:c8:41:07:68:56:50:d1:fc:ac:a1:93:dc:c8:72:
         42:f9:92:85:ac:45:76:e3:88:b9:ce:53:ee:af:e0:b2:c9:1e:
         7b:40:bd:c4:8c:70:fb:3a:14:dd:8c:35:f9:29:b8:8c:df:8e:
         1b:f9:de:07:34:fa:c6:e3:c8:f4:6c:c1:d7:40:df:5a:4f:8f:
         a6:c7:a4:46:68:d8:62:e7:7e:99:ac:2d:f2:58:7c:58:7d:a4:
         de:02:29:35:49:3d:8a:37:76:cb:39:92:c2:6d:09:fb:9a:c1:
         01:ec:c5:51:91:99:70:75:af:30:ac:db:38:c2:9f:ad:13:f6:
         f7:49:67:dd:66:c4:02:d1:cc:bf:e8:2f:8a:89:c7:77:d0:fb:
         b8:7d:10:f9:eb:31:3c:4b:57:35:b4:cc:35:3d:ad:0a:17:fa:
         cd:d3:74:0e:65:b4:e1:02:b0:ff:0f:f7:50:8c:3b:73:fb:08:
         0d:fd:c0:ad:ec:91:25:48:a3:bd:07:9f:2b:99:b2:da:ec:e3:
         1d:8c:bb:be:b4:15:65:ad:a5:2e:3c:8f:ed:bc:88:89:11:1d:
         08:60:bd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:09 2026 by rpki-client