Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
File:                     1661480FF274E46E5E74274531EDCB741CA1C734.mft (raw, json)
Hash identifier:          G0EMD/2MP4eidKgU4dHtAeSGzF/gdJewodubxm5ZXbY=
Subject key identifier:   82:E0:9C:C3:81:CA:38:42:4C:51:A8:5C:3A:1B:CD:A2:CD:2D:9F:25
Authority key identifier: 16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34
Certificate issuer:       /CN=1661480FF274E46E5E74274531EDCB741CA1C734
Certificate serial:       649010ED19B9F086469252FDCB132C171D3C96
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
Manifest number:          C1
Signing time:             Thu 24 Sep 2026 17:17:06 +0000
Manifest this update:     Thu 24 Sep 2026 17:12:06 +0000
Manifest next update:     Fri 25 Sep 2026 20:51:06 +0000
Files and hashes:         1: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: yeyDp2n0wd57cuHVR90zOnbkcRU0QZljusHdKuOsPt4=)
                          2: 1661480FF274E46E5E74274531EDCB741CA1C734.crl (hash: fmSEW+gmUKJtzYS8ZUl7TqoIpXQ499khNvytB+K7KpU=)
                          3: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: 6+4UoGWRmOvV9or9CsRz3CTlMpRVAi94wKc1SslyAWU=)
                          4: 3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa (hash: 5Rh6b8BHsmWIHG3vGb6jLaqPvuwWEBxRJQJuBZZsDT0=)
                          5: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: 8ZVpWuFxO9temB8Ho9FZTNXvwZzEzY2CqMkIIHYcFZs=)
                          6: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: IFRJrTg8onKZh/TaH9A8yf1wtYUjMcqN4WYH9m4UY4o=)
                          7: 3232332e3133302e32322e302f32342d3234203d3e20313338313238.roa (hash: jf6b7kXVa1dhZZRDA/RPJIPiAhtoDFAim3d84aPTFo8=)
                          8: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: Y0BQZtsB87a9/5oaZfRO5KllrRmXSjrLR0zXbqGB394=)
                          9: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: D5DehsQ30Cg+nOY8N0HK+YwXqyoPTcKwYKHkFyOMq6Q=)
                          10: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: RJW8cxc5knQFd6ZsJTxIJMJPLrpi1nPKGRB3o32Vvrg=)
                          11: 3232332e3133302e32322e302f32332d3233203d3e20313338313238.roa (hash: V75gkBW5l6X/+7vnO9PPI54r4jLFDkXk/84VL8kexoA=)
                          12: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: 8uSlgnTbxGAzWNgbE1BKBFBhMHsG7F+ZnW0oGHCnk8w=)
                          13: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: pwGyBzBOtEK35HSrAz+AVA7aiAsnsEM4hcBWRLigb/A=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl
                          rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 10:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:90:10:ed:19:b9:f0:86:46:92:52:fd:cb:13:2c:17:1d:3c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1661480FF274E46E5E74274531EDCB741CA1C734
        Validity
            Not Before: Sep 24 17:12:06 2026 GMT
            Not After : Sep 25 20:51:06 2026 GMT
        Subject: CN=82E09CC381CA38424C51A85C3A1BCDA2CD2D9F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d9:31:35:a1:df:66:01:ec:04:34:28:99:ac:
                    c2:f0:c6:24:96:39:4f:f4:28:b3:f3:50:52:e0:1a:
                    d9:d0:13:60:5c:98:51:d7:63:7d:57:63:bb:50:cb:
                    fc:0c:12:d1:a9:5e:03:56:33:e9:31:74:f4:01:29:
                    6a:58:de:f1:35:3d:ee:27:6e:56:10:24:96:fe:3e:
                    dc:c7:1d:24:64:df:ea:55:1e:45:76:7b:05:ec:71:
                    6b:f1:2f:88:bd:2d:b5:03:38:82:37:4a:85:8a:43:
                    d9:8b:e3:87:64:f0:d5:4d:97:af:62:dc:4a:06:9d:
                    d9:cd:d7:cc:bf:a7:19:4c:f0:08:a8:3b:4b:95:46:
                    e2:2d:48:72:3f:cd:4b:1e:6e:95:5e:17:80:13:ac:
                    2f:c9:95:88:ab:bb:e3:7e:8a:e6:fe:d7:7f:8d:6b:
                    0d:1f:da:05:a6:47:ab:f4:1d:d6:d0:18:d5:3d:13:
                    47:d8:ab:d9:42:3d:7d:6d:cd:04:7a:ea:9b:c0:c0:
                    5f:84:64:f2:7c:8a:65:60:da:02:46:48:35:f4:78:
                    0f:41:60:ba:1b:a0:72:6c:99:04:b7:fe:a9:7b:fc:
                    e2:0c:57:28:fd:0b:87:ce:3f:30:51:1a:09:5a:a8:
                    30:10:ec:08:ed:bd:b0:92:b1:e3:42:7a:7d:12:6f:
                    33:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E0:9C:C3:81:CA:38:42:4C:51:A8:5C:3A:1B:CD:A2:CD:2D:9F:25
            X509v3 Authority Key Identifier:
                keyid:16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:27:a7:f4:e5:34:22:84:86:03:13:e1:4b:e0:0e:f6:56:45:
         97:fc:f9:c9:0d:f2:e5:8b:d3:13:60:0d:0c:d3:da:fc:32:81:
         84:9d:8c:7e:50:56:b9:7b:35:a6:b7:68:10:57:ed:ba:02:a4:
         18:1d:81:8f:02:f0:9c:a9:63:84:08:b9:74:cf:a3:af:2f:83:
         29:cd:5a:5b:95:9f:66:3e:ec:68:2c:27:f2:26:2f:7d:d3:50:
         a4:d0:e4:4e:e5:98:db:02:1e:9e:55:9b:11:aa:76:e5:77:2b:
         e8:3c:c5:7c:5d:7d:cf:8a:cc:69:5b:39:8a:08:bd:5d:1e:2d:
         4a:22:b0:44:34:14:f4:3b:80:85:36:fd:7d:09:fa:40:0b:7e:
         a3:d8:52:6d:eb:94:9e:58:3b:48:78:83:af:56:db:32:91:cf:
         da:d1:cf:25:f7:a1:80:b9:58:bf:2f:1d:20:8b:0c:f3:e3:32:
         e1:71:73:b3:a1:2f:0b:a5:11:78:f0:8e:a0:72:16:ef:71:5d:
         cd:04:84:84:75:c0:ed:07:06:23:40:f7:f7:18:25:7d:e6:3b:
         ed:dd:3d:a5:48:22:92:d0:3d:cb:69:17:f1:b6:96:0b:cd:77:
         47:db:68:8d:56:e5:36:37:a9:60:1c:b9:5a:b3:88:f2:17:b8:
         e7:a8:41:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:35:12 2026 by rpki-client