Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft
File:                     58775F16B86C66299D9AF904F73786CD365D8787.mft (raw, json)
Hash identifier:          G3gwQKvP257pWy3SjGE1xYX9GqcDpYlxT0GUSO/7BJA=
Subject key identifier:   50:BF:4D:AB:64:D3:7D:FA:F1:8F:BE:57:16:55:9B:E6:1E:D4:4C:9D
Authority key identifier: 58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87
Certificate issuer:       /CN=58775F16B86C66299D9AF904F73786CD365D8787
Certificate serial:       7EFF4D62E0331FD32634766E885B7E23DCAE1821
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft
Manifest number:          C1
Signing time:             Thu 24 Sep 2026 04:46:33 +0000
Manifest this update:     Thu 24 Sep 2026 04:41:33 +0000
Manifest next update:     Fri 25 Sep 2026 06:02:33 +0000
Files and hashes:         1: 3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa (hash: H3eiKQ1rH4KKbSKlbbugmJZ0bk81cXXLmDh4ZWXXp9o=)
                          2: 3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa (hash: DSYc7pVKbHIfveW5SkkYCHzEWtZN+Ia+cl23XhbufI8=)
                          3: 58775F16B86C66299D9AF904F73786CD365D8787.crl (hash: GZcuQC6mRk9P0EEseEkpjzKQjJ+l39Lt1/cHJyA44W4=)
                          4: 3130332e3137392e3231392e302f32342d3234203d3e20313431353936.roa (hash: 8gGQkutirDXD8N7BapuXn91tRtkNIPwIx69eLjqIVd4=)
                          5: 323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa (hash: bGA0iX1ida39LzySmJX22+VfeVCRxUu8cves5zOxb1c=)
                          6: 323030313a6466303a353463303a3a2f34382d3438203d3e20313439333437.roa (hash: g14LcNrrW54yrzbA/vRmcLiMXBlSRO/YFYlVg+H2Jjk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl
                          rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 06:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ff:4d:62:e0:33:1f:d3:26:34:76:6e:88:5b:7e:23:dc:ae:18:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58775F16B86C66299D9AF904F73786CD365D8787
        Validity
            Not Before: Sep 24 04:41:33 2026 GMT
            Not After : Sep 25 06:02:33 2026 GMT
        Subject: CN=50BF4DAB64D37DFAF18FBE5716559BE61ED44C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fd:1b:d4:70:71:ff:7e:7d:53:3d:22:79:95:
                    5a:02:8b:91:54:ef:b9:c5:a5:6b:45:de:a1:e5:d8:
                    81:d9:5a:85:1f:00:27:33:93:d0:4e:9f:75:5f:2e:
                    4c:4a:54:da:24:7a:81:cb:98:14:27:13:d0:46:ac:
                    64:9a:ff:17:4e:5c:57:5f:66:6d:21:b6:db:0c:57:
                    a9:b3:1d:57:44:16:63:3f:45:94:57:47:3f:5d:a1:
                    32:3f:30:39:56:5c:7e:74:d7:03:08:a5:67:95:dc:
                    71:9f:1c:d9:18:7b:85:f9:65:d6:cd:05:c7:dd:49:
                    2b:27:76:31:c4:02:c8:9b:60:fc:dc:74:3f:76:13:
                    a1:8d:a7:ec:46:d6:1f:69:36:37:7a:f7:82:31:cf:
                    43:8d:9a:a6:04:61:8f:ba:6e:71:c4:76:77:ac:9c:
                    aa:ff:96:e5:03:76:94:11:5b:f0:51:8e:3f:0c:4a:
                    e8:a2:02:2b:78:c3:57:d6:5c:9a:8d:79:e2:61:9e:
                    a0:5e:12:00:59:b4:c7:bf:fb:1c:e2:35:98:46:2b:
                    ed:4d:a5:a0:37:58:38:f8:ff:a2:c9:c5:6a:80:6d:
                    eb:05:93:43:f8:f4:00:72:7c:54:7b:a2:54:08:d2:
                    5e:d5:85:a6:40:b6:eb:24:18:5b:d4:fe:cc:54:40:
                    b1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BF:4D:AB:64:D3:7D:FA:F1:8F:BE:57:16:55:9B:E6:1E:D4:4C:9D
            X509v3 Authority Key Identifier:
                keyid:58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:0a:40:a8:43:d4:7e:a4:b6:9c:97:9f:44:56:77:36:c3:48:
         51:66:df:99:a6:ea:f9:58:d9:4f:5c:4e:19:4f:3a:56:9a:7e:
         2b:03:dd:10:00:62:64:fa:a1:21:4b:c6:3a:3b:a7:99:54:64:
         42:6a:99:38:f2:17:a9:eb:e7:66:2c:38:f5:e2:2e:8d:a2:a7:
         ff:81:ba:19:d2:3c:ea:61:5c:ad:31:c5:95:a0:84:4d:b6:90:
         04:d6:9d:7b:4c:d4:82:86:a8:64:30:e3:ed:5a:5e:90:be:c8:
         9d:d7:79:5a:1e:b3:eb:c1:34:24:84:72:87:92:90:27:58:76:
         ce:a5:6c:d5:01:03:e5:32:55:db:3f:a1:b5:b3:6a:4e:96:20:
         31:28:1b:64:04:82:83:90:8b:85:fc:6f:66:39:17:b8:0d:08:
         ff:01:4e:3b:94:03:08:e7:ad:55:ac:c5:ec:0c:82:be:e4:79:
         33:8d:f1:48:0a:ef:c0:aa:97:ff:21:da:0d:31:65:6d:08:8b:
         8d:35:7f:0e:93:4b:bb:d3:a5:af:b1:4c:ce:7b:f3:0b:af:13:
         36:ec:de:97:f5:3f:07:c6:73:37:08:61:6e:5c:0a:70:ec:5d:
         27:b3:6b:ef:9b:53:52:d0:fb:2f:78:cc:a5:6f:a0:15:af:7c:
         35:f0:28:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:12:49 2026 by rpki-client