Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.mft
File:                     0139BB0BDA0215A5AD4AB57CF22329862077511D.mft (raw, json)
Hash identifier:          vMo7XxgiOlzFaK4Wg18JUw87lkvkiuoT2JgLXw90h0g=
Subject key identifier:   B7:81:95:FE:94:11:1E:F7:6B:7E:C0:EB:3C:EB:A8:05:82:44:D8:99
Authority key identifier: 01:39:BB:0B:DA:02:15:A5:AD:4A:B5:7C:F2:23:29:86:20:77:51:1D
Certificate issuer:       /CN=0139BB0BDA0215A5AD4AB57CF22329862077511D
Certificate serial:       72524D68D17689EEBCDCC34D56FF244FD2851B8C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0139BB0BDA0215A5AD4AB57CF22329862077511D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.mft
Manifest number:          C4
Signing time:             Fri 25 Sep 2026 11:09:25 +0000
Manifest this update:     Fri 25 Sep 2026 11:04:25 +0000
Manifest next update:     Sat 26 Sep 2026 13:29:25 +0000
Files and hashes:         1: 0139BB0BDA0215A5AD4AB57CF22329862077511D.crl (hash: IUXxH16mNLqY2fcI0Dix/7jBozx18y3yzL3KPQ+RMBU=)
                          2: 3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa (hash: 52S2LH7XP8/eJAv2z0VJNDFFpAYh34WjK2J7d6q8uvc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.crl
                          rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0139BB0BDA0215A5AD4AB57CF22329862077511D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 13:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:52:4d:68:d1:76:89:ee:bc:dc:c3:4d:56:ff:24:4f:d2:85:1b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0139BB0BDA0215A5AD4AB57CF22329862077511D
        Validity
            Not Before: Sep 25 11:04:25 2026 GMT
            Not After : Sep 26 13:29:25 2026 GMT
        Subject: CN=B78195FE94111EF76B7EC0EB3CEBA8058244D899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b7:c9:df:4a:cb:8b:19:f3:ba:67:0f:95:8d:
                    fa:f8:bb:45:42:21:dd:3c:34:56:04:e9:5f:54:50:
                    2c:4f:16:a2:a1:a0:55:21:d2:b9:8f:c8:7c:4a:ea:
                    3a:b4:a4:bd:e9:50:4c:8e:9c:3a:6a:d1:a3:c2:9a:
                    e4:a1:50:dd:fd:84:ab:2d:36:7e:31:00:ba:fb:d7:
                    8b:22:4d:8a:bf:a7:82:26:40:a9:6e:bd:76:8a:70:
                    14:65:be:4a:52:5a:10:60:d2:bc:d8:c4:df:2e:28:
                    b2:85:13:4f:ae:6c:99:8d:41:4d:2b:b3:d9:3a:b9:
                    17:53:67:5a:f6:7d:47:3d:33:53:1a:c7:98:de:9f:
                    7b:45:81:bb:d4:a7:23:57:7d:80:98:ed:df:66:e2:
                    ee:f4:a8:18:d1:37:85:31:9b:14:e3:f1:a8:33:5a:
                    50:1c:a5:08:79:d8:15:ec:2b:3b:a8:1d:c7:21:0a:
                    59:7e:f1:47:c9:d8:85:4a:a8:bb:a6:97:13:d3:6f:
                    18:1d:b1:83:38:cb:c9:a3:5f:43:7c:bb:16:2c:0f:
                    54:28:3a:dd:3e:d6:f3:b4:d8:f0:89:b8:15:92:b3:
                    02:87:bd:9b:01:7f:8d:8f:1e:a2:aa:e0:04:cf:7a:
                    20:91:a1:61:0f:9e:07:bf:9d:ca:e4:02:1a:61:3d:
                    93:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:81:95:FE:94:11:1E:F7:6B:7E:C0:EB:3C:EB:A8:05:82:44:D8:99
            X509v3 Authority Key Identifier:
                keyid:01:39:BB:0B:DA:02:15:A5:AD:4A:B5:7C:F2:23:29:86:20:77:51:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0139BB0BDA0215A5AD4AB57CF22329862077511D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:57:ca:81:99:f4:9e:f4:3f:13:dd:33:0a:06:0d:bb:5f:70:
         71:d9:cc:37:11:ff:e6:f2:be:56:25:29:07:bc:87:e3:12:b8:
         5d:a4:89:2a:33:52:5a:c9:bf:17:3a:cf:57:2d:49:ec:4b:07:
         3b:df:f1:18:95:8c:d2:0e:2f:17:57:ba:7e:a5:4c:b5:54:95:
         3c:ac:98:aa:02:9f:13:c1:35:07:c4:a3:8b:44:a1:ea:51:5f:
         85:ab:b5:18:f8:60:2c:c4:f4:67:e6:40:94:81:bd:a8:c0:27:
         32:37:7d:d1:81:cb:0a:2a:10:f7:f8:31:d8:33:a5:48:c8:20:
         1d:80:3a:8a:ae:9a:d9:a3:cd:3f:55:39:c8:66:73:3c:af:24:
         84:1b:1e:ee:6f:5c:a3:c4:15:41:39:21:a3:7f:12:91:79:d1:
         cc:11:cc:cf:65:4e:2d:eb:01:32:51:d7:e6:26:92:bd:39:61:
         d5:f4:0a:2e:31:24:90:ef:2c:e7:a2:9a:4a:68:1c:c9:d4:91:
         ec:d6:f1:18:b0:76:ee:c8:0c:6c:54:7a:2d:37:1a:7d:c3:b6:
         9d:be:cb:fc:aa:4d:a0:ca:a4:93:d1:a3:96:8a:6c:fe:e1:34:
         76:2c:a7:54:c7:7f:ab:88:79:c9:02:c3:67:a0:0e:44:7f:ec:
         47:69:6b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:20:02 2026 by rpki-client