Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
File:                     AF6B7BCDACF90BA83205EA298327379BAB489418.mft (raw, json)
Hash identifier:          qnWXStLeDdl9T+BYYlUG22TzmL4vFSUlCZCAx3np9ho=
Subject key identifier:   82:EB:48:36:39:13:BC:D9:B0:5D:5F:29:0B:21:B9:7B:A4:80:6C:21
Authority key identifier: AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18
Certificate issuer:       /CN=AF6B7BCDACF90BA83205EA298327379BAB489418
Certificate serial:       5282DA735C435B621B4A060792D1868DFC399CE7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
Manifest number:          C1
Signing time:             Wed 23 Sep 2026 12:31:40 +0000
Manifest this update:     Wed 23 Sep 2026 12:26:40 +0000
Manifest next update:     Thu 24 Sep 2026 14:16:40 +0000
Files and hashes:         1: 3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (hash: +CIQNtkENDgMFXO899OFs+eQgqEbZwGsuSxbjsO2CJU=)
                          2: AF6B7BCDACF90BA83205EA298327379BAB489418.crl (hash: akRqE9b7DIsXLDJiU8sdVl9H6O3DbLewqIepWVnKFHY=)
                          3: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (hash: qCc2JIEbiwtQdnz7uQXbC2p3w6YwxAaU8dCI6McQWsM=)
                          4: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (hash: g0pqFy9DWm0Sz42lbSirSeYkq3Vdx407OgsTjSScBgc=)
                          5: 3130332e3232302e3131332e302f32342d3234203d3e20313333383237.roa (hash: oE4Q0cuL75fyXaIHf3JDUpfM+2/K4+wsnH/TeLPodS0=)
                          6: 323430343a613634303a3935373a3a2f34382d3438203d3e20313333383237.roa (hash: K8j/ZLU+ci7JWbQ44lPBg2aflFRtCWtRODUltXPnDVo=)
                          7: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (hash: m+sPMgDP6AqfDbfIIzCUcgfgt53+FkXMgNrd1zzKT1I=)
                          8: 3130332e39352e362e302f32342d3234203d3e20313333383237.roa (hash: xu1cN52iKwYrST7ZHiU1OG9/BN4NR23in1R/aZa/9/Y=)
                          9: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (hash: BxCzNrTcp0dp4A7C91gDRudiTOOmKrDBcvkaJa1pltE=)
                          10: 3130332e39352e362e302f32332d3233203d3e20313333383237.roa (hash: EFzx2gdrAoK4dLqP6OWhoqarBZwTNPP8hlTF8ndHsA8=)
                          11: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (hash: Lg4qdsj1osZUt2Wgs1cQh8M+Cq27I8kA05MBhaZ1e2E=)
                          12: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (hash: sxFoSO5566DvevtkqciXR0xAuQamF9AudcC/0/+/BMA=)
                          13: 323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (hash: y5wzCpmCgccfr9+aDXB1mUmJvFdLQ1aEGTJds2iwsoo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl
                          rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 14:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:82:da:73:5c:43:5b:62:1b:4a:06:07:92:d1:86:8d:fc:39:9c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF6B7BCDACF90BA83205EA298327379BAB489418
        Validity
            Not Before: Sep 23 12:26:40 2026 GMT
            Not After : Sep 24 14:16:40 2026 GMT
        Subject: CN=82EB48363913BCD9B05D5F290B21B97BA4806C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:35:3d:13:d4:d5:8f:b6:9f:1d:8e:75:25:fa:
                    92:10:22:f0:15:5b:b4:e1:fb:97:b1:f2:b4:fe:b1:
                    fe:0f:f2:4c:38:64:52:2c:ac:29:4a:72:20:d1:f5:
                    ab:4d:9c:cb:ce:7c:dd:2a:6a:ea:5f:ec:be:13:9b:
                    c0:35:58:41:63:07:ad:0e:78:45:46:2d:ba:5f:39:
                    fc:c5:36:6f:f8:2b:c7:5c:c3:b8:c9:13:67:be:bc:
                    9d:af:f5:1e:81:5b:dc:e1:3a:4d:b1:f0:6f:8d:a8:
                    b3:a7:89:80:be:bb:c1:cf:2e:6d:51:5e:4f:b4:7a:
                    3c:5f:c9:25:41:c5:8a:a5:04:19:58:fe:1b:6c:08:
                    5f:4a:9c:0f:ce:ad:8e:af:39:fd:19:d2:ae:3d:3f:
                    8e:a8:89:e7:08:05:1e:08:b5:19:49:d2:bb:0a:3e:
                    9f:00:0f:70:80:71:85:00:9b:7d:78:6d:0a:27:16:
                    d2:2a:17:23:5c:b9:e8:0a:08:0c:74:ad:7d:96:c1:
                    51:27:3b:70:db:7c:6e:37:4a:7f:fe:12:a9:38:76:
                    10:5c:b6:fe:1b:8e:01:16:bc:45:17:04:3f:5f:5a:
                    14:c6:56:f3:08:66:3d:07:49:00:6f:30:eb:47:bf:
                    53:a4:5f:32:df:56:21:55:9a:30:d0:06:c5:d2:f2:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EB:48:36:39:13:BC:D9:B0:5D:5F:29:0B:21:B9:7B:A4:80:6C:21
            X509v3 Authority Key Identifier:
                keyid:AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:cf:48:54:61:a1:51:bb:16:4b:8d:2e:b7:33:64:30:05:b2:
         73:f9:93:b8:18:05:75:8e:62:e4:87:e2:01:cd:d4:c7:50:b5:
         ea:ff:45:b8:12:31:cb:8b:b3:bd:f8:bd:02:4f:7c:3d:d2:b8:
         3e:42:0e:d3:96:11:97:18:ef:46:e6:3c:15:ca:fa:0b:dc:b7:
         ad:bc:72:8f:5c:31:26:42:c7:38:47:d8:75:b7:37:0d:4d:b3:
         6a:ac:47:d4:87:b6:61:f2:e1:9e:9c:ae:37:a8:4b:10:96:bf:
         b0:7d:a4:2a:bc:c0:e1:f1:c2:54:20:91:77:e7:ab:13:54:06:
         56:4c:df:10:c6:aa:00:f0:aa:e5:2d:f7:91:99:53:d1:9b:1c:
         93:80:d8:fb:e5:69:b7:af:76:7c:48:5a:3f:b4:ee:f7:b1:e6:
         8c:19:95:1f:7f:16:34:8a:cf:9c:67:52:01:a0:8f:af:30:19:
         eb:43:f8:d3:a8:9d:d5:64:4e:b7:53:a0:f0:fa:c9:6f:34:31:
         7a:ed:24:f8:3a:70:16:f0:58:eb:04:5c:4c:87:6f:b3:4f:fa:
         33:6a:67:e8:b4:9f:5e:fd:c5:df:5e:81:e8:bf:d0:bd:65:50:
         02:f4:bd:73:ad:96:dd:b2:b3:e2:b0:bd:87:ab:49:e7:ba:26:
         3d:e9:63:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:22:45 2026 by rpki-client