Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft
File:                     101B41766786F11711DBC574AEB99665E513B990.mft (raw, json)
Hash identifier:          mj1ImWHBUizp6BjycpXNH3YG6zDlM8Q/TBnDAkoYh00=
Subject key identifier:   23:75:4B:18:34:16:81:F3:68:CF:C6:36:4B:3E:9D:EA:DA:58:96:D3
Authority key identifier: 10:1B:41:76:67:86:F1:17:11:DB:C5:74:AE:B9:96:65:E5:13:B9:90
Certificate issuer:       /CN=101B41766786F11711DBC574AEB99665E513B990
Certificate serial:       0850554C61428ED642C565A4EA57C1E5FCA6F352
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101B41766786F11711DBC574AEB99665E513B990.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft
Manifest number:          CC
Signing time:             Fri 25 Sep 2026 17:26:53 +0000
Manifest this update:     Fri 25 Sep 2026 17:21:53 +0000
Manifest next update:     Sat 26 Sep 2026 21:04:53 +0000
Files and hashes:         1: 3130332e3138352e35332e302f32342d3234203d3e20313339343536.roa (hash: 2/M+qS2XEYEy3c1p2wHiQjRhDZvNqtKYPCMKrPPfKqM=)
                          2: 101B41766786F11711DBC574AEB99665E513B990.crl (hash: VAANBjtc2/gcRompfo+6bky537o/HEumrUjaFSV6mhc=)
                          3: 3130332e3138352e35322e302f32332d3233203d3e203538383230.roa (hash: MocOMZvXF2Of3ZlngJI7mWGFsuJURJzlMQVT/Y0KRCw=)
                          4: 3130332e3138352e35322e302f32342d3234203d3e20313339343536.roa (hash: fdgYg9Q61h2vrVunApThGuv0SA3lWQltGycDEahVHCE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.crl
                          rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101B41766786F11711DBC574AEB99665E513B990.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 17:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:50:55:4c:61:42:8e:d6:42:c5:65:a4:ea:57:c1:e5:fc:a6:f3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101B41766786F11711DBC574AEB99665E513B990
        Validity
            Not Before: Sep 25 17:21:53 2026 GMT
            Not After : Sep 26 21:04:53 2026 GMT
        Subject: CN=23754B18341681F368CFC6364B3E9DEADA5896D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1e:5b:75:e0:89:53:04:ca:6e:b0:ca:33:7f:
                    00:b8:5a:1d:14:ee:b6:17:26:5e:65:82:cc:79:d4:
                    a7:9d:a0:a8:b1:76:02:11:ac:7e:c8:ec:92:32:bd:
                    8f:e6:4b:14:1f:11:26:a4:c3:c0:ef:05:91:e4:d7:
                    c3:1c:0c:ed:3d:2b:b7:8d:82:e2:1e:75:c1:0f:72:
                    bf:5a:46:38:9b:f7:0b:42:9a:76:a8:4c:c0:e9:82:
                    2f:8d:84:93:dd:a5:2f:35:93:d6:2f:f0:8a:9b:69:
                    82:d6:ca:e5:60:19:fe:11:f7:be:a2:73:62:4c:3f:
                    ff:70:91:1c:c9:8c:55:7b:10:57:68:30:93:01:e7:
                    44:7c:66:63:c2:3a:f2:aa:cf:ef:92:3d:b0:c6:09:
                    77:6c:90:21:5f:54:75:33:26:16:0f:be:f4:eb:a2:
                    0a:10:4c:56:12:ce:b2:e8:d3:a0:38:28:08:8b:ba:
                    45:14:9b:09:4e:e6:16:95:e2:e2:d1:b8:96:7d:07:
                    69:d5:84:c0:62:dc:8f:89:6a:0f:11:cf:e1:52:ec:
                    98:b2:cc:21:07:54:a4:6f:ad:43:c1:ba:a5:cc:1c:
                    ab:de:f5:18:63:b0:03:5f:7e:8d:a0:4a:60:a3:ac:
                    96:90:b4:76:af:81:c4:34:de:f7:95:97:94:d0:d4:
                    8f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:75:4B:18:34:16:81:F3:68:CF:C6:36:4B:3E:9D:EA:DA:58:96:D3
            X509v3 Authority Key Identifier:
                keyid:10:1B:41:76:67:86:F1:17:11:DB:C5:74:AE:B9:96:65:E5:13:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101B41766786F11711DBC574AEB99665E513B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:13:61:2e:07:c2:5d:e0:af:c7:d5:5d:87:b5:f9:d4:58:8b:
         ee:ad:af:5e:b3:ec:96:ad:37:0b:49:cd:76:bc:08:61:63:56:
         6f:6a:e6:94:86:a4:17:14:a7:58:ab:4e:03:db:8c:29:a9:2e:
         f7:cc:b5:4b:cb:de:4f:22:b1:1d:53:bf:18:9c:b4:8a:5c:a0:
         bb:e7:8f:b0:81:e1:13:ef:64:13:b4:ec:6c:8f:bc:1c:bf:f3:
         03:d2:00:5e:f9:84:cd:fd:b8:43:fd:92:08:98:af:88:85:a5:
         b5:d4:8b:a1:79:99:ae:30:98:aa:ff:ef:21:2b:f2:62:97:b6:
         4b:f5:a5:ff:f9:f6:24:70:99:27:e1:7e:4c:9a:e5:c3:4e:2a:
         d2:59:ab:ab:5a:7f:c5:5f:43:9d:c0:60:8f:34:01:d5:12:f9:
         2b:a8:d1:b4:c5:a6:a9:7e:69:58:29:9b:a8:40:24:9d:02:10:
         c0:04:79:4e:34:cf:e5:a6:f3:fb:1a:0b:d3:d4:26:69:d2:a0:
         f9:f0:f2:84:9f:05:19:10:9a:b2:35:c2:5d:07:dc:3b:5c:2c:
         c6:5f:4b:80:18:90:3f:0b:02:f2:ee:7f:e7:6f:e5:d3:3c:e2:
         b1:f9:a3:6a:fb:a1:93:a2:ba:ba:43:88:37:4b:61:a7:35:46:
         30:04:67:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:09:09 2026 by rpki-client