Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft
File:                     BE64AB23612B159BE54939807CB20423D340D326.mft (raw, json)
Hash identifier:          8bM3dhtyAZtrVPK7Mkz1zfe1qHPyWyTImulxhFXaLls=
Subject key identifier:   91:B9:6A:2E:D6:5B:1E:ED:E6:60:0F:F8:42:11:96:82:79:37:96:E7
Authority key identifier: BE:64:AB:23:61:2B:15:9B:E5:49:39:80:7C:B2:04:23:D3:40:D3:26
Certificate issuer:       /CN=BE64AB23612B159BE54939807CB20423D340D326
Certificate serial:       024610F318DFFA1A2AD0D7C137C5B268B73C0F6C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft
Manifest number:          C0
Signing time:             Wed 23 Sep 2026 16:11:02 +0000
Manifest this update:     Wed 23 Sep 2026 16:06:02 +0000
Manifest next update:     Thu 24 Sep 2026 17:50:02 +0000
Files and hashes:         1: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: gqKKZqiveBSyuWNd8uxps6/yl/at9bVMTgVKSVDM6XY=)
                          2: BE64AB23612B159BE54939807CB20423D340D326.crl (hash: MNb1AEk6TZ/eIPdTcsorYiT09PAbGvJ6xGQIpQ0TRFo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.crl
                          rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 17:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:46:10:f3:18:df:fa:1a:2a:d0:d7:c1:37:c5:b2:68:b7:3c:0f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE64AB23612B159BE54939807CB20423D340D326
        Validity
            Not Before: Sep 23 16:06:02 2026 GMT
            Not After : Sep 24 17:50:02 2026 GMT
        Subject: CN=91B96A2ED65B1EEDE6600FF842119682793796E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ab:70:02:02:56:92:1f:c6:11:54:ed:1a:6d:
                    aa:f2:54:98:ad:0a:6f:df:00:e8:3a:47:bf:b4:f7:
                    dd:62:e4:a2:5f:73:c9:29:70:a3:f8:bf:77:46:b8:
                    f6:b2:d5:7e:53:2a:cf:f5:b4:f8:82:43:16:f4:e1:
                    f4:08:6a:aa:17:43:d2:95:d9:ef:bf:66:eb:14:da:
                    0f:5b:2c:af:97:60:c4:1a:2d:8a:e7:9b:7f:59:ca:
                    c5:80:24:7b:61:f0:17:58:ec:af:cc:77:6d:ac:08:
                    ed:b2:ba:c8:81:86:a6:86:90:34:42:57:83:a3:5c:
                    f1:04:46:9b:e6:30:eb:e5:42:34:ef:47:78:32:f1:
                    cd:1c:7c:df:48:4c:75:5e:05:f2:d7:65:5b:b1:b4:
                    46:6c:8f:65:10:00:fd:c8:ee:b6:ec:5e:e8:43:05:
                    34:8e:eb:53:e4:8e:4b:63:b5:82:13:48:ea:4b:8b:
                    b6:89:f6:13:ee:58:7d:1d:ba:d5:50:41:f0:29:90:
                    df:e2:95:0c:e2:2a:3d:57:4c:ae:78:60:19:08:8a:
                    7c:48:fa:be:5b:a6:ab:38:fb:1a:af:db:08:2c:e4:
                    68:84:16:38:53:69:e9:2d:d6:28:cc:aa:5b:57:3e:
                    cb:57:20:bf:ae:b8:d8:44:37:7f:e0:a5:32:8e:33:
                    23:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B9:6A:2E:D6:5B:1E:ED:E6:60:0F:F8:42:11:96:82:79:37:96:E7
            X509v3 Authority Key Identifier:
                keyid:BE:64:AB:23:61:2B:15:9B:E5:49:39:80:7C:B2:04:23:D3:40:D3:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f9:dd:47:76:5b:aa:a4:ef:c3:1e:66:52:15:5f:24:7f:88:
         e1:ef:cb:94:67:d4:51:7f:a7:d1:3e:8e:17:2a:03:74:50:19:
         9e:d3:fb:1a:c3:a9:d6:fa:bb:ed:38:f7:b6:a3:a0:74:e0:c3:
         7b:ff:43:40:f6:f9:c9:1d:bd:a2:95:d2:d7:50:c8:5c:38:2e:
         ec:41:a9:d0:5f:39:eb:06:c7:8f:9c:5c:df:0f:0f:9f:9b:e9:
         fe:9d:34:c6:a5:22:19:cb:ae:8a:80:7c:da:59:c8:8e:de:d8:
         d3:5f:6c:f4:14:2d:e0:44:64:28:09:6f:fd:f3:1b:2c:3b:d4:
         de:2a:b6:07:3a:69:c7:77:f5:44:8d:b4:7c:82:37:87:cb:81:
         4b:4e:a7:9a:2a:71:d8:fe:6e:f0:2c:ee:98:56:00:b3:22:4c:
         34:bd:d9:c8:e5:de:93:0c:0a:ac:eb:89:c9:61:23:db:d7:35:
         44:80:fa:0b:13:5c:50:1b:25:59:58:4d:09:2f:a4:dd:38:35:
         f0:53:4d:b6:f6:76:9a:f5:6a:cb:01:75:eb:39:0b:8c:02:e1:
         c2:59:e7:7f:cc:6d:13:63:16:cf:5f:25:80:58:e8:29:77:81:
         cb:ab:32:d6:6c:a6:4d:a8:82:44:38:89:37:a9:a1:4a:76:d6:
         e4:bd:95:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:07:24 2026 by rpki-client