Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft
File:                     24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft (raw, json)
Hash identifier:          hMBJ80hK5NdoFxItkgguHl2gHcK+pnrBW9uK27cYqNk=
Subject key identifier:   73:8F:48:55:97:77:52:71:54:FB:B5:F2:D8:DD:00:FE:6E:BB:70:5E
Authority key identifier: 24:D7:54:98:B4:85:AA:59:62:AD:8C:3A:00:54:8E:CA:63:BC:6B:48
Certificate issuer:       /CN=24D75498B485AA5962AD8C3A00548ECA63BC6B48
Certificate serial:       5FAD3EDF769A56F833A127DA7A6F86D929B221A4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft
Manifest number:          C6
Signing time:             Fri 25 Sep 2026 02:28:19 +0000
Manifest this update:     Fri 25 Sep 2026 02:23:19 +0000
Manifest next update:     Sat 26 Sep 2026 05:06:19 +0000
Files and hashes:         1: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: fCOFQpy4x/crI+WC5jvfSD6t0+AQC6KYZU58O4qsuz0=)
                          2: 24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl (hash: KgLQHngTQbuwSE+F5N6lVyB2kpDHrx18WBK0Xu7QbEs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl
                          rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 05:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ad:3e:df:76:9a:56:f8:33:a1:27:da:7a:6f:86:d9:29:b2:21:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D75498B485AA5962AD8C3A00548ECA63BC6B48
        Validity
            Not Before: Sep 25 02:23:19 2026 GMT
            Not After : Sep 26 05:06:19 2026 GMT
        Subject: CN=738F48559777527154FBB5F2D8DD00FE6EBB705E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:e3:91:be:6d:6c:e3:f3:c8:b8:e1:ce:8d:
                    91:d0:7d:b6:5e:cf:67:18:e9:6e:bb:4d:9a:46:ee:
                    07:4d:dd:6b:1f:6a:f8:09:93:7a:36:03:77:31:17:
                    67:be:ad:a2:e8:48:f1:dc:75:8c:63:40:07:79:ef:
                    38:6b:76:cc:ab:7c:a0:63:ad:ff:39:0a:f8:74:91:
                    59:41:1e:e0:ee:a2:1f:de:d1:e9:2d:22:93:1e:14:
                    0b:60:bc:33:e3:7f:87:e0:9f:b4:ed:48:a0:6f:f6:
                    df:74:55:58:fc:e0:e6:07:a5:48:05:1e:c5:d8:11:
                    0e:84:61:41:d4:9d:a2:db:30:6d:c1:ff:89:00:4a:
                    ff:c4:a0:c6:80:82:cc:74:37:fd:18:79:37:58:70:
                    c1:95:37:3a:53:98:03:41:e0:dc:f8:f4:bb:3c:d8:
                    ed:45:ea:50:fb:27:a2:9a:3f:db:be:e7:b6:61:15:
                    f9:cf:8c:7e:f8:b4:f5:8c:70:43:8f:02:2b:6c:6d:
                    f9:b0:58:7e:03:d5:16:fe:18:cc:4d:bf:b8:f3:ae:
                    8a:1b:2d:0e:31:b7:0b:fa:64:22:d7:0b:b1:f5:06:
                    8f:d5:2e:d2:4e:f1:53:07:bb:48:59:6b:28:68:ce:
                    da:af:aa:d4:af:26:2a:62:2b:38:c4:ce:57:da:17:
                    45:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8F:48:55:97:77:52:71:54:FB:B5:F2:D8:DD:00:FE:6E:BB:70:5E
            X509v3 Authority Key Identifier:
                keyid:24:D7:54:98:B4:85:AA:59:62:AD:8C:3A:00:54:8E:CA:63:BC:6B:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c4:f8:b8:05:1f:b6:56:49:3f:a2:b2:00:cc:ca:80:27:aa:
         18:2a:2c:1b:b3:ae:4c:05:97:99:51:d6:33:08:4b:eb:12:0a:
         a3:d9:4e:72:25:12:3d:fa:8b:bc:1e:23:ac:c4:3d:87:e3:04:
         a1:db:63:76:43:59:13:aa:b6:c3:79:35:57:76:6b:15:17:87:
         a4:9d:c7:47:68:9a:54:b2:45:c9:a7:26:41:96:35:56:8b:ef:
         f7:d8:6e:9e:a9:ba:c5:dc:12:8b:de:a4:36:11:7a:67:ea:49:
         21:eb:3a:63:02:0c:12:ba:70:11:bf:fa:ca:69:5e:e0:e3:ac:
         d0:69:be:ba:31:0f:ef:8c:63:7a:4b:7c:4b:90:6d:87:02:e9:
         a8:4d:df:8e:c6:87:2f:85:47:23:ef:e4:f2:50:b9:62:86:c7:
         61:f3:df:28:ec:53:e3:38:80:07:0e:2c:33:45:15:06:5e:c1:
         92:cc:7b:77:08:bd:a3:d1:05:3c:d5:39:dd:07:b3:cf:2f:a4:
         66:f7:34:18:b3:75:4d:c0:bd:34:4a:cc:ab:5e:2b:be:21:77:
         09:4a:e8:f0:77:ef:8b:1a:70:33:f9:dc:41:57:9f:98:fe:03:
         b2:b4:83:e2:44:a4:57:34:64:0e:22:24:c0:6b:fa:e4:fa:76:
         cc:86:b6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:44:44 2026 by rpki-client