Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/E1E3518C069F5FB9A7DF32C2D6B913BEFA701A7B.mft
File:                     E1E3518C069F5FB9A7DF32C2D6B913BEFA701A7B.mft (raw, json)
Hash identifier:          kto7MfMgOSw77vrXTnkwdVA+CKuu0BbPfU0HmbMcuF4=
Subject key identifier:   A1:AC:1E:D3:06:68:AA:FF:BD:9C:58:D0:C7:87:67:59:65:9B:CA:35
Authority key identifier: E1:E3:51:8C:06:9F:5F:B9:A7:DF:32:C2:D6:B9:13:BE:FA:70:1A:7B
Certificate issuer:       /CN=E1E3518C069F5FB9A7DF32C2D6B913BEFA701A7B
Certificate serial:       3A18114A2B1638236D2ABA238A55E84398BDA09B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1E3518C069F5FB9A7DF32C2D6B913BEFA701A7B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/E1E3518C069F5FB9A7DF32C2D6B913BEFA701A7B.mft
Manifest number:          C2
Signing time:             Wed 23 Sep 2026 18:18:38 +0000
Manifest this update:     Wed 23 Sep 2026 18:13:38 +0000
Manifest next update:     Thu 24 Sep 2026 20:26:38 +0000
Files and hashes:         1: E1E3518C069F5FB9A7DF32C2D6B913BEFA701A7B.crl (hash: P9IhszbUnYVBWDNX67NCiVIr3xg/w4dBvHAVx+E6kHw=)
                          2: 3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (hash: y9ae8+xHWll+ZhfsgG2Yw+6BZc5Jc9ecverNHVHJoec=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/E1E3518C069F5FB9A7DF32C2D6B913BEFA701A7B.crl
                          rsync://rpki-rsync.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/E1E3518C069F5FB9A7DF32C2D6B913BEFA701A7B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1E3518C069F5FB9A7DF32C2D6B913BEFA701A7B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 20:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:18:11:4a:2b:16:38:23:6d:2a:ba:23:8a:55:e8:43:98:bd:a0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1E3518C069F5FB9A7DF32C2D6B913BEFA701A7B
        Validity
            Not Before: Sep 23 18:13:38 2026 GMT
            Not After : Sep 24 20:26:38 2026 GMT
        Subject: CN=A1AC1ED30668AAFFBD9C58D0C7876759659BCA35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:fd:ae:63:b0:8e:b0:80:5f:6b:81:22:cf:
                    a1:52:f5:f4:19:8a:f3:63:5a:48:fb:da:c4:43:b4:
                    c2:c0:96:50:74:78:27:e0:03:31:ae:43:87:dd:45:
                    cd:9a:7e:b5:4c:24:4f:38:8f:ca:fa:85:cf:4f:23:
                    3b:5f:1a:18:c2:26:5f:2e:78:45:b8:3a:83:48:65:
                    51:e1:aa:0c:93:69:f2:18:f7:f5:74:07:31:f0:2e:
                    2e:60:a6:34:23:c0:f9:1e:0a:ca:70:15:1b:e8:27:
                    52:4f:7c:e5:76:7d:04:11:6f:96:82:31:e9:91:2e:
                    3f:65:48:ef:ae:6d:28:32:6f:8b:71:49:d2:49:a7:
                    09:7d:66:08:1a:00:b2:01:18:e8:e8:c6:44:2b:93:
                    eb:c1:96:cf:f8:5c:25:b2:80:02:26:6b:97:41:f3:
                    49:fd:59:5c:15:6b:21:e0:ef:22:97:cb:46:ad:93:
                    d9:e8:7e:bf:01:9e:04:cc:c7:fb:82:5e:6c:ca:5d:
                    8c:cc:7c:9b:14:a5:7d:32:fc:27:35:40:cd:d4:e0:
                    17:90:a9:e3:ff:68:c0:c4:62:fa:9d:d8:0b:31:50:
                    df:89:48:f8:8b:48:49:4f:f9:1e:1b:a6:e1:e2:3f:
                    3f:58:6e:4c:52:31:f8:52:e6:7b:87:1b:6f:3c:dc:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AC:1E:D3:06:68:AA:FF:BD:9C:58:D0:C7:87:67:59:65:9B:CA:35
            X509v3 Authority Key Identifier:
                keyid:E1:E3:51:8C:06:9F:5F:B9:A7:DF:32:C2:D6:B9:13:BE:FA:70:1A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/E1E3518C069F5FB9A7DF32C2D6B913BEFA701A7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1E3518C069F5FB9A7DF32C2D6B913BEFA701A7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/E1E3518C069F5FB9A7DF32C2D6B913BEFA701A7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:87:78:9b:03:75:5c:4d:79:61:b7:f6:49:b3:22:e9:ec:03:
         14:f8:2e:7f:43:fe:95:3d:52:e3:c8:fc:81:3f:f3:f9:07:20:
         2f:af:4a:c0:e2:e0:ce:57:fa:a0:82:f4:98:59:cc:c9:4f:53:
         7e:66:d7:2a:b3:d1:7d:b1:ab:3d:51:01:63:70:9e:4c:45:bc:
         4b:8e:db:9d:0d:10:05:65:3e:56:12:a9:bf:21:b7:20:4d:ac:
         ae:62:ab:e8:11:39:7b:5d:16:a2:6d:ac:5d:2d:9d:ad:f6:b6:
         b1:d1:2f:09:c8:2d:b4:c9:ad:aa:99:e5:6f:3b:20:68:f0:f3:
         fc:7f:f8:bf:a0:c5:6c:88:75:62:d6:d6:4d:60:c9:08:c7:bd:
         45:16:de:7c:9c:f2:04:20:d8:14:0b:9d:23:45:18:33:96:6f:
         c6:31:c2:e3:b0:4c:96:7d:a2:67:60:9e:b6:b5:63:f5:7f:16:
         70:29:b3:1b:13:1a:5e:6f:93:af:ae:f3:a4:85:2d:d7:ce:1e:
         f5:8d:c4:58:6d:41:0a:ad:8f:2e:3a:a3:58:7f:d1:da:42:d1:
         bb:a7:06:91:c2:ed:0a:78:a7:55:6d:5b:3e:45:65:4f:ef:bd:
         7b:de:28:9e:f0:28:3e:e2:2f:cc:1f:68:f5:51:ea:fa:51:5d:
         63:30:6c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:46:57 2026 by rpki-client