Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft
File:                     27A90045CBA22331AEF929C017271A7936688C97.mft (raw, json)
Hash identifier:          nwFy7IwEoHBS3CcHeIoqKEd/Gnf5gKU39+ANJsleOsk=
Subject key identifier:   F8:11:67:AD:6B:F9:B5:CB:90:73:7E:B8:18:4A:26:EE:29:3D:5F:E7
Authority key identifier: 27:A9:00:45:CB:A2:23:31:AE:F9:29:C0:17:27:1A:79:36:68:8C:97
Certificate issuer:       /CN=27A90045CBA22331AEF929C017271A7936688C97
Certificate serial:       1792DB4192F9C3D7474D3D89870C8CC37B12AA9E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27A90045CBA22331AEF929C017271A7936688C97.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft
Manifest number:          C4
Signing time:             Thu 24 Sep 2026 20:10:27 +0000
Manifest this update:     Thu 24 Sep 2026 20:05:27 +0000
Manifest next update:     Fri 25 Sep 2026 23:07:27 +0000
Files and hashes:         1: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: wxG5u0knwwtRFwXPMgfrz2l9Xi2Prxv/dPiLuDPGtJo=)
                          2: 27A90045CBA22331AEF929C017271A7936688C97.crl (hash: 95veDVOrbozBrvm33Gj2DKho6pICgkALkaJw+45DoVM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.crl
                          rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27A90045CBA22331AEF929C017271A7936688C97.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 11:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:92:db:41:92:f9:c3:d7:47:4d:3d:89:87:0c:8c:c3:7b:12:aa:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27A90045CBA22331AEF929C017271A7936688C97
        Validity
            Not Before: Sep 24 20:05:27 2026 GMT
            Not After : Sep 25 23:07:27 2026 GMT
        Subject: CN=F81167AD6BF9B5CB90737EB8184A26EE293D5FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:fb:68:ad:90:b0:8b:b4:4e:11:19:80:65:
                    5d:05:cc:f6:43:e8:4c:f7:ee:9d:da:81:c4:00:33:
                    31:8d:cf:84:ff:5a:5d:36:96:83:45:f8:12:c1:a7:
                    75:75:86:1d:9e:cf:4b:a5:ab:ae:c9:bb:e8:a6:90:
                    3a:46:88:41:69:e0:c6:b8:e0:d0:4f:9f:eb:8c:82:
                    5e:f3:f3:7b:43:12:41:b0:5b:67:95:df:64:fa:3f:
                    4d:e6:16:06:25:4d:e8:28:fa:c9:ca:62:a4:51:30:
                    d3:16:a0:ad:fe:e5:3d:5c:f6:a4:2f:1a:9e:78:01:
                    d8:90:1d:b1:17:a9:e6:b6:08:7a:7a:7d:f0:69:14:
                    e4:2a:5d:ec:e0:8d:db:81:18:7d:15:c9:fa:da:0a:
                    4f:a2:8c:af:01:aa:a7:bf:f9:33:70:93:c9:5b:cb:
                    9c:90:41:5d:4e:b3:30:fd:2b:b5:74:6a:d0:ab:4c:
                    25:3d:5d:10:b0:d4:58:c2:54:2a:89:fd:eb:b8:fa:
                    db:b2:7f:0b:f7:c2:c7:b2:d0:58:e7:a1:26:6a:fd:
                    0e:dd:f8:6a:4f:f8:1c:5a:05:c9:6b:22:53:3c:cf:
                    dd:f4:90:a0:5b:44:9d:83:90:e4:de:9c:e2:2c:dd:
                    28:5b:12:a1:40:95:04:53:d1:5d:cd:26:2b:42:bf:
                    1a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:11:67:AD:6B:F9:B5:CB:90:73:7E:B8:18:4A:26:EE:29:3D:5F:E7
            X509v3 Authority Key Identifier:
                keyid:27:A9:00:45:CB:A2:23:31:AE:F9:29:C0:17:27:1A:79:36:68:8C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/27A90045CBA22331AEF929C017271A7936688C97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/27A90045CBA22331AEF929C017271A7936688C97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:05:81:70:a3:93:f8:69:56:ec:e9:fe:6d:b1:c8:1c:62:6d:
         b7:93:95:a3:07:10:c2:e7:a1:a6:b1:8e:6a:04:43:75:7b:d3:
         95:e6:18:d5:5e:a2:51:29:5e:6d:de:03:cd:a1:cb:80:9a:41:
         55:20:98:5f:82:cf:26:29:8c:39:0b:e2:5a:b1:bf:78:8f:d6:
         73:34:b8:85:ed:71:34:d0:18:3b:03:21:7c:61:4a:44:b8:e4:
         24:f0:c7:db:c8:14:f7:c6:b3:9a:81:f5:da:d2:d2:8c:a6:e6:
         cd:5f:01:7e:ee:b0:32:af:ae:94:5f:c5:bf:37:0c:57:72:e1:
         d8:18:ea:30:f5:f4:a6:6f:00:db:9d:d3:82:37:77:3f:d8:36:
         04:5b:b3:a8:92:30:11:3e:aa:45:70:17:50:aa:ea:b4:6e:f9:
         40:6b:23:30:dc:40:79:f4:b1:b3:23:59:7e:2d:f3:ca:be:05:
         e0:ba:45:dc:d7:51:4a:ed:97:96:5d:0e:29:db:13:71:06:72:
         9b:2c:27:98:7a:b1:8e:c5:f6:f4:e1:03:18:2a:84:28:83:b4:
         14:88:3d:fc:58:37:4d:53:e5:24:ea:66:b1:a9:3f:ae:08:0a:
         b7:04:56:20:9a:94:f7:01:1b:f1:92:40:87:fa:16:26:5b:2f:
         0e:7b:0b:17
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUF5LbQZL5w9dHTT2JhwyMw3sSqp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdBOTAwNDVDQkEyMjMzMUFFRjkyOUMwMTcyNzFBNzkz
NjY4OEM5NzAeFw0yNjA5MjQyMDA1MjdaFw0yNjA5MjUyMzA3MjdaMDMxMTAvBgNV
BAMTKEY4MTE2N0FENkJGOUI1Q0I5MDczN0VCODE4NEEyNkVFMjkzRDVGRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEftorZCwi7ROERmAZV0FzPZD
6Ez37p3agcQAMzGNz4T/Wl02loNF+BLBp3V1hh2ez0ulq67Ju+imkDpGiEFp4Ma4
4NBPn+uMgl7z83tDEkGwW2eV32T6P03mFgYlTego+snKYqRRMNMWoK3+5T1c9qQv
Gp54AdiQHbEXqea2CHp6ffBpFOQqXezgjduBGH0VyfraCk+ijK8Bqqe/+TNwk8lb
y5yQQV1OszD9K7V0atCrTCU9XRCw1FjCVCqJ/eu4+tuyfwv3wsey0FjnoSZq/Q7d
+GpP+BxaBclrIlM8z930kKBbRJ2DkOTenOIs3ShbEqFAlQRT0V3NJitCvxp1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+BFnrWv5tcuQc364GEom7ik9X+cwHwYDVR0j
BBgwFoAUJ6kARcuiIzGu+SnAFycaeTZojJcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTg4NTNhYWItOGQ2Yy00NTdmLTlkNTctNDg0YWNhY2VhOWQ4LzAvMjdBOTAwNDVD
QkEyMjMzMUFFRjkyOUMwMTcyNzFBNzkzNjY4OEM5Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8yN0E5MDA0NUNCQTIyMzMxQUVGOTI5QzAxNzI3MUE3OTM2Njg4
Qzk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk
NTctNDg0YWNhY2VhOWQ4LzAvMjdBOTAwNDVDQkEyMjMzMUFFRjkyOUMwMTcyNzFB
NzkzNjY4OEM5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMEFgXCjk/hpVuzp/m2xyBxibbeTlaMHEMLn
oaaxjmoEQ3V705XmGNVeolEpXm3eA82hy4CaQVUgmF+CzyYpjDkL4lqxv3iP1nM0
uIXtcTTQGDsDIXxhSkS45CTwx9vIFPfGs5qB9drS0oym5s1fAX7usDKvrpRfxb83
DFdy4dgY6jD19KZvANud04I3dz/YNgRbs6iSMBE+qkVwF1Cq6rRu+UBrIzDcQHn0
sbMjWX4t88q+BeC6RdzXUUrtl5ZdDinbE3EGcpssJ5h6sY7F9vThAxgqhCiDtBSI
PfxYN01T5STqZrGpP64ICrcEViCalPcBG/GSQIf6FiZbLw57Cxc=
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:41:32 2026 by rpki-client