Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.mft
File:                     E51553190D79639AC8B731759BCAF93A9BA75390.mft (raw, json)
Hash identifier:          MDHttYw3AMVyBEQCT6jTpCAB597DKeYh7Cjn86OyHd4=
Subject key identifier:   A7:65:B5:C6:67:E8:2F:86:C2:D5:6A:E3:BD:10:32:59:5D:17:9C:4D
Authority key identifier: E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90
Certificate issuer:       /CN=E51553190D79639AC8B731759BCAF93A9BA75390
Certificate serial:       40CE0D3E47AA877DFE901E64E066166F37E382DE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.mft
Manifest number:          C4
Signing time:             Fri 25 Sep 2026 00:30:43 +0000
Manifest this update:     Fri 25 Sep 2026 00:25:43 +0000
Manifest next update:     Sat 26 Sep 2026 01:28:43 +0000
Files and hashes:         1: 3135372e38352e3231312e302f32342d3234203d3e20313339393934.roa (hash: Hje9hVkqq6yIKosGAXlY2yF2ItW4gETtApNe4b6AB20=)
                          2: 3135372e38352e3139382e302f32342d3234203d3e20313339393934.roa (hash: 4IlDGU84GbqCCVvDzRSkdm0aUkGzv5fEvX6iGVv0YxM=)
                          3: E51553190D79639AC8B731759BCAF93A9BA75390.crl (hash: HGtxdkKzgNph4g16boc2l4yt4mJevulCFLs8sZyop3Y=)
                          4: 3135372e38352e3231392e302f32342d3234203d3e20313339393934.roa (hash: ObIrDGEV6QzinRDK3oWe/YhJWqH6IDTcTeePolEp5m8=)
                          5: 3135372e38352e3230362e302f32342d3234203d3e20313339393934.roa (hash: rFWGloqg9wMb59JTrx7Hv08CQL/tPtLs/ggDburT3qA=)
                          6: 3135372e38352e3230382e302f32342d3234203d3e20313339393934.roa (hash: ldPhAAtFE22FqY5h7hsA1Z1c6QVe3aVniGrsGK5jmrw=)
                          7: 3135372e38352e3232312e302f32342d3234203d3e20313339393934.roa (hash: KPBtds8dAYc4SnJacxB7UmIZ8uX1YODx1/1ytFzQRxg=)
                          8: 3135372e38352e3231302e302f32342d3234203d3e20313339393934.roa (hash: SgetZBG/YaPlx4MXSQuQ1nGphKAZjfV/I+000SdvUDw=)
                          9: 3135372e38352e3231382e302f32342d3234203d3e20313339393934.roa (hash: 6WnVDRhIU/pqOm+/jQ7sZce4+WndTCqkhqNpZ1Lu2Vc=)
                          10: 3135372e38352e3230372e302f32342d3234203d3e20313339393934.roa (hash: x3PB6S1mFL4hqiGfXLCAabZ5vODEyZGuJJoVUn+N1YM=)
                          11: 3135372e38352e3231332e302f32342d3234203d3e20313339393934.roa (hash: FEzlU6iDtAm5VxYS/x9DfVZeXu3tAhzM99suK39xKu8=)
                          12: 3135372e38352e3230392e302f32342d3234203d3e20313339393934.roa (hash: huje9giZQ+2ivuixx/hkyoXDo3xc3fy2kT8Q+wAd8Z8=)
                          13: 3135372e38352e3231322e302f32342d3234203d3e20313339393934.roa (hash: NIHD8Mbpczu2PfLMlL+SSgF1nFRtlrbgz83XkUNgyis=)
                          14: 3135372e38352e3139372e302f32342d3234203d3e20313339393934.roa (hash: QC2LDey380n4oVA3aR38ShTftwvOzkB7zF7rM9ML0dE=)
                          15: 3135372e38352e3232302e302f32342d3234203d3e20313339393934.roa (hash: 5jVZrO3bdvEgp42Wf+N9tYjId+fRI8dV8A/PBcK0Ano=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl
                          rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 01:28:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ce:0d:3e:47:aa:87:7d:fe:90:1e:64:e0:66:16:6f:37:e3:82:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E51553190D79639AC8B731759BCAF93A9BA75390
        Validity
            Not Before: Sep 25 00:25:43 2026 GMT
            Not After : Sep 26 01:28:43 2026 GMT
        Subject: CN=A765B5C667E82F86C2D56AE3BD1032595D179C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:f8:ec:85:c3:71:26:70:64:36:ad:ed:55:
                    9d:31:f7:75:cf:65:27:4f:57:d1:41:1c:53:0e:88:
                    be:73:e4:16:0f:54:e5:e9:12:4a:a9:fc:51:7c:16:
                    bc:e2:2e:7e:e9:2e:fd:0d:f8:e9:7f:22:f4:98:ee:
                    3a:42:27:0b:89:74:a6:65:0a:d6:c6:97:3f:8c:fc:
                    e1:d0:7a:8b:81:89:6b:24:0b:77:57:57:64:4c:ed:
                    f7:a0:a9:9f:62:5c:de:9d:61:78:ba:8e:ee:d4:54:
                    ee:f8:5c:26:11:b4:e3:7b:7a:49:bc:f6:8d:2d:de:
                    33:c3:23:b7:63:b0:63:6b:57:29:70:2f:e7:69:20:
                    3d:87:6e:d0:3f:dc:cc:18:97:96:a0:36:a4:70:28:
                    24:24:9d:6c:35:ee:3b:4e:c1:68:d1:0f:88:20:3b:
                    c9:ed:51:e4:cd:e3:6f:a5:8d:d8:3e:f8:75:b8:72:
                    9d:f7:99:86:3c:39:2b:67:86:0a:eb:a2:b8:ce:61:
                    97:a2:36:87:96:04:a7:37:64:65:29:72:1f:2b:4e:
                    fb:5e:71:75:72:ba:d7:a0:ad:b3:0c:49:36:e6:89:
                    b2:28:05:86:e4:71:db:06:50:c0:14:43:99:d0:fd:
                    37:b5:07:5a:7b:bd:79:70:66:ee:98:9d:7d:e4:e6:
                    06:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:65:B5:C6:67:E8:2F:86:C2:D5:6A:E3:BD:10:32:59:5D:17:9C:4D
            X509v3 Authority Key Identifier:
                keyid:E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d0:bd:89:e0:64:98:c1:14:a9:3d:82:a7:17:50:d9:e9:13:
         f1:03:ac:3c:7d:a8:f9:01:23:3f:ca:56:42:30:9b:f2:22:57:
         4b:b5:1c:1d:3f:bf:df:9c:ab:ec:4d:98:0e:8e:b6:32:06:de:
         14:2b:7c:8a:be:dc:42:a7:a5:a4:44:fc:11:6f:51:2f:4f:4f:
         6d:20:c4:08:03:d9:1d:40:b0:f0:98:e6:6c:2c:d0:e0:37:c2:
         26:8d:d0:68:15:d5:1a:59:15:03:45:ad:43:c6:f3:dc:9e:0a:
         a6:48:89:a2:fa:77:74:cc:a1:63:86:1a:6f:12:fa:a8:9b:f0:
         ee:39:87:f1:c5:21:ae:5b:b8:65:f6:bf:de:5c:92:82:ac:0a:
         17:d8:c4:e9:b1:78:f4:ba:96:14:c5:3f:d9:f2:23:4c:4d:29:
         c3:b2:8e:34:fc:18:95:31:37:a3:ba:7d:ef:27:66:4b:6c:bc:
         0f:94:e0:62:37:87:5f:d1:56:f6:75:60:a6:77:7e:64:27:73:
         21:98:7a:62:1a:a1:a1:46:f6:4a:6f:58:54:ae:48:a1:ba:92:
         54:b1:2a:29:07:14:1e:0a:5f:d5:ad:84:cb:40:f1:7f:7d:d3:
         53:db:a3:af:65:13:a7:f8:00:45:01:8a:e2:b0:5f:24:71:fa:
         91:50:56:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:45:10 2026 by rpki-client