Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft
File:                     1675ADC47F4873145B24769B8134062EEB020A6A.mft (raw, json)
Hash identifier:          8XyAsAGnis9OdPcjZhzkCsUVeAYaO3JDA/wpDJoZcMY=
Subject key identifier:   2B:C5:69:1F:14:C0:4E:7D:A2:87:71:72:52:65:60:AB:34:B1:8F:45
Authority key identifier: 16:75:AD:C4:7F:48:73:14:5B:24:76:9B:81:34:06:2E:EB:02:0A:6A
Certificate issuer:       /CN=1675ADC47F4873145B24769B8134062EEB020A6A
Certificate serial:       21C3649704E7AE1E33A51FF92205CD98F7FB2522
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1675ADC47F4873145B24769B8134062EEB020A6A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft
Manifest number:          0106
Signing time:             Sun 15 Nov 2026 03:13:10 +0000
Manifest this update:     Sun 15 Nov 2026 03:08:10 +0000
Manifest next update:     Mon 16 Nov 2026 05:21:10 +0000
Files and hashes:         1: 3135372e31302e3137392e302f32342d3234203d3e20313532333436.roa (hash: /DV6+SaBovRK3v8Zh1bjyOMwbspI86vj5IjrMCFPeu0=)
                          2: 1675ADC47F4873145B24769B8134062EEB020A6A.crl (hash: Lner64bgm3b2U1hfcN5mniY//4YevQ7gmhsOce/3s4E=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.crl
                          rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1675ADC47F4873145B24769B8134062EEB020A6A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 05:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c3:64:97:04:e7:ae:1e:33:a5:1f:f9:22:05:cd:98:f7:fb:25:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1675ADC47F4873145B24769B8134062EEB020A6A
        Validity
            Not Before: Nov 15 03:08:10 2026 GMT
            Not After : Nov 16 05:21:10 2026 GMT
        Subject: CN=2BC5691F14C04E7DA2877172526560AB34B18F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:48:d7:bb:1c:ae:9f:8b:9e:6b:46:74:d7:
                    fe:14:08:9c:67:c0:48:78:ac:47:14:50:a4:69:f2:
                    6b:6b:eb:22:41:41:8b:d7:68:e0:9a:ff:ec:cb:57:
                    59:b0:a5:97:d7:bd:2a:24:0b:9d:92:17:da:5c:3e:
                    5a:d1:e6:e2:f4:f2:aa:6c:ee:53:fe:2c:5d:a2:f4:
                    51:01:e7:dd:8b:50:49:e9:5a:02:80:64:f9:d4:b1:
                    fd:02:87:81:dd:c7:a3:1b:e0:8f:95:43:f7:5f:9d:
                    b1:02:51:f2:99:6c:98:ab:7d:5e:9f:7e:89:26:07:
                    0d:05:24:dd:35:7c:4d:42:e1:7f:37:f2:49:fc:a2:
                    fa:74:bf:96:d8:ed:c4:62:17:28:08:38:77:d0:9b:
                    9f:f2:d2:a8:04:d9:85:a7:a1:d3:48:65:0f:e4:9a:
                    c4:30:84:64:f3:52:11:f4:b4:04:b8:8c:90:dd:71:
                    56:8d:6f:7d:ce:6b:d0:eb:80:8d:41:cc:e4:fa:75:
                    31:29:73:02:7b:51:58:7e:f8:fe:0c:b9:c3:48:d1:
                    27:17:da:f4:9a:f8:2c:56:c4:3a:ce:94:56:29:5e:
                    a8:c3:45:f1:90:67:f4:91:6d:37:7b:a6:72:a5:5c:
                    e9:65:10:95:1e:b3:05:71:07:0d:d5:50:3a:88:51:
                    70:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C5:69:1F:14:C0:4E:7D:A2:87:71:72:52:65:60:AB:34:B1:8F:45
            X509v3 Authority Key Identifier:
                keyid:16:75:AD:C4:7F:48:73:14:5B:24:76:9B:81:34:06:2E:EB:02:0A:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1675ADC47F4873145B24769B8134062EEB020A6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a0:9c:8d:04:c9:d4:eb:2d:a3:08:28:b9:96:27:75:df:e0:
         12:2f:00:94:d5:b8:b7:62:a3:28:22:1c:20:57:7a:4d:70:bb:
         3e:06:87:02:c4:24:3f:e0:d1:ae:8e:6a:94:62:1b:37:88:7f:
         df:c7:1f:93:2a:38:e2:36:40:b7:0d:1e:2e:4d:16:bc:b2:96:
         6b:fc:a6:d1:f9:c5:a6:85:23:21:34:c8:25:c3:c2:a2:59:7a:
         dc:0b:52:2d:99:e0:b0:2d:ce:60:63:da:29:74:8c:c3:bb:97:
         f4:ce:28:0f:3e:dd:50:40:1a:1b:d7:7c:af:51:f0:ad:42:bc:
         73:44:6a:00:74:c4:12:63:56:4f:92:3f:ee:e6:77:d5:32:0a:
         be:bc:2c:3e:f9:41:ae:13:e5:fd:ff:42:0f:f6:6f:f0:7f:98:
         46:cb:cb:b9:13:f7:03:49:c1:38:8c:39:9c:18:99:49:01:06:
         1a:3a:54:64:67:ad:bb:62:02:09:b0:1a:bc:d8:44:60:93:8a:
         5d:d8:44:d0:38:06:98:9e:fe:e3:ee:65:ca:32:b7:d1:a2:25:
         14:f7:97:51:37:71:3b:e1:a0:95:4e:97:29:64:0c:67:6c:f9:
         b0:cc:67:a3:16:56:44:13:8c:95:d2:96:cd:0b:d6:09:5a:2e:
         d1:ff:49:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:04:33 2026 by rpki-client