Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft
File:                     11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft (raw, json)
Hash identifier:          IpVy6h+Y0q6VFSphvUkSHZWlHYqQE721N7vnvJLqyl0=
Subject key identifier:   57:14:CD:A2:9F:65:C4:CE:9D:2B:5F:90:92:9B:15:60:A7:24:24:28
Authority key identifier: 11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0
Certificate issuer:       /CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0
Certificate serial:       1B77FFD486648CC0562A487F6C95227A6B53C538
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft
Manifest number:          BF
Signing time:             Wed 23 Sep 2026 05:22:37 +0000
Manifest this update:     Wed 23 Sep 2026 05:17:37 +0000
Manifest next update:     Thu 24 Sep 2026 09:16:37 +0000
Files and hashes:         1: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: W3s/SdESd03hapvVNS8Tej6LatNo1tGxXixL2qrpljI=)
                          2: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: 50fnO1/znCwvGbIxgziShFyETpxwE5iSmjctpgUo0sk=)
                          3: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl (hash: adyaS6GnlpYV4xa5vzMz1menUZkIJ5oH8dxbzHH9FzM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl
                          rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 09:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:77:ff:d4:86:64:8c:c0:56:2a:48:7f:6c:95:22:7a:6b:53:c5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0
        Validity
            Not Before: Sep 23 05:17:37 2026 GMT
            Not After : Sep 24 09:16:37 2026 GMT
        Subject: CN=5714CDA29F65C4CE9D2B5F90929B1560A7242428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b0:19:db:2b:87:70:d8:d7:5a:df:e6:cc:79:
                    5b:a4:29:66:ce:18:78:e8:99:13:8c:33:99:41:19:
                    9b:9a:80:1a:fe:a2:69:48:2e:0c:15:50:bd:cf:83:
                    4d:0c:32:27:06:b0:9d:ac:e7:c0:6a:d6:17:8d:ac:
                    c9:59:78:a4:2f:f5:95:53:19:b9:1d:61:b5:69:6f:
                    22:be:6a:1a:e4:a6:b9:68:14:a3:94:64:ac:d3:b4:
                    a7:d9:5e:1c:e8:79:1a:0e:8f:53:3a:3e:41:27:9f:
                    4a:83:c3:46:32:9d:5d:56:24:00:e4:e8:97:a2:e9:
                    9b:d1:b5:57:85:0b:70:1a:51:9f:31:d5:e8:40:25:
                    8a:fb:9c:78:83:41:9f:70:0d:e6:3e:25:93:4a:f2:
                    2e:f1:67:91:18:13:f8:c1:a2:b2:78:8c:00:95:10:
                    2c:45:72:89:82:4b:a0:64:24:28:79:f4:0e:10:e7:
                    54:cc:25:73:ca:17:e1:61:6c:91:d6:f0:70:97:91:
                    30:4d:e3:46:3a:e8:97:e7:c2:de:ff:8a:47:3a:bd:
                    68:06:ab:00:20:43:60:56:78:2c:b2:63:32:41:71:
                    27:1c:b7:2e:47:b6:34:0a:f6:5c:83:e4:33:62:d8:
                    10:9a:78:02:24:ea:b4:ca:0d:b1:1f:9f:5b:b3:53:
                    f8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:14:CD:A2:9F:65:C4:CE:9D:2B:5F:90:92:9B:15:60:A7:24:24:28
            X509v3 Authority Key Identifier:
                keyid:11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:5b:5e:fc:38:ea:b0:3d:b1:43:f9:a9:33:19:97:fe:5b:03:
         1d:41:58:e3:ea:cb:09:cb:dd:fc:c5:36:a9:76:61:39:d8:ee:
         20:c3:38:50:b7:b9:45:fd:ac:b5:f4:a8:89:f7:27:92:3e:23:
         45:1e:a8:f6:ce:27:d7:26:37:e7:e5:91:6b:a7:38:f2:63:17:
         b7:c4:04:63:11:a9:44:e4:6a:a0:7d:1f:17:6e:b2:bb:16:e7:
         60:fd:48:42:2c:8e:1c:2a:ec:b9:99:c9:6b:c2:b1:bf:9a:8d:
         b0:25:b5:cf:f4:f2:6a:a5:77:9d:e3:65:66:1a:0b:fb:b4:89:
         90:5f:4f:cb:32:d4:f9:4c:48:ab:ee:02:eb:88:45:26:3e:b7:
         6c:04:43:dc:30:44:4b:3c:70:58:a4:0d:db:bb:5d:77:3b:26:
         84:7d:c8:00:3e:0a:00:67:8d:57:3b:11:c8:e5:11:4e:fc:1d:
         a4:d5:cc:01:e9:68:5b:a4:7f:54:fe:14:25:f5:c7:f3:2d:ed:
         16:f3:9a:6a:fa:1f:28:08:61:b7:35:0f:f1:ff:b5:a0:49:bf:
         62:76:85:20:1d:02:e6:8a:1d:dd:c1:62:38:f3:f8:c1:c0:8f:
         e5:b9:c4:9d:d8:7b:ee:fa:45:62:9e:95:cc:e5:54:55:c3:d9:
         47:8e:8d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:42:17 2026 by rpki-client