Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft
File:                     FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft (raw, json)
Hash identifier:          gwT2pXykje6wLtP7CntDEy6080OWReFlIt6VrNtpPtc=
Subject key identifier:   7F:16:B6:AD:95:36:F6:9E:E2:14:09:B4:6B:1C:91:0D:49:E8:99:46
Authority key identifier: FA:2C:15:41:1A:0C:30:D5:2B:AD:99:5C:19:24:27:BC:D0:1C:58:FF
Certificate issuer:       /CN=FA2C15411A0C30D52BAD995C192427BCD01C58FF
Certificate serial:       38F286D870035D15EF312C314DB899CA3D3AD1F8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA2C15411A0C30D52BAD995C192427BCD01C58FF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft
Manifest number:          BF
Signing time:             Wed 23 Sep 2026 12:21:21 +0000
Manifest this update:     Wed 23 Sep 2026 12:16:21 +0000
Manifest next update:     Thu 24 Sep 2026 15:06:21 +0000
Files and hashes:         1: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: dro/uVDmCCZVeSiHITBTTi+wa46OyEUBbiwxzlIppDE=)
                          2: FA2C15411A0C30D52BAD995C192427BCD01C58FF.crl (hash: GN9q3nNtqlTrjmVN0ff1JFLEyTAucaUSuG41nMeCbao=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.crl
                          rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA2C15411A0C30D52BAD995C192427BCD01C58FF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 15:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f2:86:d8:70:03:5d:15:ef:31:2c:31:4d:b8:99:ca:3d:3a:d1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA2C15411A0C30D52BAD995C192427BCD01C58FF
        Validity
            Not Before: Sep 23 12:16:21 2026 GMT
            Not After : Sep 24 15:06:21 2026 GMT
        Subject: CN=7F16B6AD9536F69EE21409B46B1C910D49E89946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:06:26:42:93:8e:df:52:2d:cc:4b:a1:fa:
                    3a:6f:18:94:68:c3:c5:3f:7f:08:c7:a4:a3:26:5a:
                    e5:26:30:a5:b2:d5:2e:c9:cc:47:a9:3e:6e:c1:80:
                    c5:32:9d:4b:1e:2c:a2:15:82:de:91:41:11:f0:61:
                    d2:b0:05:da:dd:e3:1f:20:3b:3c:27:9c:e3:74:a9:
                    71:03:70:30:80:9e:0e:b7:64:37:8c:f7:ed:0f:d2:
                    02:b8:ad:92:78:5d:f7:1b:cd:af:64:78:fe:e2:23:
                    c8:0d:8a:b9:a5:89:47:0a:d8:b4:4d:f2:e3:bc:0b:
                    1e:ff:48:f2:7f:eb:22:88:9c:79:d8:a8:de:0c:c6:
                    aa:11:6f:47:92:45:09:1c:85:4d:ef:f2:6e:fc:f0:
                    8c:38:56:0b:27:9e:ab:e0:7a:96:6c:cb:fe:cf:cc:
                    22:b9:f7:6c:fe:0e:3f:c3:5d:3f:9a:09:75:8d:65:
                    fb:ea:d8:b3:44:7c:8d:8d:a8:a6:ed:9c:cf:0e:3d:
                    de:c1:70:51:f1:9e:2c:47:9d:09:b2:4b:d0:09:4f:
                    62:e7:b3:9d:7c:58:fd:d7:9f:2c:85:0f:3b:0b:a8:
                    01:bd:6d:30:1b:02:3a:a2:98:bb:fc:b0:30:ee:ad:
                    9f:18:7d:a1:09:f5:07:da:ad:6b:dd:2b:c8:e0:be:
                    dd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:16:B6:AD:95:36:F6:9E:E2:14:09:B4:6B:1C:91:0D:49:E8:99:46
            X509v3 Authority Key Identifier:
                keyid:FA:2C:15:41:1A:0C:30:D5:2B:AD:99:5C:19:24:27:BC:D0:1C:58:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA2C15411A0C30D52BAD995C192427BCD01C58FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d7:1e:76:12:81:9c:72:1f:d7:4e:30:33:ea:e3:28:e3:64:
         3a:27:3e:87:04:28:bd:f2:18:ea:2a:17:7a:16:92:88:48:30:
         16:9c:e0:2e:8d:08:78:23:54:f7:f3:6d:96:09:66:98:d4:4b:
         5d:7e:69:d6:25:f7:5b:f8:f6:0e:5c:8e:fd:76:b1:c6:46:1d:
         f3:dc:a3:86:66:0b:b6:93:5f:03:e4:f9:1a:3f:df:7f:25:32:
         ac:67:27:4e:d9:91:fb:f9:d8:a4:8c:8f:e6:bc:e2:c4:e3:dc:
         2d:da:06:ac:55:7a:0b:47:fe:58:b6:22:5c:3b:50:fb:4b:ac:
         4d:cc:9c:a8:13:55:d4:c6:a8:3f:db:ba:ff:fd:7f:b9:e4:3c:
         eb:fb:f0:1d:0f:a3:95:3c:48:0e:5b:2b:e4:5b:69:e0:0c:01:
         62:9d:05:c0:6a:49:a2:ba:b0:b6:4e:b2:2b:84:5a:07:82:d8:
         7f:18:6b:45:84:7d:ec:1e:b2:9c:12:e5:82:82:c0:a2:af:15:
         a8:fd:67:0b:90:89:29:6a:c4:17:5d:eb:9f:08:b6:c0:36:1d:
         56:0a:11:de:25:5d:25:be:8b:d4:d1:ea:da:30:f4:8c:ad:a0:
         e6:42:d3:5a:d0:48:a2:84:bd:eb:36:af:3a:cd:41:7d:7f:43:
         b6:53:0d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:44:46 2026 by rpki-client