Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft
File:                     440F6B35B30CFEEB3F2B22851A2658050264D69E.mft (raw, json)
Hash identifier:          4ghU8Q40UuZ0pvwHD3PgLNxmAXLlr8sxYwwn5l3p1KM=
Subject key identifier:   DA:7E:F1:53:1D:4B:DA:3B:90:D0:89:A1:95:F7:F8:92:9F:87:4B:B1
Authority key identifier: 44:0F:6B:35:B3:0C:FE:EB:3F:2B:22:85:1A:26:58:05:02:64:D6:9E
Certificate issuer:       /CN=440F6B35B30CFEEB3F2B22851A2658050264D69E
Certificate serial:       541659B54331172542104ABFE374D0F239665E47
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/440F6B35B30CFEEB3F2B22851A2658050264D69E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft
Manifest number:          D5
Signing time:             Fri 09 Oct 2026 17:08:35 +0000
Manifest this update:     Fri 09 Oct 2026 17:03:35 +0000
Manifest next update:     Sat 10 Oct 2026 17:44:35 +0000
Files and hashes:         1: 440F6B35B30CFEEB3F2B22851A2658050264D69E.crl (hash: 9UuEfxuhvfib2+pGFDntswQdeJyZK1Xjiebm902CVk8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.crl
                          rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/440F6B35B30CFEEB3F2B22851A2658050264D69E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 17:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:16:59:b5:43:31:17:25:42:10:4a:bf:e3:74:d0:f2:39:66:5e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=440F6B35B30CFEEB3F2B22851A2658050264D69E
        Validity
            Not Before: Oct  9 17:03:35 2026 GMT
            Not After : Oct 10 17:44:35 2026 GMT
        Subject: CN=DA7EF1531D4BDA3B90D089A195F7F8929F874BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:23:a8:10:bf:99:34:1d:80:24:64:61:b6:12:
                    dc:e6:c2:51:81:ab:b1:24:dd:ca:05:43:a8:09:4b:
                    f3:be:95:fd:f2:f4:da:a0:ef:26:60:f5:b8:27:c0:
                    c9:e9:c0:23:7c:27:b6:2e:be:77:dc:e7:aa:ba:80:
                    53:43:97:af:af:cd:6e:72:19:5a:00:1b:72:1b:27:
                    57:4d:a5:e0:9d:97:0d:77:f0:f7:4d:10:3b:59:f5:
                    d5:d9:72:1d:43:01:72:a1:5c:fa:03:53:dd:03:33:
                    41:d0:78:6a:db:cc:22:9e:47:79:c0:23:8b:9c:24:
                    14:d7:33:01:0e:6c:2d:ee:8b:e3:29:49:65:60:ef:
                    fe:2c:d1:0c:b5:ce:0e:05:a0:85:04:90:69:c2:85:
                    7d:b8:e7:a3:f0:22:68:b9:89:9f:01:ea:56:6d:87:
                    39:d8:96:01:a8:23:03:c1:fc:7d:df:e4:74:54:a4:
                    64:97:22:f8:95:85:d7:49:6d:51:f5:a2:8d:c9:16:
                    c6:f3:28:86:30:01:5c:70:84:74:1a:37:0c:21:a0:
                    a6:e6:94:1c:27:62:89:9d:79:3a:ae:99:03:b5:88:
                    8c:9e:77:1d:48:89:e7:ae:cb:3e:09:67:25:11:7f:
                    1c:fb:11:46:03:0b:1c:ef:23:27:81:1f:22:d2:32:
                    e9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7E:F1:53:1D:4B:DA:3B:90:D0:89:A1:95:F7:F8:92:9F:87:4B:B1
            X509v3 Authority Key Identifier:
                keyid:44:0F:6B:35:B3:0C:FE:EB:3F:2B:22:85:1A:26:58:05:02:64:D6:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/440F6B35B30CFEEB3F2B22851A2658050264D69E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7d:77:07:82:67:15:3b:00:95:32:c6:77:fd:25:16:e0:cd:
         69:21:33:5f:12:09:bb:a7:49:62:d6:67:a8:08:21:32:e7:d0:
         09:0a:68:b8:4e:15:9b:b7:1d:e9:b6:57:39:0c:f9:51:86:88:
         83:45:53:07:7b:4e:d5:84:20:32:a5:59:fc:74:b4:d0:5c:fa:
         7e:d0:47:43:dd:2a:9e:20:a3:0c:83:cc:16:4d:cd:3d:1a:98:
         1f:95:fb:d4:f7:c4:01:61:b1:98:5e:40:29:9e:1f:58:c3:2b:
         c2:6a:84:69:f8:d6:22:81:47:41:37:e3:d8:8e:83:84:8d:bb:
         25:9b:a6:45:08:13:59:a2:90:9f:f2:51:a6:ca:23:ee:c3:19:
         5e:e1:de:50:2b:28:63:48:38:cf:3d:8b:7d:a4:dd:6f:d4:2e:
         6d:f9:38:83:a0:66:dd:65:f2:5a:50:44:cc:b6:09:38:2f:c6:
         e3:dc:3d:8f:e0:9a:e4:34:88:02:eb:72:29:a7:9b:ce:19:b0:
         d9:f3:53:7a:8e:91:ab:cc:b1:da:d9:88:73:fd:74:fb:d8:14:
         62:81:56:19:83:71:e4:2f:c7:73:94:eb:23:3e:44:ce:f1:03:
         0d:b5:4c:ea:a1:e8:53:a6:b1:25:b1:84:15:2b:c8:35:c5:80:
         67:35:d5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:52:58 2026 by rpki-client