Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
File:                     1661480FF274E46E5E74274531EDCB741CA1C734.mft (raw, json)
Hash identifier:          SJib9dmlkOPBbFsQ23MK8lo0bBGPxx9y5Q3nYqpHNkY=
Subject key identifier:   D2:DF:5B:30:4A:AD:54:57:A2:E8:58:89:E4:DB:4B:90:40:6C:22:47
Authority key identifier: 16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34
Certificate issuer:       /CN=1661480FF274E46E5E74274531EDCB741CA1C734
Certificate serial:       7B51BD01BC535A42BC2F5537AD43BF489AAF130C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
Manifest number:          C0
Signing time:             Wed 23 Sep 2026 22:54:24 +0000
Manifest this update:     Wed 23 Sep 2026 22:49:24 +0000
Manifest next update:     Fri 25 Sep 2026 01:12:24 +0000
Files and hashes:         1: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: 8uSlgnTbxGAzWNgbE1BKBFBhMHsG7F+ZnW0oGHCnk8w=)
                          2: 1661480FF274E46E5E74274531EDCB741CA1C734.crl (hash: xDIlLkQKLYvA6HadqKdW6aNWqPKw13QDKsgVXtQ1AaM=)
                          3: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: RJW8cxc5knQFd6ZsJTxIJMJPLrpi1nPKGRB3o32Vvrg=)
                          4: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: pwGyBzBOtEK35HSrAz+AVA7aiAsnsEM4hcBWRLigb/A=)
                          5: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: D5DehsQ30Cg+nOY8N0HK+YwXqyoPTcKwYKHkFyOMq6Q=)
                          6: 3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa (hash: 5Rh6b8BHsmWIHG3vGb6jLaqPvuwWEBxRJQJuBZZsDT0=)
                          7: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: IFRJrTg8onKZh/TaH9A8yf1wtYUjMcqN4WYH9m4UY4o=)
                          8: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: 8ZVpWuFxO9temB8Ho9FZTNXvwZzEzY2CqMkIIHYcFZs=)
                          9: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: Y0BQZtsB87a9/5oaZfRO5KllrRmXSjrLR0zXbqGB394=)
                          10: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: yeyDp2n0wd57cuHVR90zOnbkcRU0QZljusHdKuOsPt4=)
                          11: 3232332e3133302e32322e302f32332d3233203d3e20313338313238.roa (hash: V75gkBW5l6X/+7vnO9PPI54r4jLFDkXk/84VL8kexoA=)
                          12: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: 6+4UoGWRmOvV9or9CsRz3CTlMpRVAi94wKc1SslyAWU=)
                          13: 3232332e3133302e32322e302f32342d3234203d3e20313338313238.roa (hash: jf6b7kXVa1dhZZRDA/RPJIPiAhtoDFAim3d84aPTFo8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl
                          rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:51:bd:01:bc:53:5a:42:bc:2f:55:37:ad:43:bf:48:9a:af:13:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1661480FF274E46E5E74274531EDCB741CA1C734
        Validity
            Not Before: Sep 23 22:49:24 2026 GMT
            Not After : Sep 25 01:12:24 2026 GMT
        Subject: CN=D2DF5B304AAD5457A2E85889E4DB4B90406C2247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0c:55:3b:05:0c:55:de:1c:f6:6f:6c:24:aa:
                    90:53:fe:b7:54:f3:f3:b5:cc:b5:d9:dd:54:bd:ac:
                    c2:c8:4e:cc:17:6c:88:88:51:fa:59:7d:e4:2f:26:
                    32:e4:00:4a:d1:37:f7:e3:a5:b0:5f:e8:bd:c4:2b:
                    0a:bf:47:a8:b5:3f:2f:d0:1c:f8:90:8d:fe:f4:64:
                    cb:4f:e2:0c:4f:61:b1:b7:cc:00:fd:53:97:ad:e9:
                    9d:94:70:8a:70:04:0b:78:48:2e:f7:1d:01:e2:70:
                    cc:8e:09:8a:39:e6:32:2e:25:01:d0:4d:a9:00:ea:
                    b0:2a:96:e9:47:a3:d6:29:54:43:f5:d0:2e:3d:cd:
                    33:e6:a3:e9:1d:05:a5:a5:10:d3:59:dd:0b:db:99:
                    5f:fe:d5:0a:db:c6:4e:31:ef:e9:75:74:59:4d:87:
                    b3:89:53:3d:fb:36:20:f0:33:0f:cf:ba:b7:d7:17:
                    68:67:e6:9b:f3:eb:9a:ba:5b:a8:a7:d0:cb:25:f7:
                    89:fd:ed:80:73:a5:0e:85:c5:ce:72:1e:30:ff:de:
                    61:36:db:c9:77:f6:1d:e8:a4:42:ce:bd:e8:ab:25:
                    9c:b0:d4:59:02:2f:a5:ee:c4:7f:e3:06:e8:f3:fb:
                    ce:45:a8:47:7f:1f:38:32:6a:9a:d6:a7:0f:35:51:
                    97:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DF:5B:30:4A:AD:54:57:A2:E8:58:89:E4:DB:4B:90:40:6C:22:47
            X509v3 Authority Key Identifier:
                keyid:16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:6e:b2:51:d0:ab:78:ce:42:1d:ad:ab:b9:5f:2e:53:0d:b3:
         4f:f4:40:fc:b9:85:28:dd:24:f7:50:88:e0:dd:78:3b:05:56:
         d7:c1:1f:0c:01:32:81:a3:48:c3:85:23:72:b7:e1:db:cc:2d:
         1a:2d:fb:57:55:00:5d:86:13:09:a0:8d:ce:bc:08:9d:be:27:
         db:3b:e4:f8:4b:5d:7f:43:e5:5c:2d:f5:25:3f:dd:09:5c:1b:
         78:8c:cf:fd:7f:6c:03:c6:3c:1d:49:ab:9c:80:a2:cd:7f:ae:
         9a:64:50:bf:63:0f:b9:e2:eb:2c:bd:f3:e0:be:3c:ae:d3:cd:
         2a:46:42:dd:da:94:28:d6:d5:9f:cd:7e:7f:75:e1:11:5e:28:
         3c:5e:ea:eb:1e:ec:e0:f2:0c:a1:6a:0e:e0:a8:22:6f:ed:14:
         df:f4:f7:37:55:af:32:7c:f6:eb:04:77:7c:33:c1:f4:5c:8c:
         4e:7d:34:a1:f0:49:6f:52:35:78:47:ed:a2:a3:4a:68:14:9f:
         f6:78:cf:3f:92:5e:14:71:0d:0d:71:0e:9e:d1:7c:89:b2:4a:
         05:12:cd:9d:ac:7b:f6:62:d9:de:36:db:2b:a0:72:e8:e2:c9:
         0f:c5:01:a8:37:1d:ef:69:5e:69:bc:a5:cc:59:12:ab:7e:9d:
         99:75:16:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:03:57 2026 by rpki-client