Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
File:                     E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft (raw, json)
Hash identifier:          atZkz8SKzdYgcmUipvzNp06heXSv8aAoQ41EykxtiKQ=
Subject key identifier:   3A:B5:33:81:41:2C:B3:AB:29:B6:40:7F:90:79:54:8B:ED:46:0E:8E
Authority key identifier: E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60
Certificate issuer:       /CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60
Certificate serial:       2CD3BCE0F2BDC2B34704493337D5D3AF02647EB1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
Manifest number:          0100
Signing time:             Mon 09 Nov 2026 18:08:21 +0000
Manifest this update:     Mon 09 Nov 2026 18:03:21 +0000
Manifest next update:     Tue 10 Nov 2026 18:23:21 +0000
Files and hashes:         1: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: Q+Zpu9s7FFAblJfI/9bq1CU9BNldDzB+MO83xGJv/O8=)
                          2: E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl (hash: wrFWf/nbfYM9FQe8Qx9zwG7BrCxsLp0UXXZG3d/jj/g=)
                          3: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: aDinqjPhgNq50kNy+lg2Iba0bDegBSFkr3DIakb0nTU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl
                          rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Nov 2026 08:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d3:bc:e0:f2:bd:c2:b3:47:04:49:33:37:d5:d3:af:02:64:7e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60
        Validity
            Not Before: Nov  9 18:03:21 2026 GMT
            Not After : Nov 10 18:23:21 2026 GMT
        Subject: CN=3AB53381412CB3AB29B6407F9079548BED460E8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:73:dc:63:3b:ce:03:0a:ce:4b:1b:34:15:8b:
                    5b:b1:ee:02:48:67:96:e7:ce:a5:97:2a:ad:b2:ef:
                    6d:49:7a:df:6b:a7:67:56:66:d7:85:52:7d:31:3d:
                    40:83:47:25:ee:77:2e:cb:1d:59:c5:cf:f8:8e:6d:
                    5d:f7:0b:24:6f:80:ec:30:28:ab:98:cb:57:dd:85:
                    01:c4:61:d6:7e:4f:c1:ac:f6:6e:45:c1:02:48:de:
                    40:4e:3a:79:fe:bc:85:a1:ae:4c:ff:51:7c:ca:36:
                    a2:10:09:ac:13:90:38:fd:15:d3:db:8e:65:fc:c5:
                    5d:dd:b9:c4:dc:fc:9f:38:58:ac:95:2f:96:8f:52:
                    e8:08:b1:fb:a0:cf:bb:6c:c1:62:58:ef:c1:0b:88:
                    95:fa:53:b5:f7:c7:52:48:c2:99:3f:f5:53:2f:98:
                    6e:d2:46:dd:f5:c9:d8:34:18:43:d1:9b:dd:7e:a1:
                    24:b2:e2:9f:47:33:0a:3d:f9:a7:7f:9c:8f:1e:18:
                    58:39:e3:66:87:29:81:af:03:4c:54:3e:f8:be:26:
                    a8:05:0d:3f:02:de:c6:46:b6:82:b3:36:52:2d:ec:
                    ae:ed:43:28:33:35:f9:6f:4b:4c:81:c5:dd:89:53:
                    27:cf:1d:2c:a1:8e:f4:8c:2a:f2:72:22:b5:ce:9c:
                    67:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B5:33:81:41:2C:B3:AB:29:B6:40:7F:90:79:54:8B:ED:46:0E:8E
            X509v3 Authority Key Identifier:
                keyid:E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:28:e7:64:d9:04:6a:3f:1f:b0:c9:ea:c6:5a:c6:90:3f:20:
         53:3c:4a:31:5f:c4:45:9e:85:3c:17:b3:9b:b6:1a:86:d3:9e:
         4f:df:3c:bb:a3:6b:86:07:a2:08:75:54:47:a6:41:17:29:80:
         17:ca:a9:48:8c:c6:18:4c:9f:94:fa:17:9c:f8:70:21:16:5c:
         c6:5a:27:7c:30:e1:f9:b2:04:9a:90:86:10:93:b0:ad:88:16:
         cf:9e:e7:64:38:86:a4:c2:49:90:29:44:29:b3:b0:83:5a:60:
         70:38:8c:14:a6:b4:2e:16:00:e1:26:2f:69:2e:36:3e:42:d9:
         fc:98:77:fe:bc:b0:cc:52:1d:f5:88:a5:7c:08:15:de:4b:05:
         8a:18:2a:b7:3a:de:b6:cb:a6:85:7b:50:b9:9b:6e:ca:89:fe:
         05:f9:94:68:1e:b5:34:29:51:42:a2:de:d9:ed:37:a4:b0:81:
         e3:56:25:65:42:ea:80:a5:86:64:c3:1e:c3:65:40:4f:31:ec:
         f0:c7:31:0e:7a:5e:40:54:db:60:fe:bd:67:95:f8:d8:e9:64:
         a6:91:57:cd:07:2f:39:77:58:e0:3f:7f:45:93:45:48:c9:b6:
         e9:23:de:27:a2:e3:bb:36:c5:8a:0a:db:f6:20:64:07:45:e0:
         43:94:0b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 22:39:45 2026 by rpki-client