Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.mft
File:                     1758F264EA0874C8ACD538FCB61CE7DA903814EE.mft (raw, json)
Hash identifier:          1hia+Ovr7cg9WLmUomhys7bXtq0/VNvwRxE7ZGT5Qbc=
Subject key identifier:   58:09:BB:5F:52:46:16:DC:59:1B:A9:C2:DD:3F:18:E5:8C:2D:B8:9A
Authority key identifier: 17:58:F2:64:EA:08:74:C8:AC:D5:38:FC:B6:1C:E7:DA:90:38:14:EE
Certificate issuer:       /CN=1758F264EA0874C8ACD538FCB61CE7DA903814EE
Certificate serial:       79E4D6FD262A6EBFBEA3F2C225A7A33CAAC5026F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1758F264EA0874C8ACD538FCB61CE7DA903814EE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.mft
Manifest number:          BF
Signing time:             Mon 21 Sep 2026 17:12:54 +0000
Manifest this update:     Mon 21 Sep 2026 17:07:54 +0000
Manifest next update:     Tue 22 Sep 2026 18:44:54 +0000
Files and hashes:         1: 1758F264EA0874C8ACD538FCB61CE7DA903814EE.crl (hash: l328dVH60jcabDXNCHApf21PbZb13qKg6rnOeFJkKhE=)
                          2: 3130332e3138392e3139372e302f32342d3234203d3e20313439393132.roa (hash: BF0A/2Eh0yp8cyXoZ2hAxmpLhKE2MIjrP2QeGtvsEus=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.crl
                          rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1758F264EA0874C8ACD538FCB61CE7DA903814EE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e4:d6:fd:26:2a:6e:bf:be:a3:f2:c2:25:a7:a3:3c:aa:c5:02:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1758F264EA0874C8ACD538FCB61CE7DA903814EE
        Validity
            Not Before: Sep 21 17:07:54 2026 GMT
            Not After : Sep 22 18:44:54 2026 GMT
        Subject: CN=5809BB5F524616DC591BA9C2DD3F18E58C2DB89A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:af:a0:a9:66:96:ee:8a:0f:e8:59:ee:1b:
                    17:67:3d:5f:eb:77:ea:06:96:08:f0:08:97:e2:29:
                    a6:2d:34:87:a5:a4:6d:54:7e:af:3c:8e:09:4d:4a:
                    04:cc:82:ea:c5:f7:6e:60:d3:93:12:fd:95:4f:03:
                    a8:08:b9:02:c8:66:23:6a:98:e5:9d:89:e2:eb:f7:
                    59:5e:8c:03:89:0d:f6:6c:0a:c5:9d:e8:90:73:9b:
                    fb:e4:7f:a0:a1:ff:88:e9:e6:1f:5d:f1:e5:9a:79:
                    82:43:33:c9:81:cd:6f:6a:ac:77:79:d5:fe:59:5b:
                    c5:bc:bb:e7:30:f4:f8:15:01:ca:f3:56:17:fa:c9:
                    cd:6e:2d:eb:d1:33:28:de:2c:2c:5d:32:51:98:a8:
                    4a:fd:71:0e:e9:5a:25:ff:38:16:7f:c2:36:63:58:
                    d6:a6:a4:e6:4a:82:1f:1f:d0:dc:ec:59:10:96:de:
                    10:51:07:04:d9:4b:89:4f:0f:81:da:97:33:7f:c3:
                    f5:cb:fe:75:67:3a:d2:47:f0:bf:c3:aa:f8:8d:d2:
                    06:7b:4e:99:d3:f9:b2:15:36:31:5c:5f:e1:5e:37:
                    cf:39:75:1e:80:35:97:0c:32:10:55:e7:77:ea:f0:
                    be:53:58:65:91:ae:32:8a:be:2b:8b:63:6b:56:a0:
                    44:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:09:BB:5F:52:46:16:DC:59:1B:A9:C2:DD:3F:18:E5:8C:2D:B8:9A
            X509v3 Authority Key Identifier:
                keyid:17:58:F2:64:EA:08:74:C8:AC:D5:38:FC:B6:1C:E7:DA:90:38:14:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1758F264EA0874C8ACD538FCB61CE7DA903814EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:6c:11:d3:61:4d:42:e1:50:66:8b:9b:5b:ae:cb:36:86:ab:
         02:de:c8:2f:4c:d1:00:c7:48:b7:0d:ee:3f:26:51:d4:f1:fb:
         c0:7a:8c:c0:0b:84:46:41:df:7d:00:5c:61:48:89:d4:26:ac:
         a1:49:ff:be:14:4c:d6:bb:12:44:4a:3c:91:1e:18:8d:c6:6d:
         d3:9b:5b:1b:47:a0:61:7d:b2:ed:48:b4:bc:60:81:05:2a:21:
         f4:93:79:3a:88:74:24:04:f3:dc:28:6b:07:e9:6e:32:c4:23:
         77:ef:d7:8d:52:65:33:35:28:8b:86:6f:bb:d3:3c:51:d2:76:
         91:aa:e5:a2:30:00:e6:49:f6:ef:f1:cc:fe:43:de:15:4b:63:
         dd:f5:b4:6a:56:9e:60:7a:cd:ef:9a:81:63:c5:46:93:b4:24:
         62:ad:b1:85:9e:fa:99:b9:8c:a6:4f:86:93:8f:d9:c8:3d:f8:
         00:18:52:d3:9c:ce:f4:11:fd:08:c8:de:18:ca:78:24:11:0d:
         e6:2e:21:2d:85:d1:45:ef:29:fc:7c:fb:f5:36:71:d8:45:80:
         5a:75:4d:df:2b:11:d2:d5:5c:63:06:8c:2f:4e:66:21:c3:89:
         2e:ee:09:37:8d:e8:3b:6e:e4:dc:e3:7c:1a:d2:3d:bc:21:5d:
         dc:0c:d8:12
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeeTW/SYqbr++o/LCJaejPKrFAm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc1OEYyNjRFQTA4NzRDOEFDRDUzOEZDQjYxQ0U3REE5
MDM4MTRFRTAeFw0yNjA5MjExNzA3NTRaFw0yNjA5MjIxODQ0NTRaMDMxMTAvBgNV
BAMTKDU4MDlCQjVGNTI0NjE2REM1OTFCQTlDMkREM0YxOEU1OEMyREI4OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1tK+gqWaW7ooP6FnuGxdnPV/r
d+oGlgjwCJfiKaYtNIelpG1Ufq88jglNSgTMgurF925g05MS/ZVPA6gIuQLIZiNq
mOWdieLr91lejAOJDfZsCsWd6JBzm/vkf6Ch/4jp5h9d8eWaeYJDM8mBzW9qrHd5
1f5ZW8W8u+cw9PgVAcrzVhf6yc1uLevRMyjeLCxdMlGYqEr9cQ7pWiX/OBZ/wjZj
WNampOZKgh8f0NzsWRCW3hBRBwTZS4lPD4HalzN/w/XL/nVnOtJH8L/DqviN0gZ7
TpnT+bIVNjFcX+FeN885dR6ANZcMMhBV53fq8L5TWGWRrjKKviuLY2tWoEQ/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWAm7X1JGFtxZG6nC3T8Y5YwtuJowHwYDVR0j
BBgwFoAUF1jyZOoIdMis1Tj8thzn2pA4FO4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzM3ZTA5NGMtYzkzYi00ZDcyLWI5ZjItNzViMjUyYWI4M2Y5LzAvMTc1OEYyNjRF
QTA4NzRDOEFDRDUzOEZDQjYxQ0U3REE5MDM4MTRFRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNzU4RjI2NEVBMDg3NEM4QUNENTM4RkNCNjFDRTdEQTkwMzgx
NEVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM3ZTA5NGMtYzkzYi00ZDcyLWI5
ZjItNzViMjUyYWI4M2Y5LzAvMTc1OEYyNjRFQTA4NzRDOEFDRDUzOEZDQjYxQ0U3
REE5MDM4MTRFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJpsEdNhTULhUGaLm1uuyzaGqwLeyC9M0QDH
SLcN7j8mUdTx+8B6jMALhEZB330AXGFIidQmrKFJ/74UTNa7EkRKPJEeGI3GbdOb
WxtHoGF9su1ItLxggQUqIfSTeTqIdCQE89woawfpbjLEI3fv141SZTM1KIuGb7vT
PFHSdpGq5aIwAOZJ9u/xzP5D3hVLY931tGpWnmB6ze+agWPFRpO0JGKtsYWe+pm5
jKZPhpOP2cg9+AAYUtOczvQR/QjI3hjKeCQRDeYuIS2F0UXvKfx8+/U2cdhFgFp1
Td8rEdLVXGMGjC9OZiHDiS7uCTeN6Dtu5NzjfBrSPbwhXdwM2BI=
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:59:42 2026 by rpki-client