Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
File:                     5C0C0165C2202336BADFB9247E38D0C985467004.mft (raw, json)
Hash identifier:          hN/z31EHu119DzBcmdQCsjAufqQAuItxosEYrT2UuPA=
Subject key identifier:   E5:6C:EA:4D:8E:F4:DB:D0:64:63:B2:82:3C:AD:EE:56:CA:D7:92:7B
Authority key identifier: 5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04
Certificate issuer:       /CN=5C0C0165C2202336BADFB9247E38D0C985467004
Certificate serial:       4C0E2A205F18E7FFE2CEEA834BBE21D1A5C362
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
Manifest number:          BE
Signing time:             Sun 20 Sep 2026 21:23:25 +0000
Manifest this update:     Sun 20 Sep 2026 21:18:25 +0000
Manifest next update:     Tue 22 Sep 2026 00:17:25 +0000
Files and hashes:         1: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: /DtJd8dT2bjoU0kUlHmis7kzNqsj8Fecx0D1VoaowR0=)
                          2: 5C0C0165C2202336BADFB9247E38D0C985467004.crl (hash: 3wbb8hyrS0043+UVM/9KVlnjFsKAB9joTOPRifnpiqI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.crl
                          rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 00:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:0e:2a:20:5f:18:e7:ff:e2:ce:ea:83:4b:be:21:d1:a5:c3:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C0C0165C2202336BADFB9247E38D0C985467004
        Validity
            Not Before: Sep 20 21:18:25 2026 GMT
            Not After : Sep 22 00:17:25 2026 GMT
        Subject: CN=E56CEA4D8EF4DBD06463B2823CADEE56CAD7927B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:f5:1d:e4:6f:e9:33:4b:24:7d:46:30:bd:
                    05:99:5f:b7:5b:ca:d8:51:02:80:93:51:b9:d1:ba:
                    2a:d1:06:bc:1b:f2:27:76:6f:15:6d:21:54:5b:4c:
                    c7:fd:cf:f0:60:df:98:b3:16:4d:3b:ec:2f:9c:ce:
                    f7:8f:72:28:3a:35:0d:f1:91:87:b4:ef:23:3a:3b:
                    63:dc:0f:bf:07:67:b3:82:06:69:e4:7f:a0:66:c6:
                    cf:37:be:67:ff:69:be:cb:46:d8:0e:d4:51:df:e9:
                    f0:4b:51:4e:4a:5c:9d:54:bc:3e:a0:68:bd:dd:4e:
                    8a:34:7c:fc:f8:1c:c6:bd:a3:1e:2d:e5:9e:5a:a8:
                    bc:6d:10:89:a2:cb:1b:07:10:7d:30:cd:d0:24:92:
                    d8:90:ee:1f:31:59:c7:e1:59:38:9d:a0:75:e0:f7:
                    c8:70:f9:81:f2:77:68:8c:d1:f0:df:11:d2:5d:f1:
                    33:3f:0f:d6:18:c8:bb:1a:0a:6e:af:b3:e7:2e:e6:
                    2f:e7:a7:7c:e0:76:1e:a6:69:b3:bb:b7:c2:1f:45:
                    be:42:96:3f:8e:0e:dc:95:40:f4:3d:3f:6b:b4:8a:
                    60:1b:ce:fc:f0:c0:80:22:0d:b6:53:91:da:52:5d:
                    82:2f:47:3d:5a:47:b5:f6:4c:32:5f:7c:98:4d:2c:
                    a2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6C:EA:4D:8E:F4:DB:D0:64:63:B2:82:3C:AD:EE:56:CA:D7:92:7B
            X509v3 Authority Key Identifier:
                keyid:5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d1:a6:c0:2f:71:ba:32:0c:a8:c9:c5:22:25:35:26:18:04:
         e0:55:d1:5f:5c:e8:98:ca:bb:05:1f:d9:fe:d5:26:0b:d5:ce:
         3f:fc:89:1b:2f:dc:33:55:41:4f:fb:bc:83:f0:c0:66:85:51:
         ad:9e:ed:67:70:70:1c:f2:1b:83:be:1e:85:5f:6e:1d:aa:21:
         c5:e2:77:b4:4c:94:99:b5:d7:60:f9:0c:3f:4f:a8:ce:5d:46:
         0e:2f:5e:6e:b5:a3:4c:b1:ba:e6:7f:d7:7b:5b:04:e4:68:61:
         e3:f7:51:8f:9a:2c:ff:c8:1b:63:ce:8f:0f:84:4a:f3:15:34:
         ff:60:60:cd:c6:4a:bb:98:5d:2e:92:66:c4:22:2f:e2:fa:62:
         8e:c0:ae:81:01:8d:88:a8:e5:f0:a8:6f:28:f8:82:5a:fa:42:
         5c:c7:31:2c:37:30:02:a3:67:55:9e:22:0c:5b:01:73:86:24:
         06:ba:79:21:7b:41:62:ae:b7:76:5c:46:2f:a1:ef:5c:88:8f:
         d9:0f:b3:ee:00:93:19:8d:b3:35:22:71:f0:75:3b:6a:a2:58:
         a0:66:4b:7f:d1:6c:1f:ac:9c:88:5d:12:9d:8d:29:b4:91:80:
         96:26:2d:00:13:bc:55:b8:fb:b1:0f:84:73:f5:d9:1f:26:0d:
         62:35:aa:11
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgITTA4qIF8Y5//izuqDS74h0aXDYjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg1QzBDMDE2NUMyMjAyMzM2QkFERkI5MjQ3RTM4RDBDOTg1
NDY3MDA0MB4XDTI2MDkyMDIxMTgyNVoXDTI2MDkyMjAwMTcyNVowMzExMC8GA1UE
AxMoRTU2Q0VBNEQ4RUY0REJEMDY0NjNCMjgyM0NBREVFNTZDQUQ3OTI3QjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKbn9R3kb+kzSyR9RjC9BZlft1vK
2FECgJNRudG6KtEGvBvyJ3ZvFW0hVFtMx/3P8GDfmLMWTTvsL5zO949yKDo1DfGR
h7TvIzo7Y9wPvwdns4IGaeR/oGbGzze+Z/9pvstG2A7UUd/p8EtRTkpcnVS8PqBo
vd1OijR8/Pgcxr2jHi3lnlqovG0QiaLLGwcQfTDN0CSS2JDuHzFZx+FZOJ2gdeD3
yHD5gfJ3aIzR8N8R0l3xMz8P1hjIuxoKbq+z5y7mL+enfOB2HqZps7u3wh9FvkKW
P44O3JVA9D0/a7SKYBvO/PDAgCINtlOR2lJdgi9HPVpHtfZMMl98mE0soiECAwEA
AaOCAjwwggI4MB0GA1UdDgQWBBTlbOpNjvTb0GRjsoI8re5WyteSezAfBgNVHSME
GDAWgBRcDAFlwiAjNrrfuSR+ONDJhUZwBDAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud
HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8z
ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC81QzBDMDE2NUMy
MjAyMzM2QkFERkI5MjQ3RTM4RDBDOTg1NDY3MDA0LmNybDByBggrBgEFBQcBAQRm
MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw
by9JRE5JQy8xLzVDMEMwMTY1QzIyMDIzMzZCQURGQjkyNDdFMzhEMEM5ODU0Njcw
MDQuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zZTUxNmU2ZS1jNjc5LTRlNTAtYjdh
Yi0xZTQwNjc5MTI1Y2QvMC81QzBDMDE2NUMyMjAyMzM2QkFERkI5MjQ3RTM4RDBD
OTg1NDY3MDA0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAWdGmwC9xujIMqMnFIiU1JhgE4FXRX1zomMq7
BR/Z/tUmC9XOP/yJGy/cM1VBT/u8g/DAZoVRrZ7tZ3BwHPIbg74ehV9uHaohxeJ3
tEyUmbXXYPkMP0+ozl1GDi9ebrWjTLG65n/Xe1sE5Ghh4/dRj5os/8gbY86PD4RK
8xU0/2BgzcZKu5hdLpJmxCIv4vpijsCugQGNiKjl8KhvKPiCWvpCXMcxLDcwAqNn
VZ4iDFsBc4YkBrp5IXtBYq63dlxGL6HvXIiP2Q+z7gCTGY2zNSJx8HU7aqJYoGZL
f9FsH6yciF0SnY0ptJGAliYtABO8Vbj7sQ+Ec/XZHyYNYjWqEQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:53:48 2026 by rpki-client