Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft
File:                     D69DF302479F4777A9A0892154204AF107B510B2.mft (raw, json)
Hash identifier:          NTNFGhNKKHT/FVSsrHE/caExyScR1cnad9LnuE6pz2o=
Subject key identifier:   78:57:1D:EA:B9:D1:56:38:9E:8A:5B:BB:80:59:72:21:A1:59:DA:C7
Authority key identifier: D6:9D:F3:02:47:9F:47:77:A9:A0:89:21:54:20:4A:F1:07:B5:10:B2
Certificate issuer:       /CN=D69DF302479F4777A9A0892154204AF107B510B2
Certificate serial:       429C756CC05EE3316B09BE4AE578F75EE9F9FED6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft
Manifest number:          C0
Signing time:             Mon 21 Sep 2026 03:51:17 +0000
Manifest this update:     Mon 21 Sep 2026 03:46:17 +0000
Manifest next update:     Tue 22 Sep 2026 04:10:17 +0000
Files and hashes:         1: D69DF302479F4777A9A0892154204AF107B510B2.crl (hash: X6fvh4dRpG5I5VglSXJKcinGeNEY9m2g/zq+nAkt6+o=)
                          2: 3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa (hash: q5uFk3VLUA+Zp9Xrj3e+V8aDF57mtzIkLAnY1xqIYg8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.crl
                          rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 04:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9c:75:6c:c0:5e:e3:31:6b:09:be:4a:e5:78:f7:5e:e9:f9:fe:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D69DF302479F4777A9A0892154204AF107B510B2
        Validity
            Not Before: Sep 21 03:46:17 2026 GMT
            Not After : Sep 22 04:10:17 2026 GMT
        Subject: CN=78571DEAB9D156389E8A5BBB80597221A159DAC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:40:b3:ad:ee:c3:99:e0:6a:d6:96:bc:db:f7:
                    ae:d7:9e:30:0f:20:8e:81:45:c1:a8:d9:89:b8:e8:
                    6b:95:86:6f:09:23:7b:ee:77:b5:87:d0:fe:3d:e9:
                    83:ee:7c:5e:26:3c:86:1c:ac:0e:13:5a:36:a1:87:
                    1f:42:9e:66:14:dd:1c:f5:9a:12:2b:7e:d8:63:e0:
                    64:f0:54:da:d9:e4:1b:07:99:bd:9c:b0:ec:3d:93:
                    12:75:8f:cb:ab:dd:41:6c:8f:42:96:4f:10:5b:79:
                    69:78:d2:31:87:18:bb:66:29:0e:06:73:8b:4d:f8:
                    88:1d:b5:09:00:b8:e0:26:79:5c:5b:76:86:d7:ac:
                    22:f3:0d:48:b9:3b:2c:14:4a:b5:a2:f7:49:cd:cc:
                    14:34:c0:c9:12:61:26:7e:63:07:a1:2b:80:76:99:
                    92:b7:27:1b:5e:7e:d5:fc:e6:cd:90:4a:92:c1:c3:
                    48:89:95:b8:ac:46:4f:10:4e:e7:68:cc:99:f3:be:
                    50:ef:ce:1b:15:93:33:c7:2f:8d:6b:a2:44:7a:f7:
                    e4:42:d8:4c:16:b0:4d:d2:d1:ff:91:14:a9:c3:f8:
                    37:45:b8:59:3a:e5:dc:61:45:06:95:2e:f8:c7:5a:
                    d2:64:f2:63:41:b4:a8:ce:e6:65:6e:a8:1a:bb:8c:
                    70:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:57:1D:EA:B9:D1:56:38:9E:8A:5B:BB:80:59:72:21:A1:59:DA:C7
            X509v3 Authority Key Identifier:
                keyid:D6:9D:F3:02:47:9F:47:77:A9:A0:89:21:54:20:4A:F1:07:B5:10:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:7e:d0:0c:f8:4a:01:19:0f:84:0f:60:cd:25:37:b1:0c:1d:
         41:7f:3a:a5:58:32:60:a3:20:6d:1e:e6:0d:99:58:a6:7d:f5:
         d5:75:44:86:09:30:90:25:e2:bb:e7:7b:72:53:78:ea:d9:15:
         81:05:8c:48:27:d2:13:a7:85:1b:a9:1b:c0:df:4d:99:95:79:
         18:38:c6:7f:0b:39:63:6b:38:a8:a4:58:be:06:61:46:95:3e:
         a2:7f:04:de:93:bd:01:76:73:72:6c:33:bf:79:4d:c6:41:c5:
         98:8f:42:f0:e2:f0:37:c8:d9:50:6b:37:74:5b:94:21:97:13:
         eb:d1:73:9c:6f:d2:fa:6e:7d:a1:e5:b0:71:e7:9a:dc:00:d3:
         96:14:26:05:a9:b5:5d:4a:96:f6:2b:60:6c:a6:fa:1f:1d:f9:
         04:4d:aa:b3:e2:b3:50:f1:45:60:3c:92:e6:6c:b4:6f:4f:a5:
         8a:0d:5a:ff:9d:4f:95:a1:6b:64:89:07:6e:70:8a:d8:6e:64:
         44:1e:de:db:a4:94:40:bc:49:00:eb:70:1e:a0:a2:22:c7:40:
         21:2d:b9:d4:c5:f4:7a:9d:60:51:72:6b:ff:fb:07:7f:9c:24:
         a0:5d:2c:11:4a:97:5c:4e:77:16:00:2e:fe:7c:ca:89:44:64:
         15:07:25:8c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQpx1bMBe4zFrCb5K5Xj3Xun5/tYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY5REYzMDI0NzlGNDc3N0E5QTA4OTIxNTQyMDRBRjEw
N0I1MTBCMjAeFw0yNjA5MjEwMzQ2MTdaFw0yNjA5MjIwNDEwMTdaMDMxMTAvBgNV
BAMTKDc4NTcxREVBQjlEMTU2Mzg5RThBNUJCQjgwNTk3MjIxQTE1OURBQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSQLOt7sOZ4GrWlrzb967XnjAP
II6BRcGo2Ym46GuVhm8JI3vud7WH0P496YPufF4mPIYcrA4TWjahhx9CnmYU3Rz1
mhIrfthj4GTwVNrZ5BsHmb2csOw9kxJ1j8ur3UFsj0KWTxBbeWl40jGHGLtmKQ4G
c4tN+IgdtQkAuOAmeVxbdobXrCLzDUi5OywUSrWi90nNzBQ0wMkSYSZ+YwehK4B2
mZK3JxteftX85s2QSpLBw0iJlbisRk8QTudozJnzvlDvzhsVkzPHL41rokR69+RC
2EwWsE3S0f+RFKnD+DdFuFk65dxhRQaVLvjHWtJk8mNBtKjO5mVuqBq7jHCJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUeFcd6rnRVjieilu7gFlyIaFZ2scwHwYDVR0j
BBgwFoAU1p3zAkefR3epoIkhVCBK8Qe1ELIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGRmNDI5NmYtMWNhOS00NWZjLWJiMDgtODQxMzVlYjAwZmE3LzAvRDY5REYzMDI0
NzlGNDc3N0E5QTA4OTIxNTQyMDRBRjEwN0I1MTBCMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ENjlERjMwMjQ3OUY0Nzc3QTlBMDg5MjE1NDIwNEFGMTA3QjUx
MEIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGRmNDI5NmYtMWNhOS00NWZjLWJi
MDgtODQxMzVlYjAwZmE3LzAvRDY5REYzMDI0NzlGNDc3N0E5QTA4OTIxNTQyMDRB
RjEwN0I1MTBCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMt+0Az4SgEZD4QPYM0lN7EMHUF/OqVYMmCj
IG0e5g2ZWKZ99dV1RIYJMJAl4rvne3JTeOrZFYEFjEgn0hOnhRupG8DfTZmVeRg4
xn8LOWNrOKikWL4GYUaVPqJ/BN6TvQF2c3JsM795TcZBxZiPQvDi8DfI2VBrN3Rb
lCGXE+vRc5xv0vpufaHlsHHnmtwA05YUJgWptV1KlvYrYGym+h8d+QRNqrPis1Dx
RWA8kuZstG9PpYoNWv+dT5Wha2SJB25withuZEQe3tuklEC8SQDrcB6goiLHQCEt
udTF9HqdYFFya//7B3+cJKBdLBFKl1xOdxYALv58yolEZBUHJYw=
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:48:41 2026 by rpki-client