Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft
File:                     A27FF2B00B818D036621468F265A350211C5B6B1.mft (raw, json)
Hash identifier:          lZyibOf935dJXCHTOUyDy3Z8LauiaJmICTbgxzWP8lw=
Subject key identifier:   EF:5F:C8:C0:C1:8A:83:EB:74:63:80:3D:8C:2B:55:C1:48:17:90:2D
Authority key identifier: A2:7F:F2:B0:0B:81:8D:03:66:21:46:8F:26:5A:35:02:11:C5:B6:B1
Certificate issuer:       /CN=A27FF2B00B818D036621468F265A350211C5B6B1
Certificate serial:       607D3B0BDC4B968AA6C878A04431B384698A4D61
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft
Manifest number:          C0
Signing time:             Tue 22 Sep 2026 14:19:06 +0000
Manifest this update:     Tue 22 Sep 2026 14:14:06 +0000
Manifest next update:     Wed 23 Sep 2026 14:25:06 +0000
Files and hashes:         1: A27FF2B00B818D036621468F265A350211C5B6B1.crl (hash: dOnGhnl4SS5HQ0NIFcgK12d+a2ebJ1HbdYGg0raqncM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.crl
                          rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 14:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7d:3b:0b:dc:4b:96:8a:a6:c8:78:a0:44:31:b3:84:69:8a:4d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A27FF2B00B818D036621468F265A350211C5B6B1
        Validity
            Not Before: Sep 22 14:14:06 2026 GMT
            Not After : Sep 23 14:25:06 2026 GMT
        Subject: CN=EF5FC8C0C18A83EB7463803D8C2B55C14817902D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:ee:8f:10:a5:c3:b6:ec:47:7d:b7:d9:da:
                    3e:6d:59:4c:e4:35:0e:ea:04:3b:23:37:0b:7f:8a:
                    55:ce:77:a8:6a:75:a7:11:17:b9:26:d8:0f:e8:b1:
                    77:4f:6f:f9:63:80:94:3d:70:c8:36:39:89:54:1f:
                    ef:f7:0e:b9:38:d9:67:9b:f0:82:3d:a0:b5:66:e2:
                    96:22:87:e7:7d:79:e4:e4:ab:9e:6e:0d:59:18:9d:
                    61:9c:23:aa:48:10:00:c9:7e:3c:93:58:90:4d:e2:
                    52:43:df:51:27:92:a0:27:82:65:45:da:cc:1e:f6:
                    03:a5:dc:6e:2b:27:24:f9:6c:11:97:c6:bd:98:f5:
                    00:c7:f7:13:85:7e:89:b8:f0:67:2a:2b:31:85:2f:
                    46:d8:ac:e4:20:a2:cf:d4:5e:e0:59:ba:a9:4b:cc:
                    7d:7e:0b:f9:1c:ba:b4:9e:a1:e8:9d:69:06:63:d0:
                    e1:35:a4:d2:8a:70:fc:2c:9b:24:1c:95:ba:f6:e4:
                    26:b2:de:1d:48:f4:d7:6d:20:cc:3b:01:e3:67:47:
                    19:3d:96:24:34:15:f3:90:42:c6:82:7f:19:15:65:
                    42:d0:73:92:15:d1:fb:51:67:da:3d:d4:09:6d:26:
                    1f:7e:37:0b:09:39:0a:c8:3c:f3:dd:7f:b3:f3:f2:
                    10:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5F:C8:C0:C1:8A:83:EB:74:63:80:3D:8C:2B:55:C1:48:17:90:2D
            X509v3 Authority Key Identifier:
                keyid:A2:7F:F2:B0:0B:81:8D:03:66:21:46:8F:26:5A:35:02:11:C5:B6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:cb:5b:56:0a:c4:c6:2b:f9:7b:38:cb:6d:3f:4f:45:ef:ab:
         99:13:64:d0:35:2a:b3:f8:eb:05:0e:ab:e1:ba:8d:6a:d9:d9:
         b5:b0:af:1b:3a:6d:32:b7:5b:40:7c:15:c8:6d:72:83:ed:6e:
         7b:7a:08:9b:bb:a7:66:1a:66:49:ff:a9:46:ac:85:51:94:7e:
         90:3a:a8:b7:a1:69:8d:48:7c:28:30:6b:21:90:b6:9c:4e:53:
         9e:96:9d:cf:5b:3e:b3:8c:99:fd:75:9d:75:b3:60:f5:6f:4c:
         a2:b6:f0:29:f0:8e:f2:7a:fe:d7:1c:a9:3e:03:bd:62:83:e0:
         21:f6:7a:65:84:d2:cc:a9:8c:23:f6:73:a4:90:8d:22:d8:08:
         76:b2:ad:5e:63:2e:cb:02:e7:f6:dd:9e:db:bf:17:86:88:a6:
         82:92:18:75:ef:03:13:0e:2f:0e:cd:43:52:c6:5a:80:5d:1c:
         d3:9d:f2:94:66:66:44:45:9a:59:c6:3e:92:da:1d:f9:26:3b:
         a4:3f:7c:50:41:12:e5:37:58:19:36:bc:f2:1d:3c:5d:13:4c:
         31:1c:c9:c3:3c:9b:42:7b:94:3b:cf:1b:28:73:e6:de:2b:35:
         d0:bd:5a:a3:40:9a:2d:0c:49:c1:1e:ef:6f:55:6a:00:90:15:
         15:bc:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:33:27 2026 by rpki-client