Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
File:                     F440C463790421765C0B198FBF82B80F70529E23.mft (raw, json)
Hash identifier:          eoflfMMRhe5FbSIRoR8Weixbhc8Fm3+UU8wuVQEbn1Q=
Subject key identifier:   87:18:3A:42:6C:2E:2A:7A:EC:C9:ED:FF:1D:CC:3D:1E:B8:D3:A2:42
Authority key identifier: F4:40:C4:63:79:04:21:76:5C:0B:19:8F:BF:82:B8:0F:70:52:9E:23
Certificate issuer:       /CN=F440C463790421765C0B198FBF82B80F70529E23
Certificate serial:       401066B19A38BE2CA17BCA05315347CCF5F1D7ED
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
Manifest number:          C7
Signing time:             Mon 28 Sep 2026 17:21:07 +0000
Manifest this update:     Mon 28 Sep 2026 17:16:07 +0000
Manifest next update:     Tue 29 Sep 2026 19:04:07 +0000
Files and hashes:         1: F440C463790421765C0B198FBF82B80F70529E23.crl (hash: L50mxk53XeaRo2Za2dFktpKcHqD1g6vdh/IguXrR4sA=)
                          2: 3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa (hash: vIUCd1IemIKCQ+NzE6xQfnpmhwQEajDU6BevZYDhd68=)
                          3: 323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa (hash: DUNSj4kP6eOZRckNiWJJBeXQEQuZewuUxpFimv6tinc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.crl
                          rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:04:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:10:66:b1:9a:38:be:2c:a1:7b:ca:05:31:53:47:cc:f5:f1:d7:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F440C463790421765C0B198FBF82B80F70529E23
        Validity
            Not Before: Sep 28 17:16:07 2026 GMT
            Not After : Sep 29 19:04:07 2026 GMT
        Subject: CN=87183A426C2E2A7AECC9EDFF1DCC3D1EB8D3A242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a3:7a:6a:0e:ca:ec:08:06:85:6a:5f:4f:d5:
                    f3:1c:fc:e3:77:cd:33:56:3c:0f:4d:39:52:49:23:
                    68:eb:71:cf:ee:42:e7:43:c8:ea:48:af:c3:e9:45:
                    c3:46:dc:e1:39:ed:bf:f9:8d:36:34:c2:cd:97:54:
                    f5:04:dc:ce:59:10:2b:41:32:c8:62:67:4f:9a:95:
                    b8:21:b8:4d:2c:e5:85:71:5c:82:8c:21:d3:52:95:
                    3e:ee:4d:49:e0:db:eb:9a:e2:9b:85:77:38:96:7b:
                    30:83:a0:43:31:6b:ee:fe:93:86:02:1b:32:b1:fe:
                    cd:82:de:c2:08:66:d6:2f:ed:9d:96:b0:4e:42:03:
                    d6:16:68:ab:05:fb:63:f2:e6:70:2f:c7:ae:0b:49:
                    37:17:35:f4:a4:eb:3f:69:00:af:1f:18:3a:77:bb:
                    ab:5e:0b:47:fb:82:11:d4:f8:f6:9e:e4:c2:58:9a:
                    62:46:dc:e4:46:50:0c:3e:fb:f3:10:9a:8d:e5:4f:
                    6f:45:30:fc:c3:3f:72:18:31:f4:7c:6d:71:4c:38:
                    80:95:d2:91:77:57:af:bb:58:1d:df:79:24:89:6e:
                    78:d0:e2:45:a5:01:53:a7:d7:b2:77:b3:61:1b:2b:
                    02:bb:e7:06:3b:30:89:c3:cd:35:ce:a5:2f:86:8e:
                    c3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:18:3A:42:6C:2E:2A:7A:EC:C9:ED:FF:1D:CC:3D:1E:B8:D3:A2:42
            X509v3 Authority Key Identifier:
                keyid:F4:40:C4:63:79:04:21:76:5C:0B:19:8F:BF:82:B8:0F:70:52:9E:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:07:ba:7c:89:31:43:f6:f0:01:f3:59:ed:8b:a9:8b:3f:1d:
         04:b2:56:54:8a:98:a1:ae:c6:3c:c6:6d:6e:cb:7a:57:ad:46:
         f3:15:85:9b:de:72:c5:ed:90:56:f7:2d:9e:f9:8b:03:1e:53:
         a6:13:26:df:fa:bb:c1:45:41:5e:32:69:65:cf:9a:f0:35:86:
         7c:1c:8b:55:3f:4d:b6:35:c8:c7:60:b6:6e:e4:21:3f:47:5b:
         c8:b4:9b:27:de:d7:6f:86:df:f0:3b:3e:25:b0:f2:31:ff:a1:
         c4:b3:f1:fa:91:9c:b3:48:41:9c:c2:86:75:94:75:55:18:0b:
         80:10:fc:ad:a7:6e:b9:70:57:d7:fc:15:bb:4e:5c:49:40:21:
         ae:83:59:30:f8:d2:9a:06:0c:c4:a7:09:69:5b:2f:5d:40:56:
         a8:84:c0:75:59:69:c4:c0:4a:7a:ba:67:92:aa:26:36:74:0b:
         f6:d9:6f:82:94:2d:1e:c6:c8:b5:d8:80:8f:61:5b:95:5a:de:
         fa:e0:12:3a:0b:48:d6:5e:1e:ab:1a:9a:5f:c2:ad:16:ed:62:
         33:f6:48:b2:06:bc:a0:3b:2c:32:bf:f6:0b:36:32:35:c7:61:
         83:1b:21:0d:29:5c:86:d4:c8:46:7b:e3:ee:52:cb:f5:2e:ed:
         8c:b3:5b:e1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQBBmsZo4viyhe8oFMVNHzPXx1+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ0MEM0NjM3OTA0MjE3NjVDMEIxOThGQkY4MkI4MEY3
MDUyOUUyMzAeFw0yNjA5MjgxNzE2MDdaFw0yNjA5MjkxOTA0MDdaMDMxMTAvBgNV
BAMTKDg3MTgzQTQyNkMyRTJBN0FFQ0M5RURGRjFEQ0MzRDFFQjhEM0EyNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJo3pqDsrsCAaFal9P1fMc/ON3
zTNWPA9NOVJJI2jrcc/uQudDyOpIr8PpRcNG3OE57b/5jTY0ws2XVPUE3M5ZECtB
MshiZ0+albghuE0s5YVxXIKMIdNSlT7uTUng2+ua4puFdziWezCDoEMxa+7+k4YC
GzKx/s2C3sIIZtYv7Z2WsE5CA9YWaKsF+2Py5nAvx64LSTcXNfSk6z9pAK8fGDp3
u6teC0f7ghHU+Pae5MJYmmJG3ORGUAw++/MQmo3lT29FMPzDP3IYMfR8bXFMOICV
0pF3V6+7WB3feSSJbnjQ4kWlAVOn17J3s2EbKwK75wY7MInDzTXOpS+GjsOVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhxg6QmwuKnrsye3/Hcw9HrjTokIwHwYDVR0j
BBgwFoAU9EDEY3kEIXZcCxmPv4K4D3BSniMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmE5ZTI4OTgtMDIzYi00NzQxLTg3MzUtYTA3MThjYzZjZjJiLzAvRjQ0MEM0NjM3
OTA0MjE3NjVDMEIxOThGQkY4MkI4MEY3MDUyOUUyMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GNDQwQzQ2Mzc5MDQyMTc2NUMwQjE5OEZCRjgyQjgwRjcwNTI5
RTIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmE5ZTI4OTgtMDIzYi00NzQxLTg3
MzUtYTA3MThjYzZjZjJiLzAvRjQ0MEM0NjM3OTA0MjE3NjVDMEIxOThGQkY4MkI4
MEY3MDUyOUUyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ0HunyJMUP28AHzWe2LqYs/HQSyVlSKmKGu
xjzGbW7LeletRvMVhZvecsXtkFb3LZ75iwMeU6YTJt/6u8FFQV4yaWXPmvA1hnwc
i1U/TbY1yMdgtm7kIT9HW8i0myfe12+G3/A7PiWw8jH/ocSz8fqRnLNIQZzChnWU
dVUYC4AQ/K2nbrlwV9f8FbtOXElAIa6DWTD40poGDMSnCWlbL11AVqiEwHVZacTA
Snq6Z5KqJjZ0C/bZb4KULR7GyLXYgI9hW5Va3vrgEjoLSNZeHqsaml/CrRbtYjP2
SLIGvKA7LDK/9gs2MjXHYYMbIQ0pXIbUyEZ74+5Sy/Uu7YyzW+E=
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:37:26 2026 by rpki-client