Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft
File:                     FC1A394AF4972652D1A91AA14711525172E42585.mft (raw, json)
Hash identifier:          YXdzu3EORNPNp8/b4cM8NsnC8bFzFyPyJvGN/TOWg10=
Subject key identifier:   EC:7B:D6:6E:7A:FC:D1:98:C9:A9:F0:D9:0C:90:13:A7:D3:0A:FC:ED
Authority key identifier: FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85
Certificate issuer:       /CN=FC1A394AF4972652D1A91AA14711525172E42585
Certificate serial:       56EAB36D8E6FF17238A4DE465F984AF555D421F7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft
Manifest number:          BF
Signing time:             Tue 22 Sep 2026 04:42:17 +0000
Manifest this update:     Tue 22 Sep 2026 04:37:17 +0000
Manifest next update:     Wed 23 Sep 2026 06:57:17 +0000
Files and hashes:         1: FC1A394AF4972652D1A91AA14711525172E42585.crl (hash: hMsrml1/iQtFDbSDmjMt3XLG93ju7DjMN1fTxKFuYY8=)
                          2: 3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa (hash: 92ZQT4r/M03zq1NAav7PDjyanG9ZRWjnE3cnJHsI4AU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl
                          rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 06:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ea:b3:6d:8e:6f:f1:72:38:a4:de:46:5f:98:4a:f5:55:d4:21:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC1A394AF4972652D1A91AA14711525172E42585
        Validity
            Not Before: Sep 22 04:37:17 2026 GMT
            Not After : Sep 23 06:57:17 2026 GMT
        Subject: CN=EC7BD66E7AFCD198C9A9F0D90C9013A7D30AFCED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:15:64:7e:9a:ba:d2:e2:f9:b5:21:80:c6:98:
                    76:00:d6:c7:aa:70:f7:fa:8d:a9:0d:da:c0:29:a4:
                    f6:78:43:97:07:f4:82:28:d9:c6:51:e9:a0:99:a9:
                    d2:e0:fd:8d:9f:33:e1:1a:64:2c:0f:ac:c6:c9:d9:
                    fa:5d:10:d7:e0:e7:d6:b7:e6:32:0c:8e:a6:03:a0:
                    d8:54:cc:ba:3d:dc:d2:15:d3:c0:fe:1f:a2:3d:03:
                    be:2c:51:e3:bd:db:c9:51:6b:ba:23:0b:34:8d:e8:
                    d8:50:9e:d4:f3:00:d5:f8:eb:d2:9d:26:6e:57:92:
                    a9:33:8e:e6:09:d6:96:fb:1c:de:08:37:2c:6d:b5:
                    c8:40:ab:89:72:00:89:15:91:6b:4e:65:76:0e:67:
                    7c:bc:68:c2:34:ef:64:61:62:da:5a:27:6b:ec:48:
                    7b:ee:0c:4d:e2:d4:2b:06:93:6b:07:7e:57:1e:ba:
                    88:cf:ee:fa:95:cd:cb:55:93:9d:51:77:24:5a:da:
                    60:50:24:e3:76:ad:22:16:1a:3d:e1:b3:ca:e4:a5:
                    06:ef:fd:f0:8e:a0:4c:91:87:8d:a7:0c:7c:78:32:
                    42:96:a1:4a:c5:49:3a:ce:7b:52:c3:40:0f:37:95:
                    2b:32:ca:a0:79:ed:25:3d:b5:0d:e4:da:19:0e:6c:
                    90:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7B:D6:6E:7A:FC:D1:98:C9:A9:F0:D9:0C:90:13:A7:D3:0A:FC:ED
            X509v3 Authority Key Identifier:
                keyid:FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:da:52:b2:b3:92:17:79:9e:26:f0:b5:b8:e4:75:5b:f9:fb:
         47:08:fc:6d:9b:e4:92:f2:c0:92:2f:18:d7:d1:72:58:dc:5b:
         a8:a1:a2:50:82:07:69:d3:0b:45:f6:24:f8:a6:9a:61:7f:0b:
         7d:32:c4:75:a2:81:ff:7b:d0:0b:d0:58:8c:54:aa:0f:be:1a:
         02:89:85:ff:17:4c:e7:31:f0:e7:e6:3d:f2:f0:ff:2d:74:d2:
         5a:2f:d7:88:89:96:42:f9:0a:ce:93:32:bf:ea:58:d7:1e:0c:
         48:10:2c:af:f2:5c:2a:f8:81:a6:a6:0c:5b:d3:fc:d4:44:95:
         20:41:62:22:d6:e5:a6:1f:d9:f3:16:7f:35:da:96:0d:28:38:
         b2:1c:de:aa:39:74:4b:db:4f:31:58:2c:e5:a9:57:da:57:c8:
         05:29:e6:a4:4f:c8:e0:69:54:d0:b7:64:55:95:df:1e:79:8c:
         5a:aa:15:98:93:70:ed:0b:27:61:0a:e8:4c:63:5d:e4:9b:46:
         cb:2d:95:32:8a:ba:84:00:bf:f3:56:3e:2d:b8:12:49:6b:25:
         52:49:3f:ab:e9:84:63:d3:2a:e5:80:0a:71:09:8e:75:7c:95:
         5b:14:8a:46:a2:5e:30:2c:1b:17:ea:04:06:c6:d7:3a:a9:b6:
         4b:87:5a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:35:11 2026 by rpki-client