Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/306A66EEE635498634AE42872829D07FEBC048AD.mft
File:                     306A66EEE635498634AE42872829D07FEBC048AD.mft (raw, json)
Hash identifier:          O/B/fh7FKSDptpwezwBzigZMLVn7nDf1Tn6xpuvFavA=
Subject key identifier:   58:F5:02:3A:E5:91:F1:37:BE:80:3C:4F:57:E7:03:EB:A8:DC:98:84
Authority key identifier: 30:6A:66:EE:E6:35:49:86:34:AE:42:87:28:29:D0:7F:EB:C0:48:AD
Certificate issuer:       /CN=306A66EEE635498634AE42872829D07FEBC048AD
Certificate serial:       45B04B8FCF94EDE362119BA882F82AFFB7BD8C96
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/306A66EEE635498634AE42872829D07FEBC048AD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/306A66EEE635498634AE42872829D07FEBC048AD.mft
Manifest number:          BC
Signing time:             Sun 20 Sep 2026 09:54:26 +0000
Manifest this update:     Sun 20 Sep 2026 09:49:26 +0000
Manifest next update:     Mon 21 Sep 2026 11:45:26 +0000
Files and hashes:         1: 306A66EEE635498634AE42872829D07FEBC048AD.crl (hash: uaNqAexRkwNDYoQjrcraxFbpbzDKM6LbFROOtM2G1mQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/306A66EEE635498634AE42872829D07FEBC048AD.crl
                          rsync://rpki-rsync.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/306A66EEE635498634AE42872829D07FEBC048AD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/306A66EEE635498634AE42872829D07FEBC048AD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 11:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b0:4b:8f:cf:94:ed:e3:62:11:9b:a8:82:f8:2a:ff:b7:bd:8c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=306A66EEE635498634AE42872829D07FEBC048AD
        Validity
            Not Before: Sep 20 09:49:26 2026 GMT
            Not After : Sep 21 11:45:26 2026 GMT
        Subject: CN=58F5023AE591F137BE803C4F57E703EBA8DC9884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:36:fc:6e:97:6d:ba:84:fb:fc:5c:5a:65:
                    cf:e1:9f:6f:ac:17:3e:d0:e9:57:e3:87:c2:4f:aa:
                    c0:96:69:01:d2:a3:36:a9:2f:20:05:5a:3c:26:7b:
                    f1:d6:67:63:9b:ad:47:ec:bd:c1:0c:ed:96:16:24:
                    da:7f:e6:39:62:8a:cb:1b:f7:b6:a2:f0:e6:43:4c:
                    b5:7b:87:f0:a9:06:4a:44:da:e5:37:60:c5:39:2c:
                    0e:22:c6:e6:49:93:69:5a:15:1c:45:85:7e:b9:3e:
                    4b:9b:fe:ef:31:9b:f4:c8:e6:6d:b6:91:ab:36:f3:
                    76:ce:12:d8:35:f3:20:25:a8:92:62:ab:90:8c:c4:
                    36:0c:36:52:02:bd:6f:50:e0:26:e4:c8:74:80:e6:
                    1c:12:cb:9c:f0:7b:c7:84:d1:74:cb:d0:ca:ad:01:
                    13:a7:4e:a5:16:26:fb:f6:28:d4:70:86:88:0b:f2:
                    1b:56:ad:bd:ff:90:b6:f1:65:bc:25:78:ce:ac:e9:
                    c8:ee:67:e8:4b:50:96:87:ac:aa:0a:8a:38:0b:a6:
                    9a:7e:7a:0e:f9:2c:03:34:a4:43:14:15:94:e9:3f:
                    46:fd:87:bb:50:ac:40:40:25:ca:22:77:c5:d6:de:
                    30:8b:52:4e:48:d9:20:d0:c6:a9:85:a3:4f:0f:e2:
                    19:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F5:02:3A:E5:91:F1:37:BE:80:3C:4F:57:E7:03:EB:A8:DC:98:84
            X509v3 Authority Key Identifier:
                keyid:30:6A:66:EE:E6:35:49:86:34:AE:42:87:28:29:D0:7F:EB:C0:48:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/306A66EEE635498634AE42872829D07FEBC048AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/306A66EEE635498634AE42872829D07FEBC048AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/306A66EEE635498634AE42872829D07FEBC048AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:bb:7c:7a:ce:15:c3:fe:f6:83:b5:15:18:1d:25:b3:ed:1e:
         d8:4b:28:ca:de:cf:83:69:da:38:7f:07:94:71:ce:64:56:d7:
         a1:57:9e:b9:16:5a:c5:ed:ec:93:d0:9f:51:9b:bf:da:c0:f7:
         35:bc:b7:f4:49:a3:bc:79:69:e6:55:03:98:9a:45:9c:c6:e0:
         26:58:52:04:2b:15:f9:08:b9:73:b7:0d:dc:c8:82:c1:6d:a7:
         91:ac:ba:0c:d3:d2:86:e9:45:2f:77:40:84:25:e4:fc:5a:a8:
         4a:ab:b9:b2:d3:18:77:d3:da:6e:ea:01:f6:11:fd:7a:ec:99:
         8e:10:75:da:c8:b4:8e:49:05:dd:46:33:a1:18:a8:e5:d7:a5:
         10:1a:d0:ec:4f:a7:b1:62:f1:35:32:11:c9:d0:b7:f0:f8:9d:
         6c:38:03:4d:5b:65:e1:0a:c3:1a:18:23:f1:d4:00:7b:72:7d:
         20:28:48:b5:54:f1:fa:d0:43:cb:f6:12:32:cc:9d:ee:c3:f7:
         f4:d8:16:77:a0:df:95:14:42:45:28:e2:d4:0c:f3:22:3e:cb:
         38:7c:5b:4c:7e:16:48:15:24:e6:cb:be:8e:07:0e:82:6a:c2:
         84:12:21:c8:2f:51:01:4d:27:e3:ab:2c:ef:35:54:0b:fb:98:
         66:f0:30:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:54:33 2026 by rpki-client