Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
File:                     D280C077A9E801FBA933C9D0085012E09D686927.mft (raw, json)
Hash identifier:          sGtPMauh+cGRQBCTrwT2PEvZ57rjiQOm6pkyGwuGkq0=
Subject key identifier:   78:BB:86:6A:AB:5B:FE:EA:EF:37:73:88:8C:DF:7A:AE:1C:93:70:13
Authority key identifier: D2:80:C0:77:A9:E8:01:FB:A9:33:C9:D0:08:50:12:E0:9D:68:69:27
Certificate issuer:       /CN=D280C077A9E801FBA933C9D0085012E09D686927
Certificate serial:       0CBFCD89DA0B87ED8C369A50EB2036C0B0E1682A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
Manifest number:          C0
Signing time:             Wed 23 Sep 2026 20:36:28 +0000
Manifest this update:     Wed 23 Sep 2026 20:31:28 +0000
Manifest next update:     Thu 24 Sep 2026 22:16:28 +0000
Files and hashes:         1: D280C077A9E801FBA933C9D0085012E09D686927.crl (hash: emzNWm7FYDZ6rfYgCH1hVD7ARC0JYUxFjdAQ8jie6xM=)
                          2: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: RX42n1sKvH6RuNxwR829dnAhCVM69IdefkYN8dkI7/c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.crl
                          rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 22:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:bf:cd:89:da:0b:87:ed:8c:36:9a:50:eb:20:36:c0:b0:e1:68:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D280C077A9E801FBA933C9D0085012E09D686927
        Validity
            Not Before: Sep 23 20:31:28 2026 GMT
            Not After : Sep 24 22:16:28 2026 GMT
        Subject: CN=78BB866AAB5BFEEAEF3773888CDF7AAE1C937013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6e:cd:5d:da:b2:c4:be:5e:4e:67:d1:64:4b:
                    2d:c0:3d:9a:7f:74:2c:dd:dc:7f:5f:bb:7c:0d:28:
                    b2:e8:e0:3f:09:ab:0d:09:2b:4b:36:91:6f:ad:e6:
                    47:7b:d0:7e:6a:af:87:a1:3e:6b:45:eb:ff:ba:65:
                    82:5a:34:5c:c6:b3:74:34:97:42:fe:52:cb:56:6c:
                    db:11:96:98:72:5d:bd:12:ed:a8:c5:2b:58:5a:91:
                    6d:e5:c2:92:6d:52:a0:d1:12:f8:eb:82:27:89:d7:
                    0f:84:a1:98:c1:da:42:c6:b8:bd:0a:4d:0e:a9:18:
                    5f:d8:ea:32:46:09:d5:41:14:34:6a:b4:bb:2f:a3:
                    52:89:09:29:ca:b8:82:e1:9f:b6:91:1a:ab:35:e1:
                    40:7d:8c:64:67:9b:a0:11:7f:9d:db:47:f8:27:6c:
                    a8:fa:be:14:77:93:4a:57:47:df:11:89:58:5c:2c:
                    cb:60:64:8b:85:4a:6b:df:78:0c:37:c6:d3:84:b4:
                    3f:75:28:51:7f:32:a2:a8:dd:16:cd:51:0b:ae:85:
                    da:f3:59:a6:b1:ea:f2:75:b0:38:aa:35:07:91:79:
                    5e:05:ff:e0:a2:13:6e:10:8e:fc:99:16:c1:04:75:
                    4e:f8:55:49:d4:37:7c:b3:60:b9:41:8b:90:02:a6:
                    99:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BB:86:6A:AB:5B:FE:EA:EF:37:73:88:8C:DF:7A:AE:1C:93:70:13
            X509v3 Authority Key Identifier:
                keyid:D2:80:C0:77:A9:E8:01:FB:A9:33:C9:D0:08:50:12:E0:9D:68:69:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d9:34:84:32:a0:ce:0c:80:cc:1b:29:5c:16:29:ee:64:a7:
         63:d5:14:ea:e1:2f:34:74:25:0e:3a:12:0e:25:e2:4e:43:d8:
         21:3a:32:e0:02:d3:70:6f:3b:db:d8:52:3f:0c:cb:00:f0:df:
         a4:02:17:38:a5:63:7d:cd:04:ad:45:b3:a8:b1:a9:2c:fb:99:
         a3:e4:65:84:e7:77:5f:9b:2f:f1:5f:26:c5:cb:22:f4:63:f8:
         e2:04:8f:f6:31:d8:e6:3f:f5:95:b8:df:1c:89:83:f5:8c:eb:
         8a:88:82:fa:35:a0:6c:df:b1:83:20:be:38:3f:3e:ce:a5:4f:
         58:33:32:a1:2d:e6:fe:84:7d:4c:ea:84:8a:fc:8b:81:a7:65:
         4a:11:01:0d:f1:b9:36:46:2d:d6:5d:b2:c0:fb:59:64:ae:c3:
         39:fd:8e:02:96:db:c0:06:4c:b9:fa:8c:30:2d:e0:cf:5d:a6:
         ce:e6:51:00:63:1e:b0:c6:e3:f2:14:5a:ac:fc:9a:9d:2d:62:
         84:22:bc:e0:90:94:02:ac:05:f0:a3:6d:59:65:51:cc:7e:f6:
         59:c8:dd:d9:91:0a:dd:95:ff:4d:10:2b:d4:59:ce:ec:87:63:
         a7:7f:b3:0a:e5:31:aa:65:f0:4d:4b:88:46:88:e3:87:0d:40:
         c7:94:7c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:06:18 2026 by rpki-client