Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.mft
File:                     D469E6C482F05DFD528EB9D1E137A98986C2AA64.mft (raw, json)
Hash identifier:          f+Zl43KegwMUd6OI+mncFesBX864oEwDTWv6uj7gekk=
Subject key identifier:   EE:AA:86:63:0C:AB:25:DE:97:68:A5:03:18:BD:90:F8:A0:A6:85:C9
Authority key identifier: D4:69:E6:C4:82:F0:5D:FD:52:8E:B9:D1:E1:37:A9:89:86:C2:AA:64
Certificate issuer:       /CN=D469E6C482F05DFD528EB9D1E137A98986C2AA64
Certificate serial:       6DD72D7B96D5E296A99D827274680AD063FDC25C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D469E6C482F05DFD528EB9D1E137A98986C2AA64.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.mft
Manifest number:          C2
Signing time:             Thu 24 Sep 2026 20:05:22 +0000
Manifest this update:     Thu 24 Sep 2026 20:00:22 +0000
Manifest next update:     Fri 25 Sep 2026 20:52:22 +0000
Files and hashes:         1: 3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (hash: dqW6TWRtsltPNTEFRMpYh1GeX5vPLKOWuyjNksoCBu4=)
                          2: D469E6C482F05DFD528EB9D1E137A98986C2AA64.crl (hash: GoUX56y9glGodZTxonkAkVDqjXSPkUWuA1Rnh9Do9Vo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.crl
                          rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D469E6C482F05DFD528EB9D1E137A98986C2AA64.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 10:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d7:2d:7b:96:d5:e2:96:a9:9d:82:72:74:68:0a:d0:63:fd:c2:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D469E6C482F05DFD528EB9D1E137A98986C2AA64
        Validity
            Not Before: Sep 24 20:00:22 2026 GMT
            Not After : Sep 25 20:52:22 2026 GMT
        Subject: CN=EEAA86630CAB25DE9768A50318BD90F8A0A685C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:75:90:d9:b4:d0:c4:85:6b:ad:d0:c8:c6:
                    4a:d3:ba:df:af:e4:e0:6c:24:52:59:72:b9:05:57:
                    de:60:1d:8b:34:44:bb:65:09:dc:ff:10:84:01:ad:
                    80:8f:e5:a8:1b:e7:4b:aa:e9:1f:79:89:95:fd:b4:
                    8c:02:9b:90:c3:ad:f4:d4:14:eb:73:08:c2:4e:8f:
                    1f:3d:54:fa:72:4a:cf:91:80:50:d0:6c:1e:95:02:
                    ea:3a:0f:f0:95:f4:6c:af:0d:21:06:2b:2b:3f:bd:
                    82:3a:54:72:91:44:f1:21:13:b0:da:44:68:0f:65:
                    0a:60:e7:3e:49:24:3f:80:dc:3c:5f:57:c1:98:72:
                    8c:7b:18:ab:b1:9e:f6:0f:c6:59:73:cd:87:01:5e:
                    15:17:f3:4b:90:7a:c5:30:c3:6c:42:67:11:fb:bf:
                    50:cf:2c:9c:8b:fa:52:99:3e:4b:cc:87:82:a2:4d:
                    9e:51:8d:e3:a4:ff:88:05:27:b7:84:f9:48:fb:56:
                    7b:5f:33:f3:51:34:e9:6c:c4:70:43:1c:53:a4:18:
                    ec:c6:00:5d:3e:f5:62:53:b9:aa:82:6a:be:1a:c1:
                    a4:b4:2c:b3:2c:db:e7:1d:63:8c:7f:4c:9b:70:f7:
                    c5:1e:88:0a:21:4a:46:60:da:bd:fa:23:34:fc:5f:
                    9f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AA:86:63:0C:AB:25:DE:97:68:A5:03:18:BD:90:F8:A0:A6:85:C9
            X509v3 Authority Key Identifier:
                keyid:D4:69:E6:C4:82:F0:5D:FD:52:8E:B9:D1:E1:37:A9:89:86:C2:AA:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D469E6C482F05DFD528EB9D1E137A98986C2AA64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:6a:43:e5:8e:8b:0f:b8:fd:77:f8:1f:9d:3c:27:04:5f:eb:
         fb:46:67:eb:1f:84:2d:6d:9d:bf:03:06:a4:7d:6b:24:d7:ed:
         cc:ea:3d:b3:93:74:9f:88:be:68:1d:31:75:3f:b4:03:61:df:
         97:c9:6d:9e:0d:a5:3c:ff:5a:b5:70:c5:05:46:bb:34:08:fe:
         9e:9f:89:44:29:6d:98:09:db:fe:f4:10:58:c9:3b:51:e6:81:
         05:46:7f:29:e3:71:6d:aa:1a:92:14:b4:10:7d:02:1f:bf:2a:
         4c:bc:7f:34:47:12:4a:0f:8d:ff:a2:c0:8e:46:80:59:92:f5:
         fd:2d:db:02:3e:93:72:b4:51:35:4b:90:db:b7:de:7f:eb:c5:
         41:62:80:fd:6b:ef:4a:a5:d9:73:f3:de:06:aa:9e:71:a0:8e:
         bc:7c:78:71:34:02:f7:1b:c5:dc:10:25:7c:66:bc:70:ae:64:
         77:3b:02:45:12:03:30:38:b4:75:41:4d:f4:cc:78:0e:c2:f4:
         0a:1a:78:bf:04:e4:7e:d7:28:5e:62:91:00:43:0d:e3:c4:80:
         21:7a:dc:c4:01:06:1e:ed:14:84:84:b7:80:f0:45:f9:36:8f:
         9a:63:99:1b:62:2a:ee:8b:1a:ef:e9:3f:1f:ae:65:2f:e5:46:
         df:32:a2:9f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbdcte5bV4papnYJydGgK0GP9wlwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ2OUU2QzQ4MkYwNURGRDUyOEVCOUQxRTEzN0E5ODk4
NkMyQUE2NDAeFw0yNjA5MjQyMDAwMjJaFw0yNjA5MjUyMDUyMjJaMDMxMTAvBgNV
BAMTKEVFQUE4NjYzMENBQjI1REU5NzY4QTUwMzE4QkQ5MEY4QTBBNjg1QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEq3WQ2bTQxIVrrdDIxkrTut+v
5OBsJFJZcrkFV95gHYs0RLtlCdz/EIQBrYCP5agb50uq6R95iZX9tIwCm5DDrfTU
FOtzCMJOjx89VPpySs+RgFDQbB6VAuo6D/CV9GyvDSEGKys/vYI6VHKRRPEhE7Da
RGgPZQpg5z5JJD+A3DxfV8GYcox7GKuxnvYPxllzzYcBXhUX80uQesUww2xCZxH7
v1DPLJyL+lKZPkvMh4KiTZ5RjeOk/4gFJ7eE+Uj7VntfM/NRNOlsxHBDHFOkGOzG
AF0+9WJTuaqCar4awaS0LLMs2+cdY4x/TJtw98UeiAohSkZg2r36IzT8X58rAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU7qqGYwyrJd6XaKUDGL2Q+KCmhckwHwYDVR0j
BBgwFoAU1GnmxILwXf1SjrnR4TepiYbCqmQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODkxOWI4MGQtNDY5My00MDk1LWE5ZTMtNDEyZTEyODI4ZmYyLzAvRDQ2OUU2QzQ4
MkYwNURGRDUyOEVCOUQxRTEzN0E5ODk4NkMyQUE2NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ENDY5RTZDNDgyRjA1REZENTI4RUI5RDFFMTM3QTk4OTg2QzJB
QTY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODkxOWI4MGQtNDY5My00MDk1LWE5
ZTMtNDEyZTEyODI4ZmYyLzAvRDQ2OUU2QzQ4MkYwNURGRDUyOEVCOUQxRTEzN0E5
ODk4NkMyQUE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABZqQ+WOiw+4/Xf4H508JwRf6/tGZ+sfhC1t
nb8DBqR9ayTX7czqPbOTdJ+IvmgdMXU/tANh35fJbZ4NpTz/WrVwxQVGuzQI/p6f
iUQpbZgJ2/70EFjJO1HmgQVGfynjcW2qGpIUtBB9Ah+/Kky8fzRHEkoPjf+iwI5G
gFmS9f0t2wI+k3K0UTVLkNu33n/rxUFigP1r70ql2XPz3gaqnnGgjrx8eHE0Avcb
xdwQJXxmvHCuZHc7AkUSAzA4tHVBTfTMeA7C9AoaeL8E5H7XKF5ikQBDDePEgCF6
3MQBBh7tFISEt4DwRfk2j5pjmRtiKu6LGu/pPx+uZS/lRt8yop8=
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:58:22 2026 by rpki-client