Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft
File:                     D51AA8B3D72CDB71C90345B767919665E60A217F.mft (raw, json)
Hash identifier:          4408/zY6THY7C5CFtSSJ+EJu7HSQNQQ2ot7TMxWGULg=
Subject key identifier:   00:9B:5D:7A:CE:17:EA:4F:E7:86:06:14:10:FC:8E:F9:FD:E2:9D:54
Authority key identifier: D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F
Certificate issuer:       /CN=D51AA8B3D72CDB71C90345B767919665E60A217F
Certificate serial:       3A900AAF79635709BC319619721CAD3E40A028A9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft
Manifest number:          C6
Signing time:             Sat 26 Sep 2026 08:40:32 +0000
Manifest this update:     Sat 26 Sep 2026 08:35:32 +0000
Manifest next update:     Sun 27 Sep 2026 11:27:32 +0000
Files and hashes:         1: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: rfjdhFUeqRzlpu/a6IIMJJdIbxMUcj3gavb0NZINzaQ=)
                          2: D51AA8B3D72CDB71C90345B767919665E60A217F.crl (hash: QcOAbBkyzsnxaoyQjmpU5c1boHUDrMkbymtIAWbvJGE=)
                          3: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: qWXJBwwFjRlNPlzGu34yKlzyWtSJkvJR6tTW+DXklsI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl
                          rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 11:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:90:0a:af:79:63:57:09:bc:31:96:19:72:1c:ad:3e:40:a0:28:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D51AA8B3D72CDB71C90345B767919665E60A217F
        Validity
            Not Before: Sep 26 08:35:32 2026 GMT
            Not After : Sep 27 11:27:32 2026 GMT
        Subject: CN=009B5D7ACE17EA4FE786061410FC8EF9FDE29D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:62:9c:9f:52:d0:47:7a:09:f2:e5:81:23:
                    48:c2:c1:26:17:05:b1:22:7a:64:90:59:ba:2a:fe:
                    80:c7:fc:9e:c2:32:63:38:91:b2:17:fd:c9:d2:44:
                    b9:8d:4c:d5:52:af:fe:34:41:58:c1:8e:e8:a0:b9:
                    2a:34:57:fc:25:5a:b9:25:2d:40:5d:03:aa:16:84:
                    ed:f3:cc:e6:e7:0e:0a:45:5f:7b:47:b3:ca:37:d4:
                    a6:20:93:f3:4c:b2:d4:c8:09:77:88:d4:07:49:98:
                    68:15:6d:59:2a:37:42:38:cf:58:b3:ec:ca:4b:d7:
                    18:0e:b4:7a:98:f1:24:ee:d1:9b:16:16:93:04:a5:
                    bc:a6:ea:2b:f6:e9:9d:7c:a9:6d:bb:6b:71:36:47:
                    ab:90:b4:9a:d9:18:9d:b6:6c:3e:5e:ef:5e:c7:56:
                    c1:df:f7:80:45:4a:65:61:eb:97:7d:74:e4:b1:96:
                    d1:71:35:d9:2e:a1:18:80:e7:17:e0:7f:ca:e0:07:
                    f5:a1:a3:bf:e4:4b:07:12:3c:fa:b5:88:f5:31:5a:
                    c4:79:79:d1:93:37:b7:b5:93:9a:11:77:cd:16:e4:
                    e1:8e:8b:3d:42:1d:2b:38:46:00:a0:73:9f:f4:39:
                    07:52:4a:e5:02:71:be:23:c3:24:c9:2b:87:64:11:
                    48:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9B:5D:7A:CE:17:EA:4F:E7:86:06:14:10:FC:8E:F9:FD:E2:9D:54
            X509v3 Authority Key Identifier:
                keyid:D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:10:dd:e3:a2:05:02:3c:69:03:14:a8:96:f5:00:eb:71:02:
         97:74:07:40:cc:b5:fa:22:71:c9:ee:82:5e:63:ec:e0:73:b6:
         7f:6e:ab:57:57:da:f7:88:47:1a:3b:4f:7c:b0:ac:2b:4f:9b:
         eb:ed:33:fa:1f:78:ff:0d:74:e3:40:0b:db:54:af:c0:f1:06:
         6e:07:d3:56:02:8b:0d:7e:cd:18:3d:56:60:72:bc:fd:ca:a7:
         20:ca:72:35:94:f7:c6:b6:90:42:d6:ef:09:db:34:d8:65:a0:
         12:5d:2a:61:51:32:5e:0c:67:a9:c5:cc:58:87:51:2b:e8:f1:
         c4:8f:1c:bb:37:31:21:eb:4f:18:81:d9:36:8a:24:ec:aa:dd:
         75:64:6f:0a:ca:cd:6c:15:55:c4:9e:df:e5:71:00:2c:d3:a3:
         ec:dd:29:75:85:a7:69:1c:33:0f:cd:67:84:c1:28:e4:c4:dc:
         b6:36:a2:84:21:d3:4c:f3:60:97:f5:47:7b:88:c9:63:e8:58:
         51:68:9f:50:21:c7:0f:76:19:04:e9:d3:42:7a:71:f7:1f:36:
         a4:cf:b8:0a:3e:9f:48:03:a8:0e:92:31:bf:80:47:86:85:05:
         e1:ad:56:47:8f:07:75:b9:fb:b2:32:6f:d0:fa:c1:d4:a2:50:
         4c:63:5c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:07:06 2026 by rpki-client