Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft
File:                     681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft (raw, json)
Hash identifier:          b+f0eo0yl/nhAWcVmjZUsmLlSypi73cR1F9pJQw10zI=
Subject key identifier:   A1:C1:D6:D3:F5:48:E2:B9:0D:4D:0B:67:35:2A:34:6A:11:62:E6:7E
Authority key identifier: 68:1B:E3:4D:FA:90:CE:2B:D9:87:C1:F7:72:EA:7B:05:E5:70:83:E2
Certificate issuer:       /CN=681BE34DFA90CE2BD987C1F772EA7B05E57083E2
Certificate serial:       115FE67CA1A9B8F0ECE60BA3C3C1F2C1C324E309
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 16:01:26 +0000
Manifest this update:     Mon 21 Sep 2026 15:56:26 +0000
Manifest next update:     Tue 22 Sep 2026 18:54:26 +0000
Files and hashes:         1: 681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl (hash: p3i2rOzrf8tVN77UKyUpmTEL08lJ32iKB/3ZPHDEhns=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl
                          rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 18:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5f:e6:7c:a1:a9:b8:f0:ec:e6:0b:a3:c3:c1:f2:c1:c3:24:e3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=681BE34DFA90CE2BD987C1F772EA7B05E57083E2
        Validity
            Not Before: Sep 21 15:56:26 2026 GMT
            Not After : Sep 22 18:54:26 2026 GMT
        Subject: CN=A1C1D6D3F548E2B90D4D0B67352A346A1162E67E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:34:e1:f6:8d:4f:25:c5:ee:b4:5a:d2:57:ab:
                    6a:58:b9:a1:83:bc:b8:25:9c:60:88:5b:30:3c:be:
                    1e:75:89:9c:32:ea:2e:8d:6c:a8:64:28:86:e6:f5:
                    98:a0:ca:18:48:8a:39:bb:3e:41:d4:e2:1f:3b:6c:
                    71:a3:08:89:a3:ee:fb:3e:35:fc:3f:78:ac:64:68:
                    15:87:f5:bd:13:73:35:1f:37:b8:8e:0e:cd:3b:12:
                    b1:41:dd:bc:b7:b3:d3:08:ea:0e:75:ec:ea:30:b5:
                    7f:cc:0f:69:f6:6d:e7:36:c8:8f:67:1c:c7:a7:7e:
                    75:7b:fe:3b:3e:f1:8e:88:5f:04:68:f4:4b:91:6b:
                    f8:89:71:85:f8:5d:fd:29:7f:5c:40:ec:33:ed:1e:
                    f9:a5:0d:f6:92:11:92:e2:14:f5:ec:c5:ef:4e:14:
                    da:39:64:91:d6:d8:22:3c:2f:f3:a7:9a:cf:e3:6a:
                    3c:f3:c7:61:16:36:67:5e:c7:bd:9e:d9:de:25:92:
                    de:53:24:86:a1:a2:d7:38:f2:08:6e:3f:fc:88:bc:
                    39:0e:b3:75:44:cc:c3:ec:db:7e:de:a9:ef:a2:04:
                    ee:70:4c:b7:af:9b:70:5a:84:f2:fa:e9:87:b3:49:
                    b6:65:1a:ff:d8:d2:e0:ce:00:06:7e:76:96:d0:eb:
                    dd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C1:D6:D3:F5:48:E2:B9:0D:4D:0B:67:35:2A:34:6A:11:62:E6:7E
            X509v3 Authority Key Identifier:
                keyid:68:1B:E3:4D:FA:90:CE:2B:D9:87:C1:F7:72:EA:7B:05:E5:70:83:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/681BE34DFA90CE2BD987C1F772EA7B05E57083E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:21:14:59:9c:62:12:8e:bc:72:4d:83:32:fc:d9:59:a7:18:
         c8:f3:b4:f2:d0:c5:4d:39:88:81:a9:d0:43:fb:68:de:14:19:
         4c:f1:fc:ca:80:2d:0d:23:23:23:cd:cc:b8:56:2f:94:74:80:
         92:68:e5:3f:2f:76:51:29:4f:21:00:69:a1:07:e4:4b:f1:ef:
         12:cb:b9:a4:dd:bf:a2:1a:60:54:d8:d1:80:7c:1c:82:c1:56:
         12:1c:4e:20:6c:e0:7f:c8:ef:c4:7c:5c:f3:ec:12:db:37:ce:
         01:ff:0d:16:2d:d7:93:af:d7:2a:97:67:2c:87:d3:f9:cd:f6:
         bc:2e:a5:ec:46:9f:2a:d2:e8:a9:be:68:52:4f:05:20:64:b5:
         ff:ef:bf:0d:d4:3a:05:0e:c3:79:09:8c:dc:57:b3:36:ec:af:
         e3:b8:75:f0:bc:a4:0c:10:fe:e5:c9:84:27:cd:b7:6a:50:05:
         63:96:1f:3b:b0:6d:aa:fb:92:5b:c7:0b:2a:a0:25:60:a2:e2:
         e2:06:d5:82:fe:6e:5c:3d:0a:74:82:8e:13:53:70:2b:4c:cb:
         12:13:c3:a9:a0:4b:95:34:17:24:c9:d7:b6:96:a1:e8:9d:15:
         9d:10:0f:ef:52:09:bf:4e:f3:cb:2f:cd:44:f3:e1:28:f2:25:
         43:71:41:d5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEV/mfKGpuPDs5gujw8HywcMk4wkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjgxQkUzNERGQTkwQ0UyQkQ5ODdDMUY3NzJFQTdCMDVF
NTcwODNFMjAeFw0yNjA5MjExNTU2MjZaFw0yNjA5MjIxODU0MjZaMDMxMTAvBgNV
BAMTKEExQzFENkQzRjU0OEUyQjkwRDREMEI2NzM1MkEzNDZBMTE2MkU2N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5NOH2jU8lxe60WtJXq2pYuaGD
vLglnGCIWzA8vh51iZwy6i6NbKhkKIbm9ZigyhhIijm7PkHU4h87bHGjCImj7vs+
Nfw/eKxkaBWH9b0TczUfN7iODs07ErFB3by3s9MI6g517OowtX/MD2n2bec2yI9n
HMenfnV7/js+8Y6IXwRo9EuRa/iJcYX4Xf0pf1xA7DPtHvmlDfaSEZLiFPXsxe9O
FNo5ZJHW2CI8L/Onms/jajzzx2EWNmdex72e2d4lkt5TJIahotc48ghuP/yIvDkO
s3VEzMPs237eqe+iBO5wTLevm3BahPL66YezSbZlGv/Y0uDOAAZ+dpbQ691/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUocHW0/VI4rkNTQtnNSo0ahFi5n4wHwYDVR0j
BBgwFoAUaBvjTfqQzivZh8H3cup7BeVwg+IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTkzODk1ZTItNDAyMC00YzNmLTk4N2YtZGFjZGY4ZThlYTI5LzEvNjgxQkUzNERG
QTkwQ0UyQkQ5ODdDMUY3NzJFQTdCMDVFNTcwODNFMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82ODFCRTM0REZBOTBDRTJCRDk4N0MxRjc3MkVBN0IwNUU1NzA4
M0UyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4
N2YtZGFjZGY4ZThlYTI5LzEvNjgxQkUzNERGQTkwQ0UyQkQ5ODdDMUY3NzJFQTdC
MDVFNTcwODNFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADwhFFmcYhKOvHJNgzL82VmnGMjztPLQxU05
iIGp0EP7aN4UGUzx/MqALQ0jIyPNzLhWL5R0gJJo5T8vdlEpTyEAaaEH5Evx7xLL
uaTdv6IaYFTY0YB8HILBVhIcTiBs4H/I78R8XPPsEts3zgH/DRYt15Ov1yqXZyyH
0/nN9rwupexGnyrS6Km+aFJPBSBktf/vvw3UOgUOw3kJjNxXszbsr+O4dfC8pAwQ
/uXJhCfNt2pQBWOWHzuwbar7klvHCyqgJWCi4uIG1YL+blw9CnSCjhNTcCtMyxIT
w6mgS5U0FyTJ17aWoeidFZ0QD+9SCb9O88svzUTz4SjyJUNxQdU=
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:39:49 2026 by rpki-client