Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
File:                     5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft (raw, json)
Hash identifier:          3ITEznLfJ/ApqnwZ/06oB2O5Vxkoo+NMn3premUn+Wo=
Subject key identifier:   AC:86:78:B7:29:80:9A:43:C9:34:16:58:37:AD:4E:D5:72:7E:1A:65
Authority key identifier: 5F:A8:87:D4:C4:22:96:4F:B6:8C:DD:87:7D:9A:B4:17:36:0C:2E:B5
Certificate issuer:       /CN=5FA887D4C422964FB68CDD877D9AB417360C2EB5
Certificate serial:       5785942DEA5658B40520E787FA50DF99D938025B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
Manifest number:          BD
Signing time:             Sun 20 Sep 2026 14:14:30 +0000
Manifest this update:     Sun 20 Sep 2026 14:09:30 +0000
Manifest next update:     Mon 21 Sep 2026 15:25:30 +0000
Files and hashes:         1: 5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl (hash: nFuF0tHwZM49A4Pgxyw3VrbJv7B1HvFCQSfH7+QmAo8=)
                          2: 3130332e3133362e342e302f32322d3234203d3e203338333230.roa (hash: opi4UEK669uRcBpJCe+2Ayk5Lle5+nKJNqzpjbTh2ik=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl
                          rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 15:25:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:85:94:2d:ea:56:58:b4:05:20:e7:87:fa:50:df:99:d9:38:02:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA887D4C422964FB68CDD877D9AB417360C2EB5
        Validity
            Not Before: Sep 20 14:09:30 2026 GMT
            Not After : Sep 21 15:25:30 2026 GMT
        Subject: CN=AC8678B729809A43C934165837AD4ED5727E1A65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1b:86:9e:db:09:e7:96:a7:52:5a:89:aa:ca:
                    fb:14:9a:20:72:0d:9f:e5:ab:a1:bb:de:78:76:7f:
                    ee:95:59:29:81:5d:68:a2:a7:27:17:9f:b7:59:a2:
                    d5:80:56:46:19:7d:83:f9:51:68:82:da:88:1f:91:
                    c1:85:56:bb:91:2e:e4:ab:a7:e5:63:91:2f:8e:b0:
                    8a:c4:b1:48:9a:eb:c4:65:c3:fb:99:8e:1d:ec:00:
                    33:29:e3:2b:6c:f0:17:53:14:6e:9c:23:7c:6b:ea:
                    8d:a6:05:f2:5f:a8:ea:a3:4b:37:29:2a:d5:07:08:
                    64:ae:c8:3a:38:fe:65:44:38:2b:b3:6c:9e:85:86:
                    50:a6:6a:ba:7a:15:92:25:fc:e3:28:0f:60:52:ab:
                    d6:2f:d1:cb:18:62:2e:c2:57:a2:ed:56:d5:13:ff:
                    93:93:fb:ae:ff:10:53:35:83:5c:75:a3:6d:18:2d:
                    cb:5b:4b:b3:05:be:cb:21:35:56:77:42:01:12:1f:
                    76:eb:45:28:29:46:32:7a:b6:1e:e6:23:8e:7c:e0:
                    dd:3e:e2:cb:5f:83:2b:8c:e2:b6:95:55:1f:e6:ed:
                    89:bd:4f:93:c2:b3:3d:0d:46:b3:b6:bb:10:c7:b3:
                    64:c9:ec:b1:12:66:74:6f:a2:b5:38:9b:09:f0:ec:
                    18:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:86:78:B7:29:80:9A:43:C9:34:16:58:37:AD:4E:D5:72:7E:1A:65
            X509v3 Authority Key Identifier:
                keyid:5F:A8:87:D4:C4:22:96:4F:B6:8C:DD:87:7D:9A:B4:17:36:0C:2E:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a3:78:31:f3:3e:11:26:cf:14:2c:20:f3:ca:f9:92:71:55:
         62:43:e1:85:eb:9e:94:70:6e:61:ca:51:16:05:cd:96:5d:8f:
         b0:88:47:fc:2b:5c:08:d8:6c:79:32:a6:7d:0d:6f:a1:69:e2:
         a0:36:d5:1f:ba:29:a5:f9:1c:0c:e2:d9:ba:41:62:13:f1:90:
         72:9b:ea:c3:a3:5c:fa:ed:06:c1:11:4e:4b:29:b0:b0:da:1d:
         d1:13:e4:f5:76:b5:c2:f0:6b:17:7d:db:73:c8:1f:8c:6b:65:
         e1:84:32:b2:2f:bc:0a:1c:27:0b:8f:5f:fd:ec:9d:e4:79:d1:
         88:cf:f1:c2:f4:6a:98:6c:49:b7:d6:da:11:65:78:b1:87:b5:
         49:b4:cd:1c:7f:42:e8:5a:76:f8:7c:3a:bf:1a:a8:dc:a7:43:
         36:69:82:e7:a9:e5:1a:19:0b:f9:96:8b:9b:33:ff:6b:dd:a9:
         59:0b:42:64:50:a3:c4:d2:bb:88:ef:ec:a3:35:b8:9d:34:42:
         4b:17:18:d3:5d:9f:2c:96:ee:18:8b:82:65:21:d5:8b:35:a6:
         aa:c2:67:81:4e:8e:88:11:1a:34:ec:26:01:b6:27:61:8f:d7:
         c4:11:88:c7:2c:e5:22:33:20:fd:3c:64:0a:54:87:e5:4a:7f:
         0d:f9:a5:ed
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUV4WULepWWLQFIOeH+lDfmdk4AlswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBODg3RDRDNDIyOTY0RkI2OENERDg3N0Q5QUI0MTcz
NjBDMkVCNTAeFw0yNjA5MjAxNDA5MzBaFw0yNjA5MjExNTI1MzBaMDMxMTAvBgNV
BAMTKEFDODY3OEI3Mjk4MDlBNDNDOTM0MTY1ODM3QUQ0RUQ1NzI3RTFBNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCG4ae2wnnlqdSWomqyvsUmiBy
DZ/lq6G73nh2f+6VWSmBXWiipycXn7dZotWAVkYZfYP5UWiC2ogfkcGFVruRLuSr
p+VjkS+OsIrEsUia68Rlw/uZjh3sADMp4yts8BdTFG6cI3xr6o2mBfJfqOqjSzcp
KtUHCGSuyDo4/mVEOCuzbJ6FhlCmarp6FZIl/OMoD2BSq9Yv0csYYi7CV6LtVtUT
/5OT+67/EFM1g1x1o20YLctbS7MFvsshNVZ3QgESH3brRSgpRjJ6th7mI4584N0+
4stfgyuM4raVVR/m7Ym9T5PCsz0NRrO2uxDHs2TJ7LESZnRvorU4mwnw7Bj3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUrIZ4tymAmkPJNBZYN61O1XJ+GmUwHwYDVR0j
BBgwFoAUX6iH1MQilk+2jN2HfZq0FzYMLrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWM0NWMyMmMtMjc1Yi00Mjk1LWI0NTMtNjBhNzgzYjljNDJhLzAvNUZBODg3RDRD
NDIyOTY0RkI2OENERDg3N0Q5QUI0MTczNjBDMkVCNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81RkE4ODdENEM0MjI5NjRGQjY4Q0REODc3RDlBQjQxNzM2MEMy
RUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM0NWMyMmMtMjc1Yi00Mjk1LWI0
NTMtNjBhNzgzYjljNDJhLzAvNUZBODg3RDRDNDIyOTY0RkI2OENERDg3N0Q5QUI0
MTczNjBDMkVCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAImjeDHzPhEmzxQsIPPK+ZJxVWJD4YXrnpRw
bmHKURYFzZZdj7CIR/wrXAjYbHkypn0Nb6Fp4qA21R+6KaX5HAzi2bpBYhPxkHKb
6sOjXPrtBsERTkspsLDaHdET5PV2tcLwaxd923PIH4xrZeGEMrIvvAocJwuPX/3s
neR50YjP8cL0aphsSbfW2hFleLGHtUm0zRx/Quhadvh8Or8aqNynQzZpguep5RoZ
C/mWi5sz/2vdqVkLQmRQo8TSu4jv7KM1uJ00QksXGNNdnyyW7hiLgmUh1Ys1pqrC
Z4FOjogRGjTsJgG2J2GP18QRiMcs5SIzIP08ZApUh+VKfw35pe0=
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:08 2026 by rpki-client