Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.mft
File:                     51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.mft (raw, json)
Hash identifier:          ueHegX8nG6mM83u7Q3a/nSByP/803APedbICMjj30T4=
Subject key identifier:   04:FD:D5:37:4A:D6:AA:D6:63:7E:3A:68:DD:52:DF:60:00:5F:EC:BB
Authority key identifier: 51:A4:A4:22:44:B2:4B:46:5C:B9:F0:0D:B1:D2:F6:DE:8B:0D:0E:D1
Certificate issuer:       /CN=51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1
Certificate serial:       23797353DC70F3F02FCCCAC7301532F0B3549B10
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.mft
Manifest number:          BF
Signing time:             Tue 22 Sep 2026 08:57:33 +0000
Manifest this update:     Tue 22 Sep 2026 08:52:33 +0000
Manifest next update:     Wed 23 Sep 2026 10:10:33 +0000
Files and hashes:         1: 51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.crl (hash: MHKXjFbdQ8hlLSbmg7MiADU3uoy89OyhhM3kgcjfw9o=)
                          2: 323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa (hash: /PcX6luK6vmk98qhiFYynRPuJ2KBptynddU1KiAJS6w=)
                          3: 3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa (hash: mSdi1JVXAeBd7ee4i/as65R8EvvnBWeaatN97ha7qSA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.crl
                          rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 10:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:79:73:53:dc:70:f3:f0:2f:cc:ca:c7:30:15:32:f0:b3:54:9b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1
        Validity
            Not Before: Sep 22 08:52:33 2026 GMT
            Not After : Sep 23 10:10:33 2026 GMT
        Subject: CN=04FDD5374AD6AAD6637E3A68DD52DF60005FECBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a2:54:b0:38:88:d7:aa:cb:96:37:e3:fb:b0:
                    a2:d1:cc:36:11:a8:26:77:a1:b6:6f:17:75:5c:6a:
                    44:4f:cd:c0:f6:2c:bb:f1:13:e6:69:92:cf:20:05:
                    eb:4e:e3:b8:65:86:23:e1:2f:cb:75:7a:f6:e1:20:
                    68:53:27:67:7b:39:64:fd:89:a1:8f:16:7d:02:fa:
                    81:13:99:14:dc:71:64:5d:e3:1c:6c:34:11:0e:db:
                    94:d2:f6:08:37:0c:c3:4b:68:27:09:4c:b5:bd:0a:
                    22:92:4b:7e:5c:3a:40:37:77:4b:91:b8:9c:77:2e:
                    d3:12:0e:4b:28:b0:ce:3a:84:eb:4c:b0:ab:35:48:
                    49:ca:00:14:14:1f:f3:1e:fa:61:b7:47:9d:b6:9d:
                    9c:c1:04:da:42:52:08:68:5a:2d:be:55:16:67:75:
                    51:ae:2d:89:b2:82:03:cb:31:fb:b0:2d:f0:05:63:
                    65:56:b2:77:47:0d:9b:f6:22:d8:61:0a:bf:d9:52:
                    d0:55:1a:69:f2:5f:03:c2:30:a0:4d:dd:b5:11:33:
                    74:b3:c6:4e:0e:c6:f0:01:87:4b:8b:7f:ca:1d:57:
                    d6:2b:04:5c:9f:61:cf:b1:e5:6a:1d:f4:3d:be:ba:
                    51:c1:09:d6:28:b5:32:47:1a:04:e2:92:d0:d2:d6:
                    64:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FD:D5:37:4A:D6:AA:D6:63:7E:3A:68:DD:52:DF:60:00:5F:EC:BB
            X509v3 Authority Key Identifier:
                keyid:51:A4:A4:22:44:B2:4B:46:5C:B9:F0:0D:B1:D2:F6:DE:8B:0D:0E:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:6a:89:91:51:66:87:33:89:82:af:fc:e7:03:f5:04:08:f2:
         29:17:b6:99:3e:c1:99:c9:40:41:28:dd:98:46:da:98:a4:dc:
         af:e0:2f:88:94:65:e6:a6:c7:84:f1:72:2b:60:d4:51:46:bb:
         fb:72:3f:68:26:dc:fc:69:fb:64:74:8c:42:4d:2c:cc:07:fe:
         8f:22:d4:79:4c:b7:8f:79:f0:db:7f:a3:4a:77:22:89:49:bc:
         4d:97:c6:bc:a5:aa:7b:b1:e5:3a:e5:98:de:f9:f9:2d:22:bf:
         1d:dc:d4:3e:66:fc:cd:f2:a0:f8:6e:fd:32:8b:b1:7e:43:f5:
         4c:7a:2d:d4:b9:92:36:38:f8:67:3c:aa:dd:e4:5c:bf:aa:c2:
         8a:1e:05:77:00:fd:09:37:47:48:1d:bb:54:bd:85:41:2a:a8:
         a7:7e:cc:8c:07:b9:84:ca:d9:0b:de:17:d0:e8:40:5c:c8:49:
         f7:14:d1:ca:4d:82:03:b2:a1:e8:13:4b:2e:57:6e:05:28:33:
         9f:96:9f:7b:3f:80:e4:66:c3:58:fd:cc:1a:06:5f:bd:c6:6c:
         04:9e:40:de:b1:7d:1b:b3:2b:ea:58:49:fc:61:b3:5a:78:eb:
         c3:25:00:f2:2c:5d:f4:c2:4d:37:d8:66:f7:b6:fc:ae:e9:39:
         1d:c8:23:c6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUI3lzU9xw8/AvzMrHMBUy8LNUmxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTFBNEE0MjI0NEIyNEI0NjVDQjlGMDBEQjFEMkY2REU4
QjBEMEVEMTAeFw0yNjA5MjIwODUyMzNaFw0yNjA5MjMxMDEwMzNaMDMxMTAvBgNV
BAMTKDA0RkRENTM3NEFENkFBRDY2MzdFM0E2OERENTJERjYwMDA1RkVDQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4olSwOIjXqsuWN+P7sKLRzDYR
qCZ3obZvF3VcakRPzcD2LLvxE+Zpks8gBetO47hlhiPhL8t1evbhIGhTJ2d7OWT9
iaGPFn0C+oETmRTccWRd4xxsNBEO25TS9gg3DMNLaCcJTLW9CiKSS35cOkA3d0uR
uJx3LtMSDksosM46hOtMsKs1SEnKABQUH/Me+mG3R522nZzBBNpCUghoWi2+VRZn
dVGuLYmyggPLMfuwLfAFY2VWsndHDZv2IthhCr/ZUtBVGmnyXwPCMKBN3bURM3Sz
xk4OxvABh0uLf8odV9YrBFyfYc+x5Wod9D2+ulHBCdYotTJHGgTiktDS1mSNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBP3VN0rWqtZjfjpo3VLfYABf7LswHwYDVR0j
BBgwFoAUUaSkIkSyS0ZcufANsdL23osNDtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjU3ZjFmNDMtY2U3ZS00OTcwLWFhZDAtNzgyYjAxOWJkMDNlLzAvNTFBNEE0MjI0
NEIyNEI0NjVDQjlGMDBEQjFEMkY2REU4QjBEMEVEMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MUE0QTQyMjQ0QjI0QjQ2NUNCOUYwMERCMUQyRjZERThCMEQw
RUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjU3ZjFmNDMtY2U3ZS00OTcwLWFh
ZDAtNzgyYjAxOWJkMDNlLzAvNTFBNEE0MjI0NEIyNEI0NjVDQjlGMDBEQjFEMkY2
REU4QjBEMEVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADdqiZFRZocziYKv/OcD9QQI8ikXtpk+wZnJ
QEEo3ZhG2pik3K/gL4iUZeamx4Txcitg1FFGu/tyP2gm3Pxp+2R0jEJNLMwH/o8i
1HlMt4958Nt/o0p3IolJvE2Xxrylqnux5TrlmN75+S0ivx3c1D5m/M3yoPhu/TKL
sX5D9Ux6LdS5kjY4+Gc8qt3kXL+qwooeBXcA/Qk3R0gdu1S9hUEqqKd+zIwHuYTK
2QveF9DoQFzISfcU0cpNggOyoegTSy5XbgUoM5+Wn3s/gORmw1j9zBoGX73GbASe
QN6xfRuzK+pYSfxhs1p468MlAPIsXfTCTTfYZve2/K7pOR3II8Y=
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:37:17 2026 by rpki-client