Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft
File:                     5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft (raw, json)
Hash identifier:          WSvUrSwBBWor+zOum22S8XhDKD5EDJtV/RJmIpc+Cgk=
Subject key identifier:   28:EB:83:DC:62:96:28:A3:F4:CE:3E:8A:F0:6C:52:A6:BF:C3:D5:06
Authority key identifier: 55:03:FF:56:57:01:23:37:ED:F3:A3:9C:DA:8A:20:EF:CD:9F:72:5D
Certificate issuer:       /CN=5503FF5657012337EDF3A39CDA8A20EFCD9F725D
Certificate serial:       1CFDED07EEFCBE42717111063F67031C759259A8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft
Manifest number:          BD
Signing time:             Sun 20 Sep 2026 23:10:30 +0000
Manifest this update:     Sun 20 Sep 2026 23:05:30 +0000
Manifest next update:     Tue 22 Sep 2026 02:44:30 +0000
Files and hashes:         1: 5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl (hash: RQKQ+Uh+FH00hQMPfziaOGT8SMj1EFVCi+3z+zGlLTo=)
                          2: 3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa (hash: 8JHdIEqNbeJfT5OVw6EBi4k3e542O+VmKhuJlmXA+os=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl
                          rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 02:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:fd:ed:07:ee:fc:be:42:71:71:11:06:3f:67:03:1c:75:92:59:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5503FF5657012337EDF3A39CDA8A20EFCD9F725D
        Validity
            Not Before: Sep 20 23:05:30 2026 GMT
            Not After : Sep 22 02:44:30 2026 GMT
        Subject: CN=28EB83DC629628A3F4CE3E8AF06C52A6BFC3D506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:f7:28:8b:4c:57:00:06:d0:5b:67:81:09:
                    ed:78:42:0b:fb:a0:2f:d5:a1:aa:b4:82:df:a9:8c:
                    58:29:b9:01:4f:d1:36:ae:fb:fc:9e:b2:8a:07:81:
                    f5:d0:d3:71:63:5b:0b:4a:76:56:c0:fe:27:a6:76:
                    c9:75:13:c4:32:42:51:e9:b1:4e:2b:db:d9:a1:54:
                    69:e2:83:6a:5b:c1:89:63:7e:6f:aa:6e:3c:72:09:
                    9e:2f:99:67:77:d1:85:70:83:4e:3c:96:b1:2a:91:
                    4c:25:14:f4:43:5c:6b:fa:f6:33:75:c9:13:0b:64:
                    2b:fa:72:34:77:99:c9:ce:1c:a1:64:5d:97:ef:f1:
                    34:99:04:bc:15:5d:84:1a:1d:7c:c6:50:1e:39:1c:
                    56:b5:c0:02:56:52:f4:60:9e:ee:e4:6d:42:1b:da:
                    5c:03:3d:58:35:bd:fb:1b:9b:d6:da:2b:4e:d5:81:
                    2e:81:b2:08:c2:bd:d9:c2:e9:d7:3d:8a:ce:ec:ba:
                    8d:ce:10:7f:9f:11:f9:38:2b:d6:98:54:04:2e:45:
                    cd:ad:a1:68:b7:5c:22:7c:7f:40:f6:a1:06:67:98:
                    25:cf:13:68:4b:4d:41:8f:fb:9a:ac:b4:f8:e3:03:
                    3c:b4:6f:44:da:8f:87:2b:99:9a:17:71:42:5a:ae:
                    38:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EB:83:DC:62:96:28:A3:F4:CE:3E:8A:F0:6C:52:A6:BF:C3:D5:06
            X509v3 Authority Key Identifier:
                keyid:55:03:FF:56:57:01:23:37:ED:F3:A3:9C:DA:8A:20:EF:CD:9F:72:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:9d:60:2c:05:31:e9:12:3d:6b:43:96:4b:f5:a1:95:39:eb:
         89:71:aa:f6:ee:68:2a:8f:1e:3d:48:bd:e5:54:54:de:32:b4:
         4f:bd:ee:7f:ff:08:ea:95:06:d9:75:dd:de:7e:0e:a2:3a:56:
         20:5f:0c:8f:90:53:2c:be:5a:ed:11:6e:68:eb:f5:61:92:28:
         d3:26:9c:6c:e8:ef:9a:39:01:75:f1:b1:8b:a9:34:e2:61:b5:
         7e:19:0d:72:ef:d5:76:7a:aa:a5:6f:55:67:ac:6a:e0:62:eb:
         22:78:c2:4a:7d:8e:0c:ca:b4:1b:24:e5:da:bc:2c:3c:42:bf:
         7e:2c:6a:6b:db:88:13:f1:de:10:f0:be:6f:78:dc:53:84:1a:
         5b:19:12:b8:b6:07:8e:d8:7c:12:fa:43:94:d2:2b:30:4c:b4:
         2a:4b:e0:1a:d5:55:d4:5e:37:0f:3c:74:e4:f4:6b:aa:da:1b:
         a6:db:89:ca:1f:e0:d7:16:67:b1:e7:47:f7:22:5c:d5:62:20:
         94:f4:19:f0:93:42:ac:c1:95:4b:9f:0c:24:fc:47:73:0c:1b:
         2b:58:c8:4f:ca:f7:df:a8:a6:b9:fb:ed:80:63:9e:ae:5d:65:
         6c:9f:d2:3f:37:2e:a4:d4:3e:a3:b9:22:72:07:bd:69:3a:d7:
         08:17:7e:22
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHP3tB+78vkJxcREGP2cDHHWSWagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUwM0ZGNTY1NzAxMjMzN0VERjNBMzlDREE4QTIwRUZD
RDlGNzI1RDAeFw0yNjA5MjAyMzA1MzBaFw0yNjA5MjIwMjQ0MzBaMDMxMTAvBgNV
BAMTKDI4RUI4M0RDNjI5NjI4QTNGNENFM0U4QUYwNkM1MkE2QkZDM0Q1MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpwPcoi0xXAAbQW2eBCe14Qgv7
oC/Voaq0gt+pjFgpuQFP0Tau+/yesooHgfXQ03FjWwtKdlbA/iemdsl1E8QyQlHp
sU4r29mhVGnig2pbwYljfm+qbjxyCZ4vmWd30YVwg048lrEqkUwlFPRDXGv69jN1
yRMLZCv6cjR3mcnOHKFkXZfv8TSZBLwVXYQaHXzGUB45HFa1wAJWUvRgnu7kbUIb
2lwDPVg1vfsbm9baK07VgS6BsgjCvdnC6dc9is7suo3OEH+fEfk4K9aYVAQuRc2t
oWi3XCJ8f0D2oQZnmCXPE2hLTUGP+5qstPjjAzy0b0Taj4crmZoXcUJarjg7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKOuD3GKWKKP0zj6K8GxSpr/D1QYwHwYDVR0j
BBgwFoAUVQP/VlcBIzft86Oc2oog782fcl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzNhNWZmZGMtMTUxYS00YWFkLWEyYjctNDMyNjQ5ZGU2ZGJlLzAvNTUwM0ZGNTY1
NzAxMjMzN0VERjNBMzlDREE4QTIwRUZDRDlGNzI1RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NTAzRkY1NjU3MDEyMzM3RURGM0EzOUNEQThBMjBFRkNEOUY3
MjVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNhNWZmZGMtMTUxYS00YWFkLWEy
YjctNDMyNjQ5ZGU2ZGJlLzAvNTUwM0ZGNTY1NzAxMjMzN0VERjNBMzlDREE4QTIw
RUZDRDlGNzI1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACOdYCwFMekSPWtDlkv1oZU564lxqvbuaCqP
Hj1IveVUVN4ytE+97n//COqVBtl13d5+DqI6ViBfDI+QUyy+Wu0Rbmjr9WGSKNMm
nGzo75o5AXXxsYupNOJhtX4ZDXLv1XZ6qqVvVWesauBi6yJ4wkp9jgzKtBsk5dq8
LDxCv34samvbiBPx3hDwvm943FOEGlsZEri2B47YfBL6Q5TSKzBMtCpL4BrVVdRe
Nw88dOT0a6raG6bbicof4NcWZ7HnR/ciXNViIJT0GfCTQqzBlUufDCT8R3MMGytY
yE/K99+oprn77YBjnq5dZWyf0j83LqTUPqO5InIHvWk61wgXfiI=
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:33:05 2026 by rpki-client