Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.mft
File:                     E205BAF9253BD3679578372318D2263D430F4D99.mft (raw, json)
Hash identifier:          4g1sHPERnjBKYtXDGIfnp1HJzWv+xwiqwIycN0zY74A=
Subject key identifier:   F5:12:E6:DE:FA:64:E3:A0:42:6A:99:8F:B9:36:44:FE:AF:F8:C0:37
Authority key identifier: E2:05:BA:F9:25:3B:D3:67:95:78:37:23:18:D2:26:3D:43:0F:4D:99
Certificate issuer:       /CN=E205BAF9253BD3679578372318D2263D430F4D99
Certificate serial:       3C3E8600971A9346E990B3963389E112B803B600
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E205BAF9253BD3679578372318D2263D430F4D99.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.mft
Manifest number:          BD
Signing time:             Mon 21 Sep 2026 12:01:09 +0000
Manifest this update:     Mon 21 Sep 2026 11:56:09 +0000
Manifest next update:     Tue 22 Sep 2026 14:11:09 +0000
Files and hashes:         1: E205BAF9253BD3679578372318D2263D430F4D99.crl (hash: /ESoS57W5SsN7BjSVUh3O3oAPBOdFuVxWsiC1vAhAGU=)
                          2: 3130332e3136342e3133362e302f32332d3234203d3e203137393935.roa (hash: HZWp6s4pZWF/5Jmtyb043W9PpmxxelaQFAtDR552/AM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.crl
                          rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E205BAF9253BD3679578372318D2263D430F4D99.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 14:11:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3e:86:00:97:1a:93:46:e9:90:b3:96:33:89:e1:12:b8:03:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E205BAF9253BD3679578372318D2263D430F4D99
        Validity
            Not Before: Sep 21 11:56:09 2026 GMT
            Not After : Sep 22 14:11:09 2026 GMT
        Subject: CN=F512E6DEFA64E3A0426A998FB93644FEAFF8C037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d6:89:a3:fb:92:9c:c8:33:8c:12:9e:49:b1:
                    49:3f:03:b7:9c:d1:9a:22:26:72:c1:d5:dc:0c:c3:
                    60:33:f1:e5:f0:b4:30:c6:2c:fa:ac:39:ed:30:cc:
                    70:35:04:7d:6b:78:3d:d6:cb:e5:ec:e8:9e:6a:cb:
                    98:49:be:8f:1a:41:6d:0c:bd:57:c3:c5:ea:57:ad:
                    35:15:d3:3e:66:09:b7:29:81:45:ae:58:f7:d2:95:
                    a5:e8:96:54:6d:2a:a7:f6:3b:19:b1:bf:83:7c:dd:
                    0b:28:ea:f3:d1:30:86:bc:ba:7d:00:29:e2:6c:37:
                    3c:5a:0d:40:fc:3d:9d:83:68:d3:b2:db:2d:c8:c1:
                    1a:a9:64:db:20:12:d2:e0:2f:76:80:d5:d9:d3:c4:
                    fc:82:d1:43:95:b3:eb:b0:59:01:5c:07:c2:e9:ca:
                    73:ef:b9:22:f0:ce:fb:d0:20:14:e3:eb:12:56:9d:
                    ea:fb:e4:8c:58:34:4e:8f:a2:21:9b:bd:54:21:c8:
                    00:5d:ee:59:d4:fa:34:40:1c:d2:8b:31:ca:71:b0:
                    ba:8a:d5:cd:08:f9:04:ba:35:07:c2:2a:4d:28:5d:
                    b9:a2:76:4d:ba:d2:80:c3:53:ec:fa:61:55:69:f4:
                    de:92:ed:59:67:1f:cf:27:8e:70:8d:ed:73:31:35:
                    96:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:12:E6:DE:FA:64:E3:A0:42:6A:99:8F:B9:36:44:FE:AF:F8:C0:37
            X509v3 Authority Key Identifier:
                keyid:E2:05:BA:F9:25:3B:D3:67:95:78:37:23:18:D2:26:3D:43:0F:4D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E205BAF9253BD3679578372318D2263D430F4D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:17:c7:c2:c9:39:47:ba:aa:60:92:bc:e8:3f:c1:ac:0e:19:
         cd:85:7c:dd:b7:8e:a5:b7:91:21:17:89:53:44:80:89:e5:39:
         cb:a3:0d:a4:61:5d:ae:e9:38:db:74:ce:2e:b4:bb:da:8d:1a:
         67:88:05:c9:52:fa:10:72:ec:17:7f:1d:da:75:bb:4b:00:18:
         2c:57:74:32:3f:32:c0:ac:5e:c7:34:38:c9:de:9c:47:3a:96:
         f1:30:b7:d6:58:b6:46:a6:65:8e:36:74:dd:e3:4c:d5:c3:38:
         9e:68:99:cd:1a:e2:33:f8:81:7e:9e:79:d8:04:20:b4:a0:c6:
         eb:c2:ff:9b:af:08:3a:7c:7d:f0:f1:9a:94:46:b5:10:71:e2:
         a0:1d:ba:2d:4d:ec:b0:1c:78:d7:c3:7c:59:39:14:ec:19:ba:
         d5:4a:e2:b1:33:17:c2:49:86:44:f4:cc:90:95:08:fb:2d:5a:
         39:71:c4:31:98:44:d7:06:43:36:b8:29:f4:58:32:b8:bd:bc:
         6a:ed:8d:b8:99:55:ef:e9:85:5d:0d:a1:0e:06:5c:eb:57:ce:
         c3:d9:91:27:32:3b:66:eb:00:71:46:32:1b:6a:3b:31:8c:93:
         b8:58:6d:ff:d5:59:04:c9:38:f7:b1:14:7c:47:4b:fb:70:d3:
         52:5c:24:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:33:28 2026 by rpki-client