Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/7F27536154B06F776D6914F8A4F12A5DE8458BD0.mft
File:                     7F27536154B06F776D6914F8A4F12A5DE8458BD0.mft (raw, json)
Hash identifier:          LEzhP0ZTmbFuMTPRJFrEi4odM3rvbClfZFg0uH2z9vk=
Subject key identifier:   F7:D6:C1:0D:11:61:F8:8C:F1:DB:BD:8E:DE:7A:9B:E2:D4:21:B4:60
Authority key identifier: 7F:27:53:61:54:B0:6F:77:6D:69:14:F8:A4:F1:2A:5D:E8:45:8B:D0
Certificate issuer:       /CN=7F27536154B06F776D6914F8A4F12A5DE8458BD0
Certificate serial:       5EC0D9B33F45695F637EBBA8385E1746D5B3D9C8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F27536154B06F776D6914F8A4F12A5DE8458BD0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/7F27536154B06F776D6914F8A4F12A5DE8458BD0.mft
Manifest number:          C3
Signing time:             Fri 25 Sep 2026 22:12:58 +0000
Manifest this update:     Fri 25 Sep 2026 22:07:58 +0000
Manifest next update:     Sun 27 Sep 2026 01:36:58 +0000
Files and hashes:         1: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: 5Udd7i3unVPfssV9yLKsZQmnf1JloA1KVW0NBCTNShE=)
                          2: 7F27536154B06F776D6914F8A4F12A5DE8458BD0.crl (hash: GL04N7PAaPY97ZS8l79kXLX8tgdZgL4VH+0GCkwq754=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/7F27536154B06F776D6914F8A4F12A5DE8458BD0.crl
                          rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/7F27536154B06F776D6914F8A4F12A5DE8458BD0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F27536154B06F776D6914F8A4F12A5DE8458BD0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 17:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c0:d9:b3:3f:45:69:5f:63:7e:bb:a8:38:5e:17:46:d5:b3:d9:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F27536154B06F776D6914F8A4F12A5DE8458BD0
        Validity
            Not Before: Sep 25 22:07:58 2026 GMT
            Not After : Sep 27 01:36:58 2026 GMT
        Subject: CN=F7D6C10D1161F88CF1DBBD8EDE7A9BE2D421B460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:81:79:34:b0:fe:9d:fb:50:52:96:ec:4e:12:
                    0e:3b:c5:a4:3d:23:d5:df:53:47:11:ad:20:b1:2c:
                    a5:4a:c2:70:97:4d:50:3a:99:74:b8:75:50:b1:1c:
                    69:6a:2c:d8:37:09:e4:8b:43:64:bc:a9:38:e0:ca:
                    30:b2:04:b9:a2:d9:7e:bb:e4:87:ff:42:6a:d0:7d:
                    c1:9d:82:b0:e3:5e:45:55:3c:90:55:9b:f0:4b:b3:
                    da:2a:9f:b5:15:8c:fa:e2:ab:2e:2f:eb:17:87:d0:
                    73:59:72:70:fa:09:c4:2e:c2:5c:22:d0:34:c3:d0:
                    0f:12:af:a1:a4:89:4e:66:32:aa:42:93:9e:cb:a8:
                    79:da:9e:7c:7d:26:17:6b:9b:4f:82:b5:59:3e:9c:
                    d0:16:6a:50:38:a1:e0:7b:71:9c:6a:6a:c3:ed:61:
                    69:3a:30:d6:95:89:a3:9d:be:f0:6f:95:ab:80:49:
                    b5:86:b4:66:74:4b:bf:44:44:db:f6:9f:1f:c4:2b:
                    6f:50:23:bb:d7:57:ac:93:f5:43:1d:3b:3b:f8:c2:
                    8b:aa:97:4d:4f:d9:f9:cd:58:a6:84:55:a5:f8:65:
                    d7:c8:b4:e6:c0:4a:41:90:88:f9:48:c2:91:31:b0:
                    e5:d4:94:cc:28:02:b4:ae:20:5a:e3:6e:07:58:80:
                    89:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D6:C1:0D:11:61:F8:8C:F1:DB:BD:8E:DE:7A:9B:E2:D4:21:B4:60
            X509v3 Authority Key Identifier:
                keyid:7F:27:53:61:54:B0:6F:77:6D:69:14:F8:A4:F1:2A:5D:E8:45:8B:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/7F27536154B06F776D6914F8A4F12A5DE8458BD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F27536154B06F776D6914F8A4F12A5DE8458BD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/7F27536154B06F776D6914F8A4F12A5DE8458BD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:57:6b:fe:99:d1:7d:13:21:c1:10:88:c8:75:3b:50:33:57:
         7e:e0:ae:97:03:45:dc:1d:71:0b:7c:4d:aa:32:cc:30:4a:ac:
         05:46:8a:28:c5:f9:7f:c0:52:1b:8c:c4:8e:11:b7:51:6d:40:
         d4:31:00:f6:79:1c:df:e7:5c:ce:bd:f4:a0:5c:3b:cf:57:93:
         40:5c:23:72:4a:bd:e9:76:e8:f8:92:e3:ef:00:14:d8:6d:45:
         19:48:7d:c1:b0:41:f8:0f:da:d9:1f:ba:4a:0e:68:3a:de:eb:
         24:7f:3a:9f:6b:89:6e:71:db:3a:6c:7e:df:50:09:4f:ba:eb:
         51:43:6b:82:33:59:29:d2:51:36:69:ac:08:cd:ce:10:d7:21:
         0c:16:f5:f3:51:53:fb:01:1a:f0:55:bd:8e:cf:9a:fd:8a:49:
         68:6c:e7:8e:be:5b:24:9e:9a:20:bb:04:9c:04:b7:18:0e:d7:
         cb:b1:ef:19:3d:b5:cf:1a:ca:d6:40:41:02:05:3f:a9:3b:9f:
         e0:92:a8:11:cc:f9:48:bf:51:b2:38:a7:05:e7:7e:fa:03:51:
         ce:65:e8:a1:92:77:38:45:26:ba:4c:a8:34:10:35:34:ed:90:
         dc:40:76:b0:8c:f5:2b:c3:e1:67:dd:a5:64:e0:2c:d1:8a:6e:
         9d:cd:46:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:51:45 2026 by rpki-client