Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.mft
File:                     E54912D936D5BF778FBB732E7E449916627DA941.mft (raw, json)
Hash identifier:          6AWpjv/7ELAvN4/RM6rpsctCqrIgGQPoVjakO70jxWE=
Subject key identifier:   DC:6A:A0:42:B8:14:5F:5D:78:A3:B6:E7:01:DF:5F:B7:66:82:0E:EF
Authority key identifier: E5:49:12:D9:36:D5:BF:77:8F:BB:73:2E:7E:44:99:16:62:7D:A9:41
Certificate issuer:       /CN=E54912D936D5BF778FBB732E7E449916627DA941
Certificate serial:       5D2F2898D8A8DF416AC699A16D94F78832EF4667
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E54912D936D5BF778FBB732E7E449916627DA941.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.mft
Manifest number:          C0
Signing time:             Tue 22 Sep 2026 16:21:40 +0000
Manifest this update:     Tue 22 Sep 2026 16:16:40 +0000
Manifest next update:     Wed 23 Sep 2026 17:48:40 +0000
Files and hashes:         1: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: afoPHznoH0e131M1W28pnPXY7hbzwID+nPCNXifuAL4=)
                          2: E54912D936D5BF778FBB732E7E449916627DA941.crl (hash: dM5eE/GO2+5Co60bcRYSmpRM6AgihvotPp8I4MipQS4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.crl
                          rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E54912D936D5BF778FBB732E7E449916627DA941.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 17:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2f:28:98:d8:a8:df:41:6a:c6:99:a1:6d:94:f7:88:32:ef:46:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E54912D936D5BF778FBB732E7E449916627DA941
        Validity
            Not Before: Sep 22 16:16:40 2026 GMT
            Not After : Sep 23 17:48:40 2026 GMT
        Subject: CN=DC6AA042B8145F5D78A3B6E701DF5FB766820EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:25:45:17:df:f9:c1:f0:1a:dc:0f:f1:b0:34:
                    50:71:99:5b:83:23:b1:c2:2c:c5:4b:e9:f2:88:05:
                    9f:77:13:fe:02:5c:6f:37:ca:c4:35:fd:7f:21:7f:
                    0b:40:a5:1f:c5:2b:b7:10:64:64:7e:e9:23:e5:4a:
                    17:38:78:46:a5:52:3d:ad:78:8a:e2:fb:44:91:50:
                    4d:d7:fc:4a:06:f5:de:d9:0d:55:56:32:b7:91:09:
                    c1:a5:95:48:4b:68:14:23:9a:ef:4e:e3:dc:b7:af:
                    43:cb:58:43:89:f2:1b:f4:5f:b3:29:c0:d9:82:48:
                    7d:12:83:58:2f:23:35:6c:69:e2:85:ca:5c:37:11:
                    33:54:5e:32:f4:0e:f9:6b:23:44:44:07:69:e0:13:
                    cb:6e:70:86:d3:39:b1:00:38:6b:7f:0c:48:38:24:
                    fd:d4:86:da:e2:55:5d:76:36:1e:71:49:71:d0:db:
                    fb:ff:c6:6a:63:ab:82:dd:6e:66:17:60:3e:36:a4:
                    8e:1b:9c:c8:b9:8b:d1:6d:c5:e0:0b:5e:e3:36:90:
                    b5:84:5b:19:77:6e:f9:e8:02:92:82:23:52:9c:34:
                    e7:86:09:f2:d8:2e:9b:94:a3:ba:d3:43:9c:2f:13:
                    86:1b:0f:fd:51:e5:27:bf:fc:f1:c4:db:9f:1b:1b:
                    d6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6A:A0:42:B8:14:5F:5D:78:A3:B6:E7:01:DF:5F:B7:66:82:0E:EF
            X509v3 Authority Key Identifier:
                keyid:E5:49:12:D9:36:D5:BF:77:8F:BB:73:2E:7E:44:99:16:62:7D:A9:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E54912D936D5BF778FBB732E7E449916627DA941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7f:ab:d2:75:aa:f6:a0:13:f7:0e:a7:8b:0f:40:52:9f:1f:
         13:8d:e5:99:5e:de:3d:d8:ef:21:3a:23:61:a7:bd:67:b5:b0:
         66:62:ba:92:f2:5e:cf:26:1e:70:f5:a2:c3:1c:55:0d:a4:f9:
         9a:2b:fb:29:1e:dd:26:15:84:11:33:18:b7:3e:2a:65:30:d6:
         1b:a6:80:88:ab:00:34:d4:29:ce:be:d7:e8:e0:05:87:a4:ef:
         6b:df:c7:65:7a:0a:22:36:97:b8:3a:fc:e0:0d:a9:74:2e:e5:
         8b:75:f4:5d:b9:89:02:6e:e7:3e:80:0a:f3:51:57:d7:92:71:
         68:04:99:b7:a4:26:0c:10:6b:8f:60:99:62:da:91:7b:05:0d:
         3f:82:f1:18:12:c7:f9:57:77:72:62:eb:5a:8e:78:bc:82:ed:
         eb:a4:82:3c:2b:bc:04:cd:04:21:3f:a3:b3:8b:95:ae:38:0c:
         5b:06:5a:04:eb:ff:39:bf:d1:13:94:47:18:68:64:9f:22:bc:
         c7:33:98:20:e6:f4:ff:8f:44:72:e2:66:1a:03:57:63:fa:97:
         e6:8b:ee:8c:40:14:63:89:d6:70:1f:1b:9a:f6:56:17:f3:a0:
         9f:4b:da:ec:d4:61:e0:04:5b:cd:2e:6f:9b:be:cb:fa:70:50:
         b4:df:90:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:05:31 2026 by rpki-client