Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft
File:                     F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft (raw, json)
Hash identifier:          CG9klVWrUKiUMsBbYoWdSReFSy5pjuaf+iXLAYgA1G4=
Subject key identifier:   78:30:CC:82:BB:09:4E:80:C3:A9:C6:51:BD:42:14:7A:EF:B8:70:81
Authority key identifier: F3:84:54:2E:14:B9:BC:CF:E2:71:45:D9:C5:8E:B1:A7:85:F1:46:4A
Certificate issuer:       /CN=F384542E14B9BCCFE27145D9C58EB1A785F1464A
Certificate serial:       38F90A3EB00635B71B4D156FE4EBD3BE1030EDBE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft
Manifest number:          F5
Signing time:             Mon 02 Nov 2026 00:43:29 +0000
Manifest this update:     Mon 02 Nov 2026 00:38:29 +0000
Manifest next update:     Tue 03 Nov 2026 02:20:29 +0000
Files and hashes:         1: F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl (hash: YnMpcycxSDVZdyWjqfi7i9xjQ2VvcqH0hGqBOVpRjmg=)
                          2: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: p7VwLh9rGTmmzKRM+j0/DLnuVRuHxbeAnVLeUJIFLBE=)
                          3: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: pP7hVh9pLCyGOsoGwijXmPq3n49Ada61D2NFfmF5PeU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl
                          rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 02:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f9:0a:3e:b0:06:35:b7:1b:4d:15:6f:e4:eb:d3:be:10:30:ed:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F384542E14B9BCCFE27145D9C58EB1A785F1464A
        Validity
            Not Before: Nov  2 00:38:29 2026 GMT
            Not After : Nov  3 02:20:29 2026 GMT
        Subject: CN=7830CC82BB094E80C3A9C651BD42147AEFB87081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:16:f7:f1:30:b4:aa:60:d4:bc:73:59:61:a0:
                    39:fa:5f:7c:03:bf:9c:f1:2b:15:64:e1:46:ba:f4:
                    9c:fa:63:36:b5:30:a3:fa:9f:d0:a8:13:fa:4a:84:
                    67:55:b2:b4:48:b1:25:f4:10:0a:42:77:e6:32:9b:
                    13:d6:8d:6b:4a:0f:df:da:5f:94:da:42:f6:d7:98:
                    cf:7e:5e:d7:34:e3:18:df:93:68:3b:6a:ce:eb:7b:
                    a2:1e:51:5d:d6:5b:6e:7e:58:d7:a1:c4:f6:47:a4:
                    3f:a6:3a:9b:26:bf:5e:da:a2:2b:6d:5a:50:73:04:
                    a4:97:ae:cf:e6:af:78:89:07:09:a2:c2:fe:41:dd:
                    9a:88:19:55:c7:b6:47:9d:51:6f:30:39:c9:25:4f:
                    bd:55:d6:d6:3c:1f:73:8c:60:41:f4:e9:83:f5:64:
                    7c:38:0c:5f:c7:a7:80:15:83:cc:8d:6e:ca:4b:07:
                    b6:97:f7:30:6f:73:4a:06:55:65:e1:f4:66:2f:8a:
                    5f:54:3b:26:78:0c:f6:d8:17:71:46:ea:18:bb:ac:
                    94:36:e2:bc:aa:22:dc:dc:b0:a0:47:6e:6f:5c:b4:
                    d9:05:cf:a0:15:79:7b:59:cc:c0:b2:a4:08:42:3e:
                    c8:11:4f:6d:af:6f:78:b0:3b:4e:d5:fa:ab:63:62:
                    e1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:30:CC:82:BB:09:4E:80:C3:A9:C6:51:BD:42:14:7A:EF:B8:70:81
            X509v3 Authority Key Identifier:
                keyid:F3:84:54:2E:14:B9:BC:CF:E2:71:45:D9:C5:8E:B1:A7:85:F1:46:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:bf:e2:ab:87:f0:b0:53:9d:4e:72:94:ae:e1:44:ab:fd:44:
         fe:ef:d6:fc:c2:6a:34:09:1d:63:0a:1e:f9:bc:6e:ef:93:a6:
         e5:3a:aa:58:81:d9:82:b9:89:b7:34:ad:7f:38:90:d2:84:6c:
         36:59:c8:56:95:0a:b6:3d:b2:30:95:f5:39:79:de:59:d8:f4:
         79:5a:0d:7c:b2:21:44:6b:ce:6e:11:66:79:ed:d6:18:63:f8:
         fc:10:bd:77:2d:ec:77:99:15:35:56:d5:c1:21:db:69:80:48:
         8c:54:e2:26:6d:ae:f0:cf:4e:19:7b:a6:2e:fb:09:96:9c:b7:
         7f:9b:80:a9:49:ed:c3:0f:21:a5:41:7b:7b:ae:e4:26:cc:bb:
         f8:fc:58:cb:5f:3d:5b:b3:7b:7c:e0:2e:d5:c6:9d:ca:aa:1f:
         af:94:84:21:72:09:be:00:d8:c5:23:9e:71:86:d3:3b:dc:5e:
         16:23:fd:d5:98:b1:05:60:a4:04:c7:4f:11:73:09:ac:b3:7e:
         4e:6c:61:03:85:ec:35:17:b1:7b:88:f5:6f:6c:7f:98:6d:0e:
         30:2c:cf:3d:45:db:41:58:85:6b:88:0b:15:03:f3:a3:7d:04:
         b8:cb:36:74:4e:df:aa:a6:ca:60:bd:47:e3:bb:77:f6:44:eb:
         13:ff:ab:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:16:32 2026 by rpki-client