Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft
File:                     E161BF656F0149CB290354E631915A62950E0DF7.mft (raw, json)
Hash identifier:          jhKAtibxpe2eTW2KHTvsD9lx4eDWpmhSkNljTVQa5Hs=
Subject key identifier:   C0:24:EA:EF:3A:26:59:39:3A:4B:A9:1F:06:8B:E6:DC:F7:9F:44:54
Authority key identifier: E1:61:BF:65:6F:01:49:CB:29:03:54:E6:31:91:5A:62:95:0E:0D:F7
Certificate issuer:       /CN=E161BF656F0149CB290354E631915A62950E0DF7
Certificate serial:       4E4B36ACF3C56DDD2628DDB35BB36F3428E6C520
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft
Manifest number:          F7
Signing time:             Tue 03 Nov 2026 05:19:42 +0000
Manifest this update:     Tue 03 Nov 2026 05:14:42 +0000
Manifest next update:     Wed 04 Nov 2026 07:19:42 +0000
Files and hashes:         1: E161BF656F0149CB290354E631915A62950E0DF7.crl (hash: +l22yryk/9AyQbM2yjvqhwLuoJ3UNFH1mhiiEoJEfsk=)
                          2: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (hash: OfxEx4cxbUi1PsgMvuv5XcH2kiZ/xjVPvG8pLlZllKE=)
                          3: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (hash: grf0YK9bJyH/cVnLX3ovqZL+z5fiMqaMnTX+lrSCaV0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.crl
                          rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 07:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4b:36:ac:f3:c5:6d:dd:26:28:dd:b3:5b:b3:6f:34:28:e6:c5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E161BF656F0149CB290354E631915A62950E0DF7
        Validity
            Not Before: Nov  3 05:14:42 2026 GMT
            Not After : Nov  4 07:19:42 2026 GMT
        Subject: CN=C024EAEF3A2659393A4BA91F068BE6DCF79F4454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c7:f9:4f:3a:c2:fb:bc:d6:1b:c2:58:f9:fd:
                    2c:7f:ce:59:7e:3c:1f:6e:46:89:f1:49:e8:b8:e0:
                    27:49:4f:f2:ea:7d:4e:2c:47:e2:1f:e8:c0:54:e3:
                    a7:c6:34:71:1c:53:74:42:93:f7:89:0a:33:c6:3a:
                    8c:65:8d:a5:5d:32:95:0c:cc:ef:e1:0e:c4:78:4e:
                    46:de:94:23:7d:9e:08:ba:f4:27:90:8e:94:0e:c1:
                    5b:8a:ac:64:b8:e0:78:73:e1:da:c6:c3:8e:19:00:
                    df:5f:e9:09:ae:a2:49:fc:ef:9d:60:6e:47:80:2a:
                    34:0c:32:05:ae:3c:e7:cb:ff:76:78:1b:3f:9f:b9:
                    21:39:b5:b8:54:fc:da:b2:f0:06:2d:c1:59:e3:30:
                    41:54:ad:c6:38:9c:e0:7a:c2:91:e1:32:f4:ec:7e:
                    d7:50:81:0c:35:d4:03:92:4d:70:30:03:87:05:20:
                    80:c9:ad:fa:a0:1f:8f:9b:79:9c:15:a2:ad:e8:dd:
                    d2:fc:eb:15:a4:e3:c9:98:f9:6d:8d:b4:ec:03:2f:
                    16:f0:d1:f6:00:9d:bd:55:58:0d:e4:4a:b8:29:69:
                    98:be:e6:5f:e1:4e:f6:f4:7f:0f:c4:4a:f5:e6:8e:
                    95:0e:46:fa:7e:14:cb:a0:07:37:6b:f2:8a:5e:7e:
                    ef:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:24:EA:EF:3A:26:59:39:3A:4B:A9:1F:06:8B:E6:DC:F7:9F:44:54
            X509v3 Authority Key Identifier:
                keyid:E1:61:BF:65:6F:01:49:CB:29:03:54:E6:31:91:5A:62:95:0E:0D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ce:b2:35:b5:aa:52:01:a4:d7:2e:cf:65:ae:71:37:34:a2:
         99:2a:22:f7:a7:b7:f2:20:57:ee:79:13:63:c3:12:ba:10:59:
         b6:e9:83:9b:0e:95:42:c6:31:d8:52:36:b2:44:03:b0:79:e0:
         5d:02:87:9f:4a:dc:ec:e4:b5:1f:c5:3a:73:86:a5:54:28:8d:
         d7:c3:f1:00:77:48:21:f7:24:dc:91:52:04:f6:0e:b8:56:88:
         b1:ae:e6:e6:ba:48:4b:d9:3f:3b:16:24:af:ad:2d:10:e9:6e:
         50:32:7e:cb:ea:59:44:47:fe:60:83:a4:17:07:82:5f:b3:b5:
         0a:5d:32:99:51:20:e9:3e:61:1b:75:61:df:44:64:9e:c0:bd:
         50:54:9b:5e:75:c0:00:c5:a6:65:09:ab:d8:07:9e:a3:d2:8e:
         93:18:89:30:3a:a0:76:29:97:9b:47:ab:c3:01:77:f7:38:db:
         18:f0:e0:e9:21:07:9a:92:da:17:6d:81:78:cd:72:00:ac:f3:
         3c:15:7a:20:d9:41:f1:31:89:1f:76:fc:68:3f:c0:99:cb:28:
         cc:f7:b8:d2:94:3d:25:57:7f:d0:e4:cc:d0:c7:05:fb:3c:ae:
         a9:63:d8:0e:2b:1b:64:b8:e7:80:bd:d5:f5:be:9a:24:80:b0:
         09:7d:c8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 23:20:07 2026 by rpki-client