Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
File:                     D280C077A9E801FBA933C9D0085012E09D686927.mft (raw, json)
Hash identifier:          3XY64ylL32Nck4m9jQFp8ze6PYSABj4GlczvtOR470I=
Subject key identifier:   2D:76:53:DB:61:22:76:C6:A9:46:9D:50:01:07:EA:33:FF:7F:67:E5
Authority key identifier: D2:80:C0:77:A9:E8:01:FB:A9:33:C9:D0:08:50:12:E0:9D:68:69:27
Certificate issuer:       /CN=D280C077A9E801FBA933C9D0085012E09D686927
Certificate serial:       0109F33433D6137628AA3A66007006B8F62A6890
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
Manifest number:          A5
Signing time:             Thu 03 Sep 2026 08:58:22 +0000
Manifest this update:     Thu 03 Sep 2026 08:53:22 +0000
Manifest next update:     Fri 04 Sep 2026 10:24:22 +0000
Files and hashes:         1: D280C077A9E801FBA933C9D0085012E09D686927.crl (hash: oQqTcRdNAfYl0ZVD3R9Hl8On+vQgoh4UfeVuD0DSMUg=)
                          2: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: RX42n1sKvH6RuNxwR829dnAhCVM69IdefkYN8dkI7/c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.crl
                          rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 10:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:09:f3:34:33:d6:13:76:28:aa:3a:66:00:70:06:b8:f6:2a:68:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D280C077A9E801FBA933C9D0085012E09D686927
        Validity
            Not Before: Sep  3 08:53:22 2026 GMT
            Not After : Sep  4 10:24:22 2026 GMT
        Subject: CN=2D7653DB612276C6A9469D500107EA33FF7F67E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:39:63:69:11:27:ea:45:94:cc:b0:b6:92:
                    7c:84:85:0a:6a:4e:40:ac:d2:76:cc:71:19:70:08:
                    8c:f5:e5:7f:62:7b:94:23:60:77:68:4e:92:6f:bf:
                    6b:ef:25:ba:00:69:c2:1c:61:38:58:05:7f:25:8f:
                    75:b1:b9:2b:fd:9d:48:eb:97:2a:14:d6:a8:3c:13:
                    f1:0e:4b:4f:6e:8f:fe:d3:d8:57:4f:85:77:f6:e0:
                    77:d7:16:56:90:69:1b:eb:3b:c7:bf:bd:98:f6:c0:
                    33:5e:75:c8:5a:0c:4e:1d:2d:cd:0d:f4:a8:94:fb:
                    21:99:2f:e0:82:19:6a:8d:1f:8d:cf:9f:22:47:2a:
                    74:89:09:39:90:4a:36:80:7d:7e:a1:db:6d:c3:ed:
                    5b:30:f9:84:92:bb:65:51:c2:f8:d0:19:ad:58:c4:
                    d1:64:57:10:17:59:4f:d9:21:94:50:07:6d:76:b9:
                    6f:a0:49:3a:22:b8:3e:4b:96:90:d5:9e:ac:be:df:
                    8e:c5:57:01:40:18:be:b5:50:aa:5f:6d:bb:f5:0d:
                    4e:f8:5c:75:12:7f:e7:14:be:6b:0c:6e:7f:94:d7:
                    04:04:bf:57:ad:3a:ef:e0:60:b4:bf:89:f7:1e:8b:
                    99:8b:d9:62:8d:58:60:12:e0:b7:b8:73:c7:57:41:
                    ce:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:76:53:DB:61:22:76:C6:A9:46:9D:50:01:07:EA:33:FF:7F:67:E5
            X509v3 Authority Key Identifier:
                keyid:D2:80:C0:77:A9:E8:01:FB:A9:33:C9:D0:08:50:12:E0:9D:68:69:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e3:67:1d:86:88:45:f1:76:df:ae:95:d2:04:58:f3:7e:9e:
         28:a0:98:f6:d8:c2:9f:b3:d8:a3:0d:67:4e:b2:8f:bc:a8:cb:
         6d:57:56:c1:fc:d0:7d:19:d6:6b:52:d4:48:99:a4:49:59:61:
         fa:04:53:f6:a7:5f:40:21:f6:30:71:2c:91:4b:fb:cc:5d:1b:
         5f:0e:22:c1:e6:9b:e4:b6:6a:14:96:e7:77:8e:00:fd:28:ed:
         a0:21:7f:38:f0:03:00:a6:33:6f:76:6e:10:83:53:32:f9:0f:
         5f:84:0e:ee:98:9d:31:f4:87:df:28:7d:24:f3:31:e4:8b:3f:
         5d:76:a9:84:d8:7a:87:34:90:cd:9f:c2:34:2d:98:b5:d8:cc:
         03:38:24:ac:17:8a:ab:2a:cc:b9:82:2f:90:2b:df:09:50:9a:
         9c:f2:21:7e:9e:0c:86:94:90:bd:8b:57:98:3e:19:7d:ab:8b:
         7b:63:0b:fd:32:20:57:fb:6d:dd:ef:04:54:03:62:a7:26:59:
         20:66:61:d6:3b:47:78:50:99:40:a5:2f:45:b7:bd:03:08:63:
         8f:e4:b1:87:8c:a1:e2:f5:6b:e6:57:49:ef:51:83:75:9e:18:
         8f:93:ba:4f:9c:b6:45:50:85:f4:0e:b8:57:a4:c5:bb:29:73:
         b5:3e:a6:15
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAQnzNDPWE3YoqjpmAHAGuPYqaJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI4MEMwNzdBOUU4MDFGQkE5MzNDOUQwMDg1MDEyRTA5
RDY4NjkyNzAeFw0yNjA5MDMwODUzMjJaFw0yNjA5MDQxMDI0MjJaMDMxMTAvBgNV
BAMTKDJENzY1M0RCNjEyMjc2QzZBOTQ2OUQ1MDAxMDdFQTMzRkY3RjY3RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1zljaREn6kWUzLC2knyEhQpq
TkCs0nbMcRlwCIz15X9ie5QjYHdoTpJvv2vvJboAacIcYThYBX8lj3WxuSv9nUjr
lyoU1qg8E/EOS09uj/7T2FdPhXf24HfXFlaQaRvrO8e/vZj2wDNedchaDE4dLc0N
9KiU+yGZL+CCGWqNH43PnyJHKnSJCTmQSjaAfX6h223D7Vsw+YSSu2VRwvjQGa1Y
xNFkVxAXWU/ZIZRQB212uW+gSToiuD5LlpDVnqy+347FVwFAGL61UKpfbbv1DU74
XHUSf+cUvmsMbn+U1wQEv1etOu/gYLS/ifcei5mL2WKNWGAS4Le4c8dXQc6nAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULXZT22EidsapRp1QAQfqM/9/Z+UwHwYDVR0j
BBgwFoAU0oDAd6noAfupM8nQCFAS4J1oaScwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODJmYWI2MTEtOGJlMy00YjQ0LTk1NjEtNzUyYTFlZGEwNjVjLzAvRDI4MEMwNzdB
OUU4MDFGQkE5MzNDOUQwMDg1MDEyRTA5RDY4NjkyNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EMjgwQzA3N0E5RTgwMUZCQTkzM0M5RDAwODUwMTJFMDlENjg2
OTI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODJmYWI2MTEtOGJlMy00YjQ0LTk1
NjEtNzUyYTFlZGEwNjVjLzAvRDI4MEMwNzdBOUU4MDFGQkE5MzNDOUQwMDg1MDEy
RTA5RDY4NjkyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFjjZx2GiEXxdt+uldIEWPN+niigmPbYwp+z
2KMNZ06yj7yoy21XVsH80H0Z1mtS1EiZpElZYfoEU/anX0Ah9jBxLJFL+8xdG18O
IsHmm+S2ahSW53eOAP0o7aAhfzjwAwCmM292bhCDUzL5D1+EDu6YnTH0h98ofSTz
MeSLP112qYTYeoc0kM2fwjQtmLXYzAM4JKwXiqsqzLmCL5Ar3wlQmpzyIX6eDIaU
kL2LV5g+GX2ri3tjC/0yIFf7bd3vBFQDYqcmWSBmYdY7R3hQmUClL0W3vQMIY4/k
sYeMoeL1a+ZXSe9Rg3WeGI+Tuk+ctkVQhfQOuFekxbspc7U+phU=
-----END CERTIFICATE-----
Generated at Thu Sep 3 12:38:23 2026 by rpki-client