Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.mft
File:                     57E460937137B652DFB7C6EB8A5BA887C395741C.mft (raw, json)
Hash identifier:          KeFbepfCFOkAXO698gJujzXo+6GDGtMiYkMCOXdLKDo=
Subject key identifier:   34:78:FD:D7:6F:68:4F:02:57:AB:E3:9E:0B:11:FD:E6:31:50:46:1C
Authority key identifier: 57:E4:60:93:71:37:B6:52:DF:B7:C6:EB:8A:5B:A8:87:C3:95:74:1C
Certificate issuer:       /CN=57E460937137B652DFB7C6EB8A5BA887C395741C
Certificate serial:       1EFBFE84ED902B80E41279E23FC4F83A25D27B17
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/57E460937137B652DFB7C6EB8A5BA887C395741C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.mft
Manifest number:          F5
Signing time:             Mon 02 Nov 2026 01:03:57 +0000
Manifest this update:     Mon 02 Nov 2026 00:58:57 +0000
Manifest next update:     Tue 03 Nov 2026 01:39:57 +0000
Files and hashes:         1: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: WQnLXXfXQahSkhJIevnL949Xfgw8fPIR5kTo/AbuQac=)
                          2: 57E460937137B652DFB7C6EB8A5BA887C395741C.crl (hash: WKvBhoCtcIT99GlyI8dNKvaqvojc06FG20o2GEENbss=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.crl
                          rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/57E460937137B652DFB7C6EB8A5BA887C395741C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 01:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fb:fe:84:ed:90:2b:80:e4:12:79:e2:3f:c4:f8:3a:25:d2:7b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E460937137B652DFB7C6EB8A5BA887C395741C
        Validity
            Not Before: Nov  2 00:58:57 2026 GMT
            Not After : Nov  3 01:39:57 2026 GMT
        Subject: CN=3478FDD76F684F0257ABE39E0B11FDE63150461C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:24:e1:ae:25:68:3d:5f:92:61:70:b2:66:
                    96:59:22:cf:d0:80:94:f4:5f:7f:5c:6a:9c:a8:6b:
                    08:68:2f:ab:47:39:c6:3a:92:a4:6d:56:dc:a5:60:
                    b8:1b:d4:85:9f:3a:a2:34:6a:89:10:50:d9:27:73:
                    ef:b2:58:f4:6c:3e:9f:6a:48:ca:9f:27:23:6b:4e:
                    20:62:27:57:45:f9:9c:0e:b3:c6:2b:e2:ae:b7:fd:
                    0c:1f:a1:a8:82:0d:72:1f:98:64:0a:b3:a7:af:7e:
                    72:9c:cf:05:93:b1:28:43:60:ca:4b:f8:a7:22:67:
                    fb:6d:69:f0:a3:8b:cd:29:1f:05:fa:54:a6:3e:23:
                    eb:86:8e:e0:7c:8c:bd:02:97:76:e4:a6:06:a9:c4:
                    28:46:03:8f:2a:8d:02:18:5a:40:75:3b:17:f4:ff:
                    1d:c9:8f:a7:3a:20:21:7c:7d:45:c5:da:db:e8:87:
                    6c:5b:dc:50:7e:af:8c:b9:b3:ee:bc:2b:93:4f:5d:
                    98:cd:ea:37:2c:a3:88:ca:5a:15:6b:0c:ad:c2:70:
                    a4:ff:87:02:96:30:0d:aa:02:22:b9:fc:3b:19:db:
                    77:2b:15:16:01:9b:09:ae:8c:39:47:15:72:b3:14:
                    88:de:28:7f:8f:9c:c6:f0:9b:e9:e8:57:38:fc:c0:
                    77:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:78:FD:D7:6F:68:4F:02:57:AB:E3:9E:0B:11:FD:E6:31:50:46:1C
            X509v3 Authority Key Identifier:
                keyid:57:E4:60:93:71:37:B6:52:DF:B7:C6:EB:8A:5B:A8:87:C3:95:74:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/57E460937137B652DFB7C6EB8A5BA887C395741C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:df:d6:b9:77:88:53:c6:d7:ec:ae:fd:f5:c7:ec:5a:2e:2d:
         75:d2:69:5a:74:bb:f3:fc:78:8f:e5:dd:ac:62:e4:72:18:8e:
         70:61:73:ec:ea:21:2a:01:c6:60:ad:91:d5:40:b9:e6:1a:3d:
         fc:c5:09:aa:7d:c4:6e:e6:2a:4a:b4:c4:b7:0c:22:ba:1c:45:
         a5:50:63:57:8f:bb:ff:87:8c:4b:2a:07:b1:4c:b4:ae:d7:c4:
         93:ed:b1:34:d8:b8:e9:ef:de:e6:3f:cd:05:dc:08:ef:88:58:
         bc:83:f6:52:b0:79:6d:3f:6e:c2:7b:6d:84:86:62:47:6a:d7:
         27:de:69:99:d0:bb:ac:a8:53:62:9c:5a:e0:b7:3d:6a:ca:c6:
         8f:33:88:62:81:6b:da:3b:5d:ae:8f:91:f5:c1:c7:05:30:ab:
         1b:76:4d:00:45:9f:34:1e:1a:bf:aa:77:6f:b9:04:c3:50:5a:
         3f:b1:20:38:88:01:10:ac:cf:83:6b:23:41:fc:fd:de:41:b8:
         a6:86:71:34:9d:31:78:6f:67:b5:4f:8b:cb:bf:b8:e8:11:6c:
         53:0d:29:50:47:22:de:40:cf:6e:43:59:ef:15:a5:47:73:08:
         55:88:fa:6f:1e:55:dd:d6:ed:4d:59:d1:25:3b:fa:97:22:52:
         bc:02:fd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:16:36 2026 by rpki-client