Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft
File:                     C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft (raw, json)
Hash identifier:          cVLCJv4YjNnJRxIux3jDUAcyj68aKl/liu3wGoyS7DU=
Subject key identifier:   3C:79:02:60:0B:7D:66:C0:7D:06:CD:BF:4B:AE:ED:E2:64:50:6F:E6
Authority key identifier: C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0
Certificate issuer:       /CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0
Certificate serial:       583CE74AB03F5E354C7B9ACA282EA9B6B0CAC9A5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft
Manifest number:          F5
Signing time:             Mon 02 Nov 2026 00:07:50 +0000
Manifest this update:     Mon 02 Nov 2026 00:02:50 +0000
Manifest next update:     Tue 03 Nov 2026 01:03:50 +0000
Files and hashes:         1: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: nnetaFQH9cc/0ttdoAAAV/hjdoW+vJXjVqlMuycgo/k=)
                          2: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: SE/gtmrek7FkfiZWGLhqu6Im/V7R0oLSA9l56vd8nZo=)
                          3: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: HeHyNgFUN9sd7uOBZ40+XUgPRXPqZt6Vsbz0lmGFKoc=)
                          4: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: SHNzwRWsLHbwnZJn1ekRqogSWn8IbVRPjwnaTpUQuGY=)
                          5: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: RXhOoKk2zbrGa3t3vUlHXDF2yvqCPhn7EQhMFp2kA8Q=)
                          6: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: U+XsrDROpLK4jKC497+JwnaTHK8kc4AKi4ocNW4Dijg=)
                          7: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: 1EFfunX5lqc2HcSk+iNbYX7CETCZ6fCWzV+VG7zhCJQ=)
                          8: C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl (hash: TN9d+SJBEwOBK+3ZQq4mu5FoIZuuyjPVaXRPPExYYz0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl
                          rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 01:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3c:e7:4a:b0:3f:5e:35:4c:7b:9a:ca:28:2e:a9:b6:b0:ca:c9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0
        Validity
            Not Before: Nov  2 00:02:50 2026 GMT
            Not After : Nov  3 01:03:50 2026 GMT
        Subject: CN=3C7902600B7D66C07D06CDBF4BAEEDE264506FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:20:84:91:2a:45:d7:94:6a:19:64:6c:9f:ee:
                    a5:5b:48:35:4f:55:07:f1:b5:18:2e:e3:92:84:b3:
                    04:78:f3:57:5c:bd:69:d5:11:1c:26:3d:0f:0e:7a:
                    43:8f:a1:e9:13:5f:63:8b:12:ed:70:24:af:20:ce:
                    ec:a7:f0:5a:8a:8d:da:8a:ca:69:9b:91:8f:9d:1e:
                    36:2d:74:dc:d8:bd:f8:60:3e:61:1d:9f:94:41:63:
                    9a:97:e8:32:57:0a:bf:93:f2:2c:70:89:d1:62:54:
                    1f:c4:ed:fb:ad:bd:4b:0c:2f:0b:98:25:28:e6:dc:
                    c6:f1:c9:54:80:e1:a4:fa:9f:aa:ab:cb:9f:67:bd:
                    8e:56:dc:fe:de:f6:66:e8:a8:66:2e:6e:1e:34:1b:
                    8d:92:bb:fe:fd:35:3e:52:73:7b:93:e7:cf:46:22:
                    2f:d5:1d:a3:e3:56:b0:e3:06:fa:61:a3:f7:52:8d:
                    18:44:97:b2:10:9d:b7:b3:cf:67:45:9e:11:eb:95:
                    f5:7d:a8:d8:b0:24:35:5b:2d:6a:ed:ed:00:76:fb:
                    14:49:5b:af:b9:22:35:9e:df:68:6e:1e:b7:4d:2c:
                    32:45:fb:bf:7f:c4:2e:0b:4d:dd:6a:f8:45:c8:d0:
                    0b:ae:b3:d6:53:33:01:ce:48:1b:80:4a:54:03:60:
                    0d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:79:02:60:0B:7D:66:C0:7D:06:CD:BF:4B:AE:ED:E2:64:50:6F:E6
            X509v3 Authority Key Identifier:
                keyid:C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f8:9c:f8:74:b9:6e:d5:bd:fc:17:cd:fe:8a:3b:4d:e4:3b:
         8f:43:85:87:76:cc:dd:3a:8f:8d:ea:38:d9:d4:a6:02:07:37:
         4f:f8:9b:a0:61:3c:29:41:5e:62:76:53:e1:ab:73:b0:12:48:
         d7:fc:23:31:fc:4e:46:6e:be:ac:9e:79:46:0b:3d:0b:30:61:
         05:b7:5e:2f:7f:c4:ea:36:ae:24:2e:97:bb:db:b7:5c:01:68:
         a5:fb:34:6b:00:8a:af:92:1a:96:52:0f:11:fa:84:bd:27:25:
         94:11:8f:96:bd:98:2d:7a:b1:59:65:d1:55:cb:ba:3b:3f:85:
         27:b1:53:f2:0e:11:fb:e1:40:6a:76:e6:5a:c4:01:65:c3:80:
         2e:98:f3:7e:34:f4:3a:66:5d:5d:9d:2f:58:b2:5d:45:e8:9f:
         df:0e:52:4b:ee:fc:f3:e7:eb:00:4e:05:64:99:e6:ba:ec:e4:
         e7:26:6d:72:b8:f2:29:35:45:7c:81:ef:eb:a5:30:b5:0a:dd:
         e8:8d:79:96:ba:cf:6f:2d:fc:e0:79:f8:33:a4:30:38:7c:5b:
         cd:ad:b8:d9:b8:1d:f0:c6:00:28:7f:c1:b5:91:0e:76:ad:7c:
         1e:e7:19:ae:9d:80:68:95:79:d8:89:ba:18:7f:c9:87:84:f4:
         ae:bf:e6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 09:08:06 2026 by rpki-client