Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.mft
File:                     2552F050305622A342A57694E0C15404F4475354.mft (raw, json)
Hash identifier:          MFLhN4t0gkkAGebBmhSJ8BlEgGhGZiy4MUAm/2MKa68=
Subject key identifier:   8E:26:C5:B5:CA:17:99:F2:B3:70:4C:8B:A8:76:E4:E6:96:5E:AD:30
Authority key identifier: 25:52:F0:50:30:56:22:A3:42:A5:76:94:E0:C1:54:04:F4:47:53:54
Certificate issuer:       /CN=2552F050305622A342A57694E0C15404F4475354
Certificate serial:       3C87239CFEC7F5799AEECCC1B1C463D33679EFE4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2552F050305622A342A57694E0C15404F4475354.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.mft
Manifest number:          F6
Signing time:             Mon 02 Nov 2026 02:15:27 +0000
Manifest this update:     Mon 02 Nov 2026 02:10:27 +0000
Manifest next update:     Tue 03 Nov 2026 04:33:27 +0000
Files and hashes:         1: 2552F050305622A342A57694E0C15404F4475354.crl (hash: mWwkN8ylVOPigK/ETXDdoNoPGAbtrtJDI/ZMkzi4/D0=)
                          2: 3130332e35312e3135382e302f32342d3234203d3e203538333934.roa (hash: u5m8wjdIm8TfcMvPgVMpXwI4v6YiahK9nqtecHDPjuA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.crl
                          rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2552F050305622A342A57694E0C15404F4475354.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 04:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:87:23:9c:fe:c7:f5:79:9a:ee:cc:c1:b1:c4:63:d3:36:79:ef:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2552F050305622A342A57694E0C15404F4475354
        Validity
            Not Before: Nov  2 02:10:27 2026 GMT
            Not After : Nov  3 04:33:27 2026 GMT
        Subject: CN=8E26C5B5CA1799F2B3704C8BA876E4E6965EAD30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b4:0e:a4:a1:5b:1b:51:1d:76:a8:1a:30:21:
                    e5:6c:6d:5d:1e:bf:7e:13:5d:8d:e5:3f:86:28:88:
                    f8:88:fd:7a:b6:4c:51:8e:5d:0a:f7:1b:52:1a:c8:
                    12:58:6b:3a:e4:85:0f:4c:76:8e:7d:69:09:5e:74:
                    3e:8a:b9:05:d8:20:8c:d3:9f:7d:60:56:7e:92:70:
                    2c:5e:62:a3:70:42:33:dd:59:48:da:9d:b5:29:e6:
                    48:ab:99:30:0b:20:b2:c6:ce:9f:8b:b5:66:ee:bb:
                    97:c4:b8:98:0a:2a:b3:b1:e9:8e:c4:b1:41:5b:96:
                    c0:99:c5:75:de:44:45:c6:f3:4f:f2:79:80:9c:f3:
                    82:e4:19:81:33:e0:86:23:23:f4:2e:f6:23:92:fa:
                    6d:8c:6d:1b:24:c8:67:a8:db:1e:ac:0b:35:45:13:
                    8b:e7:9c:f1:84:0f:4f:3e:a8:1f:87:0d:02:4d:f8:
                    44:d4:6c:bb:bf:a3:3f:a5:1b:f4:ca:a5:a3:bf:75:
                    4e:e8:f4:8d:8b:36:7b:17:61:1d:0c:4e:da:34:a2:
                    ea:6a:83:99:98:88:2a:77:d2:41:de:ec:32:2b:18:
                    fb:d4:57:44:cb:34:6e:82:72:af:0e:7c:b4:70:ac:
                    8c:2e:2b:4e:10:cf:4b:09:2c:17:3f:62:dd:ad:f8:
                    bb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:26:C5:B5:CA:17:99:F2:B3:70:4C:8B:A8:76:E4:E6:96:5E:AD:30
            X509v3 Authority Key Identifier:
                keyid:25:52:F0:50:30:56:22:A3:42:A5:76:94:E0:C1:54:04:F4:47:53:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2552F050305622A342A57694E0C15404F4475354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c7:70:39:42:53:25:8c:d3:4e:20:00:76:d7:6a:5a:6f:7c:
         61:3d:b8:1f:4f:42:53:f7:cd:c7:5d:66:69:0e:3f:7a:ee:9d:
         f1:59:7f:d1:3e:01:bd:da:63:13:77:e6:c2:cb:e4:ce:d9:8d:
         9c:05:db:d0:91:33:9b:72:e9:0a:ab:4a:ab:fb:6c:70:e2:94:
         6a:17:02:06:4e:4a:fd:b9:17:c7:9e:75:dd:b6:b5:dc:87:bd:
         33:d5:dc:71:be:4b:7a:e4:f7:e4:2e:93:92:73:41:5c:8e:0c:
         ab:29:44:77:2a:12:d7:b1:ff:61:1c:5b:a3:cb:04:73:96:2b:
         ff:ed:cc:7e:c1:c2:33:14:96:53:8a:93:e2:69:ac:92:ab:84:
         c9:57:7a:ad:91:8a:7e:ed:2a:9c:8f:8c:76:c6:1f:8e:6d:b0:
         57:8c:35:f1:c6:40:26:b1:42:b3:7f:32:38:9f:39:8b:19:c1:
         32:26:f8:44:f7:a7:db:4a:8c:10:ab:8f:33:1a:f2:fe:7d:b5:
         2a:5c:99:5b:9a:40:3e:bf:ee:ee:0d:db:a0:67:d8:d4:fc:82:
         9a:21:81:a4:36:ee:c9:0e:72:dc:5d:88:01:da:c7:8e:98:c3:
         96:eb:3b:27:94:b7:1e:32:01:fa:17:f2:15:4e:c7:f5:a2:1f:
         0f:0c:96:c7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPIcjnP7H9Xma7szBscRj0zZ57+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU1MkYwNTAzMDU2MjJBMzQyQTU3Njk0RTBDMTU0MDRG
NDQ3NTM1NDAeFw0yNjExMDIwMjEwMjdaFw0yNjExMDMwNDMzMjdaMDMxMTAvBgNV
BAMTKDhFMjZDNUI1Q0ExNzk5RjJCMzcwNEM4QkE4NzZFNEU2OTY1RUFEMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNtA6koVsbUR12qBowIeVsbV0e
v34TXY3lP4YoiPiI/Xq2TFGOXQr3G1IayBJYazrkhQ9Mdo59aQledD6KuQXYIIzT
n31gVn6ScCxeYqNwQjPdWUjanbUp5kirmTALILLGzp+LtWbuu5fEuJgKKrOx6Y7E
sUFblsCZxXXeREXG80/yeYCc84LkGYEz4IYjI/Qu9iOS+m2MbRskyGeo2x6sCzVF
E4vnnPGED08+qB+HDQJN+ETUbLu/oz+lG/TKpaO/dU7o9I2LNnsXYR0MTto0oupq
g5mYiCp30kHe7DIrGPvUV0TLNG6Ccq8OfLRwrIwuK04Qz0sJLBc/Yt2t+LufAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjibFtcoXmfKzcEyLqHbk5pZerTAwHwYDVR0j
BBgwFoAUJVLwUDBWIqNCpXaU4MFUBPRHU1QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTgxZjY4YTMtYjM1NC00ODAxLWI5NDktMzQ1MmU3YjFmNzJmLzAvMjU1MkYwNTAz
MDU2MjJBMzQyQTU3Njk0RTBDMTU0MDRGNDQ3NTM1NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yNTUyRjA1MDMwNTYyMkEzNDJBNTc2OTRFMEMxNTQwNEY0NDc1
MzU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTgxZjY4YTMtYjM1NC00ODAxLWI5
NDktMzQ1MmU3YjFmNzJmLzAvMjU1MkYwNTAzMDU2MjJBMzQyQTU3Njk0RTBDMTU0
MDRGNDQ3NTM1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIDHcDlCUyWM004gAHbXalpvfGE9uB9PQlP3
zcddZmkOP3runfFZf9E+Ab3aYxN35sLL5M7ZjZwF29CRM5ty6QqrSqv7bHDilGoX
AgZOSv25F8eedd22tdyHvTPV3HG+S3rk9+Quk5JzQVyODKspRHcqEtex/2EcW6PL
BHOWK//tzH7BwjMUllOKk+JprJKrhMlXeq2Rin7tKpyPjHbGH45tsFeMNfHGQCax
QrN/MjifOYsZwTIm+ET3p9tKjBCrjzMa8v59tSpcmVuaQD6/7u4N26Bn2NT8gpoh
gaQ27skOctxdiAHax46Yw5brOyeUtx4yAfoX8hVOx/WiHw8Mlsc=
-----END CERTIFICATE-----
Generated at Mon Nov 2 07:32:49 2026 by rpki-client