Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft
File:                     40929298F65205185DF4DD6F4BE251452B43C09A.mft (raw, json)
Hash identifier:          zlC68W0ZUTLAWvUkBSPAzOhmeUQLbT3QgwQxiJFPAiQ=
Subject key identifier:   D6:04:EB:F0:03:C9:94:1A:A8:8F:72:5E:D5:17:A3:A7:74:24:82:18
Authority key identifier: 40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A
Certificate issuer:       /CN=40929298F65205185DF4DD6F4BE251452B43C09A
Certificate serial:       06E43E2950917BC8AEFC6E11DAFF08C51F7B1EF1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft
Manifest number:          DE
Signing time:             Thu 15 Oct 2026 06:12:42 +0000
Manifest this update:     Thu 15 Oct 2026 06:07:42 +0000
Manifest next update:     Fri 16 Oct 2026 08:22:42 +0000
Files and hashes:         1: 40929298F65205185DF4DD6F4BE251452B43C09A.crl (hash: CmxSh0NePpylMKcuQjHQmVo5tMVmJIIHRwbTLL0EnbY=)
                          2: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: FaKND3k0/W3hoCdXnlN+l2wX86NxXD4PJzdg9/BiXgA=)
                          3: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: /Cpp1MQoDAZjHBD8Zezrrpf76FfuIh27guzqvCU4E0o=)
                          4: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VJ6XHTgP+LYfJ1kWwqo0lBWI8ymcoW5/lJHqRYH+GxY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl
                          rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 08:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e4:3e:29:50:91:7b:c8:ae:fc:6e:11:da:ff:08:c5:1f:7b:1e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40929298F65205185DF4DD6F4BE251452B43C09A
        Validity
            Not Before: Oct 15 06:07:42 2026 GMT
            Not After : Oct 16 08:22:42 2026 GMT
        Subject: CN=D604EBF003C9941AA88F725ED517A3A774248218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:57:de:42:0a:58:cf:a4:ea:8b:64:b4:04:59:
                    42:4c:3a:62:99:28:70:6c:4d:f3:9f:e4:19:7d:a5:
                    01:6c:1c:34:9a:dd:bf:38:11:c8:19:07:15:98:cf:
                    bd:36:a0:43:ce:f1:0f:f9:a6:88:a9:14:61:ae:e5:
                    1e:09:90:64:c4:cd:e6:ef:ef:d6:b4:20:20:ae:c8:
                    6e:6a:1c:fe:35:1b:ba:06:3e:56:87:58:c2:09:94:
                    00:1a:02:11:9d:ac:be:86:72:9d:40:2e:65:3e:46:
                    fc:bf:40:d5:3c:d6:7f:b0:1c:c5:cb:d6:ed:bf:c1:
                    ba:3d:50:68:7c:b6:2e:87:ae:1b:8d:d0:8b:cc:ed:
                    04:39:5d:1c:c0:45:7f:1c:c0:bc:c9:44:3b:25:96:
                    b2:3f:90:5d:43:c6:e4:cf:ea:ca:59:fd:eb:77:63:
                    87:cf:77:99:22:a1:8e:2e:26:7c:30:1d:a0:fe:83:
                    ed:83:3c:22:57:3b:a8:29:f1:54:f1:a6:17:8a:bf:
                    d0:c8:23:45:34:4a:20:2b:c3:35:ab:91:70:97:41:
                    69:2c:2d:31:ce:a0:9f:ab:1f:8f:ef:b0:f9:d0:b0:
                    b8:c2:48:6d:00:f0:95:be:6d:19:b5:ba:c0:1a:8d:
                    00:89:fc:05:30:8e:6b:ff:42:29:b5:59:78:67:bd:
                    f5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:04:EB:F0:03:C9:94:1A:A8:8F:72:5E:D5:17:A3:A7:74:24:82:18
            X509v3 Authority Key Identifier:
                keyid:40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:2e:86:c2:92:cf:0f:c2:04:b7:c9:0c:c4:27:41:ca:af:37:
         1c:3a:0a:61:1f:66:4f:b2:9b:33:48:45:e9:f2:93:1f:e0:de:
         5c:86:ea:50:85:76:60:b0:5e:d8:a2:9a:da:39:d0:aa:34:e3:
         4d:f8:f1:ed:a3:2b:6d:6a:83:46:ed:60:49:44:d8:24:14:43:
         5a:b7:70:c8:7b:ab:93:88:c0:a8:13:aa:b5:16:e1:82:78:6a:
         2f:50:29:72:65:8c:5f:29:9a:1b:ea:ab:88:d0:d1:e7:06:c6:
         f1:a4:9f:07:64:4b:6e:a5:65:59:91:26:b9:94:c0:9f:74:1b:
         b5:bb:d6:e5:12:bf:d6:e8:4b:26:8c:0d:53:ff:70:2a:37:42:
         2d:65:f9:4d:af:5c:81:c2:36:c6:6f:f1:27:34:44:ee:8a:01:
         1a:7a:d8:cf:ba:2f:30:bd:bd:1a:f7:3c:76:42:b7:2b:92:66:
         54:0b:e2:33:84:b6:ac:eb:8b:14:01:43:57:cc:47:53:9d:17:
         42:58:f3:64:ed:23:48:b4:91:ae:c8:40:4d:e5:0a:a4:2d:15:
         30:70:df:a9:b0:c1:42:b4:2c:87:bb:89:05:18:6e:dc:aa:c1:
         bd:0b:40:09:05:19:33:70:29:a6:7e:53:23:6d:ec:ab:41:46:
         0e:1d:97:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:19 2026 by rpki-client