Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
File:                     ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft (raw, json)
Hash identifier:          npbv2520Y7URFIr7V7eEvuVdy8VAu4utHDTvoA0K/Dc=
Subject key identifier:   A1:A4:7F:95:61:BF:0A:18:50:87:29:C8:84:F9:C6:3F:DD:E8:FB:1D
Authority key identifier: AC:F2:66:E9:01:0F:46:F6:91:CC:6A:49:2E:B1:EA:C6:23:15:5D:6B
Certificate issuer:       /CN=ACF266E9010F46F691CC6A492EB1EAC623155D6B
Certificate serial:       4851FEC074609FA3121EBA9B0651400D0543F8C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
Manifest number:          ED
Signing time:             Mon 26 Oct 2026 22:13:06 +0000
Manifest this update:     Mon 26 Oct 2026 22:08:06 +0000
Manifest next update:     Wed 28 Oct 2026 01:06:06 +0000
Files and hashes:         1: ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl (hash: yn867K7raTSvpve0tjG796jHYfdpI5lQCO30La5JsQc=)
                          2: 3230332e3137312e3232312e302f32342d3234203d3e203435323938.roa (hash: MUcpE9ISijiu2jmaCVn/Sl4d64Wp2iYm3FrbZk8E76Q=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl
                          rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 12:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:51:fe:c0:74:60:9f:a3:12:1e:ba:9b:06:51:40:0d:05:43:f8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACF266E9010F46F691CC6A492EB1EAC623155D6B
        Validity
            Not Before: Oct 26 22:08:06 2026 GMT
            Not After : Oct 28 01:06:06 2026 GMT
        Subject: CN=A1A47F9561BF0A18508729C884F9C63FDDE8FB1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:25:5d:2d:5d:6c:47:66:cf:53:d8:67:bd:d3:
                    6a:22:9f:56:ac:c1:b1:c9:59:03:01:7e:58:e8:43:
                    80:b2:4c:13:04:f0:eb:07:c4:09:85:57:11:53:2b:
                    27:6a:62:74:9e:88:88:f5:3b:a8:50:5c:d9:64:b3:
                    23:fe:80:1e:23:95:05:27:9e:5d:6b:81:33:cf:ee:
                    3f:e8:97:11:e0:32:70:0c:8c:c2:2f:4b:b9:5c:4c:
                    9c:90:36:9e:9d:7e:7a:3b:28:d0:50:d6:af:a6:bc:
                    08:f2:1c:5a:c5:9c:c1:a5:23:35:e6:f1:52:3c:15:
                    91:00:53:ef:f1:2d:4d:0c:74:e6:80:20:6d:48:fd:
                    dc:fd:74:59:57:d2:9c:f9:cf:db:bc:fc:45:0e:f0:
                    ea:fe:11:03:ff:52:cb:93:75:7f:85:ba:f3:ed:70:
                    3f:cc:e7:26:21:b2:84:a3:40:88:8e:83:a8:33:66:
                    02:28:89:f9:24:58:2f:e6:ea:ca:7e:11:17:cc:10:
                    d0:4d:a4:26:ef:d1:8e:a1:67:cf:68:a7:30:95:7a:
                    b0:b5:70:7a:24:0c:b6:f9:e2:82:27:4d:e8:4e:ea:
                    cb:6d:1d:ec:5e:0e:db:3d:57:e0:6a:d5:40:5a:3e:
                    03:95:04:aa:4e:b0:ec:df:81:9f:2a:7f:98:e3:14:
                    56:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A4:7F:95:61:BF:0A:18:50:87:29:C8:84:F9:C6:3F:DD:E8:FB:1D
            X509v3 Authority Key Identifier:
                keyid:AC:F2:66:E9:01:0F:46:F6:91:CC:6A:49:2E:B1:EA:C6:23:15:5D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:5c:8d:fd:f3:6e:09:a4:26:77:a0:90:86:1e:84:8f:22:42:
         fd:b0:b6:43:ba:63:7b:e3:4c:5e:fd:e3:86:8a:38:3d:1b:55:
         c5:1b:48:4a:40:b3:4e:83:50:d3:d0:9a:e6:ed:93:b6:15:a8:
         56:eb:45:09:f0:fd:42:68:26:f1:4e:69:2c:9e:67:81:6d:d9:
         77:95:e6:bb:ed:44:ff:f0:56:69:db:7a:5f:0d:77:23:02:32:
         2c:94:ed:27:dc:97:ec:25:af:59:ad:78:52:41:00:58:7e:76:
         43:2f:05:da:17:29:bf:4f:9d:5d:be:48:2c:b2:c6:f7:61:18:
         86:30:ed:26:f7:9b:aa:9e:9a:13:f7:b0:ba:dd:a6:ef:0d:05:
         7c:32:20:fe:03:6c:76:10:46:09:ad:3e:ce:80:01:17:3b:8b:
         d5:e5:fb:51:03:9e:47:1f:6b:54:a0:35:f7:3b:3a:57:91:ca:
         fc:30:26:83:77:ee:1e:31:6f:e0:1d:c0:0e:d8:b7:69:f5:64:
         de:89:20:ee:8b:05:63:75:8c:4b:d5:c6:d5:83:1d:79:f6:1d:
         d7:53:ff:ac:3e:18:06:df:dc:a4:a2:e1:a2:66:49:7a:d4:1d:
         57:fd:db:36:74:de:6a:47:61:4c:32:3e:6f:85:0e:39:d1:8d:
         29:1f:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 03:55:56 2026 by rpki-client