Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
File:                     E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft (raw, json)
Hash identifier:          PEeVBXEg2Fs4SO/nHlenqS0m+M9sWs7/QLCtn70Ehes=
Subject key identifier:   37:B5:7D:05:45:FD:DA:30:11:28:A3:ED:81:DD:F1:61:0A:B8:B4:53
Authority key identifier: E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93
Certificate issuer:       /CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
Certificate serial:       321308E752AD9B973E28CA96459E7A94F85F91D5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
Manifest number:          F1
Signing time:             Fri 30 Oct 2026 06:07:59 +0000
Manifest this update:     Fri 30 Oct 2026 06:02:59 +0000
Manifest next update:     Sat 31 Oct 2026 09:22:59 +0000
Files and hashes:         1: E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl (hash: 1g0grjLTHC19KvbS3Ju8F6qvnfdeLfvHAMP/1Ckb8GE=)
                          2: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: Sd3fhLkfAzIYKIa+lxI8//LD+Sqt+jk5hVCJVdmO8ro=)
                          3: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: m1pNwOSLl0bdCga72bgV0UjJBtOBSgU1ellU74iVk3k=)
                          4: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: v44LsT6qMPli0zPJF9qTEG8AjfBqu7Oywt77FQr+HWc=)
                          5: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: phcDv0m0vLlfwZ99qeKbMtyh63ijZFKiTdhh4MVincM=)
                          6: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: 0O4aswxD1VoxCc8I8JRXFhna+2fhOQAti4akwG9PjgQ=)
                          7: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: E6gLrMvPbF2DgnqL5izEh9JlZeBZOXfgDDhLttXgRCM=)
                          8: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: PekXXJ/q55kTEO5kx0CRU0xx2H+12J366upyeQ1nZA8=)
                          9: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: ho4hOFufXidWAYsTbOliD6cEtUCuHGtc5gpjUTGtn7w=)
                          10: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: M9jyn5/cfkiIh8r7xaktGDoS2J9kM31RBGKJ46gBojU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl
                          rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 09:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:13:08:e7:52:ad:9b:97:3e:28:ca:96:45:9e:7a:94:f8:5f:91:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
        Validity
            Not Before: Oct 30 06:02:59 2026 GMT
            Not After : Oct 31 09:22:59 2026 GMT
        Subject: CN=37B57D0545FDDA301128A3ED81DDF1610AB8B453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:36:e9:db:9d:a5:a5:d2:82:94:4a:e5:5f:
                    aa:e3:5e:09:10:e2:d7:d4:af:62:f0:e3:73:0c:06:
                    c4:52:27:27:69:43:41:6b:24:90:db:65:9e:92:de:
                    02:c9:84:ac:18:e2:3e:7d:0c:df:26:1d:8b:b6:83:
                    ff:d2:75:04:2a:cb:48:bb:3c:a2:97:6f:b7:60:fc:
                    33:58:ad:42:ae:19:16:12:a8:14:33:e7:5a:44:3b:
                    16:a6:3e:62:c1:2f:f2:17:49:7f:15:74:6e:36:65:
                    00:c5:93:5b:31:48:c3:6d:49:33:6a:59:59:66:3c:
                    41:27:70:a3:5e:bd:02:ab:39:f8:16:1b:2f:13:38:
                    b1:f9:2a:82:cb:3f:55:3e:58:61:42:35:49:85:94:
                    a4:7e:27:1e:90:00:23:f0:f5:86:2f:25:54:ce:a7:
                    b2:10:18:0a:39:7e:87:63:47:59:90:13:80:92:c3:
                    a3:c1:e3:41:b4:b1:3f:f7:4b:78:f8:41:05:3d:20:
                    2a:d7:cf:10:5e:e5:44:47:bd:9c:de:fe:89:bf:92:
                    e7:f2:2c:2c:66:27:1c:55:18:50:9f:df:f0:12:a1:
                    0d:07:62:fc:7a:78:43:6d:b9:2b:35:f8:c6:57:f3:
                    c5:08:b9:59:7f:03:87:da:7c:ce:05:a3:db:da:40:
                    24:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B5:7D:05:45:FD:DA:30:11:28:A3:ED:81:DD:F1:61:0A:B8:B4:53
            X509v3 Authority Key Identifier:
                keyid:E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:20:7c:12:21:1e:ed:33:eb:46:c3:6b:03:4b:02:cb:9e:ca:
         88:5c:03:41:5b:bc:18:84:ba:f8:0f:57:42:49:64:16:2d:24:
         54:5e:0d:01:39:e9:4a:c9:16:70:c3:13:9d:34:3f:47:9b:e7:
         fc:d8:20:30:67:19:89:77:80:d5:f5:ad:93:a8:d0:b4:a0:76:
         d3:eb:0e:9b:75:0a:d0:75:4b:cf:88:51:9b:24:4a:d7:6c:70:
         78:06:07:0f:11:19:fb:76:4f:ec:3d:79:39:05:a4:0b:9a:0e:
         c5:3c:05:2b:1a:32:5e:72:20:7a:be:23:0f:49:97:af:93:fc:
         ef:95:3b:0b:ad:32:52:5b:3f:1a:1e:93:81:94:02:46:b2:88:
         10:ea:e2:75:36:38:cd:3c:11:71:75:1e:cf:56:87:19:0b:9a:
         d3:38:10:6f:18:74:f0:14:a3:8a:8a:90:9b:bc:e2:0a:2c:9f:
         dd:73:5f:53:64:82:de:db:11:a5:af:e5:a5:e6:96:d7:42:15:
         3e:02:33:14:20:b9:b1:f6:e8:11:42:61:31:ca:1d:93:8c:1a:
         7b:4b:d9:bf:5d:f9:e8:ce:25:37:e5:c3:37:18:e7:ba:c2:7a:
         23:3e:87:13:91:68:28:b7:2a:5e:fc:b4:f4:1b:e4:b6:dc:d7:
         e7:5c:1b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:17:48 2026 by rpki-client