Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
File:                     295E13E5C8926C8780CF0694E90F77298E60C812.mft (raw, json)
Hash identifier:          HWw28a25QDGHyEVh/cJXKAdYjPLbKf6wbZctC3+81fI=
Subject key identifier:   00:F8:4B:02:04:88:B0:A6:DE:25:0F:7F:9A:B4:A5:39:53:74:04:A8
Authority key identifier: 29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12
Certificate issuer:       /CN=295E13E5C8926C8780CF0694E90F77298E60C812
Certificate serial:       6C17653DBB56B3FA9C2AAE95F6476E01718F7716
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
Manifest number:          E9
Signing time:             Sat 24 Oct 2026 03:08:04 +0000
Manifest this update:     Sat 24 Oct 2026 03:03:04 +0000
Manifest next update:     Sun 25 Oct 2026 03:26:04 +0000
Files and hashes:         1: 295E13E5C8926C8780CF0694E90F77298E60C812.crl (hash: fLYfRPUNDgyOonOXuHZGHtKvfeJi8Iqd2Z+oETHINEU=)
                          2: 3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa (hash: 8uDSee80WU9BwE7TeL4b74xk08iB/J8lbI5bPlFFs2Y=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.crl
                          rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 03:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:17:65:3d:bb:56:b3:fa:9c:2a:ae:95:f6:47:6e:01:71:8f:77:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295E13E5C8926C8780CF0694E90F77298E60C812
        Validity
            Not Before: Oct 24 03:03:04 2026 GMT
            Not After : Oct 25 03:26:04 2026 GMT
        Subject: CN=00F84B020488B0A6DE250F7F9AB4A539537404A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:cc:bd:40:de:b6:24:76:64:99:9f:66:4c:
                    52:d6:e1:ea:bf:cf:8d:fe:cc:41:1e:b6:2d:f0:c3:
                    18:fa:07:1a:98:07:75:33:64:db:6b:ec:25:8a:49:
                    d3:05:eb:a8:29:02:d3:35:87:9e:d5:e4:50:b9:bd:
                    89:8c:f4:7b:7c:fe:8b:ea:a1:f2:ac:fc:8a:84:44:
                    57:db:39:7b:0a:56:ad:fb:9d:f2:92:7b:49:9b:27:
                    94:c7:aa:df:eb:c3:23:f7:4c:e8:64:a4:ba:cd:89:
                    c3:53:d0:e3:a3:aa:11:53:95:a1:0c:c1:3c:21:e7:
                    6a:10:05:11:37:9f:b2:af:89:6c:9c:c4:a9:e4:0b:
                    f2:58:b9:4b:75:68:a3:9a:70:3a:2e:39:9e:b3:4d:
                    9e:2b:09:15:41:02:81:52:73:4d:b2:02:ea:3d:ab:
                    50:c5:f6:ea:c8:b1:6a:18:fd:52:ab:c7:46:3c:a1:
                    ae:f3:a5:d6:4e:2b:60:58:5b:1d:84:c2:67:2f:33:
                    da:79:b6:9f:72:f7:85:d0:78:c3:c9:12:8d:e1:24:
                    69:da:c3:f4:d1:f8:57:67:de:2b:76:e0:2c:94:d4:
                    a3:4a:53:03:59:da:59:da:9e:e1:89:11:32:4d:5d:
                    f4:50:e4:5f:5d:0f:bb:72:c0:7c:4c:6d:9a:b1:5a:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F8:4B:02:04:88:B0:A6:DE:25:0F:7F:9A:B4:A5:39:53:74:04:A8
            X509v3 Authority Key Identifier:
                keyid:29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c3:e9:f9:4a:1c:66:6b:be:ff:2c:1d:c4:85:e8:45:2f:80:
         64:20:45:c9:fb:18:da:a7:29:05:05:ac:7c:90:22:c5:a0:41:
         c4:43:00:1d:ab:db:e8:29:5a:a1:16:3c:f5:d8:65:04:a4:de:
         af:9b:ea:fe:25:00:6f:64:4f:b4:38:19:6c:3f:da:6a:b9:10:
         19:cc:58:28:7a:3b:d8:9f:00:8e:a8:6f:09:f2:07:e9:55:09:
         01:fb:1c:af:9c:10:59:5e:a1:12:9d:5e:72:3e:d3:e1:2b:a2:
         9a:2f:ef:0f:1d:00:ba:ab:db:09:e6:b6:51:66:37:a7:12:25:
         e8:62:c0:32:a2:48:09:b1:29:eb:94:c3:80:0f:37:fd:8d:f1:
         7a:23:7c:17:a6:e0:8b:95:fc:30:ba:0a:4f:4d:7d:a1:5b:2b:
         7b:f5:69:3b:f7:3b:32:db:f9:ff:4e:d7:ab:b7:4f:51:04:9f:
         80:28:af:b1:d1:db:20:4d:1d:c3:88:03:54:31:d5:2a:35:e1:
         d0:6c:77:ee:ae:48:34:bc:82:d0:15:0f:b3:0e:a5:16:38:6c:
         1a:1b:80:e5:ca:0c:d3:3e:9f:3c:f5:eb:bf:05:72:ce:ff:e3:
         b2:63:83:9d:04:3c:f1:59:1f:a7:20:a5:30:72:d1:54:2b:33:
         4a:ee:d4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:58:41 2026 by rpki-client