Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
File:                     65DBBEC678177B7159AD901A4023BA57AA4096DC.mft (raw, json)
Hash identifier:          lcrpPZWmd4JcFrETSpNDaSQkeDkErTy+tEFNlfEauD4=
Subject key identifier:   B7:46:4F:EE:5A:D8:97:B0:C4:AC:83:9F:09:E8:69:F3:43:8A:98:9B
Authority key identifier: 65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC
Certificate issuer:       /CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
Certificate serial:       58E908C84799FFA6F0B5824A56F15D3F4F63F5ED
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
Manifest number:          EE
Signing time:             Tue 27 Oct 2026 07:01:43 +0000
Manifest this update:     Tue 27 Oct 2026 06:56:43 +0000
Manifest next update:     Wed 28 Oct 2026 07:49:43 +0000
Files and hashes:         1: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: Os0dOUCAo82Ro4JJGXlWsdYmgpvswgP/lGrJ/rFU8kQ=)
                          2: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: WJ8WqvkTLbC87sRVwP0S84GR9M75HVASRazE6C4BxN8=)
                          3: 3130332e3135352e3138372e302f32342d3234203d3e20313534373739.roa (hash: acD4T9xX0RNOsIt+Dk7srNJFPhM3fLBMG+7sX11SPrM=)
                          4: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: ahy9pgYJ/JRzmM8+Ec6KtXzoFXDTJf+AENe9YjQMlak=)
                          5: 65DBBEC678177B7159AD901A4023BA57AA4096DC.crl (hash: MArsILQYZZroBfqnurGH+o6LvGxToYrMBm/leunXzOg=)
                          6: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: S4EP1lFYVTju24ot1ck+7kHJylZlYJvHzPIKURDcI5k=)
                          7: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: 2tjc/8qrga6+39EQjimW3zf16UfFL3aN5h4lRF828pQ=)
                          8: 323430323a623234303a3939633a3a2f34382d3438203d3e203234313938.roa (hash: uT4lvBmSLIUtnCU12k/FOcMrspb/keKRMEycDPB7i4M=)
                          9: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: tvyLyjFncuafaNsnPRjTIe3OmM+u2yeMnvd+JSKf+OI=)
                          10: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: HYOwWEsyIVZXnK4eLcj02fPXUV54e21APLG1OWqeK6Y=)
                          11: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: ryDBz/OArSkajCTSmWMTBuq6yxPVuRRR4FSfEXo1xKg=)
                          12: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: uoDjto4Bon7pce7gaQoVwabXxUeeyeeN7W67OfZu0pY=)
                          13: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: AMuay0c5oSMPzmQyIJxb21rH75gJq04Z09sxFsI2gX8=)
                          14: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: RES+IzVfinBoTB3WoZkBb0K0PMLwmwjFh6203Hnv7Fk=)
                          15: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: aAelOJ+yvf4qi4zR02tVF6ytUGxSBShT/+GgUk24frk=)
                          16: 3130332e3135352e3138362e302f32342d3234203d3e203234313938.roa (hash: qLyqBtZOi6bzPzQ5YmenFV5BuE3tMCCGIzP66ZoAfsE=)
                          17: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: uq0XahCuPwPF6uONqKm2eLZO4OTWzUiViXqNuFHYT+4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl
                          rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 07:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e9:08:c8:47:99:ff:a6:f0:b5:82:4a:56:f1:5d:3f:4f:63:f5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
        Validity
            Not Before: Oct 27 06:56:43 2026 GMT
            Not After : Oct 28 07:49:43 2026 GMT
        Subject: CN=B7464FEE5AD897B0C4AC839F09E869F3438A989B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:4f:f9:1c:6d:e3:f2:39:20:1e:12:05:e0:
                    bc:f5:25:9c:02:d7:58:92:5e:92:cd:31:0b:ef:1c:
                    98:ce:62:c0:53:3c:b5:77:06:88:ac:08:f4:2d:87:
                    c2:ce:d7:eb:56:8d:ce:10:f3:92:38:db:75:87:6b:
                    51:64:d2:44:0d:ea:85:78:35:82:bd:c9:c0:33:e4:
                    2a:f8:48:cf:42:61:0d:f0:de:42:52:c5:72:d0:2f:
                    3f:b7:b2:d7:90:63:6b:3c:9a:ff:17:ae:80:a0:b0:
                    df:d5:40:ee:12:d1:f3:28:1f:1a:6e:f5:02:8c:05:
                    e0:bf:63:38:ff:1c:fe:55:cb:7f:e7:f8:0b:36:07:
                    1e:62:a4:9d:81:8e:55:58:6b:6c:59:c4:19:0f:f9:
                    b6:86:0a:95:b8:6a:b0:e2:d4:cb:c7:1f:db:d1:71:
                    74:e2:34:3d:c1:56:92:4b:6d:0a:13:75:ab:e8:d0:
                    cd:a4:54:49:48:65:c6:4e:a9:23:d3:52:b9:1f:78:
                    9e:4a:0b:e7:57:f7:e0:e6:0d:85:94:90:0a:2b:5f:
                    65:fd:2d:8a:75:ca:14:20:83:fc:6a:0f:f2:cb:ab:
                    b8:16:e7:78:13:86:ac:a9:00:4a:6b:c1:f1:3b:ed:
                    8f:6b:04:23:31:9e:d1:e7:15:0b:7e:c5:c8:31:44:
                    78:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:46:4F:EE:5A:D8:97:B0:C4:AC:83:9F:09:E8:69:F3:43:8A:98:9B
            X509v3 Authority Key Identifier:
                keyid:65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:88:b5:d0:5a:96:7a:f3:8e:18:80:d1:4f:1b:2e:b1:c1:36:
         75:a7:80:5e:51:77:53:83:72:dc:ed:dd:24:ef:c2:a9:12:2f:
         74:09:e0:3c:1e:d0:9b:c7:05:61:f2:29:b8:5a:9c:10:a6:10:
         2a:7f:69:15:4a:98:be:0f:03:61:a9:0f:bb:13:5c:b6:92:2e:
         ba:d1:82:b6:27:95:76:bc:13:3f:a3:02:ce:d3:bc:fc:46:ee:
         97:17:a9:64:01:87:14:57:0f:35:bb:9d:e4:1d:7a:fc:b2:6a:
         54:29:59:fe:65:33:cc:05:69:02:92:89:7c:c8:e7:06:4c:02:
         3f:8f:2f:fb:8a:ab:bc:64:20:97:2c:d7:e3:30:53:a1:d4:48:
         7a:0d:99:76:4a:93:a0:15:15:c7:5b:0d:3c:cf:54:e7:ff:12:
         85:59:ca:79:eb:9b:55:af:fa:75:b8:a2:e1:33:f0:d3:24:66:
         ac:30:e2:09:f6:86:a6:ae:cd:8f:66:6c:e8:4b:0e:f0:2e:e8:
         7c:ff:32:61:09:a1:a2:42:eb:e9:ee:eb:dc:80:92:19:39:c4:
         e8:d0:df:01:5e:e0:53:59:40:45:06:ed:a8:48:4f:45:e4:7d:
         84:80:3c:61:49:c7:c8:8c:de:1d:4b:29:3c:3e:60:6e:9f:aa:
         ff:d1:e7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:43:44 2026 by rpki-client