Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft
File:                     4202428F6F3C953C642F298719C5C35E169724A2.mft (raw, json)
Hash identifier:          QXpVAJ6HJbk7wJBuuJoAaUHKp/tEdE+GcMZd0j0v/jE=
Subject key identifier:   DE:B3:FA:D3:E7:C3:84:AD:EA:4A:69:93:41:76:74:F3:6F:B0:CC:F6
Authority key identifier: 42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2
Certificate issuer:       /CN=4202428F6F3C953C642F298719C5C35E169724A2
Certificate serial:       5AF1246B353FF4E1447B523949032F2E9AFCD93A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft
Manifest number:          B8
Signing time:             Thu 17 Sep 2026 03:22:41 +0000
Manifest this update:     Thu 17 Sep 2026 03:17:41 +0000
Manifest next update:     Fri 18 Sep 2026 06:08:41 +0000
Files and hashes:         1: 4202428F6F3C953C642F298719C5C35E169724A2.crl (hash: kH3SHLGKk9UjkcKhuqDcENSMvSs1E9VVwpzCVyiQkIQ=)
                          2: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: p7JO88fvmBW+Y+ZP8rFGldK5BvqAlDmHyGZVg3MhVAY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl
                          rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 06:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f1:24:6b:35:3f:f4:e1:44:7b:52:39:49:03:2f:2e:9a:fc:d9:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4202428F6F3C953C642F298719C5C35E169724A2
        Validity
            Not Before: Sep 17 03:17:41 2026 GMT
            Not After : Sep 18 06:08:41 2026 GMT
        Subject: CN=DEB3FAD3E7C384ADEA4A6993417674F36FB0CCF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:45:d5:19:b8:6e:ec:1a:98:03:d4:a7:c6:
                    0f:f2:62:dc:d8:9c:23:60:dd:bf:cb:4b:6f:bd:1a:
                    92:eb:15:44:4d:bf:49:c4:ac:31:01:9f:06:03:e8:
                    85:50:1b:31:c6:1b:07:2a:55:5f:7c:a2:7c:f0:f8:
                    ac:71:91:f6:40:cf:58:ba:2b:0c:7e:a9:72:c9:65:
                    e5:37:e1:f4:a7:df:5e:2d:05:01:0b:04:9b:14:7f:
                    04:b8:4d:7e:0f:d3:81:6b:72:33:cc:88:9f:a6:27:
                    34:e4:14:e7:66:2a:25:ea:9d:44:1f:6c:b6:f3:78:
                    2e:b9:ca:da:9c:99:9b:a6:67:e1:91:61:a5:d6:55:
                    8f:ae:cf:f1:91:d9:46:0b:d4:73:3f:a3:3c:c6:40:
                    88:46:31:20:3d:95:f5:cb:cf:5d:47:df:31:e6:08:
                    ee:93:ca:7c:92:39:ac:27:f2:f2:8d:63:17:eb:cb:
                    f6:f0:92:54:6a:17:36:2f:b6:ea:10:d2:d3:bf:fe:
                    2d:0f:85:3b:32:fa:ac:98:aa:6b:d4:ea:c7:c2:63:
                    8e:d7:1d:d3:f4:69:41:c5:17:e1:00:8a:16:d8:1f:
                    17:66:99:53:91:b1:69:3d:2e:7c:3d:8b:0d:78:66:
                    5c:bc:dd:a1:7b:e2:a6:00:75:3e:a2:3f:8c:96:32:
                    3d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B3:FA:D3:E7:C3:84:AD:EA:4A:69:93:41:76:74:F3:6F:B0:CC:F6
            X509v3 Authority Key Identifier:
                keyid:42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:4c:17:1c:10:19:d0:3a:dc:cb:e5:72:32:51:a1:01:3c:5e:
         2f:63:76:fa:df:79:1f:7b:e1:fb:64:5d:95:dd:86:15:1e:e2:
         4c:b1:8e:1e:10:c2:11:0f:a3:50:f6:ab:b1:b1:0b:73:8b:46:
         05:82:2b:10:fd:16:61:97:39:69:0c:d8:83:3e:f4:69:92:d1:
         9e:0e:d3:be:26:84:ce:a9:e3:32:02:8e:1b:55:2d:10:27:ac:
         14:74:b3:a6:20:88:d7:f9:3d:00:e6:38:2a:c6:9e:20:6e:0c:
         e2:f8:5c:35:e6:2c:48:07:9a:8d:10:2b:8f:6c:e4:5a:9d:04:
         43:56:dd:40:dc:55:6f:75:29:16:81:eb:b5:45:60:0d:9f:51:
         fc:aa:6a:5f:53:c4:fb:03:36:9e:16:1d:a3:37:f7:85:f9:b1:
         8b:fb:35:d8:f2:6d:67:87:07:93:46:a7:8a:2d:47:50:a7:85:
         37:3b:dd:f5:76:32:3d:ca:85:97:2b:5a:6e:02:55:99:bc:42:
         b2:22:13:78:cd:fc:35:e6:b2:2c:af:cc:ab:5e:8a:68:ce:49:
         46:d6:00:11:d0:a6:e3:e6:44:38:19:1f:15:53:9a:a1:13:83:
         fc:a6:10:6d:7f:5c:1f:03:42:41:08:5a:12:26:c8:e7:63:1c:
         80:64:ff:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:23:23 2026 by rpki-client