Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft
File:                     F24C627AA0685F68F1420C7F28860265CA26D303.mft (raw, json)
Hash identifier:          u70iGSpxXlQkEdYO4XRp38wd1tPMa/vqFHgzgT6qqT8=
Subject key identifier:   82:23:28:77:41:7A:21:11:7D:0F:A1:12:46:E8:41:7A:C7:02:8B:09
Authority key identifier: F2:4C:62:7A:A0:68:5F:68:F1:42:0C:7F:28:86:02:65:CA:26:D3:03
Certificate issuer:       /CN=F24C627AA0685F68F1420C7F28860265CA26D303
Certificate serial:       3701FD76AAE518E6BD61FFDF4EC1ABBD8332A0FF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft
Manifest number:          EB
Signing time:             Sat 24 Oct 2026 23:18:11 +0000
Manifest this update:     Sat 24 Oct 2026 23:13:11 +0000
Manifest next update:     Mon 26 Oct 2026 00:04:11 +0000
Files and hashes:         1: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: wLSLqNMEk1+oAWfvj1SZ4wZH+IOgpP8sHsJQIvQCHuE=)
                          2: F24C627AA0685F68F1420C7F28860265CA26D303.crl (hash: Yz3UEMD0Ph1G60z3PBqx0qG5JUjBxijcTkA2XqFMNMw=)
                          3: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: lmv+Kyq7Ss/MkyIqM6l/zx8khXHo4uyu4TTfeaMD1h4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.crl
                          rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 19:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:01:fd:76:aa:e5:18:e6:bd:61:ff:df:4e:c1:ab:bd:83:32:a0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24C627AA0685F68F1420C7F28860265CA26D303
        Validity
            Not Before: Oct 24 23:13:11 2026 GMT
            Not After : Oct 26 00:04:11 2026 GMT
        Subject: CN=82232877417A21117D0FA11246E8417AC7028B09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:14:08:f4:6a:6a:2d:18:75:15:1e:3f:d3:ff:
                    8f:ac:61:34:9e:70:20:39:5c:79:15:09:05:6e:c6:
                    c6:b6:fe:4f:82:81:f0:94:5d:74:ef:73:c2:e9:2e:
                    0c:ac:78:a5:cb:07:e4:26:78:ce:a1:17:d0:31:e4:
                    55:62:06:f8:fd:ad:de:92:fe:ee:c1:d4:26:bd:a8:
                    7c:6c:22:bc:89:13:4a:09:1b:d3:9d:86:09:b6:71:
                    20:f0:d2:ac:1e:31:ab:9b:23:09:99:ba:9a:3d:7a:
                    71:15:5f:30:00:90:40:be:86:ba:f4:ad:df:55:6d:
                    fd:f7:31:db:16:08:33:62:5c:3d:da:f0:1b:81:ed:
                    ab:64:66:db:29:2c:c3:1e:04:4a:04:9f:20:58:05:
                    cd:97:fb:10:3e:c6:3f:6f:0a:fd:0c:48:e3:d0:28:
                    34:d1:ee:76:a0:42:c4:e4:c2:be:93:61:f6:2b:ee:
                    df:e1:b1:a1:f8:bb:3f:d4:0f:5a:8e:50:7a:6e:b8:
                    df:99:a5:72:aa:07:d8:50:1d:7b:db:e8:0c:bf:9a:
                    f0:45:68:09:28:97:22:6a:eb:f2:82:2e:b2:c8:4f:
                    bf:ed:21:98:1d:a1:5e:ac:00:c1:1d:82:59:a1:c1:
                    0c:03:4c:5d:8c:04:88:6c:43:27:a7:99:be:34:92:
                    0c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:23:28:77:41:7A:21:11:7D:0F:A1:12:46:E8:41:7A:C7:02:8B:09
            X509v3 Authority Key Identifier:
                keyid:F2:4C:62:7A:A0:68:5F:68:F1:42:0C:7F:28:86:02:65:CA:26:D3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b4:81:2b:02:73:7e:0f:03:4c:86:09:31:f5:86:6b:5b:7c:
         e8:15:ca:39:a0:6f:a3:c1:ea:19:40:1e:5e:28:3c:37:27:41:
         73:1d:30:01:68:73:f1:ce:fb:9a:6b:06:3a:b7:53:ac:b4:f4:
         e7:43:67:d0:b5:17:ff:28:7b:51:66:f9:7a:70:4e:5b:e1:a7:
         b5:65:a0:3b:f5:4d:04:74:be:1a:8a:9a:48:7e:4f:15:fa:cd:
         53:2b:e5:11:e7:ba:04:e2:76:a7:dd:7e:0a:37:2b:f2:3f:e6:
         f5:67:6c:d8:20:d4:36:27:9c:bf:22:c5:f0:6a:e4:90:a3:79:
         41:37:8e:15:df:10:fd:a5:8b:b0:d3:91:fd:54:91:29:24:fb:
         e7:f3:cc:34:d6:19:58:b7:cf:1b:77:de:ce:55:47:7e:22:b8:
         cd:7a:59:20:37:ba:97:28:7d:1d:a5:f0:d4:8f:97:fd:97:6e:
         6d:29:ab:2e:c4:d4:cc:dd:f5:98:14:f6:bd:e9:5b:ed:02:23:
         6f:28:12:bc:12:65:f9:b4:8b:ba:6a:ce:d8:d3:83:b1:80:af:
         b9:38:8f:ac:39:2e:a8:d6:8c:4d:ad:48:cf:0d:48:23:15:04:
         5a:76:53:c3:29:0c:16:01:3d:fd:7a:2c:f3:0f:60:01:61:f5:
         73:bf:38:2e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNwH9dqrlGOa9Yf/fTsGrvYMyoP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI0QzYyN0FBMDY4NUY2OEYxNDIwQzdGMjg4NjAyNjVD
QTI2RDMwMzAeFw0yNjEwMjQyMzEzMTFaFw0yNjEwMjYwMDA0MTFaMDMxMTAvBgNV
BAMTKDgyMjMyODc3NDE3QTIxMTE3RDBGQTExMjQ2RTg0MTdBQzcwMjhCMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjFAj0amotGHUVHj/T/4+sYTSe
cCA5XHkVCQVuxsa2/k+CgfCUXXTvc8LpLgyseKXLB+QmeM6hF9Ax5FViBvj9rd6S
/u7B1Ca9qHxsIryJE0oJG9Odhgm2cSDw0qweMaubIwmZupo9enEVXzAAkEC+hrr0
rd9Vbf33MdsWCDNiXD3a8BuB7atkZtspLMMeBEoEnyBYBc2X+xA+xj9vCv0MSOPQ
KDTR7nagQsTkwr6TYfYr7t/hsaH4uz/UD1qOUHpuuN+ZpXKqB9hQHXvb6Ay/mvBF
aAkolyJq6/KCLrLIT7/tIZgdoV6sAMEdglmhwQwDTF2MBIhsQyenmb40kgwnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgiMod0F6IRF9D6ESRuhBescCiwkwHwYDVR0j
BBgwFoAU8kxieqBoX2jxQgx/KIYCZcom0wMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjRhYWUzZjAtOWM3MC00MmZjLWFlM2UtYmI1OTAwNDZiMGZlLzAvRjI0QzYyN0FB
MDY4NUY2OEYxNDIwQzdGMjg4NjAyNjVDQTI2RDMwMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMjRDNjI3QUEwNjg1RjY4RjE0MjBDN0YyODg2MDI2NUNBMjZE
MzAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRhYWUzZjAtOWM3MC00MmZjLWFl
M2UtYmI1OTAwNDZiMGZlLzAvRjI0QzYyN0FBMDY4NUY2OEYxNDIwQzdGMjg4NjAy
NjVDQTI2RDMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIy0gSsCc34PA0yGCTH1hmtbfOgVyjmgb6PB
6hlAHl4oPDcnQXMdMAFoc/HO+5prBjq3U6y09OdDZ9C1F/8oe1Fm+XpwTlvhp7Vl
oDv1TQR0vhqKmkh+TxX6zVMr5RHnugTidqfdfgo3K/I/5vVnbNgg1DYnnL8ixfBq
5JCjeUE3jhXfEP2li7DTkf1UkSkk++fzzDTWGVi3zxt33s5VR34iuM16WSA3upco
fR2l8NSPl/2Xbm0pqy7E1Mzd9ZgU9r3pW+0CI28oErwSZfm0i7pqztjTg7GAr7k4
j6w5LqjWjE2tSM8NSCMVBFp2U8MpDBYBPf16LPMPYAFh9XO/OC4=
-----END CERTIFICATE-----
Generated at Sun Oct 25 10:42:08 2026 by rpki-client