Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft
File:                     CC4A3B86531912A00DCFBF94884369F58244CFCD.mft (raw, json)
Hash identifier:          6tMgssYHoEqMqWyRC2O/zznootjFtFSkZZZDNbB70lY=
Subject key identifier:   57:23:28:45:F4:96:AA:09:84:AF:DA:AB:24:81:62:96:AD:57:44:B6
Authority key identifier: CC:4A:3B:86:53:19:12:A0:0D:CF:BF:94:88:43:69:F5:82:44:CF:CD
Certificate issuer:       /CN=CC4A3B86531912A00DCFBF94884369F58244CFCD
Certificate serial:       1DEBA3DCC473DF209E7A96D2127511705296CF4B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft
Manifest number:          EB
Signing time:             Sun 25 Oct 2026 12:01:33 +0000
Manifest this update:     Sun 25 Oct 2026 11:56:33 +0000
Manifest next update:     Mon 26 Oct 2026 14:18:33 +0000
Files and hashes:         1: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: 6EcU8NSCnoNhvC4s40Zznvtp988+13OVsM3urPI8O18=)
                          2: CC4A3B86531912A00DCFBF94884369F58244CFCD.crl (hash: hKXfPY72VtTVVZA7k3tipEWmtw+6VroQDIxhPd4e6jI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.crl
                          rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 14:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:eb:a3:dc:c4:73:df:20:9e:7a:96:d2:12:75:11:70:52:96:cf:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4A3B86531912A00DCFBF94884369F58244CFCD
        Validity
            Not Before: Oct 25 11:56:33 2026 GMT
            Not After : Oct 26 14:18:33 2026 GMT
        Subject: CN=57232845F496AA0984AFDAAB24816296AD5744B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fb:28:ac:d1:7b:99:66:a7:0d:ae:b3:c8:d3:
                    05:96:4e:87:fc:78:91:41:bd:3d:de:14:ad:b9:c2:
                    f9:19:c1:c8:d2:36:be:f0:26:3f:5c:55:c0:0e:80:
                    f2:a7:d7:92:2f:9a:23:65:c7:b7:a9:4d:59:b3:dd:
                    8d:b2:8e:64:af:46:bf:12:f5:83:3f:73:14:c5:c1:
                    2c:a4:c0:b6:7f:f8:1d:68:7f:ff:a6:33:74:21:99:
                    d8:61:d2:4b:78:4f:e5:86:83:36:07:02:f9:55:0d:
                    22:9b:16:6b:bf:9b:c2:dd:83:a3:c1:52:57:ff:ca:
                    b2:8b:d4:02:06:8e:05:48:62:cd:63:2b:30:7d:46:
                    ee:eb:7a:9b:db:63:ca:48:a3:1f:4f:aa:11:ff:9d:
                    61:02:89:47:83:74:70:b8:bb:70:22:6c:57:a5:9d:
                    aa:fb:23:8d:d0:d6:25:fc:a6:7c:74:b9:1d:85:ed:
                    48:c4:eb:90:50:0a:1a:a7:f9:97:03:28:d3:5f:f2:
                    94:65:8e:e0:d3:78:7e:45:50:40:df:36:79:51:44:
                    7b:30:b1:7e:db:e7:78:99:bf:d7:18:ab:ea:03:b8:
                    9b:c8:d7:9a:76:67:23:8b:ff:62:83:19:4e:d6:d5:
                    87:ad:0a:36:4f:2b:32:e2:a8:fc:ac:c6:12:0e:e0:
                    ac:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:23:28:45:F4:96:AA:09:84:AF:DA:AB:24:81:62:96:AD:57:44:B6
            X509v3 Authority Key Identifier:
                keyid:CC:4A:3B:86:53:19:12:A0:0D:CF:BF:94:88:43:69:F5:82:44:CF:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:65:25:4f:88:95:aa:da:6d:44:97:32:9d:bf:45:91:2e:4e:
         b2:1b:98:5b:c7:33:8d:8d:80:41:12:af:69:72:9f:86:7a:51:
         8b:39:16:95:b8:16:cf:4d:78:37:7c:35:ae:2d:95:90:66:e3:
         89:bc:e4:04:7c:ea:00:c4:0a:82:68:9b:01:11:80:06:4f:15:
         96:72:13:e5:bf:9b:51:a7:08:ec:1a:a6:38:46:46:96:1b:a3:
         ba:f2:37:7c:87:70:17:5c:9d:45:6a:7d:0e:58:d8:81:fa:ee:
         e1:e6:62:f7:a1:9d:ca:80:1b:87:29:e1:e5:c9:8f:5e:3e:d5:
         a7:e8:2f:8e:94:ff:ac:55:b7:77:b2:cd:8d:23:6b:05:73:71:
         ed:50:2e:43:63:0d:70:93:ad:4f:5c:6d:eb:8d:28:f0:d0:f1:
         38:c2:30:d1:92:42:da:9d:a4:a1:ff:77:4b:61:9a:0a:46:23:
         41:97:22:fa:84:01:f9:2b:ec:b5:9c:cc:7c:b4:4a:19:7a:f8:
         15:d5:d3:6d:70:d2:00:06:11:ec:56:95:c1:6a:d8:d6:b5:5c:
         dd:fe:6c:dd:d6:d5:c5:7b:8c:66:fb:07:12:20:83:91:07:f9:
         d2:72:88:eb:6d:76:13:3b:3c:74:25:7a:fb:1c:6a:f7:62:52:
         a1:18:8d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:38 2026 by rpki-client