Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/F690A110357924F87D7056A8B32736A17D483A45.mft
File:                     F690A110357924F87D7056A8B32736A17D483A45.mft (raw, json)
Hash identifier:          iPmjCuTzBheLoEixhkDVSArx5di1ty4IlRijMdsKVBM=
Subject key identifier:   EA:43:C1:37:D0:92:A6:80:83:45:70:CB:09:89:0B:1D:5D:22:B8:AD
Authority key identifier: F6:90:A1:10:35:79:24:F8:7D:70:56:A8:B3:27:36:A1:7D:48:3A:45
Certificate issuer:       /CN=F690A110357924F87D7056A8B32736A17D483A45
Certificate serial:       66B21520005E1AE658B76743A2681313387F086A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F690A110357924F87D7056A8B32736A17D483A45.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/F690A110357924F87D7056A8B32736A17D483A45.mft
Manifest number:          BA
Signing time:             Thu 17 Sep 2026 07:17:26 +0000
Manifest this update:     Thu 17 Sep 2026 07:12:26 +0000
Manifest next update:     Fri 18 Sep 2026 10:58:26 +0000
Files and hashes:         1: 3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa (hash: KlBhDk/CuJvqKM8GQCLLnqyebm4H3/FO6ZO0CFEwBNk=)
                          2: 3130332e3137372e3231342e302f32342d3234203d3e20313437313633.roa (hash: +SYBYn6HDb6pQqKeC5onXzkMcxykXGu7bZqRDkq2FM8=)
                          3: 3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa (hash: s6eJpsd07fVOpv5bnSTsV6HF0hMDI9QhxKFQra/tpWI=)
                          4: F690A110357924F87D7056A8B32736A17D483A45.crl (hash: 7LT/zH1rw3PgUDuQjRCTY23R099NOHVd0hpqqVmsyBQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/F690A110357924F87D7056A8B32736A17D483A45.crl
                          rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/F690A110357924F87D7056A8B32736A17D483A45.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F690A110357924F87D7056A8B32736A17D483A45.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b2:15:20:00:5e:1a:e6:58:b7:67:43:a2:68:13:13:38:7f:08:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F690A110357924F87D7056A8B32736A17D483A45
        Validity
            Not Before: Sep 17 07:12:26 2026 GMT
            Not After : Sep 18 10:58:26 2026 GMT
        Subject: CN=EA43C137D092A680834570CB09890B1D5D22B8AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3c:f5:c7:55:36:d3:12:4e:65:22:fa:5d:b3:
                    54:df:0b:c5:64:de:e1:a5:45:69:b2:5b:b8:69:6f:
                    f1:a5:ed:73:05:11:da:75:74:4d:6d:06:4c:b0:0f:
                    bb:c4:30:91:c4:34:7d:2f:be:00:1d:c1:2d:70:66:
                    99:fc:d9:d6:20:59:99:d9:cb:0c:e9:8f:9a:13:c6:
                    34:8e:60:10:fa:76:72:b2:d0:be:99:12:aa:6f:06:
                    72:62:8e:8c:78:72:01:84:0e:3b:69:c1:7a:af:ac:
                    31:76:6d:9e:f0:f1:70:5e:e4:44:b7:aa:fc:23:0a:
                    f4:f7:85:20:2b:38:64:a2:1c:7d:18:72:b8:f4:7b:
                    61:da:ed:76:f6:bd:3f:65:df:81:f9:e2:b6:57:00:
                    a4:a5:c7:0c:f4:7b:44:b0:4d:74:d1:8a:18:ae:a4:
                    25:a1:0b:dd:4c:4b:47:1e:9c:04:58:4a:5e:c7:60:
                    9d:3b:ec:0d:2d:8f:08:1d:d7:a1:61:49:fa:59:32:
                    45:1e:d6:b5:47:4b:f3:57:a3:92:56:02:0c:f8:4c:
                    48:62:5d:72:5a:e9:e4:44:8b:05:40:cd:de:a7:5b:
                    85:d9:70:f0:99:d7:64:30:dc:a2:64:8d:e6:06:fd:
                    06:72:eb:6d:ad:fd:a6:1a:3a:b2:38:3b:10:83:88:
                    37:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:43:C1:37:D0:92:A6:80:83:45:70:CB:09:89:0B:1D:5D:22:B8:AD
            X509v3 Authority Key Identifier:
                keyid:F6:90:A1:10:35:79:24:F8:7D:70:56:A8:B3:27:36:A1:7D:48:3A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/F690A110357924F87D7056A8B32736A17D483A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F690A110357924F87D7056A8B32736A17D483A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/F690A110357924F87D7056A8B32736A17D483A45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c9:18:ba:64:93:c3:4a:39:87:61:12:53:36:7c:17:a8:95:
         db:96:44:db:a4:6d:55:c2:32:26:66:2b:12:10:0d:7b:ae:91:
         a4:59:57:64:cd:64:f6:c5:d3:12:33:de:3b:1b:b1:ec:69:3c:
         17:69:2f:7e:23:df:50:61:b4:df:7d:57:70:73:4c:95:70:a8:
         71:0b:9a:46:45:68:51:fd:68:eb:df:38:6b:b6:14:c2:45:0c:
         2a:24:36:db:37:7a:a0:e5:2e:bb:58:eb:d4:58:55:bc:ea:04:
         6a:1b:32:f3:cf:6a:a6:ff:fb:6a:c1:d5:c3:35:48:26:9e:48:
         60:20:f2:8c:2a:e7:f1:44:f8:8a:af:63:03:7d:0d:25:98:e0:
         a1:47:de:33:41:1c:70:72:f2:2d:57:d7:e9:77:c6:e6:36:79:
         97:d5:ba:f7:ce:a6:1c:90:24:af:f6:d9:bc:1f:80:d2:7b:5e:
         e6:cf:5f:86:b5:c1:6a:e9:52:8a:62:68:40:74:4d:29:50:d5:
         b9:0e:d3:58:ec:20:eb:87:f2:f7:7f:02:9e:36:af:ce:59:e0:
         4f:d2:90:ad:da:61:59:7f:ed:91:6e:a9:78:8b:01:65:90:45:
         b2:c5:60:20:40:cf:2b:95:7c:f6:81:29:19:f2:f0:4d:b9:4a:
         90:95:bd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:23:39 2026 by rpki-client