Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft
File:                     785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft (raw, json)
Hash identifier:          slxF729PfffYKm3Chd2isckxTp6KNoX6duuqNdvORiA=
Subject key identifier:   20:28:8F:50:31:FE:3C:45:6A:F8:D7:47:AB:20:10:B2:7D:23:F8:92
Authority key identifier: 78:50:24:DB:7A:6F:C2:EE:9E:4D:4A:40:97:68:D7:9A:95:22:73:FC
Certificate issuer:       /CN=785024DB7A6FC2EE9E4D4A409768D79A952273FC
Certificate serial:       7AF84DDC2850BFB52605B6DE1EF638F51744FA31
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785024DB7A6FC2EE9E4D4A409768D79A952273FC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft
Manifest number:          ED
Signing time:             Mon 26 Oct 2026 00:32:31 +0000
Manifest this update:     Mon 26 Oct 2026 00:27:31 +0000
Manifest next update:     Tue 27 Oct 2026 01:23:31 +0000
Files and hashes:         1: 785024DB7A6FC2EE9E4D4A409768D79A952273FC.crl (hash: QVV5uPR7mg9h7IVAqlftlMPLw7wv1BRnFdI555tPoiY=)
                          2: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: yOnWZNbCc8o1mKC0JiqTlN6+Y33PQ/Kc+NLmWQanxsY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.crl
                          rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785024DB7A6FC2EE9E4D4A409768D79A952273FC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f8:4d:dc:28:50:bf:b5:26:05:b6:de:1e:f6:38:f5:17:44:fa:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785024DB7A6FC2EE9E4D4A409768D79A952273FC
        Validity
            Not Before: Oct 26 00:27:31 2026 GMT
            Not After : Oct 27 01:23:31 2026 GMT
        Subject: CN=20288F5031FE3C456AF8D747AB2010B27D23F892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:d2:c3:28:00:89:20:cf:3e:1b:bf:10:e9:
                    30:23:1b:a6:ef:06:01:35:b7:aa:9f:71:73:3d:24:
                    59:d8:1e:22:b3:ee:f1:0c:5b:6d:3f:60:5c:37:e8:
                    e3:ac:67:8f:0a:8e:94:07:d1:0e:4a:7c:2c:4d:49:
                    3e:b5:ee:05:ea:2b:4f:69:20:83:bc:87:2e:d6:eb:
                    da:00:23:3c:a6:b2:8c:c0:c1:b6:f2:2d:99:1f:63:
                    1a:eb:d0:d5:6e:03:20:6a:7a:a8:74:5a:12:74:52:
                    7a:d3:71:7c:c7:5f:a3:df:90:3c:c3:01:07:b6:9c:
                    6b:af:80:ed:5d:7a:df:63:e4:f2:24:e5:65:cf:f3:
                    23:f5:fb:cb:f3:15:0e:c7:63:33:15:47:b8:77:27:
                    51:d8:30:ef:3c:0b:5d:6a:69:93:0d:cc:da:d6:0e:
                    10:6e:3f:f3:f4:20:9c:69:dd:f8:bf:79:59:54:d2:
                    30:95:ba:07:f2:04:e7:4c:49:f0:b3:e8:8c:df:e0:
                    60:23:3c:7e:ba:be:91:8b:f3:79:4a:80:13:53:6c:
                    1b:22:24:dc:6c:82:da:d7:af:d0:61:df:d4:9d:36:
                    13:a2:3e:c6:ed:c6:37:2d:b7:d1:3e:e7:af:9f:18:
                    02:6e:90:80:62:07:2f:15:0f:26:af:70:52:5c:b1:
                    4d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:28:8F:50:31:FE:3C:45:6A:F8:D7:47:AB:20:10:B2:7D:23:F8:92
            X509v3 Authority Key Identifier:
                keyid:78:50:24:DB:7A:6F:C2:EE:9E:4D:4A:40:97:68:D7:9A:95:22:73:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785024DB7A6FC2EE9E4D4A409768D79A952273FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:42:b5:2a:ac:90:1e:d9:30:9c:c4:04:2d:9a:a9:2f:90:7c:
         bd:f0:e9:45:34:cd:2d:5e:6b:a8:1a:6d:08:00:8e:aa:69:b1:
         ec:c0:f2:68:42:99:da:23:59:7d:38:77:7e:fd:8c:2b:f2:d5:
         81:9a:a5:29:b5:e9:7b:79:cd:ab:9b:6b:96:6c:24:c1:88:a8:
         70:fb:12:36:a3:19:e7:0f:0f:53:25:1a:fc:34:bb:6d:95:0f:
         81:77:01:6f:d4:53:92:9e:3f:ff:48:a7:1f:d0:ca:a4:14:f3:
         69:60:18:70:52:bb:59:dd:fe:47:99:b9:43:a6:b8:02:c2:ed:
         8a:6a:45:24:1f:42:5b:db:02:2d:3d:7c:05:70:2f:7f:c2:a6:
         44:a4:91:6a:25:7f:90:e7:4c:b5:42:7f:f5:8f:db:3d:f2:59:
         66:40:90:72:9d:9a:c0:2a:7f:94:01:10:c5:78:ec:23:03:3b:
         0b:c7:5b:13:98:ce:f1:31:ee:af:f6:2c:96:c1:91:7c:d7:5a:
         80:7f:b8:f3:f2:ab:6d:2b:83:08:0c:45:25:e2:d1:2d:74:ea:
         c5:16:c6:5c:05:28:15:75:d2:b7:2b:c8:40:ab:e1:d4:c8:34:
         7e:c9:37:85:31:d5:b6:0e:91:c1:8c:ae:1c:ee:61:7f:ef:55:
         c8:a4:bb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:26:25 2026 by rpki-client