Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft
File:                     01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft (raw, json)
Hash identifier:          FAY1q4aOi5BxCnvl647fqN97kgAT7Oo9WyOnk1Q19zI=
Subject key identifier:   07:E6:78:B6:47:B8:CB:36:97:BE:E2:78:9F:2B:0D:52:6C:8E:D6:D6
Authority key identifier: 01:F3:24:EF:5A:8F:6A:CC:92:17:4D:6A:EE:D1:12:9E:16:23:A6:16
Certificate issuer:       /CN=01F324EF5A8F6ACC92174D6AEED1129E1623A616
Certificate serial:       5A5B42BEB57572D9045F50446E87DDE5C0F385E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft
Manifest number:          DA
Signing time:             Mon 12 Oct 2026 21:38:47 +0000
Manifest this update:     Mon 12 Oct 2026 21:33:47 +0000
Manifest next update:     Tue 13 Oct 2026 22:29:47 +0000
Files and hashes:         1: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (hash: VsXO58FTVSxasgY1Mnu3yqI7EZkkcRqpzQFvmDd4qLs=)
                          2: 01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl (hash: gLWgTc1WdwOm7zB8wlLLRPaBpwthAQy/6wms+KLlJXA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl
                          rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 22:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:5b:42:be:b5:75:72:d9:04:5f:50:44:6e:87:dd:e5:c0:f3:85:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01F324EF5A8F6ACC92174D6AEED1129E1623A616
        Validity
            Not Before: Oct 12 21:33:47 2026 GMT
            Not After : Oct 13 22:29:47 2026 GMT
        Subject: CN=07E678B647B8CB3697BEE2789F2B0D526C8ED6D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:90:b2:1a:5e:33:d9:eb:4b:68:1b:38:a9:dd:
                    66:cd:e9:71:d2:dc:eb:1d:4a:ef:16:07:d9:8b:67:
                    c2:8d:ee:dd:36:48:67:81:09:99:f0:7c:77:e8:07:
                    8f:26:47:15:2c:ad:ec:cd:a8:3f:51:51:6c:9b:f5:
                    4b:a5:73:b5:76:b5:db:cb:9b:b5:69:5b:02:3a:ac:
                    53:49:52:03:8d:86:3b:17:4e:9d:48:05:b5:4a:14:
                    04:6e:b1:23:d6:bb:4e:02:d3:9d:75:06:74:ad:e0:
                    f1:e7:d9:e0:41:1f:f2:54:bf:3e:77:0d:08:d5:6d:
                    b0:9b:a5:60:64:08:52:32:70:19:a7:d7:ed:98:f7:
                    9b:70:7b:fc:75:d2:a2:a4:7b:c8:0f:7d:94:e5:b2:
                    bd:7a:a0:5d:01:04:9b:a3:74:1b:1a:d2:fe:c4:3a:
                    07:0c:3d:6c:40:53:5d:ba:2f:7b:c5:f9:8d:9f:b8:
                    dd:61:11:c3:8e:70:20:37:c1:4a:7b:fd:41:87:5e:
                    89:0c:81:55:34:13:1f:4e:73:05:0c:68:8c:81:d5:
                    7b:44:21:d8:2b:56:f0:00:98:30:3b:07:c3:42:05:
                    4c:70:7b:38:69:78:56:fb:0f:2f:fc:f8:db:8b:fa:
                    be:48:bf:17:be:82:21:29:c2:13:a9:4e:70:9a:13:
                    e2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E6:78:B6:47:B8:CB:36:97:BE:E2:78:9F:2B:0D:52:6C:8E:D6:D6
            X509v3 Authority Key Identifier:
                keyid:01:F3:24:EF:5A:8F:6A:CC:92:17:4D:6A:EE:D1:12:9E:16:23:A6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e4:14:26:e8:11:18:9b:8c:5f:94:9c:f9:f7:ca:84:4b:07:
         95:68:75:ee:e7:8b:f1:67:79:67:df:5c:91:83:ed:63:4b:73:
         e1:ff:94:35:b0:ed:10:4f:72:51:38:06:ad:78:48:f4:45:e4:
         31:3e:df:c9:f4:fb:54:0e:9d:2d:ec:2f:ed:44:2e:2a:e6:ea:
         59:61:a4:3b:db:95:06:94:43:57:6e:ae:a4:ee:0f:ff:cd:d3:
         0b:86:e5:ec:22:ca:c3:49:a2:c8:7e:d3:57:cc:dc:a4:0f:e0:
         e1:ed:17:3d:92:b2:5b:5b:3a:8e:81:d3:fd:61:33:cc:c5:67:
         f9:56:4e:6b:09:b2:b6:77:eb:36:25:f8:ad:e9:44:9f:0d:82:
         b4:24:bb:1e:7e:86:d2:b3:13:d1:30:c0:f9:8f:0d:53:1b:d2:
         6e:d1:81:6a:b5:41:11:b1:1c:dc:75:54:08:f5:a9:a3:2e:f3:
         8d:31:40:a2:13:e5:e6:f4:1f:00:7e:65:75:11:9a:56:bf:8f:
         8f:8d:e3:ff:76:7a:6d:03:a4:ae:98:fc:17:34:2f:a6:b1:a2:
         60:08:7d:05:7c:34:d0:e7:65:9f:47:70:2e:95:92:a8:c0:88:
         f5:53:20:c1:a9:4f:f0:a7:9f:4f:d7:9d:9d:24:75:23:b8:2e:
         9a:bb:b2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:13:00 2026 by rpki-client