Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft
File:                     2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft (raw, json)
Hash identifier:          x0VjJUHQvmmpAFRXDIGBnMbdw06++T8/pWT527uPlIc=
Subject key identifier:   E7:B2:00:88:08:9E:6C:9C:0E:CB:5A:07:9A:D2:DF:39:2B:12:69:F9
Authority key identifier: 2C:CA:57:69:76:D5:D9:FE:66:F5:78:37:7B:F7:B7:8E:42:64:A9:A1
Certificate issuer:       /CN=2CCA576976D5D9FE66F578377BF7B78E4264A9A1
Certificate serial:       34EB1ED9FE3250C671767093C6403ACE95BDB131
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft
Manifest number:          B7
Signing time:             Wed 16 Sep 2026 22:36:54 +0000
Manifest this update:     Wed 16 Sep 2026 22:31:54 +0000
Manifest next update:     Thu 17 Sep 2026 23:00:54 +0000
Files and hashes:         1: 2CCA576976D5D9FE66F578377BF7B78E4264A9A1.crl (hash: dIkZTl2PHJFkCXox7pwz0gkooqufqPLVltKGv8KIaDY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.crl
                          rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:eb:1e:d9:fe:32:50:c6:71:76:70:93:c6:40:3a:ce:95:bd:b1:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CCA576976D5D9FE66F578377BF7B78E4264A9A1
        Validity
            Not Before: Sep 16 22:31:54 2026 GMT
            Not After : Sep 17 23:00:54 2026 GMT
        Subject: CN=E7B20088089E6C9C0ECB5A079AD2DF392B1269F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:01:14:77:7b:d3:59:f7:ec:18:cb:d4:36:
                    3b:52:f9:ad:59:0d:e1:ee:17:36:b5:fe:19:b4:9c:
                    49:ba:dc:78:7d:d8:18:da:fe:4f:01:eb:8f:99:6e:
                    49:be:2d:f9:3e:da:e7:41:b7:59:33:52:9e:2b:34:
                    c4:ef:6b:9b:33:ee:0d:50:27:76:7a:df:7f:91:0f:
                    ee:45:4e:60:79:a2:0a:33:55:c1:c5:2f:ca:ac:f1:
                    d5:ae:79:d2:b4:1d:aa:77:7a:48:81:86:d2:75:b3:
                    48:3d:a4:de:36:06:14:d2:0b:af:3b:5d:69:c7:ff:
                    95:6f:03:1a:0d:18:05:79:20:31:89:d0:f6:b6:29:
                    51:8e:cf:0b:4c:23:99:d4:c6:07:d7:b4:75:cf:d0:
                    34:15:74:e4:32:13:2b:ca:8f:e6:17:47:d1:4a:08:
                    85:96:bf:d6:b8:f3:05:2c:67:6d:d6:ef:5c:3e:3c:
                    8c:b8:e5:1c:e8:f3:54:42:05:50:30:6b:ab:4c:02:
                    97:da:ef:81:c5:69:9d:d8:e6:8a:0c:bc:6e:18:d7:
                    15:8d:35:02:2f:41:a6:ac:d5:e1:a4:dd:46:fe:a9:
                    a1:08:de:2d:6a:26:bc:9e:aa:71:fc:4b:a5:38:74:
                    3f:a4:fc:d0:86:8d:ac:20:5f:c2:51:bb:9f:cb:47:
                    ab:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B2:00:88:08:9E:6C:9C:0E:CB:5A:07:9A:D2:DF:39:2B:12:69:F9
            X509v3 Authority Key Identifier:
                keyid:2C:CA:57:69:76:D5:D9:FE:66:F5:78:37:7B:F7:B7:8E:42:64:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:bd:27:70:0b:f8:10:af:3b:8f:77:9c:56:d5:35:cb:c4:ef:
         dc:fa:2e:da:5c:4e:6b:06:02:dd:3b:fc:79:f0:da:db:f8:85:
         a2:81:cd:13:c7:4a:04:19:f5:de:46:57:77:97:ec:86:f5:10:
         bc:e3:b6:85:19:3f:86:8b:58:fa:0f:3c:8d:52:d9:82:0c:df:
         a7:31:55:f5:32:59:e0:57:73:8a:8f:ea:24:32:ae:70:54:04:
         3b:b4:3d:2c:af:f0:ab:41:c9:86:25:d0:3b:8a:e1:ed:97:b1:
         f8:0a:6c:90:f3:51:af:2c:56:33:69:bd:5a:d0:74:65:56:09:
         62:51:c7:09:44:39:4c:ac:a9:2e:75:66:24:1d:74:69:83:c9:
         f4:ce:9d:f3:9d:4b:92:e8:69:b5:b8:2a:d8:39:9b:b4:27:68:
         07:34:2a:d3:53:69:e1:e6:e2:55:da:72:43:f6:94:bd:ed:37:
         f6:88:41:a7:8a:e1:43:86:15:21:08:d5:e5:69:42:be:cf:ad:
         c7:e4:66:08:2f:21:e0:ad:59:bc:f7:b9:61:61:be:6a:3b:c5:
         1f:1c:91:1e:a0:1f:e7:a7:2a:f0:16:14:0d:5d:28:fe:7f:d6:
         e3:38:fb:d8:87:e7:48:3d:f4:4b:a9:12:80:39:d2:06:5d:7c:
         61:9b:c5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:22:07 2026 by rpki-client