Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft
File:                     C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft (raw, json)
Hash identifier:          c41E9rr8/1g6gA9PRGAmleg06Pz79qtBTh+lyum57xI=
Subject key identifier:   D3:39:B1:83:D5:E9:99:FC:FC:2A:A8:91:BC:F0:E3:AB:1B:DE:A2:F6
Authority key identifier: C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B
Certificate issuer:       /CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B
Certificate serial:       034D8C90205CC65CF3CCDAF7F8888130F3969562
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft
Manifest number:          92
Signing time:             Wed 19 Aug 2026 10:41:43 +0000
Manifest this update:     Wed 19 Aug 2026 10:36:43 +0000
Manifest next update:     Thu 20 Aug 2026 13:39:43 +0000
Files and hashes:         1: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: /TEOvHICrNlzqHKdTSQimWH4eZASaMfqjyKyEfSs2B4=)
                          2: C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl (hash: Pkd65oeCgvht7S1fF0zt8JlDPcRHAQncm+0Jbe6+wuM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl
                          rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Aug 2026 11:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4d:8c:90:20:5c:c6:5c:f3:cc:da:f7:f8:88:81:30:f3:96:95:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B
        Validity
            Not Before: Aug 19 10:36:43 2026 GMT
            Not After : Aug 20 13:39:43 2026 GMT
        Subject: CN=D339B183D5E999FCFC2AA891BCF0E3AB1BDEA2F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:88:6f:86:37:5f:f6:17:06:62:03:1c:06:37:
                    12:39:93:cb:54:75:3a:b1:46:9f:c7:a0:f4:ea:6d:
                    e9:e1:d3:ef:8c:99:f7:dc:60:cf:55:80:ad:05:70:
                    5c:a9:df:98:5c:31:5d:ed:76:33:d5:15:ab:9d:45:
                    c6:2a:52:ad:c0:df:60:4b:82:77:8b:70:71:15:01:
                    2d:19:ec:9e:92:70:e1:89:3c:24:04:63:64:6f:7e:
                    47:c1:6a:6f:f8:39:9f:20:d7:57:be:26:0d:84:bd:
                    7c:02:37:a9:f8:3a:0d:2f:1a:89:1b:2d:b9:01:32:
                    59:a6:59:1f:1b:6d:0b:3a:11:f0:5e:ad:34:52:19:
                    f4:c0:5c:65:84:d3:b6:bf:b6:b7:22:43:1a:51:29:
                    ae:74:8e:41:43:47:30:77:97:b1:28:ce:43:69:90:
                    6b:83:8d:24:8b:0d:ea:55:68:54:0e:56:5f:57:79:
                    1f:47:46:ba:18:7c:6d:ea:f4:9a:78:48:89:92:34:
                    a8:18:56:84:c8:1c:c4:83:3a:b0:94:0b:fe:06:d4:
                    1c:95:d3:30:87:e2:e2:bb:13:cc:00:f5:6c:a4:6d:
                    c7:6c:40:28:80:ab:dc:30:af:35:0b:4b:29:a7:b3:
                    b3:3a:34:84:e7:b7:9a:ae:74:0e:d1:d0:2f:2e:f2:
                    ba:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:39:B1:83:D5:E9:99:FC:FC:2A:A8:91:BC:F0:E3:AB:1B:DE:A2:F6
            X509v3 Authority Key Identifier:
                keyid:C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:3d:3e:e7:81:ef:4f:99:64:83:7e:67:39:ce:52:0a:f6:ba:
         d7:ed:32:d3:02:7f:e4:93:e5:4c:9c:e6:0c:16:3f:42:2a:5a:
         54:15:0e:7b:6d:49:fd:96:7c:37:26:4b:57:c6:57:12:52:8c:
         3c:50:e1:72:60:41:e3:d4:9a:25:2f:28:5e:df:f9:09:93:d1:
         98:d9:db:76:1f:cc:79:ad:97:66:2a:0f:de:86:30:8c:a1:48:
         4a:79:4a:d3:8b:63:d2:8b:e8:05:34:7f:e3:6e:04:e8:f5:f7:
         7b:f8:4c:e5:4a:b8:7c:2c:66:8a:75:f5:40:a1:d1:b0:5f:3d:
         46:a4:73:7d:9b:f2:3b:b2:f1:fa:99:5b:52:e9:1f:61:a6:27:
         1e:06:65:19:bc:f3:7d:3f:b6:9f:5a:21:ee:bf:c3:7a:7a:55:
         e2:17:99:c9:0a:2d:56:99:b8:6c:74:7a:fa:4b:74:ab:77:93:
         5c:15:83:34:21:12:2f:2c:a7:c3:5d:bb:bc:29:6a:6b:24:5a:
         df:36:9f:c7:e4:47:e5:c8:dc:d5:cb:52:d9:ec:15:0c:bc:47:
         37:30:e3:d3:b5:6e:5c:c5:14:ce:80:d6:15:4c:37:51:8f:05:
         0f:f3:13:5a:26:34:02:37:7d:a0:86:2d:df:35:96:ea:91:5f:
         ee:75:6d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:07:02 2026 by rpki-client