Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.mft
File:                     92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.mft (raw, json)
Hash identifier:          YBzszqu2qEQ+BvBBuopAkvRTEbJ3H5cU6J2O2CL0m64=
Subject key identifier:   3C:3F:F0:47:A2:00:80:53:39:AB:7C:A6:B0:7F:2B:60:87:7F:BF:BC
Authority key identifier: 92:A9:FA:5A:9F:B8:67:F8:A8:19:F3:5E:87:7A:7F:B5:31:CC:D4:D1
Certificate issuer:       /CN=92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1
Certificate serial:       1F1E8B1FCFC58C89CFB84FE12158FBDB8B29E963
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.mft
Manifest number:          EA
Signing time:             Sun 25 Oct 2026 15:25:55 +0000
Manifest this update:     Sun 25 Oct 2026 15:20:55 +0000
Manifest next update:     Mon 26 Oct 2026 19:08:55 +0000
Files and hashes:         1: 92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.crl (hash: 2mtFvA5l6sQ12fHfgSG9VmarbeD5tq7oVYYjrxUK6d8=)
                          2: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: a0nrg7/o0A+n8cUhvipajpvQyODSYOdKkwoNuLc2XHA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.crl
                          rsync://rpki-rsync.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1e:8b:1f:cf:c5:8c:89:cf:b8:4f:e1:21:58:fb:db:8b:29:e9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1
        Validity
            Not Before: Oct 25 15:20:55 2026 GMT
            Not After : Oct 26 19:08:55 2026 GMT
        Subject: CN=3C3FF047A200805339AB7CA6B07F2B60877FBFBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d1:a6:0c:57:aa:3a:db:1c:48:60:c1:17:32:
                    06:81:31:5c:24:89:76:d3:cc:ae:3b:40:cb:9b:38:
                    69:7c:1f:70:68:66:af:02:6b:1f:49:3c:c4:d8:59:
                    7c:ca:cf:bc:0f:45:58:f5:32:c6:8e:0b:71:60:db:
                    cc:c7:0d:9b:74:87:d1:65:a1:18:1c:3e:7f:5d:8a:
                    db:fa:ff:47:7b:47:2a:00:97:7c:9a:74:22:b8:76:
                    34:f4:a9:63:07:46:fd:93:7d:de:b8:66:ca:07:e3:
                    76:09:e3:03:39:64:92:cc:10:c1:f6:09:1c:df:6c:
                    c1:8f:0c:ff:0e:9d:a1:ed:bc:64:f4:f4:47:79:10:
                    44:9f:58:8d:69:8e:e3:79:be:8d:dc:e7:c0:b1:40:
                    9f:e4:df:1b:4f:97:f0:cd:a0:6b:dd:90:54:d1:2c:
                    6a:1b:55:33:e6:62:6f:47:de:32:52:55:e3:87:94:
                    99:73:bb:ce:b9:d8:f9:bd:1e:cb:65:ce:4a:16:10:
                    54:fa:0e:a1:d1:82:a4:13:81:48:07:8c:9c:44:f9:
                    80:b9:b2:ce:40:b4:cc:e6:8e:5e:f8:ab:6e:51:3a:
                    75:7e:89:c8:8f:97:f4:fd:aa:01:2f:1b:e3:12:a5:
                    f9:61:44:34:c3:ab:06:4b:0b:b5:14:08:3e:07:13:
                    7f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3F:F0:47:A2:00:80:53:39:AB:7C:A6:B0:7F:2B:60:87:7F:BF:BC
            X509v3 Authority Key Identifier:
                keyid:92:A9:FA:5A:9F:B8:67:F8:A8:19:F3:5E:87:7A:7F:B5:31:CC:D4:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:69:79:05:0d:ad:2f:73:42:ba:15:fe:9e:c7:30:1e:2a:74:
         3c:88:f7:d7:d9:ac:96:af:cc:59:b3:30:19:7a:ce:03:a5:92:
         9d:ea:fe:53:dd:97:e0:0c:47:47:71:9c:02:63:03:07:5a:23:
         f6:95:b4:20:cd:3e:bc:6c:ea:23:b3:3f:4d:69:42:1d:6d:51:
         d4:82:9e:ff:38:f0:84:c2:e5:69:3d:63:02:7c:50:e1:a1:a4:
         c4:06:22:a6:ef:63:c8:1f:d1:a7:17:87:27:ba:7a:16:ab:f2:
         6a:b3:00:5a:b2:5e:7f:e9:a4:50:e1:05:7d:9a:99:dd:a5:88:
         ff:69:7d:18:10:f2:2f:a1:4f:1a:ca:5e:a1:75:8f:ef:68:fc:
         a2:2d:bb:69:3e:be:41:93:67:a6:57:1b:27:f8:f9:30:dc:f1:
         d1:01:d0:28:0d:d2:ce:d0:1b:bf:ca:73:fb:38:42:ea:87:28:
         44:82:12:8b:c6:9a:b2:7f:eb:5b:dc:54:46:6f:e0:c9:be:a3:
         06:62:29:2e:69:06:54:5a:52:bc:17:e8:f2:2a:1b:2e:06:27:
         5e:72:dd:91:b9:15:be:08:ed:7e:bb:f3:6d:92:3f:c2:39:96:
         5f:d7:ed:b2:0e:51:ed:22:8b:80:d2:09:d5:3f:e2:a9:18:6d:
         95:ab:0d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:07:37 2026 by rpki-client