Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
File:                     2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft (raw, json)
Hash identifier:          RTjy0ZWFW5xJRndssBvR45ImikTX9Ww7JZ5CDrEGXXM=
Subject key identifier:   75:60:0D:09:F2:68:6C:6E:D2:18:A2:95:8C:76:87:27:1F:B5:40:DB
Authority key identifier: 2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A
Certificate issuer:       /CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A
Certificate serial:       592873AEF92A8506A1393E02BAC789D510774CE8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
Manifest number:          EB
Signing time:             Sun 25 Oct 2026 07:20:37 +0000
Manifest this update:     Sun 25 Oct 2026 07:15:37 +0000
Manifest next update:     Mon 26 Oct 2026 08:35:37 +0000
Files and hashes:         1: 3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa (hash: VdJ1ZIQnNrJcWKeLJSeBvVO0FNQ/sxBZNurd+uNh3ek=)
                          2: 3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa (hash: GzkXDWcauMWYNDn5MyFD1nDjKkP9ZpScdykpa6iOEak=)
                          3: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl (hash: H3QNXXPTVyD3a+KPTr/hqNXwd7cP2PxJSWQ4PM0l8jE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl
                          rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 08:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:28:73:ae:f9:2a:85:06:a1:39:3e:02:ba:c7:89:d5:10:77:4c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A
        Validity
            Not Before: Oct 25 07:15:37 2026 GMT
            Not After : Oct 26 08:35:37 2026 GMT
        Subject: CN=75600D09F2686C6ED218A2958C7687271FB540DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:c0:78:96:af:b4:06:38:58:59:5c:1b:24:
                    fa:47:96:ee:5b:c6:60:ed:f0:4b:da:fe:13:f5:04:
                    42:2c:4c:91:d0:c9:57:c4:4c:2d:e9:70:20:06:d4:
                    58:4d:25:ff:33:00:cc:92:31:59:25:13:4a:88:58:
                    e5:bf:80:91:cf:b1:ac:2a:fc:84:63:aa:9b:86:9c:
                    c1:a4:7c:48:5f:f3:d1:83:cf:a7:86:4c:03:ba:e7:
                    e3:44:f2:63:6a:85:17:8d:13:1e:57:26:02:9c:00:
                    56:a3:7f:59:35:ac:82:4e:50:f9:28:a4:b1:32:87:
                    c0:5d:82:07:2b:34:b5:0d:a1:ed:71:fd:0e:54:69:
                    63:e0:a5:c7:ac:a1:15:e7:1d:13:9f:95:37:3b:d0:
                    d9:4c:2e:96:da:72:2e:15:22:0c:c1:99:10:8e:86:
                    09:54:37:17:e4:d0:54:bb:a7:fe:ba:07:08:75:bc:
                    62:b9:4c:47:6c:3c:0a:86:7e:34:c3:2b:b1:a0:7b:
                    9f:45:4e:3b:58:b4:2f:ad:db:bf:ec:75:13:ea:9c:
                    19:88:e2:10:02:26:88:20:c4:b4:44:c6:b8:97:9c:
                    20:db:12:88:55:7e:74:8b:10:ae:dd:47:ad:52:3b:
                    7f:a7:b3:ba:e5:08:83:b0:e8:f9:b2:27:92:60:08:
                    a7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:60:0D:09:F2:68:6C:6E:D2:18:A2:95:8C:76:87:27:1F:B5:40:DB
            X509v3 Authority Key Identifier:
                keyid:2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:38:a3:db:f3:58:a3:96:56:66:4d:cb:ba:79:a6:f0:42:11:
         0d:31:0c:ee:b8:66:9b:8e:f1:39:ff:15:78:64:c3:1b:d1:e3:
         17:2f:b7:10:2f:78:4a:2b:89:26:ae:e4:a5:59:e9:cd:28:90:
         48:67:73:b0:d6:bc:74:62:27:4a:4b:16:47:55:f7:d3:86:1b:
         d0:5a:d5:71:48:e9:ed:d7:aa:f3:f3:58:4e:32:88:3c:63:04:
         4c:fc:34:7f:54:91:63:57:79:7f:17:92:5e:42:1e:6d:80:4c:
         e6:19:89:31:72:da:32:91:52:16:fb:b3:b7:a6:b8:7d:1b:84:
         84:ac:eb:97:03:ed:89:29:52:70:db:f5:f0:01:53:b2:58:0b:
         38:9b:99:f4:98:73:c5:23:a6:0e:22:52:f8:70:19:52:75:13:
         74:b5:1c:8f:6d:67:9a:88:b4:55:16:23:07:88:64:f2:95:e1:
         7d:42:76:da:51:79:6f:8c:81:9f:6e:2a:bf:5f:ed:85:0c:c0:
         3a:de:5b:08:21:6d:6b:15:c2:ff:9e:a5:6d:b9:9c:c2:36:f4:
         19:2b:24:a4:a4:75:94:78:13:4d:0d:61:bb:32:06:bd:dc:10:
         ca:eb:9c:bc:71:d4:89:e3:db:2b:c9:39:9e:aa:73:9a:43:49:
         98:85:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:04:49 2026 by rpki-client