Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
File:                     62201E20A182AFCB9985132733F2FBD1BB09C210.mft (raw, json)
Hash identifier:          wYyQgdxqhnn++uOJ5gYE2Aae6nfY4z08Q/XbyFfBuPg=
Subject key identifier:   3B:36:C5:06:C4:B5:2F:83:70:50:3B:FA:6D:B8:33:0E:10:D2:D8:72
Authority key identifier: 62:20:1E:20:A1:82:AF:CB:99:85:13:27:33:F2:FB:D1:BB:09:C2:10
Certificate issuer:       /CN=62201E20A182AFCB9985132733F2FBD1BB09C210
Certificate serial:       18F0939AE73115C7A42145B3DAFA612F35532C9B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
Manifest number:          EA
Signing time:             Sun 25 Oct 2026 06:08:55 +0000
Manifest this update:     Sun 25 Oct 2026 06:03:55 +0000
Manifest next update:     Mon 26 Oct 2026 09:24:55 +0000
Files and hashes:         1: 62201E20A182AFCB9985132733F2FBD1BB09C210.crl (hash: MvsS3rG+5QIbVbRyZnWh00a6FYP6+pk6NkOMGLhYEMw=)
                          2: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: cdTAWLi8m26n5P7CJT3lqMoZoU5FXrpIaSroPqf5DL0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.crl
                          rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 09:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f0:93:9a:e7:31:15:c7:a4:21:45:b3:da:fa:61:2f:35:53:2c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62201E20A182AFCB9985132733F2FBD1BB09C210
        Validity
            Not Before: Oct 25 06:03:55 2026 GMT
            Not After : Oct 26 09:24:55 2026 GMT
        Subject: CN=3B36C506C4B52F8370503BFA6DB8330E10D2D872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:67:fc:78:f1:d9:7a:ad:f9:21:95:1d:10:
                    25:2f:01:bb:ae:5e:d7:46:3f:cd:70:cf:a5:96:1c:
                    4b:93:9f:e5:75:03:b3:79:15:b5:da:1d:7e:da:f3:
                    df:bf:af:7b:33:59:86:78:1a:7a:a4:ca:bf:f7:05:
                    2d:cd:87:5f:66:62:73:74:dc:83:e5:14:52:b6:fd:
                    49:32:aa:ff:0c:d3:f6:70:ad:b4:bd:ca:73:ed:94:
                    95:16:dc:8e:32:1d:68:7a:07:03:f5:a0:83:d1:1e:
                    ea:a0:7f:df:f8:b7:d0:8e:0f:ef:43:60:79:1f:21:
                    af:1e:3c:04:d7:3f:21:38:3b:63:74:86:70:48:79:
                    74:30:33:8a:4a:d2:ea:ed:e5:f7:24:81:ca:e3:8c:
                    d3:d4:7e:52:f9:54:52:ab:38:72:16:a1:eb:35:6b:
                    59:7c:c2:ef:90:b7:0c:77:52:ce:46:77:cf:f9:90:
                    92:8e:19:eb:7a:10:52:64:ec:d7:84:a5:f1:64:b6:
                    8e:fc:57:46:aa:c3:b1:95:13:30:93:a8:0b:c8:db:
                    fc:0c:c1:ea:2f:d8:e6:c3:af:10:75:ca:1a:8c:3c:
                    f2:7e:fd:93:f9:4a:b0:0a:5f:79:dc:50:22:7c:95:
                    eb:62:7c:a4:08:97:ae:28:f1:b6:01:b5:e9:66:73:
                    3a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:36:C5:06:C4:B5:2F:83:70:50:3B:FA:6D:B8:33:0E:10:D2:D8:72
            X509v3 Authority Key Identifier:
                keyid:62:20:1E:20:A1:82:AF:CB:99:85:13:27:33:F2:FB:D1:BB:09:C2:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d1:2a:91:71:79:bd:91:aa:d0:2a:6f:5e:80:36:61:17:e8:
         a1:6e:49:32:31:5d:35:4a:4c:74:58:a5:f2:c7:0e:06:05:68:
         28:a3:f1:40:2d:0b:a3:7d:0a:11:d0:2d:29:89:76:84:54:8c:
         bc:6c:21:3d:69:b5:32:31:48:65:ff:52:a3:1e:78:bf:3b:f4:
         be:72:f0:5a:27:fa:d0:66:98:0d:2b:b3:d2:fb:4f:2b:75:6e:
         3a:56:4c:61:92:c4:9e:7a:50:a7:04:0e:67:a3:d4:72:7e:43:
         4b:43:23:61:e6:21:c0:44:07:95:e4:ad:5f:c2:6a:c5:d6:ea:
         6a:07:b6:30:9b:27:21:1e:f0:ba:6d:68:2c:fa:8a:3f:a3:8f:
         66:39:e0:8b:49:cb:94:3a:a1:68:e7:0d:b7:76:9b:e0:62:18:
         cf:44:83:38:1d:b0:a3:1b:62:0b:ef:92:96:5d:cb:32:be:22:
         ff:3b:0e:5d:b4:32:7c:62:2d:e6:af:4c:02:cd:ff:cb:50:3f:
         45:7e:4c:68:14:97:a1:5a:34:81:6f:b5:3f:8e:a1:d2:77:c0:
         05:0c:2a:b1:12:e0:44:1b:61:84:22:df:f1:da:45:21:6c:c6:
         ab:fe:3f:4e:f8:73:2f:d3:aa:08:3f:5d:66:00:1a:4e:b2:a1:
         73:9c:44:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:24:53 2026 by rpki-client