Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
File:                     ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft (raw, json)
Hash identifier:          jHjC6K92bYO3QXPsvAnCnIJMYVo/bLR1wW3dzRERo38=
Subject key identifier:   E8:AD:5F:6C:51:FE:6B:26:9A:B8:14:2C:B0:58:70:AC:38:BA:06:66
Authority key identifier: AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1
Certificate issuer:       /CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1
Certificate serial:       0EF7A8767207D4F5ED17065E7C85BD7BCB2057DB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
Manifest number:          EA
Signing time:             Sat 24 Oct 2026 16:19:32 +0000
Manifest this update:     Sat 24 Oct 2026 16:14:32 +0000
Manifest next update:     Sun 25 Oct 2026 17:36:32 +0000
Files and hashes:         1: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: CVFptYCjc0BlHCccW2Xncqnkcsz2aSryEWVdhnNHxQY=)
                          2: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: yHKtP8J6sRjd2vBKKZ1C8jqGxnt5X4o3lstFY/wy1jg=)
                          3: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: zegPh8h8i8vXslaukZ/A0UJgubb+r4V2izsS5x1SFA0=)
                          4: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: WxEwSz+sWi75wTD9LX4+TZFvBImk89xubZTfF5v2cCg=)
                          5: ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl (hash: E+gy+g23RICL2k7bBbyqZVx0fpp+CLX6qYf4tPxWVeM=)
                          6: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: 12cGaGOgBCZ2rP3AvRmGNqqU8d1JvTtobCIZ/qRPUPE=)
                          7: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: MI6jQTtOVHvsuWHm0uvBE0TFhtVi+xCMKjXMCSCBFDY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl
                          rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 17:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f7:a8:76:72:07:d4:f5:ed:17:06:5e:7c:85:bd:7b:cb:20:57:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1
        Validity
            Not Before: Oct 24 16:14:32 2026 GMT
            Not After : Oct 25 17:36:32 2026 GMT
        Subject: CN=E8AD5F6C51FE6B269AB8142CB05870AC38BA0666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:41:2b:75:ef:84:ce:57:86:f0:f9:05:0a:
                    70:b4:05:4a:80:e0:30:81:11:23:af:57:63:2a:68:
                    7d:c1:58:90:fa:9c:3f:95:e6:c8:85:99:64:2d:62:
                    2b:bd:a4:fd:99:34:00:e1:7c:d9:6e:3a:ab:7f:21:
                    2a:f9:a5:82:09:7e:10:54:40:d1:bb:bc:93:cc:63:
                    4c:73:5a:f2:dd:71:3e:c7:3a:dc:b1:4a:fe:64:e6:
                    3b:45:58:59:1a:37:83:72:9a:25:de:2d:0b:e8:84:
                    23:d3:c4:84:35:69:82:81:11:76:43:e0:b0:e1:39:
                    b1:be:c2:3c:3d:e6:63:ad:65:08:be:46:9b:6a:81:
                    e9:68:78:5a:c1:cf:cd:15:53:f6:31:43:29:21:fb:
                    16:a9:85:83:d1:bc:a6:e2:01:cf:3d:a8:b3:63:e4:
                    e1:be:ae:e2:ff:67:89:a7:3f:32:f2:63:ff:3d:4a:
                    a6:9f:71:1c:b3:d4:49:9c:9b:4c:75:66:43:5c:65:
                    0c:f3:b8:8f:18:f7:d1:3a:b2:4d:b4:b3:36:c1:3f:
                    1c:bf:9a:d5:4d:0e:3c:65:1b:2e:77:6d:ac:d6:da:
                    42:3c:30:bf:a5:04:5a:68:78:57:cc:95:5a:77:09:
                    3d:66:c9:20:2b:10:35:9c:5e:12:f9:a1:64:82:64:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AD:5F:6C:51:FE:6B:26:9A:B8:14:2C:B0:58:70:AC:38:BA:06:66
            X509v3 Authority Key Identifier:
                keyid:AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c2:f8:05:aa:10:5e:2e:67:27:21:76:26:c5:fc:36:72:f9:
         e2:9e:79:31:93:c6:c1:64:4e:81:6c:96:05:19:99:a2:98:2b:
         53:22:ac:52:d5:a8:4a:33:17:d6:a7:45:3f:42:b0:d7:f2:c3:
         35:95:ed:6e:ca:e3:20:68:9a:ff:52:3f:56:55:e0:53:41:e1:
         1f:8f:e3:49:1d:2a:54:18:04:20:89:79:3f:88:25:c6:65:62:
         94:6d:98:b6:16:e4:97:21:34:57:9c:97:a7:f6:8f:20:bf:ff:
         90:a7:d9:aa:fc:cf:6c:27:29:ba:d3:10:53:87:dd:78:89:f6:
         ee:3f:ba:90:30:52:66:95:23:b7:17:83:b3:3f:59:f5:c6:d2:
         82:b1:95:8a:d0:bc:29:fc:4d:27:61:bc:20:a1:0f:57:32:83:
         08:c8:2e:73:14:1e:2c:63:8c:12:5a:38:83:79:e5:03:12:f5:
         d6:b2:c9:e7:86:65:b1:b3:30:7a:e9:3e:af:c5:1e:22:cd:58:
         43:29:df:bc:53:a4:a7:bc:8d:82:88:72:46:f5:05:04:de:19:
         8f:65:6f:ae:44:9b:c7:7a:7c:82:12:f9:f2:49:a2:44:d5:50:
         0c:b9:7b:a9:ba:d0:63:4c:8e:35:d8:9c:46:b1:98:ef:fc:85:
         a5:be:97:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:17 2026 by rpki-client