Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft
File:                     7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft (raw, json)
Hash identifier:          6HldEBJ8cTmyWHvYEzgZH9hV+aikVtxcDpL7gTql3g4=
Subject key identifier:   FC:E2:06:72:18:CF:DB:8F:0C:57:83:CF:53:4A:C9:2B:02:6E:93:A3
Authority key identifier: 7F:88:97:9F:15:7A:73:BC:13:FC:5A:3D:5B:9C:76:CB:3A:2B:3E:31
Certificate issuer:       /CN=7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31
Certificate serial:       49A9A469EF173120C7DF7B9CB750921B6A6FBB31
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft
Manifest number:          EB
Signing time:             Sat 24 Oct 2026 16:45:06 +0000
Manifest this update:     Sat 24 Oct 2026 16:40:06 +0000
Manifest next update:     Sun 25 Oct 2026 20:34:06 +0000
Files and hashes:         1: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: 8HCIw7CZYRIarfxox7lXQ/MdAlePE93YlMnPKUyebGg=)
                          2: 7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl (hash: Rj0mZsPbI8fjemZY7/wmqNdaeHtzkkZAfbOOSc4vkF8=)
                          3: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: HUZNs1iD5swAwh/g3qINc50EKHQkckdyfTFIx7Aj1lM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl
                          rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 19:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a9:a4:69:ef:17:31:20:c7:df:7b:9c:b7:50:92:1b:6a:6f:bb:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31
        Validity
            Not Before: Oct 24 16:40:06 2026 GMT
            Not After : Oct 25 20:34:06 2026 GMT
        Subject: CN=FCE2067218CFDB8F0C5783CF534AC92B026E93A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:d7:f0:b8:0b:b5:82:2b:29:d7:2b:57:ae:
                    2d:90:0b:2c:91:29:3f:49:21:92:d8:77:08:63:5b:
                    1d:53:80:c4:e7:1a:44:d7:3b:ef:b2:ba:7d:32:16:
                    4e:e1:03:63:63:11:e9:3b:36:cc:49:88:6d:50:4a:
                    21:05:e2:03:a0:d0:77:99:7d:6e:f4:c2:ed:82:e7:
                    82:d5:3b:82:43:df:3f:9f:21:20:f9:7a:5e:59:6c:
                    70:3e:f9:f2:f0:51:59:c9:6a:a8:5b:44:41:06:a7:
                    db:8c:64:20:6e:4d:03:48:21:16:43:b1:94:d1:07:
                    46:56:0b:dc:8f:e9:c4:68:be:0e:a6:4e:7b:6b:bc:
                    15:94:76:ca:20:ac:f3:ea:d8:03:49:33:b8:89:ee:
                    fd:4a:43:84:81:27:fa:46:93:66:a6:09:7b:e7:e5:
                    b1:d4:b5:bf:73:fb:de:5e:9a:7d:f6:58:98:7c:01:
                    06:e5:9d:df:b3:49:0f:3b:3a:87:a7:b4:c7:1b:c9:
                    25:10:70:bc:f3:ce:bd:2a:63:e6:10:3d:41:41:74:
                    b4:9f:2e:a2:1d:fd:79:ad:e4:fa:47:b9:9e:a6:cd:
                    bd:76:fd:35:5b:2e:82:0b:c8:a9:f1:f1:83:79:49:
                    52:15:26:ff:7f:ec:a4:ad:c0:63:94:ac:4a:16:6f:
                    be:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E2:06:72:18:CF:DB:8F:0C:57:83:CF:53:4A:C9:2B:02:6E:93:A3
            X509v3 Authority Key Identifier:
                keyid:7F:88:97:9F:15:7A:73:BC:13:FC:5A:3D:5B:9C:76:CB:3A:2B:3E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:fd:a6:e5:80:0f:c1:03:40:c9:8e:37:0a:5b:b3:b3:c0:0b:
         85:90:46:0a:4e:2e:cf:b4:ed:89:66:2c:66:dd:43:d0:1b:3a:
         99:bd:42:6a:2f:18:9d:a8:74:c0:ab:79:cb:e1:29:bc:62:a2:
         18:40:6e:eb:a3:d4:79:27:15:5e:bf:90:23:e9:d6:a4:2d:c8:
         1c:f7:12:f7:48:65:bc:9f:ad:f4:d5:bc:4c:4a:8a:77:72:65:
         f7:9f:64:f6:d0:da:48:fa:3a:f6:43:35:5d:24:d7:6d:d8:0f:
         55:bb:33:fe:ce:e1:71:d7:88:1f:1f:d3:0b:ee:fe:27:44:20:
         06:16:ed:58:bf:3f:ee:55:63:20:fd:4e:52:7e:ff:34:be:11:
         30:7c:1c:96:25:b5:55:0c:c3:b4:ed:ae:00:fb:64:38:89:a5:
         8d:84:a9:8f:3a:10:11:85:2b:14:f9:5b:ad:ce:7e:ba:36:e7:
         f6:9e:4d:c8:0b:1b:73:99:a1:a3:a9:0f:48:77:d8:6e:ca:3e:
         d7:b3:8d:cc:f5:7f:ea:07:d7:7f:ff:bd:96:52:32:69:1d:5e:
         e0:4d:20:28:eb:3f:b3:e1:fc:d6:2a:cb:8b:e2:10:0b:fa:bb:
         eb:4b:1a:f0:81:b3:08:93:c1:ad:4b:0a:1e:25:13:79:e6:9a:
         3e:12:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:55:12 2026 by rpki-client