Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft
File:                     FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft (raw, json)
Hash identifier:          x58moVKWk/mGAQrN/kBwia0e2/geAiZj0krAVlvG9H0=
Subject key identifier:   F4:D7:01:38:3C:CE:50:05:FF:CE:97:FA:EF:E1:22:D2:5E:E2:68:17
Authority key identifier: FD:82:EB:0C:DF:26:FC:9F:52:BB:48:2D:25:5A:26:37:4F:B2:97:F2
Certificate issuer:       /CN=FD82EB0CDF26FC9F52BB482D255A26374FB297F2
Certificate serial:       4C0251EDE722F868F4A433EA5F0FC1E19AFB22EF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft
Manifest number:          BA
Signing time:             Thu 17 Sep 2026 04:59:39 +0000
Manifest this update:     Thu 17 Sep 2026 04:54:39 +0000
Manifest next update:     Fri 18 Sep 2026 08:28:39 +0000
Files and hashes:         1: FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl (hash: ZC5zezbtY5TI9zymVf8sUsSy7TyPiWNnrkxaCahk1mM=)
                          2: 3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (hash: geMBt2/v9mDAfVwndEzecLfwDT1q5GpeHQvNLrPctqk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl
                          rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 08:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:02:51:ed:e7:22:f8:68:f4:a4:33:ea:5f:0f:c1:e1:9a:fb:22:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD82EB0CDF26FC9F52BB482D255A26374FB297F2
        Validity
            Not Before: Sep 17 04:54:39 2026 GMT
            Not After : Sep 18 08:28:39 2026 GMT
        Subject: CN=F4D701383CCE5005FFCE97FAEFE122D25EE26817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fb:87:81:81:28:92:fd:df:ad:60:64:b9:0f:
                    d6:c5:8d:3b:c6:7f:e9:4e:ed:3b:f2:97:ae:ed:90:
                    b1:77:38:5f:84:0b:00:1a:ae:fa:5b:d9:5a:14:9d:
                    4f:8d:4e:2a:fb:4d:7f:44:a7:41:38:4b:6e:c1:a6:
                    9a:d0:2b:ac:25:1e:d3:3a:ff:56:fe:27:db:92:a4:
                    85:2d:23:f4:e1:92:e0:6a:2d:df:fd:b8:77:db:f0:
                    e3:71:0c:00:d6:6b:63:1f:28:e0:66:f4:7b:69:0a:
                    f9:b8:1a:18:5c:c6:86:cb:3f:55:98:4b:df:0d:fb:
                    45:b5:eb:d7:50:4f:ef:91:a0:2b:58:09:38:fc:61:
                    e2:49:b6:45:67:7b:fb:ba:62:92:ad:c8:46:0d:b4:
                    90:47:7a:42:f6:2d:8d:eb:a2:17:49:13:ef:2c:7f:
                    e2:7c:4b:f9:51:46:c7:8e:83:27:b1:f7:f1:6f:db:
                    85:a0:2e:cb:f5:d9:ac:50:95:74:71:f1:1b:df:c8:
                    6a:83:e3:b4:b5:11:92:d1:c1:4c:b1:3e:a5:1e:2c:
                    e1:4e:b6:23:73:8f:a1:82:da:68:96:63:ce:6b:12:
                    cf:03:cf:4b:50:c8:a8:d9:0b:33:fe:8e:fd:81:df:
                    be:0a:68:5c:8a:9a:15:3e:b5:4c:49:88:86:c6:ba:
                    c5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D7:01:38:3C:CE:50:05:FF:CE:97:FA:EF:E1:22:D2:5E:E2:68:17
            X509v3 Authority Key Identifier:
                keyid:FD:82:EB:0C:DF:26:FC:9F:52:BB:48:2D:25:5A:26:37:4F:B2:97:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:3a:42:22:45:c1:a0:8a:08:3c:25:de:69:ce:ff:60:d0:95:
         54:1a:f0:4e:84:0a:c3:47:b8:6a:44:d6:ae:74:1a:ec:56:be:
         06:c1:2e:35:20:fd:20:16:89:7a:7f:18:f9:4d:aa:6c:90:66:
         6d:2a:12:f1:12:3b:8d:f3:cf:3d:dd:48:60:28:54:83:d8:96:
         f3:6a:6b:44:39:4f:3d:49:2a:98:61:06:4d:97:42:be:2a:2e:
         f5:dd:4b:d5:cd:83:85:3a:6b:02:ab:71:10:6e:6d:59:00:bb:
         76:36:89:57:3e:7f:a1:aa:63:a5:8e:a9:2b:fd:5d:62:26:84:
         e0:bb:24:68:36:3b:cc:83:5e:f6:83:2f:7a:db:c0:34:e8:95:
         3a:b6:9f:ab:ce:44:41:4f:55:ca:b9:24:87:8a:19:61:e5:94:
         0c:82:90:59:9f:6e:53:b7:49:4e:c0:40:47:f7:28:e8:fd:17:
         ca:d3:ea:69:a6:8d:35:f4:f9:5f:8e:a3:83:33:da:6e:e5:a1:
         94:49:90:a9:2e:5c:0f:ca:0d:d0:e8:77:4e:19:d2:02:85:9b:
         4e:31:6f:3b:a7:41:1a:fc:6d:08:9d:aa:18:20:31:a6:e9:c2:
         4b:7e:a7:26:9e:5e:c3:35:38:0e:f5:d9:e1:59:59:cd:1b:d6:
         f6:b3:df:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 11:27:33 2026 by rpki-client