Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft
File:                     801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft (raw, json)
Hash identifier:          ioIb6Tt7KuR0AC2wLHaub4a4guvY2WrwP1ucDAEatRU=
Subject key identifier:   87:06:47:E2:F3:F2:A1:EB:22:85:54:68:E2:27:1C:29:47:7D:0C:53
Authority key identifier: 80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24
Certificate issuer:       /CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724
Certificate serial:       153485C7F938287B1C378B19E78D3DFE83AD4069
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft
Manifest number:          EB
Signing time:             Sun 25 Oct 2026 22:19:33 +0000
Manifest this update:     Sun 25 Oct 2026 22:14:33 +0000
Manifest next update:     Tue 27 Oct 2026 00:22:33 +0000
Files and hashes:         1: 801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl (hash: GGyAMGLBMfnqY1eGHWagoIu5greWyWB6u9NUZGAy5zY=)
                          2: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: 5qu3egPdBZlEVTvgirw7pWXgCRudPnC+xEwHD5lFYU8=)
                          3: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 4a9og07u0srQecoyb+IpBZCUaRdvfCWkjUR0wkeGFvU=)
                          4: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: PF2pFQ8Y4MjWEElnBJwyA+RuYK7yYkD7ChXjYqS9lpw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl
                          rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:34:85:c7:f9:38:28:7b:1c:37:8b:19:e7:8d:3d:fe:83:ad:40:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724
        Validity
            Not Before: Oct 25 22:14:33 2026 GMT
            Not After : Oct 27 00:22:33 2026 GMT
        Subject: CN=870647E2F3F2A1EB22855468E2271C29477D0C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:33:ff:c9:a1:2c:dd:ba:44:3d:e5:26:4f:32:
                    25:75:e0:58:a2:68:09:42:cb:f6:f6:8d:ad:44:6c:
                    ed:9c:72:0b:1e:a5:f8:cb:d9:ca:2e:58:6f:1d:48:
                    04:72:9d:1e:f9:63:ea:41:31:1f:92:e7:2d:85:96:
                    3a:f0:26:19:4b:07:07:56:7c:a1:c4:d7:65:44:34:
                    4c:d8:87:bb:de:26:0f:83:09:26:2c:67:19:4b:9b:
                    ab:55:b7:4c:2d:40:a2:49:de:e9:46:9d:cd:c0:13:
                    0a:31:16:57:c4:72:5c:a7:72:31:ae:e5:7d:cd:7e:
                    0e:bd:af:7c:ee:ce:83:0c:55:c3:bb:47:5f:6c:32:
                    28:a4:d2:7b:76:36:2e:34:9d:9c:f4:11:9f:fe:ee:
                    42:29:6f:ce:53:85:e7:2f:5a:c9:f1:34:a3:85:7d:
                    3b:d4:5c:85:87:f4:d6:c2:69:92:94:9b:48:83:f3:
                    9d:38:e4:86:59:ab:4b:f3:0a:a7:63:3b:80:72:ed:
                    a9:82:da:f2:a0:c2:68:9f:21:6a:16:38:27:5d:7a:
                    58:24:b0:e5:22:7a:cd:1e:af:76:19:7b:41:6d:8d:
                    43:21:07:40:e2:e0:49:54:f9:82:58:d0:98:5d:f8:
                    75:f0:73:0c:08:eb:bb:0a:50:6d:9b:0d:1d:6f:84:
                    15:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:06:47:E2:F3:F2:A1:EB:22:85:54:68:E2:27:1C:29:47:7D:0C:53
            X509v3 Authority Key Identifier:
                keyid:80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:36:a9:88:0a:3c:92:ed:6e:78:be:58:dd:b1:2d:35:16:ad:
         9b:b5:69:b8:a8:6d:68:04:c7:96:01:6d:0a:2f:ee:79:4e:05:
         46:f6:ae:d9:6d:ac:53:78:06:44:63:77:9d:89:5c:b8:e1:b9:
         1a:9e:56:e5:7b:a0:0f:fd:37:51:3f:27:27:2d:05:d9:ec:79:
         dd:e5:48:f7:24:9d:a5:80:af:f3:5b:66:e7:3d:2f:32:32:c8:
         3d:4b:fa:6c:79:a0:d2:9c:7a:2e:72:75:48:5c:24:66:54:0d:
         10:65:32:e9:45:7e:a9:3d:fa:e2:f4:24:72:3f:b6:20:80:8f:
         c9:13:b3:1c:41:63:9d:db:b6:5f:c8:f3:ab:e9:e1:1b:6a:e3:
         ea:f4:62:58:4a:8a:b1:75:bf:8c:b0:63:8b:8c:56:f5:06:c9:
         2d:de:d9:cd:87:6b:de:53:84:43:55:dc:35:2b:72:de:be:9c:
         5a:75:a1:51:b4:61:12:15:73:8f:e7:d8:9f:88:eb:26:13:d5:
         95:6b:40:76:c8:dc:14:bf:30:af:f7:cc:c1:7c:cb:9e:84:75:
         d1:46:d4:14:02:ab:d5:f8:bb:d2:2b:d1:61:76:29:45:4d:e7:
         de:a7:0f:4b:5e:11:9b:e1:89:bf:73:ac:70:d7:c9:ea:87:8b:
         ae:21:82:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:47:54 2026 by rpki-client