Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft
File:                     7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft (raw, json)
Hash identifier:          WncVFH3AAgKhcNaZriePOo9R/ERG6ygPhMmHDB0ZyVs=
Subject key identifier:   A8:EC:E3:81:15:56:4B:A2:F7:FC:24:96:EC:BB:64:39:02:F7:CA:F8
Authority key identifier: 7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20
Certificate issuer:       /CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20
Certificate serial:       797C3F147560CB876BFF10B6801C293698C6D786
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft
Manifest number:          EC
Signing time:             Sun 25 Oct 2026 23:20:56 +0000
Manifest this update:     Sun 25 Oct 2026 23:15:56 +0000
Manifest next update:     Tue 27 Oct 2026 02:19:56 +0000
Files and hashes:         1: 7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl (hash: 9SDd95S/6YILVsHZCzag2UyoWuBFv2Edei9EN3mODRE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl
                          rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7c:3f:14:75:60:cb:87:6b:ff:10:b6:80:1c:29:36:98:c6:d7:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20
        Validity
            Not Before: Oct 25 23:15:56 2026 GMT
            Not After : Oct 27 02:19:56 2026 GMT
        Subject: CN=A8ECE38115564BA2F7FC2496ECBB643902F7CAF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d0:b7:ae:84:77:77:7f:58:4a:b4:3c:e0:6f:
                    2c:cd:b2:1e:57:f6:1b:a8:36:f5:5e:f1:70:cc:76:
                    c7:6d:b4:b5:29:54:11:55:47:f8:0d:e8:5d:36:17:
                    6d:db:88:1f:db:e9:19:4d:1c:76:9c:d1:d7:05:62:
                    fb:de:fd:cd:7c:ba:60:44:a5:72:07:c6:15:d2:f6:
                    cb:8d:28:a1:9f:8d:1b:b7:78:63:c3:35:70:63:d4:
                    67:f9:1e:95:14:25:27:fb:d9:16:69:0b:f4:7c:20:
                    9e:08:4e:12:f1:58:78:52:c1:73:42:3f:37:ed:52:
                    02:87:fc:e4:5a:26:a7:b4:79:87:46:01:23:98:f7:
                    77:98:90:65:18:46:69:f8:db:55:e8:90:5d:05:b9:
                    27:b8:67:af:8b:b2:bb:3f:e9:a0:0e:9f:b1:17:71:
                    f7:d9:d6:64:d0:ce:3c:d3:b2:f5:e9:a7:39:e4:81:
                    44:60:9b:c5:64:8c:64:f1:61:58:33:a3:b9:2c:60:
                    b7:4f:8b:16:c5:99:3a:17:ed:37:e6:54:f1:47:33:
                    f9:63:41:5a:be:2b:0b:79:26:10:f8:20:25:dd:ea:
                    9d:03:10:26:19:a0:47:c9:4e:fe:08:e9:67:b5:2c:
                    38:5a:ae:62:7d:7d:11:20:94:44:63:6d:fb:70:1e:
                    22:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EC:E3:81:15:56:4B:A2:F7:FC:24:96:EC:BB:64:39:02:F7:CA:F8
            X509v3 Authority Key Identifier:
                keyid:7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d8:89:7c:8a:68:93:29:92:ca:67:36:3c:28:df:44:fd:e2:
         fe:71:24:dc:1b:40:53:65:41:25:08:60:e7:23:5f:b5:96:cd:
         4d:4b:2a:4d:86:90:13:51:51:51:42:81:7a:61:27:64:b3:c2:
         6c:31:56:d6:e9:a4:23:a0:e0:fd:db:e3:1d:aa:c4:2a:11:b6:
         cd:5a:5b:6c:0d:14:fa:74:1c:79:98:a4:a6:da:3e:8f:c3:04:
         26:21:37:c4:78:be:9a:20:52:5c:38:a4:95:ed:9d:18:80:5e:
         13:29:df:7a:41:6d:d0:53:a5:fb:0e:6a:95:8e:80:a0:84:f0:
         a6:90:cd:5f:83:df:70:4f:6e:10:f2:ab:46:62:b7:dc:ed:f8:
         cf:15:36:2c:9c:98:0e:e7:0e:33:27:bd:b4:94:57:b0:12:d8:
         51:e1:8f:f2:9a:4d:3c:4a:cb:82:c9:cf:7f:97:95:ce:69:85:
         eb:05:e9:87:ee:25:53:92:1d:77:ae:97:80:c4:5d:ee:66:7a:
         8c:ff:74:89:7e:84:f4:02:16:7f:e7:88:37:15:42:46:b2:4f:
         ef:96:9e:33:42:56:40:59:ed:c4:8e:b0:0f:fb:bb:1e:c3:c7:
         78:a8:e0:f3:10:c4:2b:21:81:04:39:3f:6e:d0:ec:20:01:c7:
         14:6d:70:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:40 2026 by rpki-client