Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft
File:                     B977405A3167FC0E8490C54AB080E37B0920C4B4.mft (raw, json)
Hash identifier:          EbVvVEhha2R5aNYr3auwszz46ps65UK3tGmwOtSTOak=
Subject key identifier:   7B:A6:09:21:A4:D2:97:FE:26:56:DE:C8:DA:E4:F1:39:67:FE:04:1E
Authority key identifier: B9:77:40:5A:31:67:FC:0E:84:90:C5:4A:B0:80:E3:7B:09:20:C4:B4
Certificate issuer:       /CN=B977405A3167FC0E8490C54AB080E37B0920C4B4
Certificate serial:       38CBB7C6D86EC061C77BBDACAA9BB4E80828D1F1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft
Manifest number:          ED
Signing time:             Sun 25 Oct 2026 13:59:03 +0000
Manifest this update:     Sun 25 Oct 2026 13:54:03 +0000
Manifest next update:     Mon 26 Oct 2026 17:11:03 +0000
Files and hashes:         1: B977405A3167FC0E8490C54AB080E37B0920C4B4.crl (hash: XhjrqOvwq93l9d5mSHgmAw6llaxYtDp6NZS5fTDrkwc=)
                          2: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: TSVY5x+9VndlFploLHkJHga5L+L+3DIx++btPsU48bE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.crl
                          rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:cb:b7:c6:d8:6e:c0:61:c7:7b:bd:ac:aa:9b:b4:e8:08:28:d1:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B977405A3167FC0E8490C54AB080E37B0920C4B4
        Validity
            Not Before: Oct 25 13:54:03 2026 GMT
            Not After : Oct 26 17:11:03 2026 GMT
        Subject: CN=7BA60921A4D297FE2656DEC8DAE4F13967FE041E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:cd:46:33:66:1e:31:cd:b4:b4:f1:d5:19:
                    79:ae:ae:be:a2:f2:21:be:82:2b:fa:12:73:95:b8:
                    c9:4a:b8:83:3f:4d:89:a6:93:ee:bc:eb:a7:a4:7b:
                    97:21:64:9b:11:6c:31:00:49:93:00:2a:36:c2:a7:
                    81:76:b9:97:1f:7b:a6:f8:1b:7f:7d:f0:42:00:2b:
                    ef:7b:a3:bf:e7:76:ad:55:6d:76:49:4e:4e:c3:2d:
                    f4:8d:6c:8b:8d:56:41:75:d5:68:c8:42:42:5a:9e:
                    93:e6:98:c6:2d:c4:90:92:0f:46:18:50:a8:e0:01:
                    7b:24:cd:c7:47:ac:04:e0:36:c3:a1:ab:ea:0d:43:
                    b0:14:fe:9e:9c:f6:76:e5:0e:58:04:5e:3e:a1:7b:
                    60:36:63:15:6e:1d:1c:b3:7e:97:43:07:37:fb:a9:
                    6f:14:3e:76:7c:5d:28:0d:b8:fa:27:b6:8f:05:b1:
                    bd:b2:ad:dd:2a:0c:6b:34:ec:2e:92:d7:a0:90:15:
                    25:1a:9b:00:8a:a0:44:f1:e0:7c:b3:ea:f0:06:35:
                    40:1c:4e:ef:e1:14:36:e0:9d:4f:8e:54:6e:61:19:
                    db:b5:86:4e:01:df:a5:dc:2a:21:2d:6d:a2:96:8e:
                    b7:f3:9a:a4:40:b6:88:7f:81:f2:e4:fe:b6:02:09:
                    90:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A6:09:21:A4:D2:97:FE:26:56:DE:C8:DA:E4:F1:39:67:FE:04:1E
            X509v3 Authority Key Identifier:
                keyid:B9:77:40:5A:31:67:FC:0E:84:90:C5:4A:B0:80:E3:7B:09:20:C4:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:7f:d1:dd:51:9d:f4:1d:6b:72:1f:01:30:a3:c1:94:4e:5b:
         12:66:6b:42:3d:6e:b2:eb:ed:d2:55:f8:fb:86:f1:95:0b:3a:
         3d:a6:11:6f:57:1d:66:33:7e:e5:dc:07:20:7e:58:25:36:62:
         5a:b3:94:db:d7:6f:b2:b8:c9:12:8f:da:82:5d:d9:89:e5:77:
         6d:aa:5f:7a:24:01:20:c1:f2:94:4b:97:dc:5d:56:10:c3:d5:
         f0:66:f8:a7:a8:88:d5:49:3a:74:69:d3:61:6a:0c:a7:bb:c2:
         55:67:ef:bf:01:50:0f:a3:33:52:64:81:f5:32:26:06:8f:ff:
         17:bd:f0:f5:27:07:71:c3:87:0d:5b:24:07:b4:69:f8:22:ee:
         8c:57:53:a8:06:9d:2f:28:68:2d:2e:34:73:08:d9:33:60:ff:
         a8:4a:43:00:56:f2:89:d6:2c:0a:6e:37:f6:a6:cc:c6:a1:93:
         fb:20:b9:f7:8a:37:14:53:53:15:dd:f5:ea:86:c4:ae:f5:b6:
         76:62:56:d9:89:92:11:fa:f4:6b:a5:a2:07:bf:a5:b0:d2:f7:
         f0:0e:a5:af:e5:20:aa:77:fe:0f:f2:88:79:33:d0:30:cf:c0:
         e0:3e:8c:c1:9d:d3:99:5d:62:79:54:ab:31:a3:ee:1c:52:12:
         0f:6d:d3:56
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOMu3xthuwGHHe72sqpu06Ago0fEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk3NzQwNUEzMTY3RkMwRTg0OTBDNTRBQjA4MEUzN0Iw
OTIwQzRCNDAeFw0yNjEwMjUxMzU0MDNaFw0yNjEwMjYxNzExMDNaMDMxMTAvBgNV
BAMTKDdCQTYwOTIxQTREMjk3RkUyNjU2REVDOERBRTRGMTM5NjdGRTA0MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmc1GM2YeMc20tPHVGXmurr6i
8iG+giv6EnOVuMlKuIM/TYmmk+6866eke5chZJsRbDEASZMAKjbCp4F2uZcfe6b4
G3998EIAK+97o7/ndq1VbXZJTk7DLfSNbIuNVkF11WjIQkJanpPmmMYtxJCSD0YY
UKjgAXskzcdHrATgNsOhq+oNQ7AU/p6c9nblDlgEXj6he2A2YxVuHRyzfpdDBzf7
qW8UPnZ8XSgNuPonto8Fsb2yrd0qDGs07C6S16CQFSUamwCKoETx4Hyz6vAGNUAc
Tu/hFDbgnU+OVG5hGdu1hk4B36XcKiEtbaKWjrfzmqRAtoh/gfLk/rYCCZBPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUe6YJIaTSl/4mVt7I2uTxOWf+BB4wHwYDVR0j
BBgwFoAUuXdAWjFn/A6EkMVKsIDjewkgxLQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTBiZTJkZjgtMmMzNi00NjUyLWE1MGMtZjY0MjBkMmNkOWQzLzAvQjk3NzQwNUEz
MTY3RkMwRTg0OTBDNTRBQjA4MEUzN0IwOTIwQzRCNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9COTc3NDA1QTMxNjdGQzBFODQ5MEM1NEFCMDgwRTM3QjA5MjBD
NEI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTBiZTJkZjgtMmMzNi00NjUyLWE1
MGMtZjY0MjBkMmNkOWQzLzAvQjk3NzQwNUEzMTY3RkMwRTg0OTBDNTRBQjA4MEUz
N0IwOTIwQzRCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMx/0d1RnfQda3IfATCjwZROWxJma0I9brLr
7dJV+PuG8ZULOj2mEW9XHWYzfuXcByB+WCU2YlqzlNvXb7K4yRKP2oJd2Ynld22q
X3okASDB8pRLl9xdVhDD1fBm+KeoiNVJOnRp02FqDKe7wlVn778BUA+jM1JkgfUy
JgaP/xe98PUnB3HDhw1bJAe0afgi7oxXU6gGnS8oaC0uNHMI2TNg/6hKQwBW8onW
LApuN/amzMahk/sgufeKNxRTUxXd9eqGxK71tnZiVtmJkhH69Guloge/pbDS9/AO
pa/lIKp3/g/yiHkz0DDPwOA+jMGd05ldYnlUqzGj7hxSEg9t01Y=
-----END CERTIFICATE-----
Generated at Sun Oct 25 18:02:42 2026 by rpki-client