Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft
File:                     F576D7187FE092471757158DEF85D92023BB827A.mft (raw, json)
Hash identifier:          kakqXNhd0TBIh+73QMmnpk+pfZUNAsIi9EPtx64SbFA=
Subject key identifier:   2A:49:71:15:40:99:EA:34:C6:73:09:F4:C4:EF:08:0D:46:9F:C3:E8
Authority key identifier: F5:76:D7:18:7F:E0:92:47:17:57:15:8D:EF:85:D9:20:23:BB:82:7A
Certificate issuer:       /CN=F576D7187FE092471757158DEF85D92023BB827A
Certificate serial:       487494345F3EA1BC05BB65038F8CD152E47FD171
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft
Manifest number:          BA
Signing time:             Wed 16 Sep 2026 19:28:11 +0000
Manifest this update:     Wed 16 Sep 2026 19:23:11 +0000
Manifest next update:     Thu 17 Sep 2026 21:56:11 +0000
Files and hashes:         1: 3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa (hash: rVdmDzQFD5XQKuWG8ocH4/yOjCGzvuLA3P7Uzu2MMmg=)
                          2: 3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa (hash: 4zXAf/L+AniN8j9yaENVjCZM42RaS1KRlWjNorgEXzk=)
                          3: F576D7187FE092471757158DEF85D92023BB827A.crl (hash: TXSb/mtM/0mb49fMjYqFIUSGEgsOV2VjxzG4N6OGA2U=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.crl
                          rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 21:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:74:94:34:5f:3e:a1:bc:05:bb:65:03:8f:8c:d1:52:e4:7f:d1:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F576D7187FE092471757158DEF85D92023BB827A
        Validity
            Not Before: Sep 16 19:23:11 2026 GMT
            Not After : Sep 17 21:56:11 2026 GMT
        Subject: CN=2A4971154099EA34C67309F4C4EF080D469FC3E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:de:76:a8:fa:b9:78:d6:01:35:18:b4:5b:c4:
                    f6:ae:41:40:6d:11:5b:ba:38:d2:47:b2:2b:1f:db:
                    29:52:75:d5:b6:99:0e:31:61:40:97:fd:f9:79:c0:
                    7f:0e:f6:7d:68:19:fd:65:3f:0c:b2:0b:6d:e0:6e:
                    88:24:9f:19:c1:d4:a4:4c:58:3f:85:b3:81:d8:33:
                    26:c9:1e:e0:33:15:94:09:de:c6:26:19:9c:74:50:
                    1c:9c:74:b9:c4:a7:88:40:a1:fb:b0:9e:11:f6:ef:
                    ed:e6:e1:93:2c:a8:88:b1:53:54:9c:33:c7:c7:8e:
                    a2:ed:aa:dc:0c:31:42:c4:d8:1e:7a:8b:26:ed:64:
                    c2:ce:85:49:80:6b:d9:41:16:fa:71:58:75:73:0e:
                    6d:ae:a4:fd:4f:80:77:fb:e4:99:ef:5d:ad:2b:75:
                    b0:bf:ae:65:b6:3a:63:21:d2:21:42:1d:b1:6c:61:
                    96:d3:ae:a4:fa:0e:0f:93:45:12:ed:57:00:0c:80:
                    c1:5b:c0:60:38:40:9c:a8:29:e1:be:96:d1:91:b1:
                    2d:c7:a0:9f:0d:2d:42:84:5d:2c:5b:bc:24:6d:9b:
                    4d:e9:c5:4a:67:1d:97:5e:10:b9:29:85:d9:f5:00:
                    bb:1d:4a:88:44:a0:14:07:32:e0:e7:fa:4c:74:c9:
                    04:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:49:71:15:40:99:EA:34:C6:73:09:F4:C4:EF:08:0D:46:9F:C3:E8
            X509v3 Authority Key Identifier:
                keyid:F5:76:D7:18:7F:E0:92:47:17:57:15:8D:EF:85:D9:20:23:BB:82:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d2:17:6e:ab:68:69:28:8f:af:e2:18:94:fe:bc:df:9e:34:
         33:d0:c3:1d:ed:e7:30:76:84:be:a6:54:e6:b6:30:e0:ce:7b:
         12:a8:eb:2f:4b:69:8a:a7:96:d2:74:6e:26:11:0d:51:26:5b:
         50:75:77:0b:9a:c1:87:1b:27:d2:76:f2:e3:a5:78:a7:0a:78:
         ce:0e:93:cb:3f:18:28:0b:ff:30:2b:4f:cf:19:a1:99:f8:db:
         3c:f8:c4:16:65:57:34:8c:b7:fe:7d:6a:a5:1f:c8:c1:dc:04:
         48:2a:af:f7:db:0d:e9:d4:2f:16:63:ed:6f:68:0a:e3:3a:2f:
         ad:7a:e9:01:88:d7:f3:e7:2c:cd:8f:7a:1f:cd:58:a8:f7:8d:
         bf:e7:75:83:1f:9a:27:04:cb:f2:6f:45:03:c6:d5:3d:58:0a:
         ed:18:46:a0:6f:59:b7:92:c0:4b:85:1b:fc:db:f2:9e:4a:29:
         a5:23:50:d3:f8:9f:73:8c:bd:ad:8b:b5:37:a0:12:58:0c:4d:
         3a:af:d2:66:ad:49:3a:2f:d1:65:c6:2c:ba:63:f1:a9:2d:ee:
         1e:03:2a:4a:c7:8c:4f:e3:68:15:9c:76:5d:26:4b:ff:0b:78:
         86:34:17:50:22:29:97:d1:b5:17:3c:90:72:3c:40:b7:66:f2:
         05:9c:1f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:19:00 2026 by rpki-client