Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.mft
File:                     2552F050305622A342A57694E0C15404F4475354.mft (raw, json)
Hash identifier:          1Jl0sK/upP1sNUpb66xBGE3h/Bnp65ndkHoNCQCCDfg=
Subject key identifier:   B9:66:AC:0D:C6:53:4B:B3:D5:EB:2A:F6:16:E3:44:20:E3:0B:CF:5B
Authority key identifier: 25:52:F0:50:30:56:22:A3:42:A5:76:94:E0:C1:54:04:F4:47:53:54
Certificate issuer:       /CN=2552F050305622A342A57694E0C15404F4475354
Certificate serial:       494E1ADB568D7646EC2B95BB17660DE45EDDC5BC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2552F050305622A342A57694E0C15404F4475354.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.mft
Manifest number:          B8
Signing time:             Wed 16 Sep 2026 23:58:32 +0000
Manifest this update:     Wed 16 Sep 2026 23:53:32 +0000
Manifest next update:     Fri 18 Sep 2026 02:50:32 +0000
Files and hashes:         1: 3130332e35312e3135382e302f32342d3234203d3e203538333934.roa (hash: u5m8wjdIm8TfcMvPgVMpXwI4v6YiahK9nqtecHDPjuA=)
                          2: 2552F050305622A342A57694E0C15404F4475354.crl (hash: yb/hslVVJShobmWt7R5VfLduxxRCsy9TKIvXRF1QCxM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.crl
                          rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2552F050305622A342A57694E0C15404F4475354.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 02:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4e:1a:db:56:8d:76:46:ec:2b:95:bb:17:66:0d:e4:5e:dd:c5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2552F050305622A342A57694E0C15404F4475354
        Validity
            Not Before: Sep 16 23:53:32 2026 GMT
            Not After : Sep 18 02:50:32 2026 GMT
        Subject: CN=B966AC0DC6534BB3D5EB2AF616E34420E30BCF5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:93:50:37:8c:c7:5b:cc:e5:59:d7:a2:e7:d3:
                    3b:0f:02:41:f3:a8:75:ed:70:26:c4:ed:a5:d6:c6:
                    d6:4a:db:f7:bd:26:54:7a:56:6e:db:ff:ee:31:f7:
                    e2:01:a3:75:95:9b:d3:9f:14:32:97:02:2b:9e:81:
                    92:b0:0c:09:93:46:75:02:11:c3:9c:c3:63:65:40:
                    26:e9:74:de:03:e8:df:88:be:fa:ea:5c:ff:aa:6a:
                    fb:ec:b6:3d:86:42:9b:9a:8b:33:9e:a4:32:28:2c:
                    8e:c3:73:43:cd:48:2c:20:2c:f3:c7:2b:e1:b4:b1:
                    96:38:d4:f0:bf:81:fd:37:39:3c:a4:83:24:78:3a:
                    6b:76:91:a7:ec:de:9e:47:69:df:6a:48:f6:ac:8b:
                    7d:d3:71:91:d7:15:3d:1a:eb:a6:47:fd:81:b7:c8:
                    68:46:08:60:53:40:d6:bc:48:24:08:e2:c2:fe:5a:
                    da:cd:cf:9c:5b:2b:0e:e1:63:87:76:e5:f7:2d:21:
                    56:e5:a2:7d:76:6d:fc:c5:98:0a:96:8e:9f:f5:87:
                    b5:cb:d4:6d:32:bf:f5:b6:52:ed:0f:4d:7f:58:5d:
                    f6:b3:86:91:77:d9:22:4e:2b:7e:ef:8b:20:97:ce:
                    f6:84:92:e2:b0:f7:a1:4c:f0:2d:7c:e5:0e:b7:61:
                    d5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:66:AC:0D:C6:53:4B:B3:D5:EB:2A:F6:16:E3:44:20:E3:0B:CF:5B
            X509v3 Authority Key Identifier:
                keyid:25:52:F0:50:30:56:22:A3:42:A5:76:94:E0:C1:54:04:F4:47:53:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2552F050305622A342A57694E0C15404F4475354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:60:92:aa:25:9c:b5:3d:8f:e6:01:07:15:a9:f8:94:53:b4:
         dd:6b:c5:03:d9:78:c5:17:46:27:15:92:30:cb:77:74:0c:13:
         fd:bb:04:40:1c:31:a7:2c:57:28:47:80:01:d2:c4:34:48:42:
         6f:a2:df:a4:b2:9a:a7:94:f6:54:49:45:12:d6:b7:e5:47:f7:
         36:37:d7:b0:26:ec:c2:f0:5c:23:e8:37:9a:3c:f9:a9:ea:56:
         85:8d:49:6d:c9:31:e3:71:34:d3:8b:03:70:39:70:ee:06:f4:
         72:9b:df:14:52:e1:d8:17:11:b0:fb:5e:39:e8:14:77:c5:cd:
         59:77:c2:b1:b0:f0:09:5e:91:96:ab:55:52:c2:3f:97:33:d4:
         b4:83:b2:86:47:7d:32:6c:61:ce:b6:41:95:01:15:ff:87:60:
         51:02:3e:10:b1:2d:80:ad:5b:ba:8e:2e:fe:04:c1:79:75:5c:
         21:d5:37:48:18:75:ec:a6:b3:20:3c:ce:e3:4f:94:05:b2:ed:
         35:7b:4c:87:4b:3a:65:aa:9b:0e:77:a2:22:d4:49:1f:fc:34:
         ea:78:f3:11:49:56:6d:b9:fa:12:d6:e5:ba:60:31:6d:44:ac:
         b6:c4:d6:d8:f9:35:72:b4:39:52:2f:f9:5e:21:c0:43:d1:76:
         09:5f:37:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 19:20:20 2026 by rpki-client