Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
File:                     FC2134DAE4378B90D9026728D4F693714082E391.mft (raw, json)
Hash identifier:          rd5YXSpu+l40Y8VIn3ENm+M7PzGs5UjaCCuN9mXHziQ=
Subject key identifier:   FF:77:DE:38:6C:1A:B2:B7:53:4D:20:58:20:3E:8B:24:00:75:33:CF
Authority key identifier: FC:21:34:DA:E4:37:8B:90:D9:02:67:28:D4:F6:93:71:40:82:E3:91
Certificate issuer:       /CN=FC2134DAE4378B90D9026728D4F693714082E391
Certificate serial:       07A8CC109BADA53673C55CB4B0C658E1E2F97788
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
Manifest number:          DA
Signing time:             Sun 11 Oct 2026 11:16:24 +0000
Manifest this update:     Sun 11 Oct 2026 11:11:24 +0000
Manifest next update:     Mon 12 Oct 2026 11:53:24 +0000
Files and hashes:         1: 323030313a6466363a3930303a3a2f34382d3438203d3e20313337333733.roa (hash: MJmPqB3WcxdkyKoVqQyg0sJMdXBPPXnAnnnDkCU7VCY=)
                          2: 3130332e3132302e36372e302f32342d3234203d3e20313937353337.roa (hash: bW/SNUaHs3SGJKL0kepYGX+rWcqYBs85NKukY1VUBkM=)
                          3: 3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa (hash: lQI4CztcEE79zTOOfPW2h41crEOkC4qTHc3EICinkHg=)
                          4: 3130332e3132302e36342e302f32342d3234203d3e20313337333733.roa (hash: tpKpZ6LssVkLx3IYdUKkyDS0W8NfoVDk5SRsQs5iXeQ=)
                          5: FC2134DAE4378B90D9026728D4F693714082E391.crl (hash: 0q1RD/kgWr0ftEEjeKnFa7lwftRUw+1AXSbp/KCy7oA=)
                          6: 3130332e3132302e36372e302f32342d3234203d3e20323032373336.roa (hash: 5DeQZnO25GQBg084uvCvhKR3hbUDyeL+NhhXVoCIa64=)
                          7: 3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa (hash: d1ZK5CDzhtaNvYbuQR6mmsziLXG16ilK4xHvMUVhmNg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.crl
                          rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 11:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a8:cc:10:9b:ad:a5:36:73:c5:5c:b4:b0:c6:58:e1:e2:f9:77:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC2134DAE4378B90D9026728D4F693714082E391
        Validity
            Not Before: Oct 11 11:11:24 2026 GMT
            Not After : Oct 12 11:53:24 2026 GMT
        Subject: CN=FF77DE386C1AB2B7534D2058203E8B24007533CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:b6:f0:33:f0:3c:10:2a:27:c3:72:1c:7a:
                    7c:d8:fa:c7:2c:7a:38:a7:81:c7:a2:3c:43:53:f0:
                    f3:27:a1:f6:4c:63:d3:c1:06:95:19:2a:40:0c:51:
                    84:40:0d:b4:0d:a5:bc:b1:79:75:46:ad:5c:65:e6:
                    81:ea:c5:0a:b9:90:be:70:6e:9f:a4:1f:58:a3:ad:
                    04:68:92:ce:14:1c:4b:b4:b8:67:8d:f0:9e:f2:f8:
                    1b:13:c2:28:96:1e:a1:dd:4c:8e:0b:df:60:2a:da:
                    bd:62:85:27:f6:c3:00:3a:c3:5d:73:55:e5:97:1d:
                    ca:28:d7:a6:29:50:0a:f4:60:d4:76:9f:96:6f:a5:
                    c8:1d:16:de:f2:f7:17:60:bc:6f:f7:8d:e3:67:48:
                    1c:67:ea:79:bf:df:c8:f0:05:5b:2c:b0:73:7f:3a:
                    2a:4b:8c:e4:a3:77:e8:e1:bb:46:ca:cd:08:ab:5a:
                    f1:4f:0b:3f:ad:45:be:17:37:dd:b7:ad:45:4a:fc:
                    fb:69:64:b1:81:85:a9:95:30:27:72:19:2c:ed:54:
                    aa:aa:0d:ef:ca:0f:8c:0c:b1:e3:7a:38:4d:b6:82:
                    0e:ae:c2:a2:f1:91:bb:b1:1d:3f:56:b9:f7:96:2c:
                    d9:50:b9:ba:cb:ab:1c:b1:98:f7:70:47:37:c9:e1:
                    80:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:77:DE:38:6C:1A:B2:B7:53:4D:20:58:20:3E:8B:24:00:75:33:CF
            X509v3 Authority Key Identifier:
                keyid:FC:21:34:DA:E4:37:8B:90:D9:02:67:28:D4:F6:93:71:40:82:E3:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:1e:5f:72:c4:1d:21:56:87:c8:3d:21:06:4d:df:50:70:bb:
         d7:34:a6:7c:ed:80:07:4f:ff:8f:e5:ea:62:52:09:a7:6c:59:
         0c:16:66:da:41:9f:ad:99:36:d6:96:40:fd:e3:ef:39:a4:a6:
         78:24:9f:ae:84:e2:19:03:af:dd:19:5f:39:3f:8f:8b:d2:0e:
         55:1a:4d:8d:46:a0:c3:43:5f:e4:4c:71:2e:0d:18:f6:a2:59:
         24:5c:ab:8a:fa:da:31:5d:48:4f:94:59:52:53:8d:77:89:b9:
         c5:4c:e6:36:dd:de:5b:f0:4d:0d:87:6e:ee:3f:91:0b:de:5c:
         f6:46:5d:a5:9c:09:0f:0c:cf:a8:34:22:0f:23:17:64:f3:63:
         c4:24:c0:56:42:8e:d7:95:02:7f:03:d5:b4:91:67:dd:34:b6:
         0b:35:9f:20:e1:43:c5:b1:59:14:e8:3e:7b:be:94:0f:17:64:
         b7:23:f9:f8:48:e2:b2:6f:09:35:26:51:47:c7:56:59:d9:7b:
         06:c6:4d:2d:44:bb:8f:b4:10:4a:af:ca:72:ff:77:cf:59:27:
         ae:26:d0:2a:1c:28:16:8d:4f:88:47:ed:1c:be:88:be:af:16:
         6c:9f:ac:1a:9b:b5:4e:6c:e6:0f:4b:3e:05:66:f3:21:fe:28:
         31:ba:ce:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:48:02 2026 by rpki-client