Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft
File:                     5645F0B82898A2A9A354AB086BC696E81297553D.mft (raw, json)
Hash identifier:          YLcVgHsOwzsjUaRx7pqNhiUnQ+qgKrlpdDvZKVOb7pk=
Subject key identifier:   48:C0:49:2D:15:AC:A5:7F:B3:C9:17:7E:1B:14:3B:A9:48:04:BA:AF
Authority key identifier: 56:45:F0:B8:28:98:A2:A9:A3:54:AB:08:6B:C6:96:E8:12:97:55:3D
Certificate issuer:       /CN=5645F0B82898A2A9A354AB086BC696E81297553D
Certificate serial:       4F9F5E94EFEE3191E5C54AFD4E6032ADC9D7FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft
Manifest number:          B7
Signing time:             Thu 17 Sep 2026 00:59:48 +0000
Manifest this update:     Thu 17 Sep 2026 00:54:48 +0000
Manifest next update:     Fri 18 Sep 2026 03:07:48 +0000
Files and hashes:         1: 5645F0B82898A2A9A354AB086BC696E81297553D.crl (hash: cYiFNsHOslfjSXA/WX5G+g2BuRUHVi5FveAepEnVw+s=)
                          2: 3130332e36372e36392e302f32342d3234203d3e20313531393938.roa (hash: qeHJ1PkAaAN+foqEt/Aw5gnh3414OQ8lq2kg+Oj23CQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.crl
                          rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 03:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9f:5e:94:ef:ee:31:91:e5:c5:4a:fd:4e:60:32:ad:c9:d7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5645F0B82898A2A9A354AB086BC696E81297553D
        Validity
            Not Before: Sep 17 00:54:48 2026 GMT
            Not After : Sep 18 03:07:48 2026 GMT
        Subject: CN=48C0492D15ACA57FB3C9177E1B143BA94804BAAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b3:31:6c:b9:81:ca:31:ba:47:6a:95:27:9b:
                    eb:0a:b0:84:e8:8e:d8:49:96:b5:8d:f4:98:29:ed:
                    5e:9c:60:4f:27:8d:26:ac:8f:9d:58:bc:e1:eb:ff:
                    ee:d3:39:9f:5e:0d:1b:de:d2:2c:2a:23:39:d9:42:
                    07:42:a5:6d:46:79:50:43:e1:5c:ce:58:0f:97:01:
                    b1:e9:b1:e6:6a:66:5d:79:91:bd:bc:ce:14:83:8e:
                    2d:6e:bb:1a:3c:3f:c3:f6:ff:1f:4b:34:4e:1c:7f:
                    1b:5a:81:4a:01:a2:53:5b:f6:88:73:ac:67:ad:85:
                    b0:9a:87:7d:9a:74:34:1f:88:34:4a:06:1b:06:77:
                    20:e6:6a:85:94:1e:17:12:16:a5:83:c1:02:f7:b0:
                    7c:ce:ad:b5:8f:f2:33:9e:7e:55:b5:90:a9:cb:35:
                    f2:b4:e6:f8:94:e9:1c:4b:94:b3:81:9d:56:c1:5a:
                    a7:04:0a:18:25:e5:1b:43:51:f8:51:e0:4d:ad:fb:
                    34:aa:44:c3:b8:fe:99:95:d1:8f:75:02:e2:f9:f0:
                    67:24:d4:0a:88:39:62:4a:de:fa:71:56:0e:31:0e:
                    65:04:aa:46:77:68:c2:6d:48:b2:0c:a0:fa:0f:ef:
                    c7:2f:79:95:c7:1e:db:63:7e:ba:c8:ed:dd:e4:6c:
                    87:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C0:49:2D:15:AC:A5:7F:B3:C9:17:7E:1B:14:3B:A9:48:04:BA:AF
            X509v3 Authority Key Identifier:
                keyid:56:45:F0:B8:28:98:A2:A9:A3:54:AB:08:6B:C6:96:E8:12:97:55:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e9:fe:67:ee:bb:f2:c0:f0:6b:dc:37:80:c7:12:51:ee:09:
         bf:a1:20:0f:67:eb:66:10:1b:02:14:bc:0f:5e:e9:35:ab:e7:
         47:f0:34:f7:12:5d:8d:44:98:e7:69:df:08:6d:63:92:0b:73:
         ab:88:53:c5:8d:6a:b2:9c:c5:91:f3:7b:37:4a:e1:36:c4:32:
         40:2e:cf:2a:c6:d4:18:9e:fe:1f:89:94:a5:d2:cc:ce:65:05:
         be:57:d8:f9:e0:62:39:2e:1b:f8:b3:4f:b4:76:b4:c6:9c:8c:
         59:ca:67:52:f5:9f:65:1c:35:51:d9:65:8f:d3:d7:a2:8c:b3:
         3a:2f:b8:29:46:8a:57:a2:a3:64:eb:13:24:4f:ca:98:c9:b1:
         d9:23:4f:92:84:ec:21:9b:c4:d9:37:9f:e2:a1:6a:44:ee:6e:
         7a:5e:76:7f:d0:78:4e:ef:44:33:5d:c7:ce:1b:36:8a:ce:8e:
         92:b3:ff:41:54:10:93:e8:79:ab:d0:0a:fe:6e:19:37:dd:f3:
         77:7f:73:28:a1:0e:ac:02:99:40:0a:c9:a0:c1:15:3c:a3:f9:
         bf:9e:48:3f:9c:3d:b5:0d:49:f6:c7:b4:fc:4a:7e:11:17:c4:
         bb:0f:48:73:a1:39:a1:75:b5:1d:6a:25:50:70:03:6a:8b:ec:
         63:94:4c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:45:41 2026 by rpki-client