Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft
File:                     5A5DD73D891416196AA5239D921D189D149B622B.mft (raw, json)
Hash identifier:          iyw8xgaaXrmtz0IEBpMUyfVFPcD1kJPesAMj8WlXQpo=
Subject key identifier:   45:E5:E7:96:16:AC:AB:5C:CA:0D:9B:1D:F5:E4:0E:7B:47:FC:2D:25
Authority key identifier: 5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B
Certificate issuer:       /CN=5A5DD73D891416196AA5239D921D189D149B622B
Certificate serial:       3072E3A0CADE1C02ED06859C49F131E02BC44920
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft
Manifest number:          C0
Signing time:             Tue 22 Sep 2026 22:03:44 +0000
Manifest this update:     Tue 22 Sep 2026 21:58:44 +0000
Manifest next update:     Thu 24 Sep 2026 01:23:44 +0000
Files and hashes:         1: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: qFviTkAJdjhBsY+4vQ6F1D24Kw3W6hG5KcLt5OTgeis=)
                          2: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: LUrz0HzKQn3BDSTwVj0zPYkXFEJEXJ4mzlthepJ39U0=)
                          3: 5A5DD73D891416196AA5239D921D189D149B622B.crl (hash: LUH04x3EroTpsgG6p7iOpJ1Udb0l6y12JMxeebELkU4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl
                          rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 01:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:72:e3:a0:ca:de:1c:02:ed:06:85:9c:49:f1:31:e0:2b:c4:49:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5DD73D891416196AA5239D921D189D149B622B
        Validity
            Not Before: Sep 22 21:58:44 2026 GMT
            Not After : Sep 24 01:23:44 2026 GMT
        Subject: CN=45E5E79616ACAB5CCA0D9B1DF5E40E7B47FC2D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:b0:57:77:82:4d:f3:60:5e:01:71:41:98:
                    fe:4c:97:e7:d6:4b:62:c5:eb:b5:e2:b0:9d:ca:ac:
                    a0:b2:51:99:65:56:ae:50:a0:c5:4f:2c:bf:52:52:
                    08:a5:24:6d:d6:09:4d:48:f6:38:5d:be:d9:55:22:
                    d2:59:d0:06:e3:ff:d9:87:c2:72:70:73:59:15:38:
                    11:0a:bf:58:68:37:6c:45:9d:65:34:09:15:5e:88:
                    65:c0:22:52:62:d2:28:74:b4:ca:7a:ef:e1:d2:ba:
                    e0:58:e4:e0:1b:d6:35:b0:1e:41:02:ce:d7:ba:06:
                    08:7c:80:de:ad:5b:39:a3:62:ab:71:58:73:d8:e1:
                    16:a1:91:ad:52:f4:ce:44:3a:93:7d:a0:11:d8:51:
                    bd:6d:a6:8a:1f:82:6b:88:0f:02:b2:13:6c:53:4c:
                    0d:8e:f3:f2:65:51:85:b6:bb:22:cd:4d:cf:fb:43:
                    4a:96:95:79:a8:14:d3:32:7e:86:b2:55:30:74:41:
                    27:5d:6f:e2:68:f3:54:22:69:bc:5c:59:a0:0c:83:
                    05:92:b7:d0:cc:5d:f9:2b:bc:e2:11:64:ff:b8:63:
                    4c:ff:58:69:e4:a2:b0:da:ca:84:24:c2:a6:41:c5:
                    dd:34:2a:a4:e1:f1:4b:dd:86:9a:e7:7e:c5:99:5c:
                    6b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E5:E7:96:16:AC:AB:5C:CA:0D:9B:1D:F5:E4:0E:7B:47:FC:2D:25
            X509v3 Authority Key Identifier:
                keyid:5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:63:d0:5e:4a:85:55:32:4d:76:0b:20:78:ac:3d:8a:26:30:
         78:71:b0:94:78:42:92:78:4f:f2:ef:6e:2b:c9:01:65:67:ea:
         0d:da:44:74:64:c0:78:c0:d3:a7:30:93:2e:99:1f:95:67:34:
         6c:34:bf:a0:54:02:76:90:a5:84:02:01:f4:ab:4c:af:1a:47:
         0b:75:81:40:6f:f4:e1:da:b4:15:3b:74:92:eb:46:81:f9:df:
         69:dd:fe:9c:6c:42:4d:88:63:54:a8:26:8b:91:d0:04:2a:3f:
         c6:cb:47:df:62:0c:a7:d0:06:7d:13:e8:6f:bf:3a:c6:4c:93:
         af:9d:93:4b:22:05:78:eb:b3:c7:ea:10:ed:3a:0d:33:8f:d4:
         08:3a:cd:06:0d:d5:9a:ff:1a:12:ee:ea:c7:0c:72:9d:be:1e:
         05:9b:21:63:8b:0f:97:d3:2e:e6:e7:34:9c:60:bb:c4:62:d0:
         9c:cf:8c:89:4e:fe:af:35:a3:2f:76:c8:7e:ab:af:94:64:9d:
         a2:0a:7f:27:9f:bc:3c:d9:cd:de:53:36:2a:a1:d4:62:f1:2b:
         1d:b3:53:7e:a3:5b:92:e6:99:33:fc:b0:55:a8:30:f6:7e:21:
         df:be:de:62:1d:d2:c0:63:d6:90:a4:65:73:60:f7:43:95:76:
         04:66:46:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:35:51 2026 by rpki-client