Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft
File:                     440F6B35B30CFEEB3F2B22851A2658050264D69E.mft (raw, json)
Hash identifier:          pHozqMYLLy7kJ627cZV6bSFHB9XoN12tXVIBCiDM3A8=
Subject key identifier:   73:D7:B6:27:BE:6A:CE:3F:EE:90:3A:64:16:10:6F:90:F5:12:1E:BB
Authority key identifier: 44:0F:6B:35:B3:0C:FE:EB:3F:2B:22:85:1A:26:58:05:02:64:D6:9E
Certificate issuer:       /CN=440F6B35B30CFEEB3F2B22851A2658050264D69E
Certificate serial:       7E08601ED2ADE1D5FF7EDD0007E4B4D8370E63C2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/440F6B35B30CFEEB3F2B22851A2658050264D69E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft
Manifest number:          C1
Signing time:             Thu 24 Sep 2026 08:15:51 +0000
Manifest this update:     Thu 24 Sep 2026 08:10:51 +0000
Manifest next update:     Fri 25 Sep 2026 09:23:51 +0000
Files and hashes:         1: 440F6B35B30CFEEB3F2B22851A2658050264D69E.crl (hash: LZY0jtjqG9zRP5ORgMcu6QnLni+4RAwV85b2YMsjXnw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.crl
                          rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/440F6B35B30CFEEB3F2B22851A2658050264D69E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 09:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:08:60:1e:d2:ad:e1:d5:ff:7e:dd:00:07:e4:b4:d8:37:0e:63:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=440F6B35B30CFEEB3F2B22851A2658050264D69E
        Validity
            Not Before: Sep 24 08:10:51 2026 GMT
            Not After : Sep 25 09:23:51 2026 GMT
        Subject: CN=73D7B627BE6ACE3FEE903A6416106F90F5121EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:71:19:e5:a8:9a:bb:3e:5d:cc:44:84:3c:
                    1b:4f:58:65:f4:e8:0e:a1:ec:07:41:14:b7:8a:16:
                    92:3d:4f:3e:90:3e:c6:6b:54:98:b8:6c:8a:b0:a3:
                    aa:d6:d8:51:09:fd:d9:a0:b7:0b:07:d1:2b:8a:16:
                    c4:10:5d:fa:45:3e:1e:97:cc:d7:49:dc:ae:33:00:
                    65:a4:30:ef:7c:a3:97:dc:2b:86:c7:3e:8e:b6:2c:
                    54:14:6e:b3:2c:97:9b:f1:d3:c2:eb:25:70:09:26:
                    e9:16:1e:3b:11:ae:c4:2c:e4:79:35:63:10:8d:0b:
                    6c:8a:96:74:d1:67:ac:44:16:0a:bc:74:20:e6:8c:
                    f5:c8:e7:16:bb:26:01:71:1f:90:6c:b2:34:57:17:
                    f7:de:7d:2c:7a:d7:cd:14:a2:8e:79:02:7b:80:7e:
                    97:7a:00:5f:3a:da:72:f4:b3:27:48:15:13:02:66:
                    41:0f:0b:e4:3f:40:6e:55:ac:00:39:e4:99:3a:71:
                    6d:c5:6d:49:96:af:98:59:b0:d8:d6:50:7d:e7:04:
                    5a:79:46:9f:f7:6e:19:ee:e0:aa:5b:be:43:2e:46:
                    14:7c:5a:db:13:e3:91:16:d7:98:d7:b6:18:1d:71:
                    8a:ef:8b:62:0b:ba:b7:bf:18:69:83:a5:7b:b8:c9:
                    27:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D7:B6:27:BE:6A:CE:3F:EE:90:3A:64:16:10:6F:90:F5:12:1E:BB
            X509v3 Authority Key Identifier:
                keyid:44:0F:6B:35:B3:0C:FE:EB:3F:2B:22:85:1A:26:58:05:02:64:D6:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/440F6B35B30CFEEB3F2B22851A2658050264D69E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:4c:1f:15:52:a3:7a:e8:8c:cf:f3:6c:ae:d2:37:de:60:1a:
         54:21:1b:22:07:3e:57:2d:4c:ad:0b:3a:f4:ee:bd:b8:9e:0d:
         24:ce:06:a7:36:95:20:95:ed:99:e4:01:8c:75:3f:a4:83:b5:
         2c:8d:db:2e:07:77:7a:c9:b5:8c:24:09:30:92:93:30:09:7a:
         dd:92:91:73:78:ad:69:29:c0:a6:19:14:14:4d:3e:7f:32:7b:
         83:34:da:ad:ff:b8:1a:74:21:09:6b:73:09:f7:f5:3f:f7:f0:
         14:28:67:88:bf:2d:97:ac:db:fa:2a:c5:90:bf:d1:1c:f8:27:
         4e:e5:cc:9c:53:30:ea:c0:45:65:b1:3d:3f:0c:38:58:d3:2f:
         4c:11:3a:8d:1a:71:95:74:af:f5:88:b6:78:81:f0:91:57:af:
         92:9a:fc:1a:be:54:38:2b:74:73:9c:07:a1:44:ff:0a:9c:2c:
         53:ea:fb:e1:0c:26:78:01:e8:be:a2:62:7d:51:69:f2:99:93:
         cf:89:3a:da:52:25:14:a5:e9:56:d0:2f:41:21:9e:46:25:ee:
         a5:02:0d:17:03:79:06:d0:15:04:a9:6a:74:91:85:11:34:dd:
         f2:a5:fc:dd:ea:28:94:31:af:68:24:9a:c3:c5:eb:90:14:8f:
         3d:b1:81:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:48:06 2026 by rpki-client