Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.mft
File:                     ADF61245661464C6C8800AFF335206958F2DA807.mft (raw, json)
Hash identifier:          LFpFeh9MJDXl/NmvzQbIryvplG336/1fSaE+DzMVSmE=
Subject key identifier:   09:AD:B9:EA:D2:CB:76:A1:3D:22:11:2A:5D:E8:7D:C3:EC:AF:8E:39
Authority key identifier: AD:F6:12:45:66:14:64:C6:C8:80:0A:FF:33:52:06:95:8F:2D:A8:07
Certificate issuer:       /CN=ADF61245661464C6C8800AFF335206958F2DA807
Certificate serial:       38A36762CA2BF670073EA4E577A92C9977332178
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF61245661464C6C8800AFF335206958F2DA807.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.mft
Manifest number:          C2
Signing time:             Wed 23 Sep 2026 18:33:58 +0000
Manifest this update:     Wed 23 Sep 2026 18:28:58 +0000
Manifest next update:     Thu 24 Sep 2026 20:11:58 +0000
Files and hashes:         1: ADF61245661464C6C8800AFF335206958F2DA807.crl (hash: PsKl3+NZ1lAg3Ls9G/ylZQGheXGDmKmjOHAtkTMj9yE=)
                          2: 3130332e38392e3234332e302f32342d3234203d3e20313530393133.roa (hash: mnmK9VjAzZX2nXMP/Hz0WV6eU5IRZ0uI7bQgiKIuUvQ=)
                          3: 3130332e38392e3234322e302f32342d3234203d3e20313530393133.roa (hash: owSfTkypHLSK5DikAhWXjes3F0fNiVqc3tZbIOFlw4s=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.crl
                          rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF61245661464C6C8800AFF335206958F2DA807.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 20:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a3:67:62:ca:2b:f6:70:07:3e:a4:e5:77:a9:2c:99:77:33:21:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADF61245661464C6C8800AFF335206958F2DA807
        Validity
            Not Before: Sep 23 18:28:58 2026 GMT
            Not After : Sep 24 20:11:58 2026 GMT
        Subject: CN=09ADB9EAD2CB76A13D22112A5DE87DC3ECAF8E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:35:0a:30:be:b9:ea:48:18:e0:23:49:63:18:
                    d1:70:bf:d7:e7:e1:f4:a5:e1:14:a9:48:7a:3e:ca:
                    c1:a6:f3:85:a5:a9:f9:76:1f:24:98:37:85:90:f2:
                    80:bb:26:c6:ef:8c:c8:31:51:ee:d5:08:46:9b:70:
                    ff:26:ea:81:94:f1:21:87:ec:e4:b8:d6:78:49:02:
                    89:77:0f:43:a1:56:c3:c8:ee:a7:8a:21:af:02:36:
                    e3:4b:f1:90:c2:1d:db:90:07:94:08:38:4a:41:e0:
                    26:4d:a4:4d:a1:90:61:d5:6e:dd:f8:e1:10:c7:d3:
                    82:19:74:c5:44:b1:13:2b:eb:cb:3a:e5:88:14:f7:
                    65:7d:43:44:f8:38:f3:ed:d7:d9:f3:18:d3:a1:62:
                    1d:21:91:cc:b2:d7:3c:4e:cf:ef:95:d6:16:7e:e8:
                    bc:c5:46:98:54:04:9f:ab:bd:9b:c9:36:68:15:42:
                    a2:ae:2f:f1:17:13:0b:db:16:34:33:c5:4a:27:c5:
                    0e:58:d9:93:6d:f4:5d:b7:03:ea:b4:7d:e8:e2:2a:
                    b8:b9:b6:cf:1e:ee:e6:e3:e4:fc:a4:83:9f:15:1d:
                    e7:37:c9:9b:b5:78:ab:9b:58:00:10:61:76:4f:fc:
                    13:1a:30:21:36:7c:45:4f:45:9f:90:1b:8b:ac:d8:
                    8f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AD:B9:EA:D2:CB:76:A1:3D:22:11:2A:5D:E8:7D:C3:EC:AF:8E:39
            X509v3 Authority Key Identifier:
                keyid:AD:F6:12:45:66:14:64:C6:C8:80:0A:FF:33:52:06:95:8F:2D:A8:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF61245661464C6C8800AFF335206958F2DA807.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ADF61245661464C6C8800AFF335206958F2DA807.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a6:e5:98:1e:46:2d:e0:f2:c7:00:00:5b:16:95:77:87:07:
         47:d6:89:ac:46:ea:cb:6d:f0:bd:f8:e1:10:cf:94:7c:74:b4:
         58:92:d5:7c:63:27:39:c0:3a:81:48:0f:fa:7b:54:56:26:67:
         b1:f1:7c:5e:9e:ec:3d:e0:61:9e:20:6e:58:7b:1d:a8:f4:d0:
         c9:29:ce:db:b1:16:85:10:6b:aa:f3:d7:98:6f:b6:d8:76:4a:
         fc:ca:55:8d:0e:99:1e:59:6d:c5:8f:45:ce:7b:5a:de:57:76:
         5c:c5:38:e7:93:52:61:ad:32:7e:d3:03:d9:cc:1e:d8:dc:8e:
         07:51:96:2d:db:74:22:a0:a6:b5:2b:77:6f:54:a5:60:d9:ef:
         f9:61:ca:cd:8a:c0:3b:b2:bb:0a:c5:24:1b:c8:6c:17:59:17:
         77:aa:71:25:a8:97:f2:ae:aa:65:78:7c:7e:ad:d1:3b:67:cd:
         a3:18:22:44:58:67:6b:f6:d4:16:5e:2c:62:ea:32:cc:0d:38:
         fd:8c:56:25:97:29:e2:db:4e:5c:48:fd:32:d5:19:02:65:23:
         3b:22:9f:48:d1:47:88:e7:53:d9:b3:26:86:74:c8:db:87:ce:
         b3:8f:5a:94:a9:62:98:10:e6:b9:62:cf:86:2b:24:5f:d6:fa:
         29:26:13:7e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOKNnYsor9nAHPqTld6ksmXczIXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURGNjEyNDU2NjE0NjRDNkM4ODAwQUZGMzM1MjA2OTU4
RjJEQTgwNzAeFw0yNjA5MjMxODI4NThaFw0yNjA5MjQyMDExNThaMDMxMTAvBgNV
BAMTKDA5QURCOUVBRDJDQjc2QTEzRDIyMTEyQTVERTg3REMzRUNBRjhFMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxNQowvrnqSBjgI0ljGNFwv9fn
4fSl4RSpSHo+ysGm84Wlqfl2HySYN4WQ8oC7JsbvjMgxUe7VCEabcP8m6oGU8SGH
7OS41nhJAol3D0OhVsPI7qeKIa8CNuNL8ZDCHduQB5QIOEpB4CZNpE2hkGHVbt34
4RDH04IZdMVEsRMr68s65YgU92V9Q0T4OPPt19nzGNOhYh0hkcyy1zxOz++V1hZ+
6LzFRphUBJ+rvZvJNmgVQqKuL/EXEwvbFjQzxUonxQ5Y2ZNt9F23A+q0fejiKri5
ts8e7ubj5Pykg58VHec3yZu1eKubWAAQYXZP/BMaMCE2fEVPRZ+QG4us2I/bAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUCa256tLLdqE9IhEqXeh9w+yvjjkwHwYDVR0j
BBgwFoAUrfYSRWYUZMbIgAr/M1IGlY8tqAcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGUzMzA4NzYtN2U2OC00NzA3LWE1M2QtOTJiYmZkYjJmMjNjLzAvQURGNjEyNDU2
NjE0NjRDNkM4ODAwQUZGMzM1MjA2OTU4RjJEQTgwNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BREY2MTI0NTY2MTQ2NEM2Qzg4MDBBRkYzMzUyMDY5NThGMkRB
ODA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGUzMzA4NzYtN2U2OC00NzA3LWE1
M2QtOTJiYmZkYjJmMjNjLzAvQURGNjEyNDU2NjE0NjRDNkM4ODAwQUZGMzM1MjA2
OTU4RjJEQTgwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAACm5ZgeRi3g8scAAFsWlXeHB0fWiaxG6stt
8L344RDPlHx0tFiS1XxjJznAOoFID/p7VFYmZ7HxfF6e7D3gYZ4gblh7Haj00Mkp
ztuxFoUQa6rz15hvtth2SvzKVY0OmR5ZbcWPRc57Wt5XdlzFOOeTUmGtMn7TA9nM
HtjcjgdRli3bdCKgprUrd29UpWDZ7/lhys2KwDuyuwrFJBvIbBdZF3eqcSWol/Ku
qmV4fH6t0TtnzaMYIkRYZ2v21BZeLGLqMswNOP2MViWXKeLbTlxI/TLVGQJlIzsi
n0jRR4jnU9mzJoZ0yNuHzrOPWpSpYpgQ5rliz4YrJF/W+ikmE34=
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:16:24 2026 by rpki-client