Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
File:                     4A690EC844644FC7C72921E7FA9D8B8827A68133.mft (raw, json)
Hash identifier:          PTfk1kRcEOIzrLY7Js9lv7YAJWQpcLpJijYp/3ppBd8=
Subject key identifier:   2F:A4:12:E4:81:DD:E5:39:41:5A:AB:1D:C6:05:28:9F:AE:4F:8B:AE
Authority key identifier: 4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33
Certificate issuer:       /CN=4A690EC844644FC7C72921E7FA9D8B8827A68133
Certificate serial:       28D459B51F15D3800CC6E6D3C6DFB3D487FED543
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
Manifest number:          C5
Signing time:             Sat 26 Sep 2026 02:48:42 +0000
Manifest this update:     Sat 26 Sep 2026 02:43:42 +0000
Manifest next update:     Sun 27 Sep 2026 02:51:42 +0000
Files and hashes:         1: 4A690EC844644FC7C72921E7FA9D8B8827A68133.crl (hash: a1Wo6jJMKcu+5AgUQWJKJJrW9v9imXVToBcqfIu/6Ys=)
                          2: 323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (hash: UugzJo0XG4CnPFobTcgFSX6/vfuVvh/vQ7HS0KjLKPQ=)
                          3: 3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa (hash: pESLqdHWwG9pCnMMcNgeB95CfcGiK8SY4ni1NsaDZJU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl
                          rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 02:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d4:59:b5:1f:15:d3:80:0c:c6:e6:d3:c6:df:b3:d4:87:fe:d5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A690EC844644FC7C72921E7FA9D8B8827A68133
        Validity
            Not Before: Sep 26 02:43:42 2026 GMT
            Not After : Sep 27 02:51:42 2026 GMT
        Subject: CN=2FA412E481DDE539415AAB1DC605289FAE4F8BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a3:6f:1a:ed:b5:98:3f:c5:6c:93:42:65:92:
                    b3:24:e7:0b:22:ef:d0:23:12:e7:f1:c4:47:18:44:
                    d3:44:d7:82:be:50:31:26:ad:79:a3:3b:6f:99:19:
                    bc:0c:22:98:3f:ea:b6:62:54:ba:d5:65:af:c9:9f:
                    c0:35:50:9b:f3:49:8a:d2:96:21:36:17:ad:f6:08:
                    43:60:5e:fe:40:ee:61:2f:09:68:e4:fb:8b:ec:57:
                    5e:28:b8:b5:73:37:35:a0:02:2b:24:28:54:b5:60:
                    fe:e2:63:f7:c7:01:bb:26:2d:ab:9e:a9:33:69:84:
                    cd:6f:81:a9:98:67:3c:16:ad:03:a3:1d:33:7b:ed:
                    16:bf:e9:eb:d9:c6:4f:c0:41:b8:5a:75:73:5c:9a:
                    dd:c7:27:59:35:28:01:b1:5b:da:7d:09:47:a6:7e:
                    4c:b7:f2:80:d7:cd:e1:06:18:01:f2:20:d3:e3:c6:
                    09:66:4b:de:cc:bd:64:4f:58:01:a3:e9:94:dc:b0:
                    3c:2d:ae:59:da:18:0b:e1:a1:d4:7b:e9:c2:5e:52:
                    cd:a4:b2:5b:24:4b:e8:a3:42:de:8d:34:82:7d:e8:
                    61:da:fc:69:89:53:bb:0f:26:73:09:54:95:d3:18:
                    89:78:1d:9b:25:91:9f:6c:f2:24:05:71:0a:a6:8f:
                    ef:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A4:12:E4:81:DD:E5:39:41:5A:AB:1D:C6:05:28:9F:AE:4F:8B:AE
            X509v3 Authority Key Identifier:
                keyid:4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ea:f2:20:be:e5:c6:09:84:dc:53:cb:11:80:a4:ba:76:1c:
         bf:de:09:99:65:21:e3:00:61:a8:d1:3f:21:f1:e8:de:a2:cc:
         1d:fe:2f:09:3f:a3:3e:12:36:59:5a:39:2f:cd:5d:96:50:36:
         00:67:2b:d1:13:5d:a8:35:07:fd:47:a4:1d:38:d9:b0:46:47:
         c4:1f:05:39:57:f3:67:2a:e7:a2:ba:40:c7:79:5f:83:0a:4b:
         70:8a:27:bb:3c:e3:0d:4d:ae:f0:bf:93:a5:eb:57:42:12:b3:
         00:bf:ca:a9:3e:2e:81:7b:87:f3:75:d0:a6:75:73:1e:e1:4d:
         06:ac:e8:44:20:e9:12:2f:11:c1:d9:af:0f:e7:0b:27:3e:35:
         5f:0d:a1:f2:f7:57:7f:c7:bc:65:37:e1:72:e2:40:b1:d8:6f:
         b5:76:94:20:06:f1:d6:8a:62:59:86:8c:ec:5c:c9:c5:02:26:
         50:f4:56:bf:25:f4:7b:91:f7:78:de:09:7e:98:57:43:f5:b0:
         65:ca:bf:72:69:9c:33:ec:91:35:f1:a2:a9:c4:20:03:b4:eb:
         48:03:86:69:f3:90:07:21:3c:c2:86:3e:54:e2:81:bd:35:68:
         91:31:92:24:29:f7:ca:c6:77:ed:db:07:d4:79:7d:75:a8:ef:
         1a:97:76:df
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKNRZtR8V04AMxubTxt+z1If+1UMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE2OTBFQzg0NDY0NEZDN0M3MjkyMUU3RkE5RDhCODgy
N0E2ODEzMzAeFw0yNjA5MjYwMjQzNDJaFw0yNjA5MjcwMjUxNDJaMDMxMTAvBgNV
BAMTKDJGQTQxMkU0ODFEREU1Mzk0MTVBQUIxREM2MDUyODlGQUU0RjhCQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqo28a7bWYP8Vsk0JlkrMk5wsi
79AjEufxxEcYRNNE14K+UDEmrXmjO2+ZGbwMIpg/6rZiVLrVZa/Jn8A1UJvzSYrS
liE2F632CENgXv5A7mEvCWjk+4vsV14ouLVzNzWgAiskKFS1YP7iY/fHAbsmLaue
qTNphM1vgamYZzwWrQOjHTN77Ra/6evZxk/AQbhadXNcmt3HJ1k1KAGxW9p9CUem
fky38oDXzeEGGAHyINPjxglmS97MvWRPWAGj6ZTcsDwtrlnaGAvhodR76cJeUs2k
slskS+ijQt6NNIJ96GHa/GmJU7sPJnMJVJXTGIl4HZslkZ9s8iQFcQqmj+8FAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUL6QS5IHd5TlBWqsdxgUon65Pi64wHwYDVR0j
BBgwFoAUSmkOyERkT8fHKSHn+p2LiCemgTMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTBmZjAyMmEtOWIxNi00YjRjLTk4YTItNTM0OTk0ZjU4OWQwLzAvNEE2OTBFQzg0
NDY0NEZDN0M3MjkyMUU3RkE5RDhCODgyN0E2ODEzMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QTY5MEVDODQ0NjQ0RkM3QzcyOTIxRTdGQTlEOEI4ODI3QTY4
MTMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTBmZjAyMmEtOWIxNi00YjRjLTk4
YTItNTM0OTk0ZjU4OWQwLzAvNEE2OTBFQzg0NDY0NEZDN0M3MjkyMUU3RkE5RDhC
ODgyN0E2ODEzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABzq8iC+5cYJhNxTyxGApLp2HL/eCZllIeMA
YajRPyHx6N6izB3+Lwk/oz4SNllaOS/NXZZQNgBnK9ETXag1B/1HpB042bBGR8Qf
BTlX82cq56K6QMd5X4MKS3CKJ7s84w1NrvC/k6XrV0ISswC/yqk+LoF7h/N10KZ1
cx7hTQas6EQg6RIvEcHZrw/nCyc+NV8NofL3V3/HvGU34XLiQLHYb7V2lCAG8daK
YlmGjOxcycUCJlD0Vr8l9HuR93jeCX6YV0P1sGXKv3JpnDPskTXxoqnEIAO060gD
hmnzkAchPMKGPlTigb01aJExkiQp98rGd+3bB9R5fXWo7xqXdt8=
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:29:24 2026 by rpki-client