Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft
File:                     90A149FB759A6A176FE4D47F5082FA60C9767022.mft (raw, json)
Hash identifier:          hMxgbZ86CWZzJWYMtY86ry5ilwWtgTPglRWVYjP5vHM=
Subject key identifier:   68:75:56:2A:0A:C7:FE:4D:24:BB:02:AF:A4:71:42:51:D4:4C:DD:AA
Authority key identifier: 90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22
Certificate issuer:       /CN=90A149FB759A6A176FE4D47F5082FA60C9767022
Certificate serial:       642501026F197E00281F5FB880EAB9B4CA267D84
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft
Manifest number:          C2
Signing time:             Fri 25 Sep 2026 01:21:46 +0000
Manifest this update:     Fri 25 Sep 2026 01:16:46 +0000
Manifest next update:     Sat 26 Sep 2026 04:21:46 +0000
Files and hashes:         1: 3132302e32392e3233302e302f32342d3234203d3e203139393035.roa (hash: /6rKJIPdCG5UyO3XHODZZ3EDU0CTpBfu4ou77AX6cek=)
                          2: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: MYxtWKdKnWygaDzucgDa2e53LN0HkZn96bp2EuKqQIc=)
                          3: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: G5X9t8nXB1mRf0UKItbT4yn3eidWxB2oSMgKDMVRVbE=)
                          4: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: ZyVnCGfpVMbL3rPs3FU6HbGvjwN2cgfbIIbFeRp+eSg=)
                          5: 3132302e32392e3232382e302f32342d3234203d3e203139393035.roa (hash: X5HsBE1ewqrCbWqrNdoiRxUV2ywDPMva+dNQ4cS5oB4=)
                          6: 3132302e32392e3232362e302f32342d3234203d3e203139393035.roa (hash: dcQ3Sb65sjjLX49tVMmjaQB6c8zJqXUEiFfQJc1R5QA=)
                          7: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: hcuXQrxnDSCR9sGH8AKpCLGAnxBa8Jctci8rHhKNuLM=)
                          8: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: PkQgWHfFkFDdD7JqzWkftJuZG03TTvKBUbVrhzww6Q4=)
                          9: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: ckYh7W2IVtz0AntnQ+PueP5/KAoXf5rAosyZM59PhNk=)
                          10: 90A149FB759A6A176FE4D47F5082FA60C9767022.crl (hash: IVETgnqo9B53kSf0DuiNscozEOQiaUgYu8rFASdgyFQ=)
                          11: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: /bFeq3oJ+j4yhcHhIfucgcl6Z3OfaEag9GMIa9agARs=)
                          12: 3132302e32392e3232352e302f32342d3234203d3e203139393035.roa (hash: WJbMrhYWH52zN+15Q0lEM0yHGULJofqinsPUUc3DEoM=)
                          13: 3132302e32392e3233312e302f32342d3234203d3e203139393035.roa (hash: wR1gyIq5cKfCTApo9vqdO2nlAEKOlwrS+SEI5BtyjVc=)
                          14: 3132302e32392e3232392e302f32342d3234203d3e203139393035.roa (hash: fEHjHjujgkqVA1apLtwPlgVoJB63v2RTVUpYlDyn+3c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl
                          rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 10:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:25:01:02:6f:19:7e:00:28:1f:5f:b8:80:ea:b9:b4:ca:26:7d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90A149FB759A6A176FE4D47F5082FA60C9767022
        Validity
            Not Before: Sep 25 01:16:46 2026 GMT
            Not After : Sep 26 04:21:46 2026 GMT
        Subject: CN=6875562A0AC7FE4D24BB02AFA4714251D44CDDAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8c:78:e9:30:f4:6b:bf:ee:9a:3e:dc:1c:50:
                    4c:f3:05:2f:75:b0:18:65:d3:78:82:73:ed:ff:e5:
                    97:5f:e2:51:ce:5a:91:37:c2:d4:64:d3:bd:38:14:
                    35:d3:df:14:dc:21:63:b8:7b:4d:24:1d:f1:70:51:
                    b4:63:b8:f8:00:a0:b4:b3:50:3d:3d:6f:ad:63:05:
                    c8:b9:2d:3f:72:8b:70:9b:1c:f6:33:c1:d1:f6:36:
                    3b:2b:bd:ee:e2:26:be:12:32:dd:f3:ec:68:56:10:
                    43:88:3c:9b:d5:ed:9d:61:ea:de:4c:92:ec:96:1e:
                    ad:b3:ed:43:39:fb:ea:32:9d:e0:1c:0b:6e:32:f2:
                    f4:8f:43:3c:ff:bd:e9:c9:df:e4:4d:fb:28:74:cc:
                    b5:52:a0:e7:b4:da:c3:22:73:3c:7c:56:33:15:a9:
                    b7:8c:2d:a5:e7:d9:f5:52:1a:f5:d0:97:1d:40:e0:
                    41:35:8f:61:f1:6e:72:c8:53:7b:9d:82:ba:93:3c:
                    52:2a:f2:dc:c3:2b:4d:7b:dd:36:93:8b:20:51:56:
                    b8:df:6a:c8:b7:4d:ee:15:f9:86:87:d1:f6:66:87:
                    64:2e:54:b8:1a:05:19:9c:60:29:c0:1c:64:58:77:
                    4d:80:3a:ab:7b:b0:06:de:44:22:6a:b6:c6:56:29:
                    11:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:75:56:2A:0A:C7:FE:4D:24:BB:02:AF:A4:71:42:51:D4:4C:DD:AA
            X509v3 Authority Key Identifier:
                keyid:90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:19:86:30:ef:fe:e2:d8:1c:72:25:de:f4:e9:31:a8:4e:5f:
         87:8c:e3:66:29:31:f8:35:fa:60:c0:00:85:5c:78:de:84:ec:
         08:a1:5b:69:61:68:bf:a1:a0:05:a4:b0:2b:3a:c0:de:ad:08:
         53:ac:77:ce:2a:e4:1d:08:d2:bb:1c:9e:67:e9:31:a2:69:dd:
         cf:b2:50:88:c8:97:da:c0:62:a6:a6:b3:f2:dc:a1:f3:f8:d1:
         6d:6e:41:e0:fe:dd:76:12:4b:24:52:44:06:6a:f2:e9:3b:eb:
         fd:27:6a:39:c8:f9:6b:db:e7:9e:dc:88:0f:f3:f5:03:26:d6:
         f2:76:b4:8d:b3:e0:5a:9e:8d:69:68:6c:24:e0:0b:1a:31:35:
         47:e9:e1:42:7f:6b:ca:a6:9a:65:5c:ea:b6:b8:63:1c:2e:e3:
         e8:3d:98:8a:fe:f4:80:b5:85:63:e5:a9:be:7f:88:fc:30:50:
         f9:dc:76:c2:2a:e6:98:11:70:02:ca:ac:a7:86:8f:af:23:fd:
         64:88:41:29:c9:65:7b:80:20:74:fc:35:ab:8a:47:6b:6c:05:
         e7:8c:ce:d2:d4:28:51:9d:c9:27:eb:35:83:6d:b2:b8:0f:c9:
         27:85:d8:96:08:cb:c3:12:3f:23:39:54:5c:74:25:fd:ce:ec:
         4c:ed:9f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:40:34 2026 by rpki-client