Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft
File:                     6564F75E34457852F2B66C3764B24E23D7CC229E.mft (raw, json)
Hash identifier:          CvtTX0W6kA8BDURpD6QeZlRHfIals/h4+mlNMSCutoo=
Subject key identifier:   87:90:FD:67:12:B7:02:79:28:D2:55:39:49:23:F0:34:8F:82:8F:59
Authority key identifier: 65:64:F7:5E:34:45:78:52:F2:B6:6C:37:64:B2:4E:23:D7:CC:22:9E
Certificate issuer:       /CN=6564F75E34457852F2B66C3764B24E23D7CC229E
Certificate serial:       1A2FE47957F45FC6A8B626927C6594099AB070AA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6564F75E34457852F2B66C3764B24E23D7CC229E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft
Manifest number:          C9
Signing time:             Mon 28 Sep 2026 17:16:01 +0000
Manifest this update:     Mon 28 Sep 2026 17:11:01 +0000
Manifest next update:     Tue 29 Sep 2026 20:52:01 +0000
Files and hashes:         1: 6564F75E34457852F2B66C3764B24E23D7CC229E.crl (hash: Ebl11iOHFGK8xlypDy5Ww+J+T8p6iDCk2KCMMuaADWo=)
                          2: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ID4fm5BwuuWYs0CbkPkat6AFzlZ1Ymdn+yuQrCTD+tk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.crl
                          rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6564F75E34457852F2B66C3764B24E23D7CC229E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2f:e4:79:57:f4:5f:c6:a8:b6:26:92:7c:65:94:09:9a:b0:70:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6564F75E34457852F2B66C3764B24E23D7CC229E
        Validity
            Not Before: Sep 28 17:11:01 2026 GMT
            Not After : Sep 29 20:52:01 2026 GMT
        Subject: CN=8790FD6712B7027928D255394923F0348F828F59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fa:25:35:5b:ec:2c:de:e6:c5:0e:e8:fe:81:
                    85:42:e2:8b:79:d3:37:92:4c:15:54:02:97:42:4b:
                    81:57:28:6e:c3:7e:30:a5:99:8c:0d:99:37:e4:57:
                    cd:7c:34:ac:3f:d0:63:ec:a0:4a:d9:16:8c:5e:7e:
                    54:50:9e:a7:c5:af:b6:59:b0:74:e1:00:81:30:4b:
                    4d:ca:fc:76:ef:e2:fd:7f:03:8d:c5:05:dc:ab:03:
                    34:d2:a1:7c:e2:8d:95:b1:aa:a8:cd:df:7a:99:47:
                    5c:12:cd:82:7f:68:71:b2:56:d5:4b:ef:ed:41:a6:
                    8d:03:e7:05:58:7f:84:b5:b8:6d:19:26:7f:14:e1:
                    c3:53:b3:2a:e0:43:82:15:4b:58:40:98:a1:04:62:
                    43:a2:f0:51:81:83:52:1a:e8:e9:1a:0b:bf:c1:e8:
                    1e:ed:5e:30:db:40:26:8c:d1:0d:85:97:53:b6:bf:
                    a8:90:40:8c:e1:0a:70:07:4f:c1:f5:e8:00:91:2c:
                    61:07:b1:88:bf:15:b5:33:e1:a6:a6:f4:bf:6d:98:
                    6a:df:14:50:9c:c4:29:5e:94:1f:b5:0e:45:2c:c4:
                    4d:f2:a4:64:1f:d9:72:e9:a9:b5:d8:dc:7c:b3:1e:
                    b9:1d:85:da:1d:7b:5d:4b:83:7d:8a:d5:35:02:33:
                    08:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:90:FD:67:12:B7:02:79:28:D2:55:39:49:23:F0:34:8F:82:8F:59
            X509v3 Authority Key Identifier:
                keyid:65:64:F7:5E:34:45:78:52:F2:B6:6C:37:64:B2:4E:23:D7:CC:22:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6564F75E34457852F2B66C3764B24E23D7CC229E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:66:1d:94:59:83:4d:1d:ca:c5:9b:fa:cd:9c:9f:6a:d8:f6:
         b8:5c:ee:6d:49:2c:c4:f9:71:30:f5:da:a5:9c:b4:ed:2c:de:
         db:c6:1d:a1:24:39:47:ba:39:1a:27:7b:b0:49:6f:76:39:d7:
         f3:fd:51:e0:d2:6a:5d:d5:6a:c4:ba:06:d0:7f:30:3f:6c:3c:
         86:81:41:83:2a:69:e4:10:f1:ad:ad:ae:79:be:58:48:ea:a7:
         0e:9c:b3:c9:c4:f3:db:5b:17:9a:e0:42:61:f0:2f:96:7e:1c:
         23:19:80:7d:9d:52:6e:2b:59:e2:ff:e7:6d:a2:7d:da:30:9c:
         ad:4a:32:43:15:92:9e:56:b2:cf:af:09:1f:da:99:cd:cd:96:
         19:11:2d:46:8d:b2:e6:df:3d:75:7e:24:ad:da:c7:fe:5f:54:
         15:be:fd:6f:02:17:de:5a:37:a6:9a:82:c6:ff:c2:3e:4e:e7:
         6b:05:da:a8:a0:28:c7:2d:30:da:de:48:b1:48:0e:ed:e5:81:
         72:38:0f:50:00:fa:5b:36:65:9a:f3:23:5e:37:e1:19:07:6c:
         ea:b2:32:02:f2:16:e3:96:00:d2:b4:91:a1:83:c8:20:14:3e:
         74:5d:78:19:e5:f1:c4:f2:33:ca:3a:f7:84:7f:2b:ca:43:eb:
         63:fc:cf:7d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGi/keVf0X8aotiaSfGWUCZqwcKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU2NEY3NUUzNDQ1Nzg1MkYyQjY2QzM3NjRCMjRFMjNE
N0NDMjI5RTAeFw0yNjA5MjgxNzExMDFaFw0yNjA5MjkyMDUyMDFaMDMxMTAvBgNV
BAMTKDg3OTBGRDY3MTJCNzAyNzkyOEQyNTUzOTQ5MjNGMDM0OEY4MjhGNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG+iU1W+ws3ubFDuj+gYVC4ot5
0zeSTBVUApdCS4FXKG7DfjClmYwNmTfkV818NKw/0GPsoErZFoxeflRQnqfFr7ZZ
sHThAIEwS03K/Hbv4v1/A43FBdyrAzTSoXzijZWxqqjN33qZR1wSzYJ/aHGyVtVL
7+1Bpo0D5wVYf4S1uG0ZJn8U4cNTsyrgQ4IVS1hAmKEEYkOi8FGBg1Ia6OkaC7/B
6B7tXjDbQCaM0Q2Fl1O2v6iQQIzhCnAHT8H16ACRLGEHsYi/FbUz4aam9L9tmGrf
FFCcxClelB+1DkUsxE3ypGQf2XLpqbXY3HyzHrkdhdode11Lg32K1TUCMwiXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUh5D9ZxK3Anko0lU5SSPwNI+Cj1kwHwYDVR0j
BBgwFoAUZWT3XjRFeFLytmw3ZLJOI9fMIp4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmE4ZGI0MjgtMTk1Yy00OTBhLWFiYzItM2NiNmYwZDU2MGEzLzAvNjU2NEY3NUUz
NDQ1Nzg1MkYyQjY2QzM3NjRCMjRFMjNEN0NDMjI5RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NTY0Rjc1RTM0NDU3ODUyRjJCNjZDMzc2NEIyNEUyM0Q3Q0My
MjlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE4ZGI0MjgtMTk1Yy00OTBhLWFi
YzItM2NiNmYwZDU2MGEzLzAvNjU2NEY3NUUzNDQ1Nzg1MkYyQjY2QzM3NjRCMjRF
MjNEN0NDMjI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADNmHZRZg00dysWb+s2cn2rY9rhc7m1JLMT5
cTD12qWctO0s3tvGHaEkOUe6ORone7BJb3Y51/P9UeDSal3VasS6BtB/MD9sPIaB
QYMqaeQQ8a2trnm+WEjqpw6cs8nE89tbF5rgQmHwL5Z+HCMZgH2dUm4rWeL/522i
fdownK1KMkMVkp5Wss+vCR/amc3NlhkRLUaNsubfPXV+JK3ax/5fVBW+/W8CF95a
N6aagsb/wj5O52sF2qigKMctMNreSLFIDu3lgXI4D1AA+ls2ZZrzI1434RkHbOqy
MgLyFuOWANK0kaGDyCAUPnRdeBnl8cTyM8o694R/K8pD62P8z30=
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:48:48 2026 by rpki-client