Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
File:                     E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft (raw, json)
Hash identifier:          uQWTuxM6hGwHPa7uzATR2JMrncKdSj9fdDUgCI5y7/Q=
Subject key identifier:   FB:29:CF:8A:78:74:D3:A6:AD:6C:42:8F:F7:9C:CF:ED:6C:09:F9:80
Authority key identifier: E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93
Certificate issuer:       /CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
Certificate serial:       34E7F0C1065021F38CE608ABC222FCD113A951E7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
Manifest number:          C1
Signing time:             Wed 23 Sep 2026 18:18:38 +0000
Manifest this update:     Wed 23 Sep 2026 18:13:38 +0000
Manifest next update:     Thu 24 Sep 2026 20:39:38 +0000
Files and hashes:         1: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: m1pNwOSLl0bdCga72bgV0UjJBtOBSgU1ellU74iVk3k=)
                          2: E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl (hash: FSfuleAdTZ9NGjJ2h60bpptswMeOGxtoZyIjwRqVbII=)
                          3: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: 0O4aswxD1VoxCc8I8JRXFhna+2fhOQAti4akwG9PjgQ=)
                          4: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: v44LsT6qMPli0zPJF9qTEG8AjfBqu7Oywt77FQr+HWc=)
                          5: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: phcDv0m0vLlfwZ99qeKbMtyh63ijZFKiTdhh4MVincM=)
                          6: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: PekXXJ/q55kTEO5kx0CRU0xx2H+12J366upyeQ1nZA8=)
                          7: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: E6gLrMvPbF2DgnqL5izEh9JlZeBZOXfgDDhLttXgRCM=)
                          8: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: ho4hOFufXidWAYsTbOliD6cEtUCuHGtc5gpjUTGtn7w=)
                          9: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: Sd3fhLkfAzIYKIa+lxI8//LD+Sqt+jk5hVCJVdmO8ro=)
                          10: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: M9jyn5/cfkiIh8r7xaktGDoS2J9kM31RBGKJ46gBojU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl
                          rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 20:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e7:f0:c1:06:50:21:f3:8c:e6:08:ab:c2:22:fc:d1:13:a9:51:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
        Validity
            Not Before: Sep 23 18:13:38 2026 GMT
            Not After : Sep 24 20:39:38 2026 GMT
        Subject: CN=FB29CF8A7874D3A6AD6C428FF79CCFED6C09F980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:30:d3:fe:95:97:c3:32:14:4b:f2:a0:c9:d5:
                    1b:17:c3:a3:3c:e5:b4:05:f7:4e:26:62:b7:6d:9f:
                    8f:8b:75:b0:74:31:6e:58:ba:09:ef:50:5a:56:c7:
                    4d:2a:25:77:47:26:43:06:c1:5a:a2:44:5a:4a:68:
                    fe:83:93:c1:78:d5:cf:3c:38:db:39:1a:36:d3:de:
                    af:fd:83:72:93:26:84:37:71:96:f9:b5:f1:a0:23:
                    77:1c:fe:72:a8:03:37:02:34:bd:0b:dd:b8:cf:5b:
                    ea:86:f1:ad:c1:6e:9b:56:95:81:b5:5b:c5:5b:9c:
                    eb:68:d6:3e:fc:a9:bd:e4:eb:f8:90:c7:96:46:66:
                    f6:a4:dd:ba:f7:d4:ce:56:ec:9c:be:ed:6b:9a:2a:
                    ef:87:c9:34:59:07:4a:ae:d8:2d:65:bb:db:da:54:
                    d4:f4:85:8b:8c:40:54:5d:d0:bf:1c:0f:a1:0a:02:
                    b7:1b:9f:9c:99:5f:e1:b9:0a:ca:86:42:ad:15:54:
                    b3:9b:d3:d8:c4:b7:96:a1:36:47:88:16:1c:78:2c:
                    6e:82:81:af:40:74:66:c3:30:5e:24:dc:ad:11:3d:
                    36:17:a7:c4:55:c7:78:95:e3:30:ac:56:67:8e:c6:
                    b1:66:20:89:cf:e0:fd:83:2b:45:0e:66:5d:a3:96:
                    e7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:29:CF:8A:78:74:D3:A6:AD:6C:42:8F:F7:9C:CF:ED:6C:09:F9:80
            X509v3 Authority Key Identifier:
                keyid:E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:74:42:ad:8c:70:ea:b7:9e:d9:84:00:89:88:bd:9a:e8:a8:
         ff:cb:dc:39:d9:75:e0:26:6c:ca:43:09:64:91:45:49:4c:83:
         51:ae:7c:f2:b0:3c:b5:ce:eb:e1:6e:64:55:45:70:14:e6:ae:
         a3:9b:4c:5e:75:b8:1f:02:9b:6f:5c:14:53:f5:c7:69:61:df:
         ea:9f:a2:68:a8:50:7d:7f:14:a9:03:ea:a6:34:00:4a:3a:7c:
         48:28:67:40:78:4a:cb:ca:2d:85:80:d6:9c:44:8f:5c:87:79:
         d0:95:b3:ca:05:3d:67:ce:60:b2:ae:53:c4:56:75:6a:63:b3:
         6e:93:bf:ef:da:df:f5:e5:84:a4:32:d7:39:e1:7b:c1:a1:97:
         c9:42:f2:46:f3:b5:f3:94:ae:d4:c7:50:3e:98:e6:5f:0d:94:
         86:69:ea:ee:32:e4:82:97:53:13:35:35:0b:7e:31:9a:7f:d6:
         1c:94:4d:b7:14:ad:03:84:ef:3c:5c:3b:d0:db:c1:b9:74:96:
         1a:ec:72:b4:bd:c0:e8:53:4f:74:f5:e0:03:2d:d3:f8:42:66:
         47:9b:7d:d9:ee:20:e3:3e:1c:e5:12:86:9b:da:1f:1d:04:25:
         47:fd:80:ae:3d:e2:31:84:1a:7f:40:1a:f5:fe:b2:51:fe:a0:
         e0:1a:e1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:42:06 2026 by rpki-client