Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft
File:                     2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft (raw, json)
Hash identifier:          wxcEKzC8/OrUC1/We+Xnv0+1sAi4prt9N+gw6K5p7xk=
Subject key identifier:   D2:1F:AE:9A:C2:48:F8:9C:5A:E3:C9:9F:B0:0A:EB:BD:A9:20:73:B6
Authority key identifier: 20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E
Certificate issuer:       /CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E
Certificate serial:       7BE283C7AD63A459CE3B5728B603B044FCCEFE0F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft
Manifest number:          D0
Signing time:             Sun 04 Oct 2026 01:26:50 +0000
Manifest this update:     Sun 04 Oct 2026 01:21:50 +0000
Manifest next update:     Mon 05 Oct 2026 02:08:50 +0000
Files and hashes:         1: 2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl (hash: 1qE9RuS9sVR3bNPvZVU7mrEngIQGJdy31eeto1I7I5k=)
                          2: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (hash: D52uwwzpgaxCjAFI9GaZMm7APMN7ImtqrU9yyVklPWk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl
                          rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 02:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e2:83:c7:ad:63:a4:59:ce:3b:57:28:b6:03:b0:44:fc:ce:fe:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E
        Validity
            Not Before: Oct  4 01:21:50 2026 GMT
            Not After : Oct  5 02:08:50 2026 GMT
        Subject: CN=D21FAE9AC248F89C5AE3C99FB00AEBBDA92073B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:4c:ce:d7:37:b4:12:da:58:78:4d:9d:41:
                    15:cb:de:d1:26:f3:3a:84:1d:37:71:c2:21:8e:9c:
                    56:16:a6:c0:14:75:04:20:cd:bc:aa:7b:0c:a9:34:
                    af:d6:dc:14:4a:b3:cb:d9:60:7b:4c:34:f2:94:8c:
                    90:86:0d:4a:93:44:00:e6:68:7b:f7:af:91:47:9e:
                    fc:c4:b7:45:0f:02:8d:c1:78:a4:ba:35:db:b6:b4:
                    27:33:84:ff:3d:ed:2f:e1:43:ed:5c:92:38:1c:f5:
                    a4:5a:bb:84:51:9f:10:56:a0:44:14:58:62:9d:5d:
                    87:38:15:08:2f:7f:a8:90:f7:6e:03:19:d6:1a:82:
                    5d:a2:8a:6a:4f:64:3c:8f:07:68:48:68:c1:b8:51:
                    4c:4f:f6:cf:72:36:12:44:b0:e1:21:52:ee:5e:e8:
                    81:9b:f4:cf:cb:0a:d5:53:a9:d8:d6:74:96:3c:b3:
                    07:97:11:4e:cf:ed:ba:50:f8:5c:54:54:73:52:af:
                    45:9c:49:44:55:6d:27:eb:35:98:39:b7:1f:e7:55:
                    2f:8c:a4:09:03:d5:69:69:af:84:7f:eb:99:db:63:
                    19:19:89:44:85:5c:1d:e4:fe:b4:c7:df:aa:6c:30:
                    06:da:81:a7:1d:cf:06:bd:67:dd:e1:a4:21:60:fa:
                    df:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1F:AE:9A:C2:48:F8:9C:5A:E3:C9:9F:B0:0A:EB:BD:A9:20:73:B6
            X509v3 Authority Key Identifier:
                keyid:20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:11:b2:3b:09:bd:e1:08:f2:cf:f2:e5:4b:ff:bb:98:72:57:
         94:a8:0a:4b:10:ac:2d:dd:22:7e:63:37:b7:32:4d:0e:c0:eb:
         65:36:ae:53:c6:41:e1:fd:0c:2f:3f:3b:7a:1b:2d:14:c7:38:
         c0:28:0a:e8:be:10:01:d1:d0:a2:6c:2c:08:17:f7:b2:41:79:
         ec:53:cd:8b:aa:10:51:74:75:93:1d:7b:47:fd:22:b4:0d:cd:
         a2:50:ff:7c:fd:b8:d2:4c:ca:4d:d0:21:3d:66:4c:46:0c:03:
         ae:c3:13:e8:09:66:8e:aa:01:bd:c5:42:a4:8d:d1:fd:4d:e7:
         93:04:c2:0b:ae:4b:a2:f8:98:34:f3:3f:09:c7:f2:63:f6:99:
         21:95:7e:1e:c9:df:62:97:22:38:e3:e7:ed:a9:7f:43:02:d1:
         be:75:a7:11:a9:1d:4a:fb:f6:eb:6d:d7:98:66:b3:1e:ca:ab:
         c0:4f:7d:27:92:4a:2e:39:49:70:10:b1:a5:6e:00:f2:17:5c:
         b4:03:68:3a:ac:dc:4b:4a:e1:45:13:be:00:41:a1:30:ac:67:
         93:52:75:09:9c:03:38:a3:66:19:b3:10:4a:b3:cf:67:36:15:
         21:aa:b0:10:c7:90:c6:00:57:90:89:65:e1:ec:35:c8:1e:c2:
         52:20:5e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:21:59 2026 by rpki-client