Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft
File:                     1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft (raw, json)
Hash identifier:          BuMRfh6JulTEVEnBOvoO895vz1IVXaV5xo+uVXeZW6o=
Subject key identifier:   57:5B:80:25:14:29:85:55:CE:A4:40:D0:AF:E1:34:64:B2:D5:37:6B
Authority key identifier: 1E:1A:C1:C9:B3:E6:7F:83:95:39:54:23:DA:2E:B2:6E:8E:69:1F:C1
Certificate issuer:       /CN=1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1
Certificate serial:       22FC1F0E6DEFF518A73A1E147EF1033E0B0F3A04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft
Manifest number:          C2
Signing time:             Thu 24 Sep 2026 20:30:51 +0000
Manifest this update:     Thu 24 Sep 2026 20:25:51 +0000
Manifest next update:     Fri 25 Sep 2026 22:13:51 +0000
Files and hashes:         1: 3135372e36362e3234362e302f32332d3234203d3e20313532373630.roa (hash: m0f229ZhLX9SKvKbXbKHogZj70tOf+VKSr9KHdgMRls=)
                          2: 1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.crl (hash: pesVwThFRddoy38NWvvLOcKf1ieIvSNM6RJpNlZNtE0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.crl
                          rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 11:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fc:1f:0e:6d:ef:f5:18:a7:3a:1e:14:7e:f1:03:3e:0b:0f:3a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1
        Validity
            Not Before: Sep 24 20:25:51 2026 GMT
            Not After : Sep 25 22:13:51 2026 GMT
        Subject: CN=575B802514298555CEA440D0AFE13464B2D5376B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:50:7a:71:e4:b4:08:ff:31:3c:37:c0:a7:6e:
                    38:8c:a3:ac:23:ad:85:53:0f:3d:5d:d8:8c:b9:4e:
                    13:73:fc:5b:b5:da:10:b0:5a:db:0b:e1:ba:87:7c:
                    2d:ad:87:8d:e1:e7:ad:74:58:33:0a:03:75:a8:77:
                    fb:8b:28:54:ee:ac:ce:79:fa:07:de:4f:76:81:77:
                    4f:44:40:8e:2c:85:75:b5:05:e3:1b:a2:98:29:63:
                    3d:72:91:98:55:e7:a6:83:72:83:bf:7b:5e:df:31:
                    c7:49:ff:07:e0:b9:e0:1c:fc:e9:9f:49:e2:72:98:
                    57:49:c3:da:19:83:35:c8:fb:8d:50:36:48:44:c4:
                    04:a1:2a:8a:71:2a:d2:8f:05:51:4e:44:3e:35:be:
                    40:fc:0f:f8:39:dc:f8:5f:b0:43:77:21:21:8c:93:
                    4c:1a:33:dc:cf:20:c9:a8:62:4a:39:51:dd:45:6d:
                    20:09:2e:b8:3d:e1:16:f1:f9:cc:bd:76:b7:b1:3d:
                    e5:a6:1e:08:f3:ec:d8:7e:ee:61:1c:ae:9e:21:a8:
                    9f:d7:73:63:58:7d:33:75:45:2e:84:63:00:9a:05:
                    6a:d5:99:95:38:d1:6d:3c:b6:f9:67:45:fc:f6:f8:
                    98:65:c2:ce:18:20:57:ae:ed:57:fe:bf:52:21:91:
                    5d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5B:80:25:14:29:85:55:CE:A4:40:D0:AF:E1:34:64:B2:D5:37:6B
            X509v3 Authority Key Identifier:
                keyid:1E:1A:C1:C9:B3:E6:7F:83:95:39:54:23:DA:2E:B2:6E:8E:69:1F:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:5b:1b:82:84:90:6f:e0:cc:9e:28:0b:d2:6a:61:58:15:0f:
         a1:40:d3:11:bf:a2:88:8f:a1:05:fc:b4:06:e9:20:5d:f0:f5:
         0e:f7:c3:2f:ac:49:09:0f:a5:00:a7:98:46:29:30:f0:16:25:
         8a:20:70:7c:8a:10:4f:46:ae:29:f2:ac:a7:c4:e9:14:d1:b0:
         35:68:58:50:5a:2d:59:19:36:5f:7e:6e:85:c1:bd:3b:9b:ea:
         72:d4:5e:fe:52:23:6b:0e:c8:5b:4a:6c:ca:ff:81:42:09:77:
         56:3d:21:0d:5f:fc:31:00:b8:7b:e8:cd:96:f1:bb:6e:11:bb:
         20:15:2c:d0:3d:c7:7c:b8:ea:56:84:9f:2f:1d:8e:85:d2:64:
         b6:e3:07:29:11:a8:f5:6c:d7:f1:8f:c0:27:0a:5a:a8:a3:90:
         99:e4:fa:dc:f8:52:49:a6:20:54:5d:d2:27:e8:e7:58:26:8e:
         cb:38:1c:59:bc:80:6a:87:19:9f:40:d3:8c:95:c7:db:45:51:
         b4:cf:ba:bc:93:30:fc:9a:e1:fb:cf:e0:28:61:c2:8e:ed:bf:
         ab:ba:52:98:82:e0:22:70:d1:94:ea:34:66:4f:7c:c5:38:a0:
         cc:9b:eb:4f:6e:a0:60:5b:d4:49:56:88:c0:cf:a1:98:e8:ac:
         70:2f:b7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:10:12 2026 by rpki-client