Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft
File:                     7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft (raw, json)
Hash identifier:          O69pmeUEIWHND7C5lOrQYWdD+n9WWQo/Sx/vgy2GLRY=
Subject key identifier:   3C:9C:65:7D:7A:CF:D9:58:DF:A3:66:FA:A4:EF:C0:A1:BA:89:38:94
Authority key identifier: 7D:45:B2:ED:A1:9A:FF:B2:D1:13:11:2B:95:07:29:83:11:C5:DB:85
Certificate issuer:       /CN=7D45B2EDA19AFFB2D113112B9507298311C5DB85
Certificate serial:       7CD00A319D85D691DE9FE02310949B0BAC22E5A4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft
Manifest number:          C2
Signing time:             Thu 24 Sep 2026 21:16:50 +0000
Manifest this update:     Thu 24 Sep 2026 21:11:50 +0000
Manifest next update:     Fri 25 Sep 2026 22:56:50 +0000
Files and hashes:         1: 7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl (hash: QFaXyZ2ijst053Uk5e2FA4CzOrhudVOrdN/ODcWqHJE=)
                          2: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: MB43wivyVMcmejyDt+ILCLmOnQIliDhhXU3YyNcO9+8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl
                          rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 10:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d0:0a:31:9d:85:d6:91:de:9f:e0:23:10:94:9b:0b:ac:22:e5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D45B2EDA19AFFB2D113112B9507298311C5DB85
        Validity
            Not Before: Sep 24 21:11:50 2026 GMT
            Not After : Sep 25 22:56:50 2026 GMT
        Subject: CN=3C9C657D7ACFD958DFA366FAA4EFC0A1BA893894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:ca:fc:dc:31:1c:fe:ad:fd:08:74:01:18:
                    0d:e8:46:28:39:f6:af:5d:ee:c8:3a:fe:f9:41:c7:
                    dd:58:24:b7:f3:25:fa:e0:cf:24:ae:42:d7:7e:6a:
                    b8:78:aa:f4:dd:9b:91:d9:8a:6f:aa:53:39:33:37:
                    87:71:de:cd:81:9a:06:5c:9b:52:11:6e:38:78:4d:
                    26:5e:52:ac:c2:4d:ab:00:60:76:7d:03:39:1f:06:
                    a0:0e:4f:3b:1b:3c:01:b4:da:a5:a8:25:ce:2c:ea:
                    cc:8b:2d:c9:cb:1b:0c:3b:c5:96:0a:bb:49:a1:7d:
                    ec:a1:eb:de:ab:1c:9a:97:aa:41:94:91:7e:ea:4c:
                    9a:66:8f:37:3b:c0:0c:4c:a7:70:ed:31:ad:d1:81:
                    dd:c0:6f:58:bb:6a:78:10:b6:aa:c7:cd:f9:80:6b:
                    c8:e5:1f:6c:6a:05:2e:40:af:e8:b0:5e:60:15:8c:
                    eb:10:29:c9:87:e7:9c:af:ab:43:33:57:2b:74:42:
                    0d:3f:2e:cb:a6:d4:1d:a8:45:64:9e:e7:b1:d2:d2:
                    ed:b0:52:db:52:3e:ad:1d:db:61:a8:d6:ff:3c:e7:
                    03:88:97:8f:ce:74:2b:ef:7a:16:7f:69:99:90:ae:
                    84:b6:1e:12:11:57:e5:03:34:2e:0d:d0:99:99:3a:
                    fc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9C:65:7D:7A:CF:D9:58:DF:A3:66:FA:A4:EF:C0:A1:BA:89:38:94
            X509v3 Authority Key Identifier:
                keyid:7D:45:B2:ED:A1:9A:FF:B2:D1:13:11:2B:95:07:29:83:11:C5:DB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d9:15:29:35:ab:b9:62:62:19:dd:5a:56:26:0e:4d:0f:a0:
         18:bb:a4:77:46:84:aa:fd:21:a0:d6:29:47:bc:ec:1e:15:a0:
         2c:7f:e3:b0:17:90:2d:1f:60:96:c4:4e:86:66:2e:de:d9:d9:
         5d:bc:e1:00:81:79:4a:4a:6b:7f:6b:7b:8b:4f:4b:8b:99:4c:
         2a:a2:29:54:5a:d9:b1:28:25:01:0e:2e:07:c0:7a:12:ea:04:
         6a:1c:b8:76:45:7b:0a:ad:52:99:5b:10:17:4a:27:84:b0:65:
         40:b2:5b:ba:f7:48:ed:68:fe:4e:7b:92:34:44:4a:38:44:12:
         55:69:f7:79:32:ef:e7:d0:b9:a9:27:0e:c4:00:36:0a:dd:bc:
         42:4d:e8:01:0b:ce:d2:31:ad:0a:c1:db:67:99:f8:f0:d4:8d:
         ae:43:58:b6:96:2c:ab:b8:44:09:9b:5a:f0:f9:3a:5f:2a:57:
         44:09:d5:63:01:4f:52:b5:ed:2f:d7:5e:79:c8:2c:19:bd:3f:
         dc:23:1a:ca:53:bc:f8:49:aa:61:d4:fa:77:27:8e:6e:88:a4:
         4c:49:6b:92:51:06:4f:4f:0f:2c:12:27:13:fe:24:5b:a9:5f:
         32:76:b0:c4:29:2e:87:a2:9d:0a:85:60:5b:67:a2:e7:a6:93:
         2b:18:e1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:34:36 2026 by rpki-client