Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft
File:                     A27FF2B00B818D036621468F265A350211C5B6B1.mft (raw, json)
Hash identifier:          PGnoZNbdXToDybcs7R4olgIblCVRuK6LVwye/xZQ/yk=
Subject key identifier:   7B:30:70:16:D4:09:97:C2:57:CF:AA:13:3E:E3:94:62:6B:64:86:69
Authority key identifier: A2:7F:F2:B0:0B:81:8D:03:66:21:46:8F:26:5A:35:02:11:C5:B6:B1
Certificate issuer:       /CN=A27FF2B00B818D036621468F265A350211C5B6B1
Certificate serial:       567CFF87121657D84B442603EFF01E9D03D06431
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft
Manifest number:          0D
Signing time:             Tue 12 May 2026 09:46:04 +0000
Manifest this update:     Tue 12 May 2026 09:41:04 +0000
Manifest next update:     Wed 13 May 2026 13:42:04 +0000
Files and hashes:         1: A27FF2B00B818D036621468F265A350211C5B6B1.crl (hash: u7SEveioUbhhJlP1Z30YtJDFGz3fAM1vmuqr6vk0w/4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.crl
                          rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7c:ff:87:12:16:57:d8:4b:44:26:03:ef:f0:1e:9d:03:d0:64:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A27FF2B00B818D036621468F265A350211C5B6B1
        Validity
            Not Before: May 12 09:41:04 2026 GMT
            Not After : May 13 13:42:04 2026 GMT
        Subject: CN=7B307016D40997C257CFAA133EE394626B648669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:67:c9:7d:99:dd:ed:82:be:f5:b9:ba:b9:a8:
                    da:5c:5d:71:e1:e8:e8:b9:fd:cb:81:af:0d:1b:f1:
                    20:33:69:f6:33:e5:7c:10:90:a4:09:d5:08:f6:31:
                    1c:73:3c:34:2b:1a:c9:c0:3b:e9:8c:d8:e1:12:0b:
                    97:17:d8:d8:90:06:ad:72:1a:fd:27:31:9f:2d:f6:
                    ac:fd:cd:ef:7b:36:b0:74:e9:c9:f7:ce:ce:f7:b0:
                    a4:0c:fe:7e:db:68:a7:63:e6:23:47:fa:0e:97:4a:
                    58:fc:87:6d:65:4b:4d:2e:84:ee:67:45:ce:38:d8:
                    b4:ca:a1:68:5d:c6:28:cd:ac:30:6b:46:34:1f:a2:
                    d3:6b:af:82:ba:22:eb:31:21:1a:ee:2c:64:65:a3:
                    c1:b1:92:b0:f6:2e:1c:f4:86:b0:f9:9d:8e:bf:9e:
                    66:f9:98:3a:0c:d9:f6:dd:5a:09:8a:a0:e2:54:3c:
                    38:22:07:00:1a:a8:8a:76:51:92:d5:c7:26:3b:72:
                    47:bd:dc:5f:24:cc:07:74:ae:7c:86:73:90:d9:e0:
                    69:95:ad:51:8e:8f:48:42:ee:7c:85:0b:cb:ef:78:
                    2d:48:73:43:4d:1d:f1:8a:b1:27:d1:c1:13:fb:e9:
                    69:f6:b8:01:43:b3:a8:49:bd:7e:a9:a0:a3:80:66:
                    89:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:30:70:16:D4:09:97:C2:57:CF:AA:13:3E:E3:94:62:6B:64:86:69
            X509v3 Authority Key Identifier:
                keyid:A2:7F:F2:B0:0B:81:8D:03:66:21:46:8F:26:5A:35:02:11:C5:B6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e8:6c:b5:ab:0d:35:0f:d5:34:e2:96:7d:80:93:84:04:0e:
         b3:c5:75:0b:3f:f1:ba:73:be:cd:22:8c:66:1d:3b:90:10:5f:
         50:c6:a2:12:94:f8:9b:4e:78:44:29:cb:64:b3:da:9d:5d:42:
         00:fa:3b:77:19:60:94:c1:b3:46:80:54:e8:d3:3b:2c:35:f4:
         13:4e:16:9b:0e:f1:40:eb:b2:c7:d7:4c:39:4e:1c:d6:9f:80:
         7a:97:21:cf:d9:be:21:06:95:b3:53:a4:b6:e3:a3:da:33:f7:
         72:d8:13:5e:0d:03:85:1b:12:4a:9b:fa:43:25:b1:70:f0:e4:
         d2:29:0b:b3:99:55:a4:d5:93:09:99:cb:08:89:b2:6e:19:83:
         90:2c:09:6b:39:a4:c7:85:99:72:cd:d2:97:04:37:91:da:cb:
         a7:8b:de:3d:73:20:c6:f1:dc:38:7d:f1:c2:cd:81:56:56:fb:
         93:f9:01:59:2b:90:c3:d8:ef:f0:b4:89:98:df:a3:e8:6d:41:
         ee:69:55:c3:9b:9e:20:08:3a:04:89:cc:72:ff:1c:52:a7:fa:
         bb:98:a4:5c:95:0e:95:e0:d3:6c:1a:68:bf:a6:ee:9f:2e:f2:
         e5:38:f0:22:af:82:59:d2:eb:31:0c:9a:49:fc:bf:f0:c1:7d:
         b0:c3:a5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:56 2026 by rpki-client