Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
File:                     70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft (raw, json)
Hash identifier:          fZPXd6dwUtA6GQ28I7fZLfIYPrfxRXCdE0j+PCJS404=
Subject key identifier:   8F:FC:C6:75:F5:65:43:1D:06:71:87:83:3B:BF:10:A0:27:D5:44:BC
Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA
Certificate issuer:       /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA
Certificate serial:       1C1471E4694ADA9EE9E83D133438DB31480C515C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
Manifest number:          CE
Signing time:             Sat 26 Sep 2026 03:55:06 +0000
Manifest this update:     Sat 26 Sep 2026 03:50:06 +0000
Manifest next update:     Sun 27 Sep 2026 05:12:06 +0000
Files and hashes:         1: 70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl (hash: MrZkK0iSozNKyQAC00frhpwd2eCikJ6drowlr9d97Us=)
                          2: 3131302e35302e38322e302f32342d3234203d3e20313431383932.roa (hash: 38Va62FPSyr8Ygtpz8ja6Vo7jaIjqhcu6Gg/Q1NLZ1M=)
                          3: 3130332e3231332e3132392e302f32342d3234203d3e20313331373735.roa (hash: HY+aJPxaezirRr4NHeslZY3QFJWf9uO7z+CkSmEbtwg=)
                          4: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: 7JThFy92/VpEXEDJA9kwrgcgGhSHAfaM/+d1+Zp5aK8=)
                          5: 3130332e3231332e3132382e302f32342d3234203d3e203137363730.roa (hash: h9ERyEefV9I1A5M4z4tK9bpFBxWOGmWoS5oxSOOg/AU=)
                          6: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: uVaL+tfCNM5zPaOPcfVzgSdj2M5cAqybg0t35qHDKfE=)
                          7: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: 1pB/Nqd7vJqSwm7DTejyzXpeJQSOjzzPkrlOSeZoqb4=)
                          8: 3132332e3235332e3233352e302f32342d3234203d3e203137363730.roa (hash: yikJb7rqENDrSWYcBrdRV/I5pxUbP3osYLhvy9m38sE=)
                          9: 3132332e3235332e3233342e302f32342d3234203d3e203137363730.roa (hash: cND9IkoYQx+CLaj+y6Gh0x9QJKJQc+ErI+RneqD6xKo=)
                          10: 3130332e3231332e3133302e302f32342d3234203d3e20313331373735.roa (hash: E4OuQve25g0RwEBZtMq76vR5kCBtJoV9ABMkUioQyWA=)
                          11: 3130332e3231332e3133312e302f32342d3234203d3e203535373031.roa (hash: vzgewcG3oAbC7AbL8VbFC07s+SgG6tK6AAtDNUKrFRI=)
                          12: 3132332e3235332e3233322e302f32342d3234203d3e20313937353337.roa (hash: xAscsICyofL4lf/JlgWQbrEID5bG/l0KAfIP4/G7jFo=)
                          13: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: pEjlBEcf4SMwhsnq2l8vEuSNRarcFG9m4tfJC8/w2lc=)
                          14: 3132332e3235332e3233332e302f32342d3234203d3e20313937353337.roa (hash: O5FLNbUlt0ivd4BC3VQEtKA8g1c9yRV5LDB8OAY9HXU=)
                          15: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: lCknCbn1e4JowaioeH82UQR3fwZeR46CsNwrligI+W0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl
                          rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 05:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:14:71:e4:69:4a:da:9e:e9:e8:3d:13:34:38:db:31:48:0c:51:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA
        Validity
            Not Before: Sep 26 03:50:06 2026 GMT
            Not After : Sep 27 05:12:06 2026 GMT
        Subject: CN=8FFCC675F565431D067187833BBF10A027D544BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:72:d9:c2:e7:14:99:11:ae:4f:40:4d:7b:e5:
                    cc:b8:6f:7d:c3:5c:27:61:20:ab:fa:49:c5:35:2f:
                    ef:d3:a4:2b:f6:87:97:ee:88:15:79:4e:5e:de:23:
                    41:8b:7c:e9:6f:e0:58:2f:65:14:27:96:fc:8e:b1:
                    9f:3e:6d:00:02:fa:46:3f:c7:a9:c0:20:86:76:c2:
                    88:1d:c2:9b:88:3c:a2:71:eb:d5:0b:4c:74:0e:9c:
                    f3:eb:25:a3:d9:93:91:e7:35:29:2c:02:03:0e:2b:
                    ee:cd:57:d5:57:50:d8:b9:ad:bc:cf:54:4e:3c:c3:
                    74:43:f2:62:99:c0:b0:fc:af:67:cb:3e:d0:07:be:
                    9e:e0:cc:8e:f2:9b:c7:85:29:fd:6b:b2:ad:55:a3:
                    b7:14:00:da:92:12:ee:84:5b:29:05:eb:89:fe:86:
                    90:e8:69:ce:16:c5:de:74:5e:99:9d:0a:b9:be:aa:
                    18:8d:b3:3b:74:b5:fa:fe:c4:ad:c5:5f:b3:64:6c:
                    94:2a:a7:e8:ee:db:39:f7:50:30:04:b2:da:53:e8:
                    f3:6a:b3:7e:15:7b:24:1e:70:8b:2b:4d:ce:02:96:
                    db:a7:32:1b:c2:0a:18:52:3c:43:be:b2:e4:9c:6e:
                    cb:95:7a:be:4b:4b:f0:3d:0f:22:39:37:d6:91:b0:
                    0c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FC:C6:75:F5:65:43:1D:06:71:87:83:3B:BF:10:A0:27:D5:44:BC
            X509v3 Authority Key Identifier:
                keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ff:7d:4e:08:04:a9:17:a5:fd:b5:01:df:87:1c:ca:ad:02:
         ca:ce:12:ac:e9:08:d0:dc:d6:99:ec:d9:5c:a5:cd:05:f1:5a:
         7f:b5:15:b5:b8:d6:29:54:25:75:d1:ec:e1:d4:f7:37:4a:a5:
         da:ee:90:9d:1d:26:12:0a:9a:b4:33:4d:83:28:fa:f5:84:0b:
         f7:46:82:66:81:10:9f:84:97:0e:7c:67:d7:5d:18:0d:a4:6f:
         fa:64:dd:ba:82:9e:7a:fa:96:87:7c:61:dc:99:c6:c8:6d:96:
         e9:c3:f1:26:69:a6:f7:a8:db:be:a1:69:a2:d0:b3:5e:bd:a2:
         69:e3:d5:2d:cc:cf:82:7d:03:a1:dd:86:29:db:19:fd:eb:58:
         61:2f:e2:96:f7:77:fb:04:5f:e5:cd:9c:08:0b:f4:7d:c7:f8:
         b4:b5:72:9d:23:4a:ef:1b:4a:dc:b4:ba:4a:b9:f3:8f:0c:5d:
         da:ef:ef:c1:bc:87:67:3b:f0:fa:ad:e3:1f:56:97:2e:c1:64:
         b7:46:ac:66:5e:fe:a0:5b:7f:11:02:da:7d:c4:34:68:23:ef:
         86:c3:5d:4e:b6:e0:3a:a5:a2:30:cd:67:7c:55:0a:52:ac:5b:
         a8:87:22:de:36:f0:ae:a8:33:34:c0:73:13:d0:14:76:38:35:
         47:48:d5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:11:19 2026 by rpki-client