Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
File:                     5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft (raw, json)
Hash identifier:          5mUu3flB3ntvhw/OVWyJuCZtqXV2Vp/w41LqOUeauIg=
Subject key identifier:   01:02:47:1E:AF:3E:C3:CA:11:22:9B:A3:EA:AF:B4:C8:BF:6E:5F:08
Authority key identifier: 5C:F0:75:1D:09:00:89:27:35:B6:7C:FC:77:F2:BA:C1:7A:3B:B1:D8
Certificate issuer:       /CN=5CF0751D0900892735B67CFC77F2BAC17A3BB1D8
Certificate serial:       67537F9F774FAD5F545C74CBEC5790C600D230B6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
Manifest number:          C2
Signing time:             Wed 23 Sep 2026 22:18:39 +0000
Manifest this update:     Wed 23 Sep 2026 22:13:39 +0000
Manifest next update:     Fri 25 Sep 2026 00:15:39 +0000
Files and hashes:         1: 5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl (hash: HmlCJBI1cS1+PfzS+dy7xNq/b6LOukoYbL3MuptriLw=)
                          2: 3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (hash: 9PTwvaeRVFt7vMjuuHgRNVKrWXlVE2+CW1qlg4q1SF0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl
                          rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 00:15:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:53:7f:9f:77:4f:ad:5f:54:5c:74:cb:ec:57:90:c6:00:d2:30:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CF0751D0900892735B67CFC77F2BAC17A3BB1D8
        Validity
            Not Before: Sep 23 22:13:39 2026 GMT
            Not After : Sep 25 00:15:39 2026 GMT
        Subject: CN=0102471EAF3EC3CA11229BA3EAAFB4C8BF6E5F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:a6:d0:f0:2e:8b:7c:7f:b0:ca:2a:8e:6f:
                    61:9c:f4:c7:88:bc:d2:c3:07:1c:76:d2:2a:71:2b:
                    8d:68:16:6a:9d:00:19:8e:87:5e:19:93:02:4e:c7:
                    07:53:b0:9f:f0:12:ca:b1:d6:d2:56:d0:6b:2a:c6:
                    40:4b:d0:d1:bd:9b:08:a8:cf:1a:a2:86:60:8e:51:
                    d9:85:a3:93:e6:22:15:a2:43:a4:f5:2c:2e:2f:2e:
                    cc:b5:aa:bd:f3:78:17:3c:b3:4d:51:64:bb:1d:db:
                    84:69:4b:55:31:86:f7:43:f1:97:04:b6:23:0c:d8:
                    fb:18:d9:e5:fa:df:58:b0:7e:60:45:df:55:23:ee:
                    cd:9b:48:21:a4:43:65:3d:10:a6:5a:97:98:45:63:
                    3c:82:a9:e2:67:8a:19:3d:ef:80:ac:b8:ef:b6:d2:
                    88:27:55:54:95:e8:ba:53:a5:99:ef:9a:05:af:f0:
                    d0:18:7e:e6:69:d3:63:47:75:f7:b8:22:b0:0c:cc:
                    81:9f:96:10:85:6c:09:b8:48:ec:07:fa:26:8c:18:
                    24:1a:e7:fc:7a:ef:f7:44:ed:7b:85:e3:df:a9:da:
                    36:eb:c8:50:2b:de:bf:8d:91:74:9a:41:df:30:67:
                    f0:91:8e:f1:82:f1:5e:ab:45:a9:6e:f0:5c:e9:b9:
                    d8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:02:47:1E:AF:3E:C3:CA:11:22:9B:A3:EA:AF:B4:C8:BF:6E:5F:08
            X509v3 Authority Key Identifier:
                keyid:5C:F0:75:1D:09:00:89:27:35:B6:7C:FC:77:F2:BA:C1:7A:3B:B1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f6:6b:d9:be:58:72:df:5a:d2:56:69:47:3e:3a:f6:78:c7:
         8a:54:72:61:a7:9d:71:67:d5:83:12:4a:e3:1d:2f:a4:06:de:
         5b:42:ae:35:af:e0:50:bb:c9:bd:f3:46:c1:fb:43:d3:fc:72:
         fd:3d:df:55:88:a3:27:b1:f7:00:e2:24:5d:06:e0:76:54:77:
         33:81:68:de:05:51:f4:84:0e:8f:6f:b3:6a:dc:51:0c:00:44:
         bb:73:af:79:99:68:a0:19:d5:73:4a:08:fb:42:81:c5:18:2a:
         46:60:50:b3:87:55:d8:cd:4f:3d:79:3d:d6:13:91:ac:be:eb:
         88:f2:77:1e:3d:7d:ee:f3:d9:f1:29:bd:a9:cc:7d:60:33:9e:
         5d:b7:ff:b5:ff:35:25:f3:63:47:8c:e8:e3:47:c0:37:ee:79:
         ee:01:91:dc:4d:95:cb:8f:17:09:1a:32:0c:5b:87:f7:20:38:
         98:04:e8:91:03:24:91:57:d9:53:fa:b2:4c:8b:24:83:2d:bb:
         5b:a0:4b:3c:7d:61:9f:53:04:e9:b5:91:bc:ef:72:85:ea:70:
         13:b6:a5:30:50:09:dc:6a:51:e6:49:bf:0b:f9:21:6b:cf:c0:
         de:56:30:4e:3f:bd:33:fb:4d:71:7f:f7:3a:74:39:5d:de:aa:
         46:b5:40:a4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZ1N/n3dPrV9UXHTL7FeQxgDSMLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNGMDc1MUQwOTAwODkyNzM1QjY3Q0ZDNzdGMkJBQzE3
QTNCQjFEODAeFw0yNjA5MjMyMjEzMzlaFw0yNjA5MjUwMDE1MzlaMDMxMTAvBgNV
BAMTKDAxMDI0NzFFQUYzRUMzQ0ExMTIyOUJBM0VBQUZCNEM4QkY2RTVGMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpEabQ8C6LfH+wyiqOb2Gc9MeI
vNLDBxx20ipxK41oFmqdABmOh14ZkwJOxwdTsJ/wEsqx1tJW0GsqxkBL0NG9mwio
zxqihmCOUdmFo5PmIhWiQ6T1LC4vLsy1qr3zeBc8s01RZLsd24RpS1UxhvdD8ZcE
tiMM2PsY2eX631iwfmBF31Uj7s2bSCGkQ2U9EKZal5hFYzyCqeJnihk974CsuO+2
0ognVVSV6LpTpZnvmgWv8NAYfuZp02NHdfe4IrAMzIGflhCFbAm4SOwH+iaMGCQa
5/x67/dE7XuF49+p2jbryFAr3r+NkXSaQd8wZ/CRjvGC8V6rRalu8FzpudhnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAQJHHq8+w8oRIpuj6q+0yL9uXwgwHwYDVR0j
BBgwFoAUXPB1HQkAiSc1tnz8d/K6wXo7sdgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzI0ZGI1NjctMzNhOC00Y2UwLWJjZmYtY2IwZjBhODVjMjM5LzAvNUNGMDc1MUQw
OTAwODkyNzM1QjY3Q0ZDNzdGMkJBQzE3QTNCQjFEOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81Q0YwNzUxRDA5MDA4OTI3MzVCNjdDRkM3N0YyQkFDMTdBM0JC
MUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzI0ZGI1NjctMzNhOC00Y2UwLWJj
ZmYtY2IwZjBhODVjMjM5LzAvNUNGMDc1MUQwOTAwODkyNzM1QjY3Q0ZDNzdGMkJB
QzE3QTNCQjFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADL2a9m+WHLfWtJWaUc+OvZ4x4pUcmGnnXFn
1YMSSuMdL6QG3ltCrjWv4FC7yb3zRsH7Q9P8cv0931WIoyex9wDiJF0G4HZUdzOB
aN4FUfSEDo9vs2rcUQwARLtzr3mZaKAZ1XNKCPtCgcUYKkZgULOHVdjNTz15PdYT
kay+64jydx49fe7z2fEpvanMfWAznl23/7X/NSXzY0eM6ONHwDfuee4BkdxNlcuP
FwkaMgxbh/cgOJgE6JEDJJFX2VP6skyLJIMtu1ugSzx9YZ9TBOm1kbzvcoXqcBO2
pTBQCdxqUeZJvwv5IWvPwN5WME4/vTP7TXF/9zp0OV3eqka1QKQ=
-----END CERTIFICATE-----
Generated at Thu Sep 24 16:02:17 2026 by rpki-client