Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft
File:                     494BBF61A7ADCFAD78873BA2370358D4C942405D.mft (raw, json)
Hash identifier:          VPHnHUxTFzMxnmVobMkO3aKfKzzRZEgqdq8gSlUvAJ4=
Subject key identifier:   45:9C:1C:DD:11:1C:9E:9D:AD:40:DE:8E:CC:6A:73:0B:D0:27:10:5D
Authority key identifier: 49:4B:BF:61:A7:AD:CF:AD:78:87:3B:A2:37:03:58:D4:C9:42:40:5D
Certificate issuer:       /CN=494BBF61A7ADCFAD78873BA2370358D4C942405D
Certificate serial:       60D7AE49A0B7BE88F56FA75842BF38B47CCFE2D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/494BBF61A7ADCFAD78873BA2370358D4C942405D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft
Manifest number:          C3
Signing time:             Thu 24 Sep 2026 08:51:40 +0000
Manifest this update:     Thu 24 Sep 2026 08:46:40 +0000
Manifest next update:     Fri 25 Sep 2026 12:39:40 +0000
Files and hashes:         1: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: Ckq81tABd9P/ltS1UN2BW7llZjF9ry0atyKHbIk0sEg=)
                          2: 494BBF61A7ADCFAD78873BA2370358D4C942405D.crl (hash: rtGNorhLfr7uWN3zme1CE+WrxFzp3Sfvwz3UhAUdHHM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.crl
                          rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/494BBF61A7ADCFAD78873BA2370358D4C942405D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 10:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d7:ae:49:a0:b7:be:88:f5:6f:a7:58:42:bf:38:b4:7c:cf:e2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494BBF61A7ADCFAD78873BA2370358D4C942405D
        Validity
            Not Before: Sep 24 08:46:40 2026 GMT
            Not After : Sep 25 12:39:40 2026 GMT
        Subject: CN=459C1CDD111C9E9DAD40DE8ECC6A730BD027105D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:94:91:54:01:27:35:29:58:25:49:a4:49:
                    33:3d:54:c3:ba:90:c6:ce:96:31:91:66:d2:27:46:
                    49:4e:07:bd:1b:3b:17:f7:e4:ac:b2:73:2c:d1:35:
                    11:14:95:11:0a:96:4f:cf:d0:29:f9:60:3e:81:92:
                    11:d4:0d:57:05:ee:8b:b0:d1:1f:9d:16:e9:d5:c1:
                    b7:2f:f6:80:85:8e:d9:d8:5c:d9:a1:e8:10:20:a9:
                    13:da:63:01:25:9a:e9:77:2b:e9:f3:2b:10:cd:03:
                    d8:7a:f5:e4:ce:47:44:76:51:27:1a:83:aa:64:13:
                    c4:05:4d:48:ca:cb:31:7b:50:da:3d:d6:cc:69:b0:
                    df:99:ac:db:aa:41:64:a9:ec:79:58:cf:ec:e7:17:
                    ac:af:2a:5c:f1:e3:e1:0b:65:03:05:9e:0b:84:3b:
                    92:af:78:01:b7:65:82:2b:48:04:07:61:a6:08:7a:
                    77:fb:64:f5:ec:75:5e:9b:b3:9c:c4:1d:0b:7e:26:
                    fe:b1:03:05:8e:ff:e5:41:83:09:06:8c:9c:e8:99:
                    45:ef:1d:5f:08:8a:ac:05:55:d2:17:d8:83:51:98:
                    9f:5c:e4:4f:a8:45:fc:1c:d5:83:e4:93:e6:91:62:
                    d5:74:de:f7:b0:a5:5f:83:e9:1c:da:2e:e6:92:72:
                    bc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9C:1C:DD:11:1C:9E:9D:AD:40:DE:8E:CC:6A:73:0B:D0:27:10:5D
            X509v3 Authority Key Identifier:
                keyid:49:4B:BF:61:A7:AD:CF:AD:78:87:3B:A2:37:03:58:D4:C9:42:40:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/494BBF61A7ADCFAD78873BA2370358D4C942405D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:5e:2a:78:84:2c:32:7b:12:61:14:b8:aa:79:9a:9b:01:df:
         f8:ad:81:34:bf:30:ab:37:de:ac:4c:e8:16:d1:13:ed:4e:80:
         e0:9b:d6:80:47:3b:56:21:83:25:a3:fc:ee:57:ee:ad:11:36:
         23:89:0e:60:d4:f1:6f:a3:e7:63:44:b2:7b:03:ae:d1:df:b7:
         b6:de:ee:14:1b:07:f0:01:e0:8d:36:11:86:0f:7b:8d:0d:9a:
         6c:0d:83:62:f2:f2:54:a7:f8:9f:d3:ea:c4:84:bf:82:59:da:
         9b:6f:86:8d:90:64:bf:78:8d:4c:4c:64:a2:75:b2:98:a5:52:
         b2:7d:ac:8b:ce:6a:e5:14:34:e6:e5:c7:96:a8:b5:a4:15:64:
         c7:da:ad:d5:c5:a6:bc:49:06:9e:c8:2d:43:25:82:a3:d8:18:
         eb:99:5c:fb:cc:47:20:d5:3f:dd:8d:6e:59:3b:3c:59:b8:53:
         f6:e2:a2:7c:04:9d:48:fe:4a:cd:ff:b7:8e:6c:2a:a4:0a:54:
         56:45:07:dc:2b:43:6e:3c:62:ed:fc:56:62:c3:b8:d9:cf:26:
         41:10:ed:44:4f:70:94:20:4c:42:10:6a:32:b8:a4:7c:3a:18:
         d5:7a:4f:2d:5f:9f:84:85:e9:b3:93:73:31:4f:97:e4:f3:92:
         3d:42:ff:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:45:00 2026 by rpki-client