Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft
File:                     F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft (raw, json)
Hash identifier:          oUg9x/JYy/1H8u50gBkgPHSkFweeePj34yAn25ubL+Y=
Subject key identifier:   86:27:A1:46:6A:75:08:00:F6:A9:C6:0C:C1:59:B3:CC:C6:62:89:A6
Authority key identifier: F2:2D:33:5E:58:FE:44:80:C6:30:02:8A:FD:A0:89:DD:D4:F5:1B:2E
Certificate issuer:       /CN=F22D335E58FE4480C630028AFDA089DDD4F51B2E
Certificate serial:       4B59A0944BF887A37EDFA1272987DCAF90F1AEAF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft
Manifest number:          C2
Signing time:             Thu 24 Sep 2026 10:28:38 +0000
Manifest this update:     Thu 24 Sep 2026 10:23:38 +0000
Manifest next update:     Fri 25 Sep 2026 11:54:38 +0000
Files and hashes:         1: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: wxFKBpn9qVN9lrWfCaIxYIWmbSnlJkTDNrnGXIX7Yog=)
                          2: F22D335E58FE4480C630028AFDA089DDD4F51B2E.crl (hash: Dklpc4yc6fmiyQiNFv8+VYMGpIvnGlxpjHHh5BUchnY=)
                          3: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: qpcV4Pf7cNXRuQrRMlgmCsKcJG4eLr1f/Ludu6hvhtU=)
                          4: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: gX3SrmHuIFxjATXp8t+HZx8aCultQoPEMzsPd4px2h0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.crl
                          rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 10:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:59:a0:94:4b:f8:87:a3:7e:df:a1:27:29:87:dc:af:90:f1:ae:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F22D335E58FE4480C630028AFDA089DDD4F51B2E
        Validity
            Not Before: Sep 24 10:23:38 2026 GMT
            Not After : Sep 25 11:54:38 2026 GMT
        Subject: CN=8627A1466A750800F6A9C60CC159B3CCC66289A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3e:9a:39:89:77:52:7d:13:52:29:34:1d:a1:
                    9b:74:89:ed:dd:1c:3d:f2:ab:71:4d:c0:1f:ae:17:
                    da:a3:93:9b:e5:8e:b5:46:2b:56:8c:ec:3a:6c:90:
                    6a:b3:41:69:9b:0e:f3:6f:10:0c:83:0c:a2:4a:5c:
                    1f:9c:43:ea:12:af:85:48:dd:f3:d6:80:4a:e1:6e:
                    8e:f5:76:e1:f7:25:88:62:37:cd:3d:12:3e:83:dc:
                    75:c5:4b:a3:4b:01:77:4b:73:da:0c:e4:36:ab:06:
                    84:92:b0:68:c4:64:37:3e:dc:ef:af:0e:ac:8a:e9:
                    11:74:c3:9f:57:dd:f0:9a:9d:a6:a0:38:2f:82:65:
                    66:93:c5:ca:08:ab:63:f2:18:2d:26:68:37:a6:90:
                    3a:2c:21:65:2e:2b:4c:df:d8:30:c0:0d:60:94:d0:
                    03:69:46:00:48:92:ab:8c:dd:51:53:85:b8:95:19:
                    29:fe:65:a4:8d:69:9a:25:df:6a:5f:53:a0:9a:d2:
                    53:3c:66:b0:de:d2:05:fa:1e:d5:80:ad:78:11:eb:
                    06:50:7f:da:b7:ed:e9:4a:88:01:21:d5:90:df:83:
                    9d:a4:b8:49:e4:9a:90:52:1f:1e:c0:d6:f2:23:58:
                    c8:73:2f:ce:ca:e3:9b:f5:63:30:a0:92:91:18:a6:
                    90:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:27:A1:46:6A:75:08:00:F6:A9:C6:0C:C1:59:B3:CC:C6:62:89:A6
            X509v3 Authority Key Identifier:
                keyid:F2:2D:33:5E:58:FE:44:80:C6:30:02:8A:FD:A0:89:DD:D4:F5:1B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ff:c5:47:ee:3d:f9:1d:4d:51:a6:52:52:b0:40:de:23:1a:
         5f:5b:da:d4:db:90:aa:84:38:99:14:ce:93:d2:4a:e7:a1:43:
         fe:b6:df:6c:70:47:7d:46:ed:1f:d5:f8:20:78:e6:53:3a:3f:
         14:30:85:0c:84:ca:b1:c7:0b:c4:c8:8e:a8:33:d1:77:2b:1d:
         08:03:0b:64:d1:0f:35:87:af:04:d2:06:b0:dd:0c:32:7e:2e:
         19:2d:29:3b:d8:ab:c7:96:8f:32:e6:0c:da:c3:4a:0f:42:67:
         8b:1c:19:3b:ad:31:64:55:d7:be:f6:40:bb:ae:ec:b8:c2:e4:
         be:b6:00:e8:cc:1e:79:e5:5d:a0:4c:91:ab:ec:7a:a9:a8:07:
         a9:9e:6d:8a:30:ba:19:05:47:0c:31:0a:f6:da:f1:43:84:88:
         cc:cf:6c:28:bb:d9:7c:89:41:cc:db:51:79:af:81:a3:82:ee:
         cb:2e:bb:37:8d:d9:4b:ae:d4:2a:16:df:80:cc:75:f5:61:5d:
         4c:8d:06:7e:41:47:a3:0b:ff:3d:c9:82:a4:d7:d4:76:63:5e:
         c5:72:f9:7f:7b:64:75:9c:78:58:57:35:3a:b8:81:49:bd:db:
         63:4f:26:f7:98:0a:aa:69:db:0c:5f:11:a8:df:66:73:0a:5b:
         06:dc:f9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:34:39 2026 by rpki-client