Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft
File:                     E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft (raw, json)
Hash identifier:          I4uC16AuTCyW2vlDIgV4WblyLTIxmflItyonHMAnMQw=
Subject key identifier:   BF:4D:A6:3A:4E:88:CC:FA:56:65:A1:10:DB:22:4E:BF:E4:1D:E4:42
Authority key identifier: E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A
Certificate issuer:       /CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A
Certificate serial:       60E65094D5FE1323B430EC95298B9197BF037540
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft
Manifest number:          0106
Signing time:             Sun 15 Nov 2026 13:41:10 +0000
Manifest this update:     Sun 15 Nov 2026 13:36:10 +0000
Manifest next update:     Mon 16 Nov 2026 14:16:10 +0000
Files and hashes:         1: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl (hash: WOsqIWtYPWOrj9fD+nTbYH2Ocqe5luJv0cYOaK1gtf8=)
                          2: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: is5WdfvUY1KRmUVaEDtXvqlI2WCzItjy85jNK7qc29s=)
                          3: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: mmr69bHLezkQuiDZandeSB0qYXcAYeWx1GHP/ifPRTA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl
                          rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 10:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e6:50:94:d5:fe:13:23:b4:30:ec:95:29:8b:91:97:bf:03:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A
        Validity
            Not Before: Nov 15 13:36:10 2026 GMT
            Not After : Nov 16 14:16:10 2026 GMT
        Subject: CN=BF4DA63A4E88CCFA5665A110DB224EBFE41DE442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:38:a9:6d:12:06:00:9e:fa:9b:c1:db:55:
                    d1:64:da:7a:99:00:e3:5c:60:f7:ba:57:59:9c:78:
                    59:54:f4:fb:1a:09:92:2e:33:44:b8:08:a4:03:a7:
                    f4:d8:57:df:91:71:c7:06:46:cd:18:a1:b7:75:85:
                    48:47:d4:d0:63:c8:79:a9:f5:d4:34:93:87:ad:f1:
                    93:51:84:04:a1:08:34:7e:30:ae:a4:1a:f8:86:b8:
                    fd:58:93:40:96:3d:09:10:06:16:61:cb:e2:ff:cf:
                    ac:6b:c8:92:16:62:b2:35:8e:67:d8:dd:d9:90:cd:
                    a0:88:44:db:4c:55:a1:75:ed:3e:f3:df:f5:fd:57:
                    87:6d:23:b5:d7:1f:16:b0:c9:c6:13:9f:f0:27:ac:
                    41:56:99:c7:83:29:59:94:79:b6:c9:38:9b:0f:f6:
                    d7:43:6b:ef:1e:9f:5a:da:c1:57:4d:f5:5d:25:9b:
                    70:99:a8:91:f2:58:ff:a4:1f:70:ca:35:5f:3a:d6:
                    05:cb:14:61:86:b3:82:03:88:29:6b:cd:eb:ba:e7:
                    23:a1:e8:13:80:0d:c7:73:a2:83:05:c2:49:1a:ed:
                    d7:4a:62:e8:c8:7d:57:24:c4:89:67:cc:15:d4:d3:
                    c2:79:66:aa:ec:63:3c:92:fa:5f:82:c3:47:ce:f7:
                    3a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4D:A6:3A:4E:88:CC:FA:56:65:A1:10:DB:22:4E:BF:E4:1D:E4:42
            X509v3 Authority Key Identifier:
                keyid:E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:14:52:76:62:ca:5f:4d:b1:16:26:62:48:27:a0:cc:67:44:
         6b:9a:3c:3b:a0:70:ef:67:41:78:9d:ad:2b:8c:d3:90:12:fd:
         1a:d9:7e:9d:57:56:cd:68:7d:cf:54:db:40:ab:ec:37:f8:a1:
         ae:21:69:bb:2a:30:61:65:59:e6:37:42:f7:88:ae:c4:ab:db:
         41:a8:e2:0f:0d:c5:c0:b5:b4:c0:67:64:c7:bf:b6:27:54:43:
         2c:73:0b:f2:21:d3:5c:e4:53:77:68:7b:46:88:e0:0d:af:69:
         94:96:7b:40:e5:47:af:24:ef:17:ab:9e:d9:6c:f5:52:ce:11:
         c8:58:b1:bd:f4:f3:23:b3:3b:f2:4e:75:9b:cf:cd:6f:0d:bf:
         09:9f:70:bd:5b:78:0a:14:74:09:9a:a4:d5:7f:28:13:1c:1e:
         c7:88:b3:76:41:a9:d3:b3:d5:f7:79:86:77:7b:4d:8c:16:7d:
         6c:3a:58:47:0a:71:80:a3:1b:fb:f3:27:68:6b:bd:e4:b0:f3:
         cc:90:8b:71:a0:5d:ff:cc:66:0a:db:b2:76:c1:df:00:5c:cd:
         3e:df:91:42:71:1e:92:36:68:d3:e7:96:ab:b8:e9:54:91:dc:
         2d:87:a4:c6:4d:d7:53:0e:ce:92:eb:6a:df:a5:9c:fc:3b:0f:
         9c:14:8c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:41:31 2026 by rpki-client