Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/6C522A0D52C49C10792E181CCBBD22B72AF10088.mft
File:                     6C522A0D52C49C10792E181CCBBD22B72AF10088.mft (raw, json)
Hash identifier:          d/FfDpWdACbY64yT0Kt46dRcAFWSBDBsQqR9wy1Uk9c=
Subject key identifier:   96:70:6D:26:79:B5:E3:7B:CF:CE:CD:52:14:8B:C0:B6:DB:F8:E7:65
Authority key identifier: 6C:52:2A:0D:52:C4:9C:10:79:2E:18:1C:CB:BD:22:B7:2A:F1:00:88
Certificate issuer:       /CN=6C522A0D52C49C10792E181CCBBD22B72AF10088
Certificate serial:       5744926D06D4A34F8B645A7AF7F3536301DB21FF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C522A0D52C49C10792E181CCBBD22B72AF10088.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/6C522A0D52C49C10792E181CCBBD22B72AF10088.mft
Manifest number:          C3
Signing time:             Thu 24 Sep 2026 04:26:07 +0000
Manifest this update:     Thu 24 Sep 2026 04:21:07 +0000
Manifest next update:     Fri 25 Sep 2026 04:29:07 +0000
Files and hashes:         1: 6C522A0D52C49C10792E181CCBBD22B72AF10088.crl (hash: Ta25do7XCgh849ksTeomy0/w0Fcyf3B26HJdwbkVGSY=)
                          2: 3130332e3232352e3230392e302f32342d3234203d3e20313333333337.roa (hash: f1SJQsx9nWUKUwBQBAdqsLt2lHNLlTlJwU4N68CRn+4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/6C522A0D52C49C10792E181CCBBD22B72AF10088.crl
                          rsync://rpki-rsync.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/6C522A0D52C49C10792E181CCBBD22B72AF10088.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C522A0D52C49C10792E181CCBBD22B72AF10088.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 04:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:44:92:6d:06:d4:a3:4f:8b:64:5a:7a:f7:f3:53:63:01:db:21:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C522A0D52C49C10792E181CCBBD22B72AF10088
        Validity
            Not Before: Sep 24 04:21:07 2026 GMT
            Not After : Sep 25 04:29:07 2026 GMT
        Subject: CN=96706D2679B5E37BCFCECD52148BC0B6DBF8E765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:8b:b6:84:c4:54:39:3d:42:67:a0:08:79:
                    6e:1e:2d:2e:bb:15:37:c4:6b:53:f7:19:2c:0d:4c:
                    9f:e4:74:82:71:93:a1:b9:51:16:a6:12:55:1e:30:
                    59:77:ef:a7:8f:ec:ac:24:11:82:ec:f6:a9:01:ac:
                    98:c6:72:14:95:f2:00:81:f1:d3:cc:59:3d:b9:66:
                    ee:f2:55:f8:32:71:9c:4e:77:0e:ea:cb:11:18:e2:
                    14:00:3c:1a:6e:4a:1b:e3:03:76:e3:1f:13:5e:70:
                    fb:3d:c1:3c:ed:40:53:98:47:b0:97:1d:22:b7:79:
                    cc:57:0c:de:b7:65:d3:89:40:fc:38:c0:ed:df:d0:
                    27:f2:08:74:b1:10:69:bd:5e:03:ae:99:8f:7d:ea:
                    3f:2a:5b:e9:60:37:fc:d5:49:92:03:56:40:39:d3:
                    68:8e:10:bf:9e:58:aa:95:42:98:e8:05:4a:d1:a2:
                    a0:40:e6:a3:68:7f:35:13:11:f9:8c:28:c5:3d:77:
                    47:60:17:db:17:ad:b8:d3:15:7c:27:81:4d:92:72:
                    fc:75:98:12:84:72:79:e7:18:d7:31:9f:b8:00:a1:
                    5c:27:b1:b4:d9:e7:81:98:05:ee:27:8f:e7:fd:28:
                    08:46:e1:06:94:b9:8c:14:ee:20:d0:d5:d8:6b:8d:
                    99:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:70:6D:26:79:B5:E3:7B:CF:CE:CD:52:14:8B:C0:B6:DB:F8:E7:65
            X509v3 Authority Key Identifier:
                keyid:6C:52:2A:0D:52:C4:9C:10:79:2E:18:1C:CB:BD:22:B7:2A:F1:00:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/6C522A0D52C49C10792E181CCBBD22B72AF10088.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C522A0D52C49C10792E181CCBBD22B72AF10088.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/6C522A0D52C49C10792E181CCBBD22B72AF10088.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:6a:3c:8e:70:b0:f9:bf:de:b3:3f:da:8e:0a:6c:b2:60:81:
         ef:d5:b8:e8:bd:54:3b:0a:84:f6:af:2d:da:ce:e6:7b:a9:17:
         82:1b:58:9e:97:8b:4c:6e:33:08:a5:4d:02:0c:77:42:00:0e:
         42:6a:80:83:a5:a1:d8:92:b4:de:2b:45:62:b6:ff:83:ab:d7:
         54:fb:92:ed:3c:9b:34:15:91:52:fd:1a:40:1f:bc:c5:d5:6e:
         b7:7f:fe:1e:cb:8f:1b:a0:03:6d:29:a3:50:75:3c:81:29:ab:
         4a:23:19:bc:1a:34:6c:54:37:6d:29:9e:a5:30:79:40:e1:f8:
         f5:3a:dd:4e:b6:1f:06:76:30:c2:cf:4d:ce:29:84:56:c7:7d:
         93:7f:b4:d0:b7:d7:49:2e:4b:49:c0:00:63:76:ac:3c:1e:bb:
         c6:ff:22:2b:e3:13:11:a0:9d:48:3d:e2:78:2c:c8:a0:0a:3c:
         5b:66:0f:81:ba:8d:28:4f:e6:e6:c0:6d:ed:f6:d5:e1:b2:fe:
         30:24:c8:87:87:37:d4:87:8d:17:d5:6a:ce:b8:1a:06:23:2b:
         2a:a6:f5:2c:27:71:95:3e:c5:bf:3f:34:3f:30:6c:b3:bd:75:
         d8:dc:dc:e8:c3:3c:37:df:76:29:da:0c:55:e3:4c:ee:29:ab:
         bc:e7:b2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:59:56 2026 by rpki-client