Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft
File:                     2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft (raw, json)
Hash identifier:          S9HHKieYVuSN0AMnzQtsD8sTFb2FNpgGpkE8jExTmx0=
Subject key identifier:   31:CD:4D:CF:7C:3E:49:98:5A:40:AD:5C:F6:75:B8:7C:89:B4:F8:89
Authority key identifier: 2C:CA:57:69:76:D5:D9:FE:66:F5:78:37:7B:F7:B7:8E:42:64:A9:A1
Certificate issuer:       /CN=2CCA576976D5D9FE66F578377BF7B78E4264A9A1
Certificate serial:       294791D9F09847BB052D6DC1E4E1849996D75E07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft
Manifest number:          C1
Signing time:             Thu 24 Sep 2026 01:58:11 +0000
Manifest this update:     Thu 24 Sep 2026 01:53:11 +0000
Manifest next update:     Fri 25 Sep 2026 05:07:11 +0000
Files and hashes:         1: 2CCA576976D5D9FE66F578377BF7B78E4264A9A1.crl (hash: CuwPxEXD1zLIiyQvOkDesSb80x5TsbAqLrmGO+4kxXc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.crl
                          rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:47:91:d9:f0:98:47:bb:05:2d:6d:c1:e4:e1:84:99:96:d7:5e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CCA576976D5D9FE66F578377BF7B78E4264A9A1
        Validity
            Not Before: Sep 24 01:53:11 2026 GMT
            Not After : Sep 25 05:07:11 2026 GMT
        Subject: CN=31CD4DCF7C3E49985A40AD5CF675B87C89B4F889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:6f:2a:f0:0f:ad:13:b1:e8:d9:d4:3c:29:
                    a1:9e:c5:11:c4:bf:54:b2:44:f5:5d:ff:36:c2:cc:
                    25:31:bf:46:49:6a:7a:75:e4:a0:c5:6e:d8:c4:5f:
                    01:51:b6:f2:91:e8:fa:e2:d7:80:5b:cd:a2:37:1f:
                    16:c1:f3:d9:97:31:d8:9e:fa:2b:19:51:65:4e:3c:
                    45:a0:7e:ac:b2:ad:d1:ff:c5:6c:fa:ff:a9:ec:09:
                    b2:04:80:17:07:38:67:5e:09:5e:de:85:6b:da:d3:
                    a5:3d:35:20:f2:ae:b8:82:84:4e:c5:ec:b5:3e:d8:
                    02:0d:19:45:46:9b:13:97:59:93:7d:5e:6e:e8:86:
                    42:30:6a:89:9d:52:63:b9:f8:f8:c9:5f:eb:0b:7b:
                    51:db:8c:af:f3:32:60:dd:a4:ab:da:56:57:e7:df:
                    91:ab:49:25:33:78:a5:04:4b:79:de:53:e4:23:9a:
                    bc:ef:2d:fc:0c:4a:f1:6c:60:2f:78:9d:cc:36:f7:
                    2d:25:6b:e6:1e:81:e6:16:15:18:c2:55:49:c7:16:
                    46:99:00:f9:27:40:ae:8e:df:99:39:ec:26:d3:b8:
                    df:e8:2e:3b:b9:04:e0:e0:0a:91:13:ba:c3:f8:33:
                    69:e7:22:80:d6:fd:83:67:13:06:e1:1d:b2:87:58:
                    a7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CD:4D:CF:7C:3E:49:98:5A:40:AD:5C:F6:75:B8:7C:89:B4:F8:89
            X509v3 Authority Key Identifier:
                keyid:2C:CA:57:69:76:D5:D9:FE:66:F5:78:37:7B:F7:B7:8E:42:64:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:5a:c0:22:34:c7:da:24:fb:7f:4f:f4:7b:5f:28:f2:7a:f4:
         ed:68:7b:32:8e:24:e1:c2:1e:d9:47:5a:45:93:aa:11:40:30:
         01:99:e0:fa:05:50:63:66:b6:90:13:4a:79:be:ee:7f:c6:72:
         35:16:28:45:1e:e8:80:e7:84:8d:06:a6:c0:b8:d0:34:fc:b1:
         2e:89:5b:ce:da:5f:dd:0f:35:51:87:69:97:70:9a:19:88:3f:
         7b:cf:a6:45:23:24:6c:c6:2e:d1:20:09:e5:eb:50:90:27:57:
         bb:c8:83:ee:77:fd:b2:ee:75:e7:da:bb:15:e1:af:62:b8:23:
         b7:82:c8:cd:88:dd:cb:89:e7:90:dd:56:e3:83:16:25:22:17:
         17:fe:80:2d:08:c8:80:8a:ec:ee:7f:34:97:9a:2b:78:36:ba:
         68:17:2d:38:4d:33:95:dc:3a:f8:a9:f7:18:0e:5e:22:73:4e:
         06:34:37:24:b5:f2:be:54:11:6d:f5:8f:c8:52:0f:28:87:89:
         21:b1:08:2e:99:a4:0d:42:5c:98:a4:7e:0f:62:52:45:1a:d3:
         c4:80:21:23:93:73:d0:8e:a9:92:ce:89:ff:0a:19:64:d9:54:
         39:24:d7:e6:49:b6:75:6c:50:26:39:cb:35:01:a0:73:d8:99:
         79:3f:dc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:21:33 2026 by rpki-client