Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft
File:                     2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft (raw, json)
Hash identifier:          fsPExdNp2qndEAx7VNj2b7ybhleHQajg+OkcKZJQ/ok=
Subject key identifier:   DF:35:B2:9C:D5:AB:4F:2F:FE:38:40:BB:69:D3:20:F5:31:3A:86:DF
Authority key identifier: 2C:CA:57:69:76:D5:D9:FE:66:F5:78:37:7B:F7:B7:8E:42:64:A9:A1
Certificate issuer:       /CN=2CCA576976D5D9FE66F578377BF7B78E4264A9A1
Certificate serial:       7489C4A17B27F7C2D90A49642252BC2F78939211
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft
Manifest number:          6D
Signing time:             Thu 23 Jul 2026 23:28:27 +0000
Manifest this update:     Thu 23 Jul 2026 23:23:27 +0000
Manifest next update:     Sat 25 Jul 2026 02:51:27 +0000
Files and hashes:         1: 2CCA576976D5D9FE66F578377BF7B78E4264A9A1.crl (hash: ufoIsbDYVEUVm0ws46WCPrXaTcdp6f/ocHyHn626EUI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.crl
                          rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:89:c4:a1:7b:27:f7:c2:d9:0a:49:64:22:52:bc:2f:78:93:92:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CCA576976D5D9FE66F578377BF7B78E4264A9A1
        Validity
            Not Before: Jul 23 23:23:27 2026 GMT
            Not After : Jul 25 02:51:27 2026 GMT
        Subject: CN=DF35B29CD5AB4F2FFE3840BB69D320F5313A86DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:67:21:f3:ae:e4:bb:f4:71:7c:ba:11:37:56:
                    fd:f1:87:8e:1a:dd:03:c6:18:82:9c:d1:4d:af:54:
                    93:c2:74:42:c0:ed:01:c4:2f:8c:a5:a5:f8:14:46:
                    db:63:f6:67:8e:b8:03:20:81:63:9d:61:c4:e2:9e:
                    2b:af:30:4f:4e:4f:bc:77:8a:62:5f:24:88:07:bb:
                    d0:c0:68:d8:a6:24:dc:98:88:db:f8:62:db:ed:d7:
                    e0:da:ac:c9:2c:52:30:d7:e4:05:90:15:43:7a:5c:
                    04:cc:f6:d4:91:4d:d1:d4:92:ee:5e:a8:5d:f8:ed:
                    83:51:49:62:c7:1a:48:fe:4f:24:97:d9:83:41:c6:
                    ce:a2:7f:6b:d1:cf:96:11:01:7f:02:66:24:c6:48:
                    3a:c9:1f:68:73:d5:71:b5:f6:02:97:54:e6:42:53:
                    3e:f4:c7:99:30:40:75:db:46:53:4a:b6:d3:03:37:
                    08:d0:1d:63:3e:73:31:d3:e5:06:68:fc:25:a0:a5:
                    38:7d:03:71:08:6b:5c:4a:82:9d:32:61:44:54:29:
                    c9:30:04:af:77:6a:66:fb:db:ef:5d:ca:74:36:66:
                    9a:0f:2b:a7:b3:a3:c4:74:35:9e:e3:38:24:ae:4c:
                    57:c0:c9:24:44:c0:67:c5:26:20:1e:53:51:e0:70:
                    04:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:35:B2:9C:D5:AB:4F:2F:FE:38:40:BB:69:D3:20:F5:31:3A:86:DF
            X509v3 Authority Key Identifier:
                keyid:2C:CA:57:69:76:D5:D9:FE:66:F5:78:37:7B:F7:B7:8E:42:64:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ce:2b:d0:a1:50:da:d0:83:88:6d:cc:86:08:81:b1:95:69:
         f6:3f:03:d7:ab:be:27:79:b5:30:e1:57:8a:ba:92:90:15:e9:
         68:e5:34:2b:b6:c2:f4:ce:2b:74:bb:c2:ff:8c:c6:5a:eb:21:
         21:cf:78:fa:64:f8:71:38:8a:a2:94:96:64:c3:73:39:ce:68:
         12:61:c6:75:cf:e1:e7:d6:24:26:a9:4f:86:4a:d3:69:6b:19:
         ca:6c:23:90:b0:8f:ed:e0:50:33:6f:70:61:6d:d7:26:8e:13:
         14:6a:40:5a:dc:6d:96:fb:0a:00:e6:ce:ec:36:e4:53:c6:8c:
         7c:45:b0:b4:e2:1c:5f:61:8d:ef:75:ed:61:70:a0:ac:81:5d:
         3a:5a:f5:b7:79:c2:d7:6d:14:07:b5:a2:0f:a1:dd:86:8d:04:
         84:83:21:d5:ef:37:cc:6c:94:91:16:4e:ad:7a:17:a7:aa:b1:
         75:5c:81:fb:25:b4:f1:a4:55:fc:c4:47:0f:de:52:6d:80:7b:
         ed:e5:2c:f5:17:99:cf:9d:6a:e9:a9:3b:19:72:22:1b:fe:71:
         bb:6a:be:f9:8f:93:9d:da:6a:5b:e8:ca:5e:6f:b1:98:36:68:
         67:21:45:12:a5:e5:f9:6a:63:35:2f:07:96:6e:3e:40:d7:0f:
         ec:18:6c:81
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIUdInEoXsn98LZCklkIlK8L3iTkhEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNDQTU3Njk3NkQ1RDlGRTY2RjU3ODM3N0JGN0I3OEU0
MjY0QTlBMTAeFw0yNjA3MjMyMzIzMjdaFw0yNjA3MjUwMjUxMjdaMDMxMTAvBgNV
BAMTKERGMzVCMjlDRDVBQjRGMkZGRTM4NDBCQjY5RDMyMEY1MzEzQTg2REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZyHzruS79HF8uhE3Vv3xh44a
3QPGGIKc0U2vVJPCdELA7QHEL4ylpfgURttj9meOuAMggWOdYcTiniuvME9OT7x3
imJfJIgHu9DAaNimJNyYiNv4Ytvt1+DarMksUjDX5AWQFUN6XATM9tSRTdHUku5e
qF347YNRSWLHGkj+TySX2YNBxs6if2vRz5YRAX8CZiTGSDrJH2hz1XG19gKXVOZC
Uz70x5kwQHXbRlNKttMDNwjQHWM+czHT5QZo/CWgpTh9A3EIa1xKgp0yYURUKckw
BK93amb72+9dynQ2ZpoPK6ezo8R0NZ7jOCSuTFfAySREwGfFJiAeU1HgcAQzAgMB
AAGjggH/MIIB+zAdBgNVHQ4EFgQU3zWynNWrTy/+OEC7adMg9TE6ht8wHwYDVR0j
BBgwFoAULMpXaXbV2f5m9Xg3e/e3jkJkqaEwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9B
UlNFTi1JRC8wLzJDQ0E1NzY5NzZENUQ5RkU2NkY1NzgzNzdCRjdCNzhFNDI2NEE5
QTEuY3JsMHIGCCsGAQUFBwEBBGYwZDBiBggrBgEFBQcwAoZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvMkNDQTU3Njk3NkQ1RDlGRTY2
RjU3ODM3N0JGN0I3OEU0MjY0QTlBMS5jZXIwdQYIKwYBBQUHAQsEaTBnMGUGCCsG
AQUFBzALhllyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vQVJTRU4t
SUQvMC8yQ0NBNTc2OTc2RDVEOUZFNjZGNTc4Mzc3QkY3Qjc4RTQyNjRBOUExLm1m
dDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAG
BAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAfs4r0KFQ2tCDiG3MhgiBsZVp9j8D16u+J3m1MOFXirqSkBXpaOU0
K7bC9M4rdLvC/4zGWushIc94+mT4cTiKopSWZMNzOc5oEmHGdc/h59YkJqlPhkrT
aWsZymwjkLCP7eBQM29wYW3XJo4TFGpAWtxtlvsKAObO7DbkU8aMfEWwtOIcX2GN
73XtYXCgrIFdOlr1t3nC120UB7WiD6Hdho0EhIMh1e83zGyUkRZOrXoXp6qxdVyB
+yW08aRV/MRHD95SbYB77eUs9ReZz51q6ak7GXIiG/5xu2q++Y+TndpqW+jKXm+x
mDZoZyFFEqXl+WpjNS8Hlm4+QNcP7BhsgQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:57 2026 by rpki-client