Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft
File:                     C940C2C66C795EF89DE57AA820616ED8225890BC.mft (raw, json)
Hash identifier:          kYj/tRtDJ3U8xKGj2mu+gGi5V37ZMvk8gllL7+HDuBw=
Subject key identifier:   81:76:93:57:19:AB:3F:B0:F8:48:69:75:D3:3B:80:8E:D7:AB:E3:49
Authority key identifier: C9:40:C2:C6:6C:79:5E:F8:9D:E5:7A:A8:20:61:6E:D8:22:58:90:BC
Certificate issuer:       /CN=C940C2C66C795EF89DE57AA820616ED8225890BC
Certificate serial:       4DF9F4D8CFF1D1AB45FA12C18FF0E6B684B686AC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 18:28:53 +0000
Manifest this update:     Tue 12 May 2026 18:23:53 +0000
Manifest next update:     Wed 13 May 2026 20:36:53 +0000
Files and hashes:         1: C940C2C66C795EF89DE57AA820616ED8225890BC.crl (hash: koVcMtgFkoLB/ZJr9xkXOEoLlmAkiMOeH4zfZs0+I/A=)
                          2: 3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa (hash: EIKjtb6bLXexCIbSvIG/auaO1yK9dSi+ewqDx2meiK4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.crl
                          rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f9:f4:d8:cf:f1:d1:ab:45:fa:12:c1:8f:f0:e6:b6:84:b6:86:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C940C2C66C795EF89DE57AA820616ED8225890BC
        Validity
            Not Before: May 12 18:23:53 2026 GMT
            Not After : May 13 20:36:53 2026 GMT
        Subject: CN=8176935719AB3FB0F8486975D33B808ED7ABE349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:16:5c:65:7d:b9:d5:80:95:af:4b:64:74:cc:
                    fa:9a:76:d4:33:e4:64:f2:36:94:d5:da:6d:c2:58:
                    34:eb:08:03:55:79:1e:63:98:eb:ea:b3:67:bf:db:
                    8e:ec:33:83:38:6d:a8:03:0e:c4:86:26:1b:35:a2:
                    68:fa:ad:c0:61:76:b1:6f:19:cf:b1:12:d0:13:ee:
                    f6:07:bb:4d:43:47:55:7b:66:84:fd:4a:99:f8:02:
                    e5:ab:41:78:67:7b:ea:6d:3c:62:bc:d5:24:3a:b0:
                    3a:ab:c1:20:7c:c0:11:3e:69:8a:99:75:1e:86:ed:
                    a9:9b:e4:87:43:32:b2:84:c0:59:41:be:8a:51:21:
                    b1:ae:cf:d2:e4:3b:56:99:db:87:18:54:25:2e:18:
                    cb:e2:1b:96:ce:ba:08:b1:65:9c:a3:5b:cb:44:c1:
                    da:fc:87:2b:08:69:c8:19:4d:42:92:c5:07:99:d5:
                    1b:2b:6b:fa:60:b2:ff:66:f2:14:82:c2:e5:b2:81:
                    be:78:d2:23:af:88:d7:9f:4e:db:08:06:9f:1b:a5:
                    f8:81:32:ab:0c:48:54:20:aa:96:a1:36:c2:a6:93:
                    73:f5:07:f0:a4:32:40:e0:f7:3a:c3:c7:6a:7c:6f:
                    a9:92:a1:72:ec:d8:d4:a6:00:64:d6:9a:1b:96:d7:
                    14:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:76:93:57:19:AB:3F:B0:F8:48:69:75:D3:3B:80:8E:D7:AB:E3:49
            X509v3 Authority Key Identifier:
                keyid:C9:40:C2:C6:6C:79:5E:F8:9D:E5:7A:A8:20:61:6E:D8:22:58:90:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:fe:41:49:82:28:0e:11:3f:9a:c4:db:55:ee:e8:7c:50:90:
         f8:64:2d:e1:26:97:7e:c3:a1:41:3b:6d:15:14:9d:b5:dc:78:
         2a:24:6b:42:c5:7c:c3:37:9c:c4:7c:fd:87:a5:cc:fb:b2:ca:
         08:7b:ee:6d:48:d1:06:6d:83:5e:a8:8d:08:a6:7f:6b:67:0e:
         40:b1:30:f8:dd:82:0e:86:66:4c:da:d0:8a:76:41:d4:1a:a6:
         54:ca:75:22:73:b8:d8:b5:43:f6:33:ea:b6:64:ba:cf:59:f1:
         a5:6e:5e:99:e7:34:1d:0a:f0:8c:c8:42:9e:e1:95:03:c9:06:
         cd:c2:b1:cb:41:28:48:a9:5e:23:d5:62:c4:07:7d:df:a3:22:
         70:5f:85:d8:e5:63:8d:98:56:c2:2d:6c:d7:3e:4b:38:06:49:
         6f:29:9a:b7:90:40:9d:7f:17:6f:77:de:2f:53:cc:c0:33:50:
         2e:ea:01:6d:e5:d5:00:6a:f2:d1:ff:b3:90:ab:f6:e4:2a:b0:
         c6:e6:d2:fc:84:36:bc:0d:d7:75:00:d3:5e:72:b7:18:b0:2e:
         d0:41:84:7e:7b:bc:ea:6f:a2:c9:91:4a:f0:17:cb:32:fb:3e:
         b4:9b:65:62:8c:a9:d9:97:4b:c3:65:c2:35:90:80:3c:af:70:
         b3:86:dc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:02 2026 by rpki-client