Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
File:                     6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft (raw, json)
Hash identifier:          iKZJIOdNd47jNaFHZX81+eFw7xUXUTR9YmsIcCIXUU8=
Subject key identifier:   5A:F5:D7:90:80:FA:14:43:C2:36:63:AC:89:A5:E4:93:C3:ED:C6:46
Authority key identifier: 6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
Certificate issuer:       /CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Certificate serial:       3F107E7A0848986752BB21C96150A7B5741BFFDD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
Manifest number:          C5
Signing time:             Sun 27 Sep 2026 00:19:52 +0000
Manifest this update:     Sun 27 Sep 2026 00:14:52 +0000
Manifest next update:     Mon 28 Sep 2026 04:12:52 +0000
Files and hashes:         1: 6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl (hash: 1/rKkJRH9xeY0VZ8AmpVi/ZVnxOGt8t5EbcXAHBHSHU=)
                          2: 323430363a616563303a623a3a2f34382d3438203d3e20313431363735.roa (hash: S7UAzIZzLebBGoPx8HW74rT6/bn+VmPadNNYeTv3kZU=)
                          3: 323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa (hash: RFsABZwQUKrnFL3kGb4LQCkeg8Y7lRmJ8snepdRl5LE=)
                          4: 323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (hash: 2RPhLvFo9neTmfPqwsVlBCVEW/vWAuk44bCI72x1cVc=)
                          5: 3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (hash: sVWZtsjpcpezFv1cmO31cy7yxR6Y49KAqemmha7HUbc=)
                          6: 323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa (hash: m44IQsih+GAEYeNlxdOnRw3U6wKDlFyxDmcm/uil4os=)
                          7: 323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa (hash: y0vf+b+WaxpgW62iYyK78WU25GzF5XHO+ZNE1qslKzM=)
                          8: 3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (hash: pjt/PoMD2rISkjEBbEVdFpq3Lfkti0ImQZr5UDhsxdI=)
                          9: 323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa (hash: dBBC9Ld8u7gkoTo/g/PxsRZ0jIN5riREG0FHLcyqmts=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
                          rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:12:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:10:7e:7a:08:48:98:67:52:bb:21:c9:61:50:a7:b5:74:1b:ff:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
        Validity
            Not Before: Sep 27 00:14:52 2026 GMT
            Not After : Sep 28 04:12:52 2026 GMT
        Subject: CN=5AF5D79080FA1443C23663AC89A5E493C3EDC646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:af:54:7e:bd:81:71:1e:f2:51:5d:7b:2d:b8:
                    86:8c:bf:72:f4:ed:37:1d:ac:4e:15:61:fa:e9:2b:
                    5f:64:47:16:db:0e:2b:05:d0:a0:ae:d5:5e:bb:71:
                    23:ef:38:0e:45:9d:21:5c:28:2b:63:25:ad:16:57:
                    da:85:eb:7a:cf:7e:6a:e6:2c:1c:b6:3d:80:0c:5d:
                    d5:59:51:4b:f6:d5:9b:63:a9:fa:99:cc:e6:45:8f:
                    b3:58:21:4b:e8:6a:32:d5:a5:77:fb:90:bc:a4:7f:
                    33:20:65:aa:f5:e9:f7:5b:18:61:c0:5a:85:ca:14:
                    b0:08:05:59:15:56:30:22:b3:8b:c7:51:c8:5e:20:
                    be:02:fc:8b:87:10:9a:f9:e1:89:07:2c:54:3c:8e:
                    3b:7b:2f:a2:9b:0f:5c:f4:ff:e3:3e:5b:a7:73:56:
                    7b:b7:82:4d:8f:6b:c0:0c:14:a8:02:53:69:73:3a:
                    f9:b2:23:7e:82:ee:fe:bf:a4:75:7e:06:f9:97:a3:
                    e3:22:10:49:b6:23:ab:3e:a7:71:0b:54:97:33:51:
                    fd:ce:57:b6:1a:14:86:09:98:d3:f2:21:45:c0:4f:
                    f5:2b:8c:43:fe:e8:f7:0c:e6:e7:e5:d9:3b:cc:55:
                    8d:bb:3f:4f:d6:0e:73:10:d3:c4:d3:80:9d:c2:60:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F5:D7:90:80:FA:14:43:C2:36:63:AC:89:A5:E4:93:C3:ED:C6:46
            X509v3 Authority Key Identifier:
                keyid:6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9b:21:2a:07:43:43:55:fc:ea:a3:29:63:e4:6f:7d:17:b6:
         e8:7d:78:c8:b2:f2:ac:cd:37:16:83:6b:ab:90:50:d9:55:ea:
         58:a2:39:0c:81:c4:19:8a:c5:eb:b3:4d:be:07:e6:35:22:6f:
         c0:0f:f4:71:f9:33:ae:04:87:fb:35:39:17:53:0c:8f:25:83:
         95:78:b6:8e:9f:ee:85:6c:11:b8:19:67:f2:99:d1:6d:b6:52:
         02:d5:0b:01:a8:ee:2f:64:4e:0c:63:e2:42:52:ac:7b:9e:ff:
         25:53:3f:7f:69:2e:22:c6:ee:90:11:7e:9c:42:20:09:fe:a0:
         2b:82:1c:7c:b6:d9:67:f8:d3:58:39:f3:f9:e8:e5:a6:37:d9:
         35:53:88:30:69:43:33:f1:1a:b0:6b:7e:3e:d3:9e:67:0a:23:
         cc:ea:60:16:df:bb:13:d0:ef:96:28:91:b9:20:09:bc:43:b3:
         88:fc:04:a6:ca:82:da:78:2f:83:7d:99:c4:89:71:04:73:b6:
         3f:fd:8e:db:95:2c:33:91:9b:b7:8c:40:27:d8:61:5d:d4:7a:
         77:03:f7:d5:aa:1a:ab:9e:f1:3e:4e:cf:25:83:62:c6:aa:a0:
         75:fe:58:92:fa:90:41:66:4b:7b:cf:dd:ca:6d:da:15:74:d1:
         93:8c:59:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:37:43 2026 by rpki-client