Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
File:                     FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft (raw, json)
Hash identifier:          WQ8GlnwxbTeqIIU18sO2PmK4DNyfDjVdthKeAmB0NNk=
Subject key identifier:   D5:51:DD:F3:78:22:65:BD:BD:59:3D:F1:7E:BC:D3:88:50:F2:0D:9B
Authority key identifier: FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0
Certificate issuer:       /CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
Certificate serial:       645452A5BFFE58757F0EEE5A917E2D26106133C8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
Manifest number:          C2
Signing time:             Thu 24 Sep 2026 14:18:35 +0000
Manifest this update:     Thu 24 Sep 2026 14:13:35 +0000
Manifest next update:     Fri 25 Sep 2026 16:29:35 +0000
Files and hashes:         1: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: EAjmUlvem7M4oK9zM5l2C5sj8QgctjDf21f5Jtu6r6c=)
                          2: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: scVRC0xmxqQdUfIKHLUXCSR/PlHSL7MJsFmhftXQ12o=)
                          3: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: vL84NHT9sBntLdBIflCRLCGX23FgkMfHfpfueFsiLrg=)
                          4: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: OEfd+CS8IY4J+a4u9rVfClWlOVRIWkchPzHhfbtOYRo=)
                          5: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: 2buPsuKzxfp1+Z0b6pwCmXQGtunH/ULHNFjkRXke1WI=)
                          6: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: N6pzwLsiBlR6wqRJD6D9fkvMPk3uOH5gFPON6WGlnyk=)
                          7: FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl (hash: aDonq/x1BnplhQ+71RYL+tyhm9AsA2h5bszsLZt2rLo=)
                          8: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: xrvvTuKeO8SacVcwiQahe3cKGxd7wl87Mxfi5VJfmZk=)
                          9: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: yTgPRgQVzVx38fMyxtuZ61ES4EUBA+qjN64rJdc/fj0=)
                          10: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: NVWT14ucQ7dIq22SiHPSunVZu4zoTEVcOwCIXRvC+w4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl
                          rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 10:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:54:52:a5:bf:fe:58:75:7f:0e:ee:5a:91:7e:2d:26:10:61:33:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
        Validity
            Not Before: Sep 24 14:13:35 2026 GMT
            Not After : Sep 25 16:29:35 2026 GMT
        Subject: CN=D551DDF3782265BDBD593DF17EBCD38850F20D9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:8b:08:44:45:07:2d:15:a0:55:44:33:de:
                    d7:0b:c3:ef:66:08:47:1f:89:29:86:9d:0d:50:27:
                    06:27:a2:4c:c4:50:d0:c1:ba:8e:47:c6:c0:b3:19:
                    11:a9:05:d0:56:81:3d:6e:fb:72:49:5c:31:82:67:
                    2d:14:ae:5c:9a:88:14:cb:3e:f5:69:50:4f:e7:23:
                    d5:21:f3:8f:a0:5a:b8:64:a9:51:02:97:7e:af:b7:
                    92:55:fc:8c:20:3f:7f:cb:39:07:4e:3a:4d:50:d8:
                    39:fe:d2:1d:4a:f6:d6:f6:14:ea:3a:44:49:61:3e:
                    7f:42:6b:6a:ad:6f:9e:85:3e:6b:cb:de:c4:3b:c6:
                    ed:cf:30:74:79:49:f4:e6:d3:fc:b3:e2:1a:f5:fc:
                    2f:12:0b:28:01:09:10:67:7d:f3:22:dd:56:08:56:
                    5e:ff:95:53:3e:d5:19:ca:d7:fb:06:53:2d:1c:d9:
                    c6:fa:09:cd:be:ec:e6:13:a5:06:4d:df:13:ad:d9:
                    67:59:c9:e2:10:42:2e:c1:10:5a:83:e6:83:29:57:
                    f5:57:74:b3:f3:9b:09:f4:e4:c2:28:06:42:fe:68:
                    82:f5:ee:9a:1d:43:0f:a6:37:0e:94:5d:b7:71:32:
                    44:1e:7a:58:7e:a6:5d:f3:bd:9f:f8:eb:36:cc:a8:
                    20:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:51:DD:F3:78:22:65:BD:BD:59:3D:F1:7E:BC:D3:88:50:F2:0D:9B
            X509v3 Authority Key Identifier:
                keyid:FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ad:4f:ca:d7:9f:0f:66:c6:e1:d8:93:6d:5c:4e:91:a7:72:
         d1:b8:cd:2b:4c:3c:12:5c:a5:85:a7:94:c5:55:25:a7:b1:b1:
         29:db:78:f5:03:46:60:40:b6:7e:16:0d:de:27:52:11:20:bb:
         33:56:6f:66:6e:8b:27:fc:f5:5a:4b:c1:36:b4:c0:c9:5f:b2:
         3f:fe:57:d4:07:94:b0:c9:38:51:d3:4d:74:de:03:8d:0c:44:
         95:09:a0:5a:62:44:42:0e:5d:4e:1f:40:6b:f5:aa:34:33:ab:
         a3:f2:b2:bd:64:fc:49:30:a4:e8:95:dd:f9:7f:07:5e:07:1a:
         2d:0f:07:36:2d:f0:96:a5:91:77:43:bb:36:c0:d4:73:be:76:
         52:5e:cf:1f:bc:25:9b:f2:16:3a:21:24:2c:9c:92:c0:f6:66:
         ea:11:60:f2:62:14:5b:03:6b:a1:16:4b:2a:c0:ed:48:5f:34:
         7e:30:aa:87:56:de:2c:5f:c3:25:06:d6:47:5d:f9:0b:a7:44:
         5b:1e:c0:60:2b:83:07:f6:72:70:f3:5c:64:26:9c:cb:21:a5:
         20:1a:c1:df:cb:85:e7:32:c3:bb:0b:00:a2:2e:9e:04:f7:c0:
         28:b6:42:0a:eb:85:75:fa:a7:6f:24:18:12:5e:ee:42:5f:db:
         30:51:3d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:16:25 2026 by rpki-client