Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/16DCF707B920485289157A95351565941B6A8930.mft
File:                     16DCF707B920485289157A95351565941B6A8930.mft (raw, json)
Hash identifier:          jsc+ViKdr4vt/F+zV7yrDRrPyeDP/Q2g03OxFKPTT1s=
Subject key identifier:   2D:D3:59:20:80:BD:15:51:1B:3E:34:C3:2E:18:4D:60:6E:F2:64:90
Authority key identifier: 16:DC:F7:07:B9:20:48:52:89:15:7A:95:35:15:65:94:1B:6A:89:30
Certificate issuer:       /CN=16DCF707B920485289157A95351565941B6A8930
Certificate serial:       566DA7ADA2822DC376F8ABBF7784B381D9FBE784
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16DCF707B920485289157A95351565941B6A8930.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/16DCF707B920485289157A95351565941B6A8930.mft
Manifest number:          C5
Signing time:             Fri 25 Sep 2026 18:02:42 +0000
Manifest this update:     Fri 25 Sep 2026 17:57:42 +0000
Manifest next update:     Sat 26 Sep 2026 21:38:42 +0000
Files and hashes:         1: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: RtiNL89mZIuYDEcSArtPnCGvIgkScdacFIZTXeu2tc4=)
                          2: 16DCF707B920485289157A95351565941B6A8930.crl (hash: BBl+bvMk/RgPmLtHGIwBVuGPz2WpudP/edgj0DdzRxI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/16DCF707B920485289157A95351565941B6A8930.crl
                          rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/16DCF707B920485289157A95351565941B6A8930.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16DCF707B920485289157A95351565941B6A8930.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 17:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6d:a7:ad:a2:82:2d:c3:76:f8:ab:bf:77:84:b3:81:d9:fb:e7:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16DCF707B920485289157A95351565941B6A8930
        Validity
            Not Before: Sep 25 17:57:42 2026 GMT
            Not After : Sep 26 21:38:42 2026 GMT
        Subject: CN=2DD3592080BD15511B3E34C32E184D606EF26490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:88:d1:36:be:42:62:0e:d2:73:da:b6:ba:42:
                    51:19:b6:08:9b:88:3e:92:85:bd:b5:03:17:df:63:
                    22:0e:40:08:78:ff:9d:91:13:e8:69:ab:18:46:67:
                    52:29:b9:2a:db:99:68:8d:3b:b0:74:f5:c6:8b:f7:
                    39:85:7d:8d:dc:0b:b6:8d:da:ae:67:f3:01:52:be:
                    72:a5:2d:b9:26:72:a7:52:1a:32:79:e3:2c:17:ee:
                    71:d5:3b:0e:7a:05:9c:30:0b:8c:28:fc:ca:4a:36:
                    11:29:58:3d:af:5f:64:81:bd:e6:ab:1a:a3:02:f7:
                    29:09:1b:9b:f1:25:6d:4b:1c:9e:ca:10:d0:ab:71:
                    76:ec:92:08:cf:29:1f:39:60:68:83:2a:d5:d4:68:
                    18:84:74:b5:b6:f5:11:85:cd:4f:49:b1:63:0e:e4:
                    7d:bd:39:36:0b:66:63:17:39:e1:9b:e7:0c:97:5b:
                    46:9d:be:14:d8:18:29:fd:f0:43:6e:8b:76:57:46:
                    71:e2:d4:16:f5:67:0e:7d:81:12:12:54:dc:5f:d9:
                    59:53:9a:55:9e:c4:82:c7:b0:d2:b9:10:fe:f0:06:
                    ac:45:ed:29:6e:4c:5e:c5:76:28:4c:94:ee:d6:ef:
                    fc:ab:ca:37:50:39:f5:f4:98:b3:e3:48:0c:b5:53:
                    ec:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D3:59:20:80:BD:15:51:1B:3E:34:C3:2E:18:4D:60:6E:F2:64:90
            X509v3 Authority Key Identifier:
                keyid:16:DC:F7:07:B9:20:48:52:89:15:7A:95:35:15:65:94:1B:6A:89:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/16DCF707B920485289157A95351565941B6A8930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16DCF707B920485289157A95351565941B6A8930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/16DCF707B920485289157A95351565941B6A8930.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ed:72:fc:83:da:c7:b6:b6:c3:23:08:ee:6a:2c:ee:e9:ef:
         fc:2f:ec:dc:fe:e8:d4:8d:01:be:bc:3e:64:f9:bb:69:38:25:
         78:39:65:ca:37:a8:28:5f:47:a9:e8:c2:02:df:75:ee:1d:f6:
         3e:9c:f0:05:e3:50:64:bc:69:45:cf:b8:1a:eb:79:7f:37:c6:
         a0:81:c1:10:ed:7f:4f:17:57:ac:2e:9a:04:78:cd:29:92:ba:
         2c:9d:40:bb:df:90:3b:1e:9a:5f:a5:f8:5d:4e:17:92:a0:1c:
         00:f6:34:bc:32:d6:b6:4c:cb:13:2d:03:ac:6f:17:e7:6c:ba:
         bc:e4:e0:a5:2e:47:e0:f6:f8:dd:62:f7:af:15:54:cd:4a:71:
         ba:e4:3b:85:fe:3f:a0:94:7b:7a:7c:20:e1:5f:d1:7e:85:fa:
         3d:87:19:7b:ea:92:2e:b1:6a:92:8a:cc:e9:79:78:44:fb:6f:
         39:a9:27:44:de:bb:c8:4e:ea:c4:fb:f6:09:52:a3:cf:98:9f:
         33:02:ef:e0:00:db:28:b9:ad:a8:17:e5:f9:d3:74:c2:38:53:
         ce:4d:2f:7b:9b:a8:fa:14:b5:30:e7:f1:04:32:58:9e:1f:5a:
         bd:76:63:3c:cc:ec:77:e2:0d:aa:19:b7:af:62:c3:36:47:4f:
         ff:8f:c9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:49:14 2026 by rpki-client