Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.mft
File:                     A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.mft (raw, json)
Hash identifier:          PXJ3+JHt9Q1IwVBuuKcij/e+kT208qV0973NiWvbRhM=
Subject key identifier:   EC:7E:DB:AB:AC:6B:BE:EA:6D:5E:70:0D:BA:41:D3:F7:7A:87:00:39
Authority key identifier: A9:3A:AC:5D:E4:DD:EA:2E:93:99:70:AF:8D:C0:73:19:AC:92:62:F3
Certificate issuer:       /CN=A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3
Certificate serial:       012CDEE2F5E71C85BE04D2820542E3D341FC0D4B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.mft
Manifest number:          C2
Signing time:             Wed 23 Sep 2026 19:35:11 +0000
Manifest this update:     Wed 23 Sep 2026 19:30:11 +0000
Manifest next update:     Thu 24 Sep 2026 21:10:11 +0000
Files and hashes:         1: A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.crl (hash: En8c7CD6/2S3qU6GFNV5HWSlOIyOcWnLABF696w7aBE=)
                          2: 3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa (hash: YMzKMalLITBN/HdAfxplrJvi84NP08zyNa/XHShLcW8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.crl
                          rsync://rpki-rsync.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 19:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2c:de:e2:f5:e7:1c:85:be:04:d2:82:05:42:e3:d3:41:fc:0d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3
        Validity
            Not Before: Sep 23 19:30:11 2026 GMT
            Not After : Sep 24 21:10:11 2026 GMT
        Subject: CN=EC7EDBABAC6BBEEA6D5E700DBA41D3F77A870039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:6d:3c:06:f7:f7:f3:76:a8:2b:cb:dc:75:
                    b9:f6:b0:89:9b:03:de:68:1a:62:b9:dd:ab:2e:da:
                    f0:ed:87:e0:d5:58:c5:ec:c8:07:bb:3d:53:7b:36:
                    d2:af:b0:ac:c3:54:01:4c:85:06:18:59:d9:12:4d:
                    60:cf:02:2b:dd:e2:1f:20:b1:c6:d5:b3:4f:9e:f6:
                    c6:40:94:55:87:f0:ef:c9:57:7e:c6:fd:56:58:d6:
                    d4:a2:f4:0f:09:9a:50:84:2d:0d:7f:33:c0:c4:54:
                    3a:bb:ad:a9:4f:41:f9:03:9d:0d:7a:01:2d:8b:9d:
                    e7:6e:9a:93:33:a2:ae:a2:33:35:5e:9c:be:8f:2d:
                    86:d4:fb:57:7e:d0:2e:5b:d3:87:1d:41:91:59:a6:
                    be:4d:a7:b3:3b:2f:dc:b4:8c:bf:2e:74:f3:0d:51:
                    bd:a2:47:1c:b2:5b:5d:78:63:3a:3d:61:52:ed:65:
                    a0:64:8a:14:2f:17:8b:59:ad:26:e0:f2:34:ce:84:
                    c7:f5:c0:84:86:07:db:91:cf:ff:6e:6f:cb:36:f7:
                    e6:88:18:3a:41:96:c5:09:62:ad:13:2b:53:df:4a:
                    ef:4c:90:9d:75:eb:cb:ba:4b:b8:04:58:6e:59:b2:
                    32:45:e2:87:dd:48:bd:dd:c1:3d:8c:e1:f3:23:81:
                    03:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7E:DB:AB:AC:6B:BE:EA:6D:5E:70:0D:BA:41:D3:F7:7A:87:00:39
            X509v3 Authority Key Identifier:
                keyid:A9:3A:AC:5D:E4:DD:EA:2E:93:99:70:AF:8D:C0:73:19:AC:92:62:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/A93AAC5DE4DDEA2E939970AF8DC07319AC9262F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ed:2c:a2:2d:19:23:e9:6d:86:0a:ad:59:53:34:51:9e:dd:
         a0:ef:11:96:df:0d:a5:62:f7:1c:b0:04:6c:ee:bf:c0:9e:8c:
         29:9b:ac:b7:f2:97:03:7f:f2:94:4b:fd:b5:cf:af:27:a9:f3:
         59:20:3b:15:ef:ff:7c:95:a4:11:98:98:03:66:5b:0b:03:44:
         71:75:2c:b4:fe:6e:8e:1e:32:26:48:dd:6d:c5:13:5b:c7:88:
         86:91:a0:0e:b7:84:85:9a:1c:81:d7:b1:d1:df:d7:c3:48:d9:
         a7:88:8f:c3:f3:2b:e1:d4:23:1d:2f:19:ff:d3:1e:4f:fd:cd:
         c3:1b:14:12:55:47:9a:6b:42:07:3c:c7:b8:6e:41:db:2a:72:
         20:8d:5b:5c:9f:9f:17:a5:95:d6:1f:05:39:3d:09:4e:28:b9:
         77:70:2e:65:80:c5:05:03:f4:3c:06:ec:c4:a5:ad:c6:3e:e4:
         7f:54:fc:46:73:f3:f2:1d:1b:8a:4b:a8:2f:89:98:82:66:d3:
         73:c6:26:af:c9:0c:62:2d:b6:60:d1:36:6f:5a:5e:94:6b:64:
         7b:d7:b0:31:40:9d:a5:38:52:8b:0a:1c:29:d4:25:34:9a:01:
         46:10:fe:f8:14:09:62:7f:32:b6:9e:0a:c6:da:6e:87:90:69:
         c8:b5:af:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:07:20 2026 by rpki-client