Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
File:                     163FCF7902CF93C079C25A5BB950177736E3A53E.mft (raw, json)
Hash identifier:          57NWrpXMSk8TIvtMHMFiscFkoEi5Ib9YrYAaEUr1YM0=
Subject key identifier:   D6:08:F1:91:78:06:D1:A0:DA:F5:07:03:30:1E:36:4B:37:7D:64:D8
Authority key identifier: 16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E
Certificate issuer:       /CN=163FCF7902CF93C079C25A5BB950177736E3A53E
Certificate serial:       656B50F01782278A46952F44352A99B952CC874F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
Manifest number:          C5
Signing time:             Fri 25 Sep 2026 12:00:28 +0000
Manifest this update:     Fri 25 Sep 2026 11:55:28 +0000
Manifest next update:     Sat 26 Sep 2026 15:00:28 +0000
Files and hashes:         1: 163FCF7902CF93C079C25A5BB950177736E3A53E.crl (hash: vnPkXXgjmIOemETdvk33BmiD4RXIPNPBW9Wo44aSAz4=)
                          2: 3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (hash: W7gmKmZboqX2QA7q8U+p4B9nIs2a1qUtxZ1nMh6XFbg=)
                          3: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (hash: 6RKcmzfjeDH4g7wyr++N6VgeRBt/pDFie/Fnes4qIjU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl
                          rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 13:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6b:50:f0:17:82:27:8a:46:95:2f:44:35:2a:99:b9:52:cc:87:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163FCF7902CF93C079C25A5BB950177736E3A53E
        Validity
            Not Before: Sep 25 11:55:28 2026 GMT
            Not After : Sep 26 15:00:28 2026 GMT
        Subject: CN=D608F1917806D1A0DAF50703301E364B377D64D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:06:63:05:2f:8f:23:7b:40:cd:69:05:15:
                    11:0d:03:ae:3d:2a:2a:05:a9:78:8e:d2:bd:51:66:
                    98:b4:a1:0a:22:a4:69:c5:c4:0a:41:17:e0:39:9f:
                    15:37:94:34:f4:94:ed:0c:cf:57:74:ee:44:67:c9:
                    61:a2:76:d7:24:38:19:96:67:ff:11:06:b9:01:1b:
                    bc:43:27:ad:3c:33:30:be:33:6e:fa:2d:46:c2:7f:
                    1f:98:90:71:d4:2b:80:22:63:53:47:d8:84:18:ee:
                    2b:f0:89:4e:db:7d:bb:92:a9:76:7f:d9:02:d7:35:
                    91:d1:b4:e3:63:a4:09:6b:c9:f1:d5:68:91:44:9a:
                    6a:b1:80:83:55:8d:ee:b3:7e:eb:4a:81:c1:f0:d1:
                    68:e6:7b:79:c5:52:4c:19:1f:c4:1f:25:83:c4:38:
                    d2:b4:ab:6f:82:f2:f6:89:7f:2a:c4:37:1a:c0:73:
                    4b:cb:80:e6:f2:35:22:53:d2:02:3e:4f:57:35:90:
                    0d:09:78:c9:00:24:3a:10:84:05:82:8a:80:93:40:
                    02:0d:2c:ba:b5:f5:47:fe:25:67:19:5c:b4:82:86:
                    cf:7b:35:65:6f:55:ab:51:7d:d0:94:a0:85:fe:95:
                    a7:54:b9:3e:76:7c:c5:cc:85:6a:4e:0e:bd:9c:6a:
                    73:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:08:F1:91:78:06:D1:A0:DA:F5:07:03:30:1E:36:4B:37:7D:64:D8
            X509v3 Authority Key Identifier:
                keyid:16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:8b:44:b9:af:6f:6f:c5:96:34:0f:90:85:f4:66:96:64:e1:
         69:6c:c8:fe:0f:61:55:e5:ed:0c:36:69:f9:42:bd:c9:68:c5:
         5e:19:87:6a:3a:2c:59:8f:da:54:0b:93:7b:e2:99:83:52:85:
         83:e0:37:6e:81:78:cd:fe:73:b6:7c:2c:3c:65:bb:eb:c9:12:
         6d:ac:9c:40:42:32:2e:24:96:ac:23:b5:20:e1:6f:6f:0d:cb:
         e6:1f:67:9f:d8:80:2a:b7:85:7a:ac:6e:e9:9a:67:16:10:74:
         ee:10:15:74:eb:a6:60:b5:47:71:37:ad:50:f1:eb:0e:8b:66:
         de:46:ae:2c:2b:a5:24:4d:2e:d1:31:f0:a3:03:63:d0:10:01:
         86:5b:e6:9b:00:02:ce:24:60:1d:1e:5e:4c:89:6b:36:fc:9f:
         2e:89:0e:ba:30:d4:aa:78:42:68:b2:a1:bd:cb:3e:66:cc:88:
         2b:2a:f8:b0:c1:1c:09:5b:0a:1e:97:16:df:86:82:5c:e6:d6:
         13:cf:cd:23:9f:fb:a9:aa:9b:72:ac:7b:d0:c0:49:52:55:01:
         71:46:ee:60:3a:07:91:5a:96:4f:63:d9:1d:36:e4:3d:1a:b4:
         49:3e:92:f4:f1:32:54:ac:a5:73:de:39:86:02:5b:a6:c9:a3:
         e3:cc:51:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:08:56 2026 by rpki-client