Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft
File:                     F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft (raw, json)
Hash identifier:          FF9NDwXX0a3qCnTRhqEigz/al+baM1RQ4x/Abw6UJUk=
Subject key identifier:   E6:10:B6:C5:E2:71:BB:9D:6E:33:96:82:EB:22:76:64:A0:4F:8C:29
Authority key identifier: F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A
Certificate issuer:       /CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A
Certificate serial:       2B7B2CC9C4C99627392CABE6C1E072CB348BBB7E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft
Manifest number:          CD
Signing time:             Thu 01 Oct 2026 07:30:09 +0000
Manifest this update:     Thu 01 Oct 2026 07:25:09 +0000
Manifest next update:     Fri 02 Oct 2026 09:00:09 +0000
Files and hashes:         1: F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl (hash: dPHd9mGjbRn6ixGo5y6gxmXsOhZdL06wmfyZuD8uZYU=)
                          2: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: +u/9D9vfsyaLH2MwRf/oL8GHy2QY5reW5CdS1r9iLUo=)
                          3: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: pZiifrcLbDchRtYwQAPaQx4TCr202zft6iysN0v48zg=)
                          4: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: cRnHdJ6ERY/gOe2MatEAOxOT41WEyNcMegmve8GczJo=)
                          5: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: +WK4iRrSPfnkrJEz8Gq8cT5bkygdZQkUoe49fePODB0=)
                          6: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: noFGhrWS2shsN12iREyShnTzBgPrE7wgh7GcY82aKhc=)
                          7: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: QWT8clnM0WSHO8g469pTliT/WCBN4Kmg5lPcdlpi8/s=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7b:2c:c9:c4:c9:96:27:39:2c:ab:e6:c1:e0:72:cb:34:8b:bb:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A
        Validity
            Not Before: Oct  1 07:25:09 2026 GMT
            Not After : Oct  2 09:00:09 2026 GMT
        Subject: CN=E610B6C5E271BB9D6E339682EB227664A04F8C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b8:c7:27:9f:2c:66:e7:59:06:05:a4:a2:c0:
                    4d:25:3d:af:98:dd:b5:70:01:1b:28:41:e0:3d:84:
                    0f:e4:da:22:d2:4b:33:91:76:3e:20:b7:34:21:4b:
                    bc:26:b2:11:f2:36:c7:e0:ed:23:21:21:fe:97:ec:
                    bf:10:4e:11:2e:83:fa:30:0e:53:55:ea:32:44:39:
                    59:ef:da:f0:5d:90:23:1b:a7:c6:01:4e:56:f5:1e:
                    9d:d1:2c:7a:5e:8c:b9:12:28:82:3a:13:28:a0:c4:
                    c8:f0:81:31:cc:a9:de:f1:d1:07:32:02:85:e1:f5:
                    a3:ee:6e:b3:fa:6e:d5:a6:d0:aa:83:47:9b:4f:5a:
                    58:8e:c0:21:d9:31:37:d5:a9:fb:cf:08:46:c4:df:
                    69:67:9d:12:a6:90:1b:bf:a3:f8:1f:64:4a:ff:a1:
                    6a:23:62:21:55:90:94:b4:73:ad:64:65:a7:80:15:
                    63:a5:6e:d9:c9:80:4b:88:2b:5d:7c:34:77:a8:60:
                    6c:6b:72:02:12:13:02:e4:d5:68:68:c6:91:5b:1f:
                    8e:53:e1:5b:08:45:92:1f:3c:9f:3a:8f:a7:ea:6d:
                    74:d1:ae:b2:9c:f5:9a:9c:fd:09:8f:0a:6f:88:e1:
                    91:f7:1b:18:64:49:a1:9c:7f:39:87:13:db:65:e7:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:10:B6:C5:E2:71:BB:9D:6E:33:96:82:EB:22:76:64:A0:4F:8C:29
            X509v3 Authority Key Identifier:
                keyid:F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:40:a0:1a:76:47:26:c4:0a:f0:1e:7b:88:56:5f:45:69:df:
         cb:87:86:40:44:0c:2c:de:77:96:df:f4:ce:a1:37:25:db:0f:
         ab:7f:98:07:c5:9d:85:d2:5a:a4:e6:73:22:49:84:4e:1b:62:
         e8:78:8c:94:88:c4:34:96:a4:99:f6:aa:09:c4:14:27:a5:0f:
         9e:9e:b1:fe:08:21:06:b6:75:65:ec:1e:0d:69:ec:72:ce:e5:
         34:9f:52:75:77:4a:82:4f:28:e1:fe:0b:d4:be:ef:f6:fd:54:
         4b:50:51:cb:5c:8c:54:b3:64:50:9b:de:31:cb:7b:39:a0:4c:
         f8:32:74:2b:e5:ad:7e:da:99:59:0d:67:d7:12:74:2a:bd:05:
         eb:ab:d6:4f:c4:e3:1c:0b:cd:59:a6:fa:23:63:d6:dd:d9:73:
         88:e4:a4:51:b8:57:af:e1:81:4b:35:d8:9e:27:47:55:fd:6e:
         58:95:5b:8c:5a:eb:d8:74:6f:cd:e9:04:5f:7b:ec:db:03:5f:
         22:31:c6:06:a8:ce:c0:06:5a:70:52:ba:c9:58:46:bd:e3:a7:
         d5:1f:08:6e:c1:72:a7:42:9e:6a:4a:bd:43:30:dd:3c:ae:00:
         cd:44:f1:28:28:9f:f6:ed:9a:c3:98:6a:8a:48:19:67:2c:fe:
         09:0e:06:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 10:17:25 2026 by rpki-client