Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft
File:                     C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft (raw, json)
Hash identifier:          rUkI3UvLnR6dNrqzq30INx7srR0is1iqjXV/AROPFA4=
Subject key identifier:   8A:D6:AA:E0:1E:77:BA:F9:C0:49:F7:26:08:01:13:02:93:19:CC:BB
Authority key identifier: C4:44:FB:9E:A5:E4:CA:4D:A5:FB:85:BA:13:1C:62:C0:12:40:2C:80
Certificate issuer:       /CN=C444FB9EA5E4CA4DA5FB85BA131C62C012402C80
Certificate serial:       62397D2B3C1FC0491BEDD4C699C72D5D785BA09C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft
Manifest number:          C2
Signing time:             Wed 23 Sep 2026 22:54:22 +0000
Manifest this update:     Wed 23 Sep 2026 22:49:22 +0000
Manifest next update:     Fri 25 Sep 2026 00:09:22 +0000
Files and hashes:         1: C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl (hash: 5rzbKRrlvmqOHBa96gPjqqhwnXF1zQnrkKgyO3B98IY=)
                          2: 33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (hash: 8bdm59nV7JGD6nAo69wqK5zS2ZyFtuzqAXaUdVJTTG8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl
                          rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 00:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:39:7d:2b:3c:1f:c0:49:1b:ed:d4:c6:99:c7:2d:5d:78:5b:a0:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C444FB9EA5E4CA4DA5FB85BA131C62C012402C80
        Validity
            Not Before: Sep 23 22:49:22 2026 GMT
            Not After : Sep 25 00:09:22 2026 GMT
        Subject: CN=8AD6AAE01E77BAF9C049F726080113029319CCBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:b1:75:ca:f5:f2:05:65:4f:9d:4c:78:c9:
                    72:79:6f:4a:11:a9:f0:c3:7e:cb:be:95:d4:59:fd:
                    b6:c9:65:de:56:72:c1:11:68:a4:33:68:5d:45:73:
                    34:41:20:2a:1c:fa:c7:84:f9:70:c6:f5:84:c1:be:
                    d6:98:4f:69:08:34:54:9a:71:73:9b:77:19:68:0a:
                    cb:d6:2e:7e:f1:dc:9d:11:64:ec:97:0a:1b:1e:e6:
                    f7:86:09:bd:4b:d0:84:64:9d:de:5c:e9:a7:11:ce:
                    20:e3:3a:25:41:8c:6a:0c:55:f2:ff:1b:dd:a4:05:
                    44:27:fc:12:01:9b:2d:ce:f7:2c:e1:16:e1:8f:e9:
                    da:df:77:9e:55:e7:da:54:3f:ad:25:e7:00:95:9b:
                    9c:72:b1:ee:2d:31:d5:b8:87:5a:3b:32:87:2e:4c:
                    68:0b:e6:05:95:64:cb:80:44:36:f7:e9:60:19:1a:
                    e2:e3:2b:d9:9f:af:f6:f7:8a:c9:e7:99:5b:c6:84:
                    a4:fa:e5:4a:e3:5d:9d:ee:70:40:25:a3:ee:eb:5f:
                    50:9e:1e:19:16:d6:49:dc:13:17:e8:ef:d7:5b:9c:
                    41:ab:7c:0c:0b:ca:b0:08:10:94:82:de:ee:d4:de:
                    3a:80:ee:72:25:42:a3:ac:b7:c9:b0:45:48:6e:2b:
                    ce:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D6:AA:E0:1E:77:BA:F9:C0:49:F7:26:08:01:13:02:93:19:CC:BB
            X509v3 Authority Key Identifier:
                keyid:C4:44:FB:9E:A5:E4:CA:4D:A5:FB:85:BA:13:1C:62:C0:12:40:2C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ad:c3:b1:de:66:82:b1:99:f5:d6:c2:49:1e:9a:43:35:34:
         27:1d:fa:f7:82:5c:0e:d1:62:6c:0f:7d:82:e0:25:15:90:ac:
         8f:b1:e2:25:a2:78:8d:14:6d:d1:fd:53:dc:0e:f6:42:b2:5b:
         16:83:03:a2:3f:ae:6e:4a:90:c2:fb:7f:3b:c3:5d:ca:17:d2:
         18:7e:bb:93:65:67:87:42:36:45:13:a4:8f:be:8b:ef:6a:9c:
         74:5a:aa:00:03:27:27:67:64:75:3d:39:fd:f4:cd:1a:05:31:
         85:98:f6:2a:21:6e:14:56:04:bf:09:8f:af:ff:54:d2:f8:58:
         ad:c8:44:53:95:49:7f:e2:93:05:4a:1a:e4:a8:b2:90:ef:54:
         3d:a1:1c:d4:10:e6:ae:ce:76:0a:c2:88:ad:61:72:d2:c1:fc:
         a6:46:5e:fd:23:12:63:60:f6:43:c3:a3:78:2b:f8:e0:0d:1a:
         fe:5e:f0:e2:d4:2a:5d:ce:2b:12:cb:ed:26:3f:39:c9:7c:12:
         7a:36:36:2b:af:13:ad:85:11:b6:df:26:2f:63:7f:6d:f6:d5:
         90:ee:b4:87:b2:ad:9b:db:ec:95:7c:d3:02:cc:9b:95:f2:ea:
         7e:ac:da:a1:22:e3:9b:46:dd:0d:be:15:5a:24:75:ab:d0:bf:
         58:40:5f:37
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYjl9KzwfwEkb7dTGmcctXXhboJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ0NEZCOUVBNUU0Q0E0REE1RkI4NUJBMTMxQzYyQzAx
MjQwMkM4MDAeFw0yNjA5MjMyMjQ5MjJaFw0yNjA5MjUwMDA5MjJaMDMxMTAvBgNV
BAMTKDhBRDZBQUUwMUU3N0JBRjlDMDQ5RjcyNjA4MDExMzAyOTMxOUNDQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwY7F1yvXyBWVPnUx4yXJ5b0oR
qfDDfsu+ldRZ/bbJZd5WcsERaKQzaF1FczRBICoc+seE+XDG9YTBvtaYT2kINFSa
cXObdxloCsvWLn7x3J0RZOyXChse5veGCb1L0IRknd5c6acRziDjOiVBjGoMVfL/
G92kBUQn/BIBmy3O9yzhFuGP6drfd55V59pUP60l5wCVm5xyse4tMdW4h1o7Mocu
TGgL5gWVZMuARDb36WAZGuLjK9mfr/b3isnnmVvGhKT65UrjXZ3ucEAlo+7rX1Ce
HhkW1kncExfo79dbnEGrfAwLyrAIEJSC3u7U3jqA7nIlQqOst8mwRUhuK86ZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUitaq4B53uvnASfcmCAETApMZzLswHwYDVR0j
BBgwFoAUxET7nqXkyk2l+4W6ExxiwBJALIAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjcwMDI5MmYtMjg2OC00N2IzLWFjMjEtNjAwYTQ2N2E3MjM3LzAvQzQ0NEZCOUVB
NUU0Q0E0REE1RkI4NUJBMTMxQzYyQzAxMjQwMkM4MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNDQ0RkI5RUE1RTRDQTREQTVGQjg1QkExMzFDNjJDMDEyNDAy
QzgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjcwMDI5MmYtMjg2OC00N2IzLWFj
MjEtNjAwYTQ2N2E3MjM3LzAvQzQ0NEZCOUVBNUU0Q0E0REE1RkI4NUJBMTMxQzYy
QzAxMjQwMkM4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHatw7HeZoKxmfXWwkkemkM1NCcd+veCXA7R
YmwPfYLgJRWQrI+x4iWieI0UbdH9U9wO9kKyWxaDA6I/rm5KkML7fzvDXcoX0hh+
u5NlZ4dCNkUTpI++i+9qnHRaqgADJydnZHU9Of30zRoFMYWY9iohbhRWBL8Jj6//
VNL4WK3IRFOVSX/ikwVKGuSospDvVD2hHNQQ5q7OdgrCiK1hctLB/KZGXv0jEmNg
9kPDo3gr+OANGv5e8OLUKl3OKxLL7SY/Ocl8Eno2NiuvE62FEbbfJi9jf2321ZDu
tIeyrZvb7JV80wLMm5Xy6n6s2qEi45tG3Q2+FVokdavQv1hAXzc=
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:32:30 2026 by rpki-client