Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
File:                     7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft (raw, json)
Hash identifier:          Z6dzYrk01y6pUva031y6Zd9fPbDiAqcOI8CDEP+iNW4=
Subject key identifier:   EF:39:D4:1B:91:45:49:9A:E1:8B:F0:F1:43:F5:30:21:04:DC:75:9F
Authority key identifier: 7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14
Certificate issuer:       /CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814
Certificate serial:       76FB3F1A1929BAD6EC0BCC7F354C5C38F89002D9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
Manifest number:          CE
Signing time:             Sat 03 Oct 2026 02:54:30 +0000
Manifest this update:     Sat 03 Oct 2026 02:49:30 +0000
Manifest next update:     Sun 04 Oct 2026 04:00:30 +0000
Files and hashes:         1: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 8oVNIEb4TBtSy7unBowYQdxL5C3MJEoVeAhJrnkcXHw=)
                          2: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl (hash: +BmLU9rVncL4GGs8I2FYwXOEqRmS87sGTGW9pmuDcvQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl
                          rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 21:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:fb:3f:1a:19:29:ba:d6:ec:0b:cc:7f:35:4c:5c:38:f8:90:02:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814
        Validity
            Not Before: Oct  3 02:49:30 2026 GMT
            Not After : Oct  4 04:00:30 2026 GMT
        Subject: CN=EF39D41B9145499AE18BF0F143F5302104DC759F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:3c:81:49:ef:17:c6:aa:79:fb:a4:a8:98:
                    df:e2:30:96:49:21:6e:45:12:24:37:ef:21:44:c0:
                    6e:92:5c:00:9b:0f:99:a2:2d:ac:c9:b8:73:6e:98:
                    9d:25:36:dd:8a:4b:65:fa:9c:46:34:7f:fd:1e:09:
                    57:60:0d:f4:59:66:9b:8b:2f:68:14:b8:87:41:b8:
                    70:70:54:5c:5a:a7:4c:aa:95:30:92:7d:cb:f1:9b:
                    d6:e0:7f:fe:ba:1b:a6:27:ae:da:e9:1f:f8:ed:94:
                    77:29:02:2a:92:23:c9:81:88:ee:e7:b3:82:ef:0d:
                    68:80:16:85:38:5c:10:0e:c0:8f:6d:65:fb:1a:8d:
                    d1:b6:4b:3f:9a:44:21:c5:d8:2a:d5:e8:12:7e:34:
                    1e:a3:a5:7d:58:6b:7f:ce:e9:e6:a8:bc:60:99:90:
                    0f:31:72:7a:06:13:32:8b:8d:3a:e4:63:db:b5:1d:
                    c6:ce:e1:31:00:70:5b:59:03:b6:85:fa:5c:2a:af:
                    c2:eb:4f:f5:c9:e2:d4:0f:34:55:9b:e8:42:6c:72:
                    d2:85:9a:16:72:53:31:04:fb:85:79:9d:a5:c7:c7:
                    39:ea:61:d8:12:a2:c9:14:c3:d2:6d:65:7d:c1:e6:
                    28:66:0e:fe:41:bf:bf:50:f3:f9:d5:63:25:8f:92:
                    06:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:39:D4:1B:91:45:49:9A:E1:8B:F0:F1:43:F5:30:21:04:DC:75:9F
            X509v3 Authority Key Identifier:
                keyid:7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:45:7c:bf:3c:fd:e6:c8:2a:ef:cd:0a:a7:e7:17:71:c0:3f:
         36:27:38:39:63:c7:68:e0:aa:f2:fe:1a:84:5e:57:85:b6:69:
         1b:2b:6a:4f:72:3c:e4:f6:02:9e:fa:bd:08:3f:1e:61:94:53:
         1d:8b:9c:63:1c:18:ba:0d:be:fb:6f:4a:6e:2a:81:eb:5c:1a:
         71:a5:67:48:89:b0:5a:d0:06:fe:bb:6f:55:ac:63:45:53:c2:
         60:28:1e:b2:d5:29:ca:67:0d:24:7a:8b:97:94:f3:16:57:03:
         39:a3:0f:90:f0:19:57:9e:c0:fd:c6:9f:76:da:6b:ac:c4:1b:
         98:61:eb:b2:e1:c1:5b:6a:19:68:33:97:69:d6:07:ea:f5:59:
         81:fc:da:4a:0d:6c:f0:00:70:28:56:b9:e8:16:ca:d4:ee:60:
         bc:24:3d:14:2a:36:56:0f:49:7e:91:ee:e8:95:50:4a:1b:59:
         be:6f:3d:5f:a1:4a:bc:f5:4e:02:ab:13:0a:90:2b:8a:b1:90:
         00:b0:83:53:77:4b:93:ff:0f:77:29:11:0f:8e:76:b4:fa:53:
         f2:7a:a4:11:ad:7d:8c:c2:46:c1:82:d6:57:f3:ef:e8:a8:ad:
         53:1e:33:f4:24:58:f7:4e:bc:26:94:76:85:89:52:18:06:df:
         82:49:09:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:34:10 2026 by rpki-client