Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft
File:                     7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft (raw, json)
Hash identifier:          6ZNRpt93VGb/4P/c+yuCkgVo6R6L32LOkfbWwUoSGz4=
Subject key identifier:   E6:A5:14:9D:74:FC:F4:74:8C:A8:7A:EF:CD:7C:71:94:06:C8:1D:A2
Authority key identifier: 7A:F1:08:B3:E0:EB:B7:9F:6C:3A:BB:EC:A3:43:74:29:49:4C:92:96
Certificate issuer:       /CN=7AF108B3E0EBB79F6C3ABBECA3437429494C9296
Certificate serial:       700A827058656C98F6B3DB5CE80F76C129044F99
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft
Manifest number:          C4
Signing time:             Fri 25 Sep 2026 16:35:50 +0000
Manifest this update:     Fri 25 Sep 2026 16:30:50 +0000
Manifest next update:     Sat 26 Sep 2026 17:18:50 +0000
Files and hashes:         1: 7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl (hash: PZQ+Nq92YevmrmhjTKKpbJ38Ji7AWk2nDv43rhnWVBQ=)
                          2: 3130332e36372e38322e302f32332d3234203d3e20313532303131.roa (hash: OI2+L8kOyx+uXkdHVQ3bQvjHZ5kkvK0ATomJcIp9VW0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl
                          rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 17:18:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0a:82:70:58:65:6c:98:f6:b3:db:5c:e8:0f:76:c1:29:04:4f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AF108B3E0EBB79F6C3ABBECA3437429494C9296
        Validity
            Not Before: Sep 25 16:30:50 2026 GMT
            Not After : Sep 26 17:18:50 2026 GMT
        Subject: CN=E6A5149D74FCF4748CA87AEFCD7C719406C81DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:4e:a5:92:f8:d7:03:be:08:26:c0:a8:73:
                    86:5b:c1:b6:35:dc:81:2a:a5:80:c6:1e:26:19:b9:
                    be:ce:77:df:14:5a:8a:79:ee:76:f3:49:74:e0:25:
                    d8:af:0b:fc:97:e3:88:c1:23:8d:5a:12:26:75:ff:
                    c2:30:2c:c1:b7:13:15:fa:1c:de:ab:75:24:a5:b1:
                    1d:49:e0:0c:0e:ec:d3:2a:bc:ff:dc:3a:51:dd:fa:
                    a4:bd:35:34:25:8e:73:98:bf:a9:9c:84:1f:22:50:
                    10:00:d2:e7:ca:58:a5:13:b6:9c:21:50:b2:09:e6:
                    ab:1b:ce:24:54:d3:96:70:c8:cd:92:b0:f5:96:95:
                    3a:d3:15:6d:de:29:ff:a6:bb:49:54:9a:6d:99:b5:
                    ad:e6:37:d5:9e:22:51:0a:3c:b6:80:8d:9e:dc:01:
                    40:a7:e5:cd:fd:a8:1c:a0:57:da:e0:66:8f:03:47:
                    36:9e:d6:c3:73:96:53:40:42:ac:c1:59:d4:72:1f:
                    4c:ab:4d:1f:81:fc:12:9d:df:70:b5:f5:7d:b6:93:
                    be:ab:9c:2b:c0:39:8c:08:f9:cd:95:ff:28:a6:45:
                    66:7e:6d:cc:53:1f:56:ff:90:71:a1:11:bc:7f:e9:
                    dd:86:9a:d6:c1:22:26:af:88:05:5b:a1:08:f2:3b:
                    78:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A5:14:9D:74:FC:F4:74:8C:A8:7A:EF:CD:7C:71:94:06:C8:1D:A2
            X509v3 Authority Key Identifier:
                keyid:7A:F1:08:B3:E0:EB:B7:9F:6C:3A:BB:EC:A3:43:74:29:49:4C:92:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:0c:cf:db:63:d8:89:34:9a:1b:19:7e:8e:60:8d:6f:b0:a3:
         4c:6c:69:72:88:1d:78:c1:57:e8:7c:af:60:26:e7:72:f8:40:
         64:45:f1:82:a6:08:32:4f:d5:8c:2b:87:22:34:4c:ff:cc:31:
         1c:d4:64:2e:7d:20:d3:57:c5:09:e9:e1:42:f5:88:e5:da:f5:
         5a:fe:b4:58:87:ea:01:1e:00:79:8c:8b:47:3a:ac:bb:3f:39:
         95:e3:76:a2:a2:05:4c:69:9d:63:85:79:a3:6c:1f:db:f2:f3:
         84:41:d9:ff:6a:58:41:0f:f9:50:05:5f:a8:62:dd:2c:84:91:
         4c:c7:f1:2d:bb:bf:b5:2b:70:34:86:b1:d9:9b:d7:d1:57:99:
         f8:ab:df:4a:e6:c2:d6:0b:77:25:bc:f1:2a:d2:21:14:0d:e8:
         f2:1a:ff:15:9d:2c:1f:42:95:54:05:7c:2c:c9:b9:78:cd:68:
         f5:6a:bc:ee:cc:f3:78:3d:14:b3:d5:a4:fe:23:46:a9:6e:b2:
         e7:89:6b:d3:64:fd:48:8a:c6:7a:f0:9b:c7:e8:f8:a6:8b:c4:
         00:a7:e2:9d:28:63:f0:98:17:0c:f2:1f:03:94:f4:40:2f:25:
         54:a9:d3:fa:9f:4d:26:ec:9f:39:f2:b3:b5:9e:c7:8c:0e:62:
         85:52:c9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:00:12 2026 by rpki-client