Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
File:                     F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft (raw, json)
Hash identifier:          t7R4Y3zknkzc8ecVs0nvEtxTE3vHbJ/ZcjkUwhkZMhY=
Subject key identifier:   F6:53:5D:3A:7C:82:E6:0A:E6:74:BE:E1:72:B5:A8:8B:B4:B5:FE:98
Authority key identifier: F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC
Certificate issuer:       /CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC
Certificate serial:       239BC853AAE62ECA31177840EDA17749D012C3A2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
Manifest number:          0107
Signing time:             Sat 14 Nov 2026 20:04:43 +0000
Manifest this update:     Sat 14 Nov 2026 19:59:43 +0000
Manifest next update:     Sun 15 Nov 2026 20:26:43 +0000
Files and hashes:         1: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: MLRDHAYWUJ5kptyjF5jrt7z049bFm09q0nB+q2SG/yE=)
                          2: F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl (hash: 3qm3oNO5G4CG4E1nldGLC3fqGG5U2n3h/5JzUA50MNk=)
                          3: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 81iVc0eqOS8yM/8VwLUQzIZGEDm7s9hpw8WC5TgZ8l0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl
                          rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 18:47:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9b:c8:53:aa:e6:2e:ca:31:17:78:40:ed:a1:77:49:d0:12:c3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC
        Validity
            Not Before: Nov 14 19:59:43 2026 GMT
            Not After : Nov 15 20:26:43 2026 GMT
        Subject: CN=F6535D3A7C82E60AE674BEE172B5A88BB4B5FE98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bf:fb:66:98:38:74:be:83:b3:36:c2:69:ef:
                    48:59:02:bf:94:85:a3:46:46:48:57:de:55:f8:ee:
                    80:34:49:b9:13:8f:8a:7d:58:c7:9b:f3:ce:3f:cd:
                    44:b1:6f:11:20:df:0c:b6:a9:92:c5:61:78:84:8b:
                    da:7a:88:5d:48:3e:18:86:28:aa:e8:aa:51:a7:70:
                    a5:b9:91:d3:eb:32:91:b1:37:ee:bb:40:03:14:fe:
                    0f:e4:8c:a4:9f:6b:2b:94:f6:e3:6b:f8:8b:e3:82:
                    b2:44:ca:01:a2:9c:4b:b8:66:77:5a:b8:10:e1:1f:
                    bd:da:df:0d:93:46:3c:fd:1f:92:d5:eb:74:53:f3:
                    c1:1c:6b:ec:bc:47:56:c0:cc:6d:fb:f6:e2:c3:36:
                    80:c9:7f:45:95:91:bc:e5:4b:52:b9:4b:56:d5:5c:
                    86:ca:ff:11:46:4a:a2:fc:de:c0:88:46:47:aa:33:
                    09:17:d9:dd:99:75:08:a3:dd:ec:42:57:07:76:fd:
                    d5:14:ad:69:6f:4d:27:7d:c1:c5:0a:59:2a:06:51:
                    18:9d:82:bc:48:bf:9e:dc:cf:bd:08:62:37:8d:92:
                    43:90:b0:c7:b6:be:80:d1:a0:61:f1:ce:31:31:23:
                    9e:23:4a:42:eb:8e:5f:d7:2c:f5:5e:80:54:9d:77:
                    07:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:53:5D:3A:7C:82:E6:0A:E6:74:BE:E1:72:B5:A8:8B:B4:B5:FE:98
            X509v3 Authority Key Identifier:
                keyid:F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:eb:03:23:f4:4c:eb:84:3a:e0:25:0c:f0:85:c0:3a:e9:ad:
         c8:91:ad:2c:b8:31:8e:06:f1:98:d6:b9:32:36:86:8f:33:dd:
         20:a2:54:eb:50:ab:be:a9:64:41:8a:01:4d:ca:20:b1:fa:30:
         dd:c9:a7:15:e2:58:62:91:0e:e7:3c:a8:df:be:7b:49:db:ed:
         5f:e4:69:8b:c8:7a:32:84:f6:b3:22:81:ab:62:3c:77:29:05:
         a5:9b:59:a6:6f:11:76:94:3a:59:d6:11:e5:fe:bc:c5:07:d1:
         3c:52:55:88:97:ec:6f:1e:ee:c5:8e:5f:b4:82:93:e7:bc:e4:
         23:34:45:18:b6:05:5a:9e:58:e1:32:7c:f9:9e:d5:b5:1e:ac:
         d6:60:75:c7:8a:09:4b:db:fc:ba:d6:55:8f:ac:d3:b5:1d:f7:
         cf:88:0f:b9:5a:13:e6:d3:45:38:0e:7f:ab:ba:aa:01:36:ba:
         86:40:a7:ed:b2:0f:13:07:a1:2e:73:7a:69:6c:e1:2a:5c:9c:
         2d:45:f4:7e:1b:d1:24:6a:d7:b7:e0:5b:b6:2b:d1:49:89:29:
         96:5f:54:86:cf:69:21:84:12:5a:1b:a9:97:dd:2e:d0:1a:20:
         96:11:81:e1:69:a4:cf:04:db:ce:a4:8d:52:7a:9a:58:c7:44:
         31:38:a2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:26:11 2026 by rpki-client