Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft
File:                     78E0160248ABDDA316B054457CAC9C2878172E3F.mft (raw, json)
Hash identifier:          9gh5phTSjiOfgh6v3mIJtsC2hijCiSeZMu9vC6Ye0SA=
Subject key identifier:   CE:59:21:AE:94:A5:7B:0F:5C:B5:45:DB:D1:93:B1:9F:05:F5:AB:29
Authority key identifier: 78:E0:16:02:48:AB:DD:A3:16:B0:54:45:7C:AC:9C:28:78:17:2E:3F
Certificate issuer:       /CN=78E0160248ABDDA316B054457CAC9C2878172E3F
Certificate serial:       09DD1C2E2594D0EC7C07516E25DF7F606EC276CF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft
Manifest number:          C3
Signing time:             Thu 24 Sep 2026 06:33:51 +0000
Manifest this update:     Thu 24 Sep 2026 06:28:51 +0000
Manifest next update:     Fri 25 Sep 2026 08:34:51 +0000
Files and hashes:         1: 3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa (hash: VA9x1JUvw0UogZupkAioG4JuD1sEwt/f57IrckxZ3dI=)
                          2: 78E0160248ABDDA316B054457CAC9C2878172E3F.crl (hash: HHbpfH0G7WBcxE/F42IrszJZGLKxd5ZY2Iy0gpvyN68=)
                          3: 323430363a333834303a3a2f33322d3438203d3e20313430343438.roa (hash: 2+XchGapSoCutP6h9YZdHEQH9u3BfkhAjpO15GhIZ5w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.crl
                          rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 08:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:dd:1c:2e:25:94:d0:ec:7c:07:51:6e:25:df:7f:60:6e:c2:76:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78E0160248ABDDA316B054457CAC9C2878172E3F
        Validity
            Not Before: Sep 24 06:28:51 2026 GMT
            Not After : Sep 25 08:34:51 2026 GMT
        Subject: CN=CE5921AE94A57B0F5CB545DBD193B19F05F5AB29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a9:08:69:bc:55:6c:74:66:be:37:35:0d:f1:
                    d7:62:97:74:f6:f0:b8:71:67:c6:89:ee:60:de:fb:
                    ea:45:cb:b2:62:d3:4d:9a:29:eb:0e:0f:42:81:0a:
                    e0:17:dd:fd:70:5e:c0:97:cc:ec:91:17:f0:a4:e9:
                    5f:3c:d8:b6:28:86:19:39:20:5a:49:ea:f6:3c:6e:
                    af:b9:4d:f8:5f:a0:2c:a4:10:98:07:0c:17:6e:d1:
                    2d:18:d4:7f:2a:09:9b:b4:ec:79:7e:10:a4:e8:3e:
                    33:93:36:38:64:52:f0:99:9c:0a:78:08:28:ab:01:
                    7b:4a:d6:39:85:c8:f5:00:40:37:cb:55:40:ce:b5:
                    c5:90:4b:82:fd:a5:e3:51:32:96:86:29:99:ef:83:
                    4f:e4:35:f1:94:dc:9b:0a:21:2f:9a:cb:5e:57:c3:
                    1d:51:b9:77:9b:01:b1:ac:08:fc:8e:5a:07:70:91:
                    29:ad:29:d2:e7:89:02:44:e8:39:e6:47:91:9d:b0:
                    ba:32:3d:b4:7e:c3:63:59:4b:91:fe:3f:9c:3a:07:
                    79:52:82:5b:a8:74:83:28:2f:af:78:43:9d:03:ec:
                    11:42:0a:0e:98:7d:fc:a5:6f:54:2c:79:a4:73:69:
                    cc:f1:1d:89:d6:9e:72:76:be:6e:5a:4f:f2:84:ef:
                    e3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:59:21:AE:94:A5:7B:0F:5C:B5:45:DB:D1:93:B1:9F:05:F5:AB:29
            X509v3 Authority Key Identifier:
                keyid:78:E0:16:02:48:AB:DD:A3:16:B0:54:45:7C:AC:9C:28:78:17:2E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:54:7e:2e:c0:bf:6a:3a:4a:9d:58:7b:eb:db:6c:e5:14:f7:
         02:47:4b:45:2a:b6:e0:00:c3:90:3f:32:a1:80:9d:49:25:d8:
         fd:41:40:c3:8e:3b:a0:1a:87:83:92:71:e5:b4:b9:64:81:2e:
         4d:a8:68:2a:b5:43:b6:7f:04:1b:5e:25:b7:92:ef:cd:69:9b:
         5a:9d:6e:91:15:98:8c:3c:18:78:a0:18:3a:16:cb:69:bb:c7:
         39:2f:cf:31:bb:52:78:fa:11:35:c5:01:8c:7a:80:1a:fa:56:
         61:4f:f8:1f:39:91:b8:88:a5:f6:83:fd:13:c9:57:c9:44:63:
         7f:52:61:86:74:23:0e:35:6f:4b:3a:01:f4:62:6b:bc:7e:62:
         71:53:e1:eb:24:fd:75:c2:98:b3:b9:15:71:d8:c3:0f:16:ed:
         1c:8d:e2:98:12:aa:da:ce:d8:42:04:38:74:9e:98:e0:66:b7:
         34:82:ab:e2:58:81:59:d8:cd:42:11:b9:a4:15:bf:c5:4e:c7:
         3b:26:bf:7a:09:08:88:61:8d:4a:78:cb:7e:ba:ae:41:9f:c8:
         55:17:f2:8e:79:a2:be:81:31:8c:b2:79:d9:7e:4d:c7:64:a0:
         a7:0d:94:43:cf:77:b9:1d:86:59:f3:ff:1d:23:f1:f8:52:c5:
         15:f3:87:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 16:57:13 2026 by rpki-client