Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/79E35332A362A778D03F32FD5C6A865996E2D53B.mft
File:                     79E35332A362A778D03F32FD5C6A865996E2D53B.mft (raw, json)
Hash identifier:          nBARxsBk0FZihLjovwUCaQpWIOpHM+syd7/0xftpbtg=
Subject key identifier:   D0:E8:37:4E:00:04:DC:E9:71:C0:DE:F4:A9:36:E6:7C:DA:BF:C5:73
Authority key identifier: 79:E3:53:32:A3:62:A7:78:D0:3F:32:FD:5C:6A:86:59:96:E2:D5:3B
Certificate issuer:       /CN=79E35332A362A778D03F32FD5C6A865996E2D53B
Certificate serial:       35C0FCAFAB8928DD7744D16CD9CDAEA99C72DE27
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79E35332A362A778D03F32FD5C6A865996E2D53B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/79E35332A362A778D03F32FD5C6A865996E2D53B.mft
Manifest number:          C2
Signing time:             Thu 24 Sep 2026 03:45:16 +0000
Manifest this update:     Thu 24 Sep 2026 03:40:16 +0000
Manifest next update:     Fri 25 Sep 2026 05:03:16 +0000
Files and hashes:         1: 3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa (hash: edEAW4h3zbE7MKZHtZXXXR5NtAdbIO3xMx03a9fE7lA=)
                          2: 79E35332A362A778D03F32FD5C6A865996E2D53B.crl (hash: MCKCprbFfl1+2wEKPgw/CyvWvPGXwvnbq1mZ+eGIdkE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/79E35332A362A778D03F32FD5C6A865996E2D53B.crl
                          rsync://rpki-rsync.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/79E35332A362A778D03F32FD5C6A865996E2D53B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79E35332A362A778D03F32FD5C6A865996E2D53B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 05:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c0:fc:af:ab:89:28:dd:77:44:d1:6c:d9:cd:ae:a9:9c:72:de:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E35332A362A778D03F32FD5C6A865996E2D53B
        Validity
            Not Before: Sep 24 03:40:16 2026 GMT
            Not After : Sep 25 05:03:16 2026 GMT
        Subject: CN=D0E8374E0004DCE971C0DEF4A936E67CDABFC573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:84:e4:f5:21:3f:e3:92:df:f7:ca:3c:cf:4c:
                    b0:8f:fd:99:23:0d:1b:9d:fa:2f:25:2e:48:29:2b:
                    36:52:e5:c1:4f:51:8b:63:6a:8f:4f:f4:ab:76:cf:
                    76:91:08:88:dc:9b:ce:aa:85:6f:f0:a2:9b:9f:b9:
                    18:d8:f4:c7:e6:62:0c:3c:34:f3:a3:62:73:19:23:
                    7a:cd:90:e7:cf:5e:a7:79:82:75:81:ab:14:2f:1f:
                    c5:62:44:f3:ed:f5:34:8b:56:4b:99:4b:01:94:a4:
                    f6:b5:6a:06:50:6f:d1:c5:4c:26:39:44:d8:c9:19:
                    82:74:13:89:cd:02:2c:a2:a1:78:da:c7:b1:08:17:
                    a2:d9:42:8f:cc:67:e2:8e:5c:b6:cc:5f:66:d7:1c:
                    76:00:0c:58:31:7b:d3:56:9f:1a:58:ff:79:dc:c0:
                    2b:41:5b:eb:d5:d5:24:9d:57:ea:21:7d:8e:83:0e:
                    78:1e:0c:7f:21:1f:aa:5b:0c:4b:93:9a:a1:77:f6:
                    96:de:2c:b4:fc:05:6f:7d:63:28:ee:02:59:92:b1:
                    7b:53:ab:f4:76:07:9d:76:87:6f:21:78:26:bf:9d:
                    ab:29:fe:9d:64:20:a5:b6:ca:dd:c1:00:af:89:ab:
                    ad:c0:7c:0b:ee:cf:f3:49:61:47:f6:90:fa:d9:78:
                    10:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E8:37:4E:00:04:DC:E9:71:C0:DE:F4:A9:36:E6:7C:DA:BF:C5:73
            X509v3 Authority Key Identifier:
                keyid:79:E3:53:32:A3:62:A7:78:D0:3F:32:FD:5C:6A:86:59:96:E2:D5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/79E35332A362A778D03F32FD5C6A865996E2D53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79E35332A362A778D03F32FD5C6A865996E2D53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/79E35332A362A778D03F32FD5C6A865996E2D53B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d3:0a:0b:da:ac:b9:79:e9:78:0e:c8:53:89:e7:3e:ed:81:
         61:c5:39:05:68:db:54:4f:5f:8d:99:59:f6:21:42:9d:e9:80:
         06:49:96:ed:b3:e1:53:34:37:9e:48:6d:f9:43:67:86:d5:a3:
         93:bd:48:cb:66:9f:d2:49:55:50:ff:6e:0d:35:ac:b8:2a:7a:
         bf:e9:2e:d0:33:c7:e0:86:80:5f:45:45:db:73:e2:ca:7f:28:
         50:94:cf:2e:00:e6:4b:91:f4:e9:6a:7b:1c:06:4a:63:63:6f:
         eb:3d:0d:d4:5f:21:3d:51:3e:59:bb:52:65:67:4c:1a:5c:d1:
         88:cc:02:70:2e:a8:79:fa:68:ad:e7:f8:be:f1:e3:5c:14:9a:
         cf:bb:0a:be:a5:0e:78:f1:6f:7e:22:3a:8e:ef:22:40:89:ea:
         77:c5:49:0a:5d:bd:05:e0:84:d6:8f:76:ac:a3:c0:66:eb:34:
         16:e5:31:c0:bb:82:ad:75:b8:ea:78:40:c2:7a:e7:23:9f:a5:
         9f:39:79:7b:a3:f8:68:ea:ec:d9:09:d1:98:23:4e:a6:29:57:
         e1:a5:f7:ba:5b:3d:14:19:97:83:82:2b:94:82:30:e0:8f:a1:
         5d:2a:6e:cc:71:e4:f2:50:ba:8d:2f:b6:2b:0a:77:f9:7e:80:
         2e:91:4d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:30:11 2026 by rpki-client