Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
File:                     C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft (raw, json)
Hash identifier:          F1QjygBhC8Q3hpiWKfq8ONcqY0QKY6IKz6OyV36v/E4=
Subject key identifier:   43:83:A2:49:85:E9:B7:AF:8D:31:03:65:17:53:E4:CE:0A:A2:1F:9F
Authority key identifier: C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9
Certificate issuer:       /CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
Certificate serial:       457FBC9CFF3F4C05797749DCAA4976B1734C50F5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
Manifest number:          C1
Signing time:             Wed 23 Sep 2026 16:46:46 +0000
Manifest this update:     Wed 23 Sep 2026 16:41:46 +0000
Manifest next update:     Thu 24 Sep 2026 20:37:46 +0000
Files and hashes:         1: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: YRJhcs0eQNvvPgXOg+gQPByywRt+Knf6CLtlmsMwkjM=)
                          2: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: 9h4BjIyizuthkQUuXWWv2bNzQm5B95LJDNd0MLV8X24=)
                          3: C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl (hash: 7S7i+1hxpQHrofGwzIzfSgXB7i01y8F8YsYuItXEN7A=)
                          4: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: j1suU85D1/7FjlJvr2yGn6MbcsgwWHNmUCiTqlRJqgg=)
                          5: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: fi/7+4zEIqvSpKlVqvbMDeqY2YCrGnjUpksCJ4fAKrA=)
                          6: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: ykRVY1EBIN+ucKdlxDLDuc2SEVpBAQD0eYMAZuEgryE=)
                          7: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: RkOZ4BqJISFweILCm3wRYadHRRUC1NJILvlksQQiLxk=)
                          8: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: g2Ud6J6HCNFfVncrEeujGYDFgaSbLTIo6wU1RvlC+Tc=)
                          9: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: GPynHByObMVja2DkXkj4DTeAw6Zu/eMPLF3FIx9zUPw=)
                          10: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: YSFAL2tW6cTVQfgDTgZL8q+MB0PvmVYIYCi98VnDYcA=)
                          11: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: WqJlVr9FXIRfRfoifCa2GdwTJsz5m8eNFT1ExD1lr/o=)
                          12: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: eKAt3iHXo2lgEa5TxrbQhnXVdOLFjM4blG/eTgED9F0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl
                          rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 20:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7f:bc:9c:ff:3f:4c:05:79:77:49:dc:aa:49:76:b1:73:4c:50:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
        Validity
            Not Before: Sep 23 16:41:46 2026 GMT
            Not After : Sep 24 20:37:46 2026 GMT
        Subject: CN=4383A24985E9B7AF8D3103651753E4CE0AA21F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:04:c8:63:40:41:1d:31:f2:fd:90:3f:4e:
                    99:d2:2e:55:2f:8e:70:26:d8:14:bd:01:67:5c:22:
                    89:90:17:e4:e4:df:43:b3:93:15:dc:09:41:e2:7a:
                    53:25:2e:b4:dd:1d:29:b9:82:62:3a:c7:a8:21:9f:
                    79:f3:03:d9:81:be:33:9d:a7:9d:7c:2c:ea:db:70:
                    7e:72:07:fb:4a:e4:b7:3f:48:74:df:05:72:64:6e:
                    df:b0:90:93:c0:0f:1a:b6:7c:b4:ac:45:94:37:81:
                    83:63:9f:15:a5:10:49:13:58:14:9d:9f:88:6e:c9:
                    82:80:a6:0c:f3:0a:a9:7e:54:d0:32:bd:7a:e2:95:
                    21:c1:63:a3:d7:82:d4:d5:3f:04:21:16:ec:04:1f:
                    ad:89:2d:e5:3e:e6:c4:b8:5b:b7:8c:58:14:12:2c:
                    1a:32:82:04:cb:df:fa:da:22:15:a2:ee:bb:7b:82:
                    05:8c:c5:6a:46:8f:c9:33:8f:5e:84:e2:5e:d0:e6:
                    b6:34:2a:7d:96:b8:f2:43:86:02:e4:d3:2c:cd:f7:
                    a8:b3:0c:4a:a6:a5:ca:a5:b0:34:7f:e2:1c:c2:b1:
                    20:0f:aa:3e:28:7d:97:b4:17:02:74:80:d2:6e:09:
                    94:00:22:b3:6e:fc:29:92:17:cb:88:ef:cf:66:fb:
                    2b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:83:A2:49:85:E9:B7:AF:8D:31:03:65:17:53:E4:CE:0A:A2:1F:9F
            X509v3 Authority Key Identifier:
                keyid:C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d5:df:93:7c:b4:e5:f4:21:18:a3:0d:9a:f0:ba:1f:b3:c4:
         ca:da:7b:62:cf:bb:d8:c6:9d:32:b1:ed:25:67:d4:d3:66:f5:
         d6:b0:3c:23:cf:16:ea:93:a8:03:51:af:04:97:fc:ac:d6:b9:
         0a:cb:cf:77:25:8f:9f:09:f5:89:02:c2:08:7b:cc:5c:e9:3d:
         ee:d9:c3:3c:86:c1:d1:ce:46:76:d3:da:9e:d8:ed:45:ed:f6:
         a8:ca:dd:f0:99:30:fa:5d:ce:68:cd:ea:88:86:00:eb:52:25:
         66:77:eb:60:59:c7:9c:9d:ba:2c:d9:6a:d4:d6:47:0d:00:17:
         c3:0c:99:b8:c1:5a:e3:21:05:6f:d0:c1:f6:fc:63:8b:ea:d6:
         4d:46:e9:76:be:35:17:de:db:50:76:de:d3:ef:40:61:9d:04:
         0c:05:a2:07:93:04:ca:5c:a7:37:91:f0:a2:f5:16:05:20:47:
         60:f1:1d:73:27:82:2c:e5:61:cf:35:9f:22:98:84:64:c8:42:
         f2:d4:11:f5:0c:ce:18:0f:79:56:c1:c6:a4:1d:06:be:9d:76:
         b9:1a:01:39:36:a0:e0:28:c9:2d:36:81:46:3c:ff:54:11:52:
         a1:7c:da:f7:c3:04:a5:ac:d9:ca:22:eb:06:f0:e2:5d:ed:6f:
         a3:93:40:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:42:38 2026 by rpki-client