Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
File:                     102CB228255AC59C06F56BF9291AABDD49CD72E1.mft (raw, json)
Hash identifier:          u3d0hukXufU1KGUI8LckXB0QW8KEXxxh3UUWs2v7MTQ=
Subject key identifier:   89:70:22:C4:DB:23:72:8F:96:35:AF:E1:8A:03:0E:06:A7:2E:45:4A
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Certificate issuer:       /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial:       4E0B147F60AEAC7BD7939FA2343AF0E587F41FD4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
Manifest number:          C3
Signing time:             Fri 25 Sep 2026 20:51:20 +0000
Manifest this update:     Fri 25 Sep 2026 20:46:20 +0000
Manifest next update:     Sun 27 Sep 2026 00:17:20 +0000
Files and hashes:         1: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: /bDQ1gDKqvhjUD5sIBBKcc/d7hDJ/PXDCn4UuJeT0Ls=)
                          2: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: tb8tqC2j+OjSb+L7vqU+HSUIKvZtFxMKtvlg07BjAFo=)
                          3: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: YlFXyFkcnhrnLUhhbwfxblxgALA+vv77xuVIntax+TQ=)
                          4: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: Zdd9YKsWBUvddcG/dV3/nHAZNChI9zFUfTujTOe6+Bo=)
                          5: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: 5UlSEWJmILcSCfVnTwCxa/ENvvAkNUAYdbFPlsU3zCg=)
                          6: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: DvAQZFim4RnakkK453H6rQLkthvZlqZSuH57aVH5BIA=)
                          7: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: +huyDf3yDQWqXY+1iyFRAvgOtc7xkYdLMWVDiq9SZeo=)
                          8: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: 2nlIoQG3hoyOGXVcA94jjH5wFjmakuKKKtaTFgTjeZw=)
                          9: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: ZG79u4PD+HEejweoK85E+fQQ2D0/TOpv6Ke8PIGpdKs=)
                          10: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: tSpJIXLzQ0pL+aodNvc7ns9K3AjDZr8FDk8CW+jKFio=)
                          11: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: sB0ILDPDQsVKp3KJ8VkdfBp6KlnEUdhc4ZcUygvqa+w=)
                          12: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: Ll/b1GQ1hHLk4m8w9GNJTYVsExVvnc52BAO7f5yAJAY=)
                          13: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: 8kLzKJI2nja5geHzz7DQr+VguP3Mo1f3FK0nffBs5Fc=)
                          14: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: Syq9ruOdB8nqa2oeUhCsgKQVXRsHPSeGmU6poI2HQz4=)
                          15: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: PKamMspjwCbW9/wmGhI81OH48EZJP0jTkY5TCE2XWoM=)
                          16: 102CB228255AC59C06F56BF9291AABDD49CD72E1.crl (hash: YqKhCHpgKRrDonVKGSOCtAU46ZuHtM+MuzWrbaIcUXc=)
                          17: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: DX0BDwvQfYWqJMwZZe9PCmGoXzRVtdlAfrxpl2Av62g=)
                          18: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: 7tn1qwvIgRbEeEPHCn3MsAshrkZGxEueKKt6KwLv3Q4=)
                          19: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: xYUCxNjbL6KiwbzD5tLh736zsjEEIJXbWkyCaYS6mBM=)
                          20: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: ajL2Z4kGQ5eVIGfrteNGWAu6qh97wyjv9fNZZ/zBigM=)
                          21: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: LrSilx8qH4y/sFG5VI5lyVEcXDtGQaCk1j5qW1FFbZY=)
                          22: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: sOHfwxxz4WtkgkX9/GptGhrfX40Hb7Ok9OU92SIpJPU=)
                          23: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: +VS5/Tu3kvOWWv43cJdkwZYGDexUxzNwL5sBfy7ijfc=)
                          24: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: 1atYO53KPKnfzwdtLkkfQDcEaqY17dJ35gAY7eIGRsI=)
                          25: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: OjUvEwuMJfYQiDda50+RujR33MhuHSqzyDUYeSQ0JY8=)
                          26: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: gPbto/7983SacM5tnXYlR5B4CYRQU3aEqwN9PIo4NB4=)
                          27: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: cysQm/9v/6VSV1/Frp1R3Gk3bFk/u3ElIBj1C4sCGdc=)
                          28: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: rxmp8zrUV8LmDcLuaoUqV9tezcrFbbsMQfNjGLGu+lk=)
                          29: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: vyr8/5qv5wY87ZAec3IdObappZpdpcyhrrvuSGncmDk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
                          rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 17:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0b:14:7f:60:ae:ac:7b:d7:93:9f:a2:34:3a:f0:e5:87:f4:1f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
        Validity
            Not Before: Sep 25 20:46:20 2026 GMT
            Not After : Sep 27 00:17:20 2026 GMT
        Subject: CN=897022C4DB23728F9635AFE18A030E06A72E454A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f5:aa:b2:0c:ec:2b:29:76:a5:f7:5a:bb:c2:
                    6f:e9:7b:7e:2d:6d:c6:b8:25:db:47:b6:8e:6e:c1:
                    6b:53:bb:10:58:84:be:3b:d1:63:4f:0a:64:c8:25:
                    f5:6f:44:bb:2c:f9:b1:4c:ff:54:e4:a2:42:df:e6:
                    ca:ee:de:27:66:b9:01:43:ce:51:67:97:9f:05:a3:
                    bf:d0:b2:89:e7:b4:5b:14:db:a7:a6:46:01:07:e0:
                    8e:fd:05:9e:60:16:64:73:86:9b:e7:e5:ef:6b:40:
                    eb:c4:63:94:99:d7:76:15:e9:27:95:32:28:05:ed:
                    b8:e2:f1:98:38:d7:31:1f:7e:1f:8e:a7:2a:0c:89:
                    a8:7f:45:8c:43:37:40:f7:8d:55:10:24:ce:41:6e:
                    82:d4:38:63:b1:e1:ca:3f:c4:75:59:3d:fa:f9:3f:
                    02:d3:01:b5:ee:36:16:45:f2:6f:f0:6d:fe:fb:db:
                    f1:c2:2f:a8:02:e7:2b:a3:f9:7b:71:d3:a0:cd:34:
                    ff:8b:a6:b6:d3:c8:ae:af:31:b3:f3:b6:dc:a4:92:
                    61:53:f4:2d:e0:24:96:7d:88:07:0a:89:96:0e:69:
                    3f:34:de:3a:ef:60:aa:a0:7c:ae:a1:f5:ba:a1:a4:
                    d9:83:5e:e7:93:14:c1:1a:1e:7c:57:d3:3e:1a:0e:
                    b7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:70:22:C4:DB:23:72:8F:96:35:AF:E1:8A:03:0E:06:A7:2E:45:4A
            X509v3 Authority Key Identifier:
                keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:bf:d5:c8:5d:e7:d3:a9:4f:c2:01:d5:f3:06:a9:c6:ec:b5:
         48:14:b3:ff:5e:21:a0:79:7d:f4:f7:21:2d:ce:dd:0d:2a:8a:
         28:ec:c5:fe:8d:e4:6d:80:1d:ba:e8:34:07:7e:55:7b:c3:ed:
         15:9e:39:10:b6:fb:18:f2:5a:09:25:a8:38:49:a5:b2:82:f7:
         8a:08:37:3a:fc:1d:4c:5f:3d:90:10:10:18:46:5a:15:a1:c9:
         e7:95:fd:00:57:3a:54:65:bb:2c:f7:ef:56:c1:ec:d7:42:55:
         38:7b:22:54:03:15:e3:85:86:10:06:eb:d1:83:85:e1:59:93:
         fe:14:85:cb:fb:18:35:ad:75:be:63:2d:16:20:ec:bc:e9:20:
         73:9f:0f:17:f9:f9:3d:da:9a:18:3e:cc:51:26:bb:96:1b:94:
         0c:aa:8d:e7:36:d1:72:ce:1d:1a:c8:e5:78:54:ea:54:0e:ca:
         07:a9:7c:79:b3:bd:f3:e7:df:ff:b8:bd:9b:ba:36:1a:a3:ca:
         39:e4:87:b3:6f:70:08:75:2f:01:1e:85:d7:95:d7:04:05:cb:
         66:fd:8d:1a:96:dc:c2:16:50:1c:8a:b3:d5:97:98:3d:55:39:
         02:f8:7e:94:e6:3b:29:8a:fc:70:f5:fc:52:69:f6:4e:36:8f:
         2a:91:79:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:54:34 2026 by rpki-client