Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft
File:                     8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft (raw, json)
Hash identifier:          YHaZvhzGVPdnV6MTMJgVxNVDP9DARxAr+n7IyV2gCrs=
Subject key identifier:   BD:FC:44:18:5C:45:87:27:32:93:1E:3A:23:C0:41:65:34:5B:B5:59
Authority key identifier: 8E:13:12:45:E3:8E:84:5B:E2:A2:18:F9:92:8E:AD:53:0F:FF:FE:AC
Certificate issuer:       /CN=8E131245E38E845BE2A218F9928EAD530FFFFEAC
Certificate serial:       783D29358EBD0A8329F87E6BFB30CC3AE15B549A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft
Manifest number:          C3
Signing time:             Thu 24 Sep 2026 08:15:50 +0000
Manifest this update:     Thu 24 Sep 2026 08:10:50 +0000
Manifest next update:     Fri 25 Sep 2026 11:54:50 +0000
Files and hashes:         1: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (hash: fGKw2WFahFPpQMw21POO2xmihiDm+uI9kc4e8STtyBE=)
                          2: 8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl (hash: wMvQqn0yoDhZG83Aq8+eMxYzJ49P3JWNvMK6awCqBHw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl
                          rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 11:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3d:29:35:8e:bd:0a:83:29:f8:7e:6b:fb:30:cc:3a:e1:5b:54:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E131245E38E845BE2A218F9928EAD530FFFFEAC
        Validity
            Not Before: Sep 24 08:10:50 2026 GMT
            Not After : Sep 25 11:54:50 2026 GMT
        Subject: CN=BDFC44185C45872732931E3A23C04165345BB559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:66:bb:f9:a9:08:17:71:6d:67:7f:f5:b3:
                    61:c2:19:3c:56:27:34:a3:71:22:78:4e:2e:37:78:
                    b4:2a:93:46:e4:ab:28:00:c4:e4:4f:7f:c2:87:3f:
                    13:c8:17:b6:0d:54:23:51:b4:90:f9:03:64:d2:8a:
                    b9:39:dc:e1:83:01:5d:7b:08:56:9d:ba:f6:c2:27:
                    4a:c3:fd:85:19:19:fe:52:15:64:7f:c3:ff:89:0e:
                    ac:87:34:da:a9:ff:69:b8:cf:24:82:8c:e6:bf:b0:
                    26:6f:eb:5c:95:cc:35:a5:98:23:cd:f7:d1:53:ad:
                    b4:dc:ba:6f:50:0c:c2:94:d5:51:5a:e4:b2:a0:d2:
                    fb:1e:e8:c0:07:ce:68:6d:5d:81:c6:88:50:d9:d2:
                    68:b8:50:85:9c:34:80:5a:43:e2:85:c8:ca:c7:1d:
                    92:55:bf:48:23:27:ac:80:44:d8:42:33:d0:fa:49:
                    2f:f5:a9:dd:81:7f:4c:13:28:97:3b:d5:6b:9c:60:
                    5e:16:82:7f:9c:8f:cb:08:43:5f:b1:8f:20:6e:1f:
                    f2:79:2d:31:3a:94:1f:87:ee:69:29:a7:b1:ec:15:
                    ee:49:4b:c2:fe:2e:60:71:9b:01:7e:31:88:38:c4:
                    ac:3b:16:fa:f5:1a:6d:d7:4e:33:ea:1d:72:ca:99:
                    cd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FC:44:18:5C:45:87:27:32:93:1E:3A:23:C0:41:65:34:5B:B5:59
            X509v3 Authority Key Identifier:
                keyid:8E:13:12:45:E3:8E:84:5B:E2:A2:18:F9:92:8E:AD:53:0F:FF:FE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:91:5d:52:e4:3d:c5:da:ff:18:0d:05:9f:80:34:46:f2:4e:
         90:d6:58:38:af:9a:c1:92:c7:b5:c8:39:c2:a5:42:19:76:33:
         e0:23:ed:ce:94:9a:0b:56:bf:f1:e7:a7:75:20:a4:bf:3f:bb:
         ec:1b:47:c5:a7:b2:0f:96:cc:68:82:02:19:96:70:af:8c:1b:
         4d:38:d8:8d:e8:f6:b2:61:97:ad:91:4c:e0:5a:c3:39:e3:f0:
         7e:31:52:57:c2:ac:51:13:86:07:b1:e7:bc:fe:f7:8b:3c:26:
         b6:c3:b4:fa:df:94:37:d5:12:98:f4:6c:e0:e8:97:a3:0b:11:
         ee:ea:25:87:ab:e3:74:12:6a:80:3e:18:bd:22:5c:c9:a3:19:
         b8:b1:8d:0c:81:cf:d7:eb:e8:78:c8:ad:2f:ef:0f:b1:f3:db:
         b2:2d:dc:cc:3b:de:87:b9:75:7c:a4:1c:8f:cd:d7:d4:3d:38:
         b3:8f:93:bb:ca:65:8f:0f:90:e7:62:60:e8:6e:82:5c:a3:55:
         6a:05:07:1c:57:b4:b4:5b:cb:48:68:f9:93:89:ab:04:56:4c:
         e2:6e:ef:f4:55:c5:12:28:22:ac:b1:52:b0:77:a2:3a:59:29:
         2a:dc:6b:2a:fb:cd:1f:32:e3:37:ce:2f:9f:40:4f:a2:57:ae:
         67:7a:29:ec
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeD0pNY69CoMp+H5r+zDMOuFbVJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUxMzEyNDVFMzhFODQ1QkUyQTIxOEY5OTI4RUFENTMw
RkZGRkVBQzAeFw0yNjA5MjQwODEwNTBaFw0yNjA5MjUxMTU0NTBaMDMxMTAvBgNV
BAMTKEJERkM0NDE4NUM0NTg3MjczMjkzMUUzQTIzQzA0MTY1MzQ1QkI1NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgnGa7+akIF3FtZ3/1s2HCGTxW
JzSjcSJ4Ti43eLQqk0bkqygAxORPf8KHPxPIF7YNVCNRtJD5A2TSirk53OGDAV17
CFaduvbCJ0rD/YUZGf5SFWR/w/+JDqyHNNqp/2m4zySCjOa/sCZv61yVzDWlmCPN
99FTrbTcum9QDMKU1VFa5LKg0vse6MAHzmhtXYHGiFDZ0mi4UIWcNIBaQ+KFyMrH
HZJVv0gjJ6yARNhCM9D6SS/1qd2Bf0wTKJc71WucYF4Wgn+cj8sIQ1+xjyBuH/J5
LTE6lB+H7mkpp7HsFe5JS8L+LmBxmwF+MYg4xKw7Fvr1Gm3XTjPqHXLKmc0FAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUvfxEGFxFhycykx46I8BBZTRbtVkwHwYDVR0j
BBgwFoAUjhMSReOOhFviohj5ko6tUw///qwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjcyOTA3ZDMtYmUyNC00ZGE4LTk2YmItZjEyMjhmYzk5MjA1LzAvOEUxMzEyNDVF
MzhFODQ1QkUyQTIxOEY5OTI4RUFENTMwRkZGRkVBQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84RTEzMTI0NUUzOEU4NDVCRTJBMjE4Rjk5MjhFQUQ1MzBGRkZG
RUFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjcyOTA3ZDMtYmUyNC00ZGE4LTk2
YmItZjEyMjhmYzk5MjA1LzAvOEUxMzEyNDVFMzhFODQ1QkUyQTIxOEY5OTI4RUFE
NTMwRkZGRkVBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC+RXVLkPcXa/xgNBZ+ANEbyTpDWWDivmsGS
x7XIOcKlQhl2M+Aj7c6UmgtWv/Hnp3UgpL8/u+wbR8Wnsg+WzGiCAhmWcK+MG004
2I3o9rJhl62RTOBawznj8H4xUlfCrFEThgex57z+94s8JrbDtPrflDfVEpj0bODo
l6MLEe7qJYer43QSaoA+GL0iXMmjGbixjQyBz9fr6HjIrS/vD7Hz27It3Mw73oe5
dXykHI/N19Q9OLOPk7vKZY8PkOdiYOhuglyjVWoFBxxXtLRby0ho+ZOJqwRWTOJu
7/RVxRIoIqyxUrB3ojpZKSrcayr7zR8y4zfOL59AT6JXrmd6Kew=
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:29:13 2026 by rpki-client