Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft
File:                     99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft (raw, json)
Hash identifier:          oEvP0saBjzdGBDcsCaP/+R3M9TOW0Za4jFe49T2gmnM=
Subject key identifier:   7F:E7:03:16:3D:15:C7:BB:99:DE:6D:7B:62:34:DD:9E:D5:C0:F3:4B
Authority key identifier: 99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56
Certificate issuer:       /CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56
Certificate serial:       153B5A988E835C2CF1361DC3B4A8C70B28502BC2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft
Manifest number:          C2
Signing time:             Thu 24 Sep 2026 17:42:33 +0000
Manifest this update:     Thu 24 Sep 2026 17:37:33 +0000
Manifest next update:     Fri 25 Sep 2026 21:22:33 +0000
Files and hashes:         1: 99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl (hash: Nsiz1ulr4wIq1uAp6BnmgmfKiOgquOy3KxrVaWQ0BBk=)
                          2: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: PSuRmEPi8uUru97FfcCOeTvVbgMQrGuLQwDV3VMgdz8=)
                          3: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: Oro/PlzrcwhR+DRRwBnJ1PRk7SRQNnxZIcnkIGvWHPE=)
                          4: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: t9EEqIdAzyyLBFGBhm/G7abK4Gf89A/VkBJhBveYp8o=)
                          5: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: SADYGPYv67q+O3OfpXqESLXHQd4oPs/38N8rfvjf/1w=)
                          6: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: TnnimCiJNEI3YZmDLBfCPDrxGGuhDFX5yXiQDusUYTc=)
                          7: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: VQVxXRTp2UzotluVMgSddd9dhfBUX5L5ITtJ9nJBxE0=)
                          8: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: mJNCgdN/KYV4aqOGqcU3FG9C+9F17HUrX/9pj0TLKOE=)
                          9: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: zPofqUyIbcND+D2D0o7JYniZDgxYX06gor3Wb3n4ltM=)
                          10: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: 6bIg58V+S6s6w2BVuCVhFWMhoAtGZP/B+0ZE/bwD8i8=)
                          11: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: Z1Kw+kT+8xUFn3ucef081YHiJ/yp5vqEe94k0y4NufM=)
                          12: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: o0zOCwKMV8jU5a7SbQORjfO9m38/31ZTy9sJntqLIvE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl
                          rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 21:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3b:5a:98:8e:83:5c:2c:f1:36:1d:c3:b4:a8:c7:0b:28:50:2b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56
        Validity
            Not Before: Sep 24 17:37:33 2026 GMT
            Not After : Sep 25 21:22:33 2026 GMT
        Subject: CN=7FE703163D15C7BB99DE6D7B6234DD9ED5C0F34B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:10:6e:d9:8a:f3:95:49:f8:d5:6c:ce:58:a3:
                    1a:a6:75:1f:d8:aa:73:83:d9:9a:f9:02:d2:65:1d:
                    03:3f:28:a1:bb:92:18:b6:a6:d5:c5:5d:65:c3:57:
                    6b:90:d4:d2:8c:9a:72:41:67:e9:3a:c2:90:3a:19:
                    2f:1f:86:d5:a4:21:38:85:ee:e7:66:c4:e1:00:9f:
                    e2:46:df:b7:ef:ae:1f:b7:f7:56:89:ea:56:1e:80:
                    81:eb:0b:6d:71:72:68:f1:a6:6b:94:83:99:8e:ba:
                    54:85:39:a1:bc:c1:80:46:e1:cc:02:14:ed:46:58:
                    1b:7f:2a:41:80:4d:91:29:0f:95:58:0e:e9:1b:a0:
                    8d:df:c9:4c:c8:03:37:61:76:8a:c4:90:8c:34:6c:
                    96:5f:4e:1c:03:2a:88:a6:ff:33:05:a9:b6:7a:95:
                    08:fc:b1:60:4b:4a:2e:54:b1:f1:46:a8:88:a9:05:
                    d8:71:cf:ed:33:e7:39:7b:ac:30:de:10:d7:ce:91:
                    5e:fa:0b:01:08:a1:d2:ee:2d:5c:77:29:91:93:d0:
                    89:e5:fd:e9:9e:5f:c7:c0:c7:a7:15:ed:3d:49:41:
                    22:13:eb:89:93:bf:22:b6:6c:d8:52:20:4c:10:4c:
                    a5:82:fe:8c:ef:d6:2a:0c:51:e2:4d:d7:05:60:37:
                    53:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E7:03:16:3D:15:C7:BB:99:DE:6D:7B:62:34:DD:9E:D5:C0:F3:4B
            X509v3 Authority Key Identifier:
                keyid:99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9e:4a:13:61:80:71:2b:18:00:84:78:ca:68:83:1b:49:c2:
         aa:fd:3e:c7:09:3f:f4:d8:9b:a1:04:e5:4e:8b:2b:b1:89:50:
         79:77:51:ed:73:0c:c7:f8:1e:e7:5d:34:1e:2f:e0:90:75:e5:
         ad:2d:c0:bd:d5:1b:10:e1:f1:83:79:ba:f3:a0:2c:d8:42:79:
         e6:f8:bd:a4:b6:eb:84:70:e0:9a:ad:6c:74:e6:89:8f:25:f2:
         a3:34:e2:38:d0:64:08:e6:fc:07:0d:ea:36:6a:63:d8:8e:f3:
         cd:39:21:2a:e5:ab:44:d4:70:66:66:0c:60:a1:16:62:1a:5f:
         eb:51:73:c5:36:dc:e3:6b:25:02:4d:79:12:f9:c3:2f:4d:1b:
         87:08:6e:14:c6:ea:55:34:81:aa:80:c1:fe:b2:d4:57:b3:0a:
         e8:f1:bd:70:be:e5:e5:1e:2c:12:b1:6e:8c:a3:26:f4:97:dd:
         99:c2:90:8c:fb:c5:19:cd:04:c9:80:b9:99:52:49:23:f7:32:
         fe:d1:20:2d:15:74:0b:ff:04:68:7c:a1:00:09:2e:f8:f7:f4:
         77:d3:3d:66:cc:21:12:b3:d6:4f:1d:10:3e:6a:27:64:5f:69:
         67:09:ba:36:f7:a9:b4:4c:d1:57:8f:d8:a2:2a:df:de:d2:bf:
         d2:a1:8d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:55:10 2026 by rpki-client