Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
File:                     C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft (raw, json)
Hash identifier:          qDZDSjiP2KfQx7vd9V6qROPtNS/ockxPPMpVsiH6ynM=
Subject key identifier:   1B:3A:35:10:53:07:86:56:CE:A4:28:14:F3:09:1B:D0:0C:F7:5E:58
Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9
Certificate issuer:       /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9
Certificate serial:       1E5ED11A1B07DB725971B128E6F3743837CBE4BB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
Manifest number:          C2
Signing time:             Wed 23 Sep 2026 15:55:49 +0000
Manifest this update:     Wed 23 Sep 2026 15:50:49 +0000
Manifest next update:     Thu 24 Sep 2026 17:02:49 +0000
Files and hashes:         1: 323430303a343661303a31303a3a2f34382d3438203d3e20313437313337.roa (hash: Xtekq0XfiyDF84CgG01kPnBfk5gv3roxTAHumf4Y5lY=)
                          2: 323430303a343661303a363a3a2f34382d3438203d3e20313437313337.roa (hash: ysVciOe07++0v5Vr1hzLx8fA/0jTLiYdiUqf/6pXrkA=)
                          3: 323430303a343661303a323a3a2f34382d3438203d3e20313437313337.roa (hash: +c41dutgFT2ZE2lEvbuAaTazQUEb6UW8ui2Kg7nMrVo=)
                          4: 323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa (hash: VEWKVQt8y/8GPWkN8tAdK8b4mgUdgFzyKGEQfkduN98=)
                          5: 323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa (hash: OLNk+VWdGI1qmIPu8Drgqpmv6WGw5uCOToriZ5VHa9w=)
                          6: 323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (hash: OzuliA2N8wNt6MGtPujtGB6U6rXsRoWhjjYaeaS0yAs=)
                          7: 323430303a343661303a31373a3a2f34382d3438203d3e20313437313337.roa (hash: MuOtiRCK+tp6U+hzr1x3k/1BlmKfEwjNnXDtMTn3C54=)
                          8: 323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa (hash: bUiGB1W7Se2nx9Nc64eycOugCZo681BWG/duCoJZWeI=)
                          9: 323430303a343661303a32393a3a2f34382d3438203d3e20313437313337.roa (hash: HLJY57d7qqR9FiGfUIjlFjjQrGocl/3YC5fSm+HtD9U=)
                          10: 323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa (hash: R1kE9uKrZbeLkgzHC7e5BusLmDv674DkMdgzbBvwhAw=)
                          11: 323430303a343661303a313a3a2f34382d3438203d3e20313437313337.roa (hash: 9y9riMr8hw8IaD+ig1yYTfIKYToP3AFvgLBOvq0dUqA=)
                          12: 323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa (hash: AMjnyAEfiOVxNwyzM8O6HXzZGTxkgyap27aKj3W6Skk=)
                          13: 3130332e3137372e392e302f32342d3234203d3e20313437313337.roa (hash: LiXvBI/+0aSmpVLjojfaeEmHB07g7RdwE9fmn4IWLtc=)
                          14: 323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa (hash: UT1h2LMTjTQJ7ZJ7JztoMi17EHjsbtJIUvBVi8DlKSo=)
                          15: 323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa (hash: RZNwhsdWPwHsJ1753q7l7RVtxdL0EUNu722JNRatZoc=)
                          16: 323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa (hash: CqP8eUG+XNHe2ZRDBQbbiW1JHTmz7eUiEFlYMZh4rHY=)
                          17: 323430303a343661303a33313a3a2f34382d3438203d3e20313437313337.roa (hash: oQlQCcGSIyApZwe0zh02JHB8NgdLlqCqb+hc+WKLBAk=)
                          18: 323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa (hash: sk3ZxSGwRUSHyuGSOaKTetRq+YknC9DBGmC5NH67SNI=)
                          19: 323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa (hash: rrbo9gFfKTg6spECSvy8Q2yWG7nEl4xu5sTVFZ6rz7o=)
                          20: 323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa (hash: QdXCuvjo6r6bGTPWedrJUM8DCfGtVmTE0qQwjHkmDQ4=)
                          21: 323430303a343661303a31333a3a2f34382d3438203d3e20313437313337.roa (hash: /GIxYy0vSq64HynAB2s2ChjySqHSwoYFUlMZoPK4jfs=)
                          22: 323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa (hash: 5JKbjJnU69SJlm4fg3FPZyCqBIfVS060Z1KnNVEVtkw=)
                          23: 323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa (hash: b3pQDI/eP+0SwgVnsmQmkeZ1d2w8eSJ1YWWJnGvXDz8=)
                          24: 323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa (hash: 8i1yDAIM/jiddL2Dyt3x+4fTdzbaN44q0VQUxOtuXgI=)
                          25: 323430303a343661303a32323a3a2f34382d3438203d3e20313437313337.roa (hash: Z17KOPUimeqYA1aZq3SNkRhgncaUQxfgpGD5Ws+TmaM=)
                          26: 323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa (hash: 0dcMygO+Bc+TXcrUgmdBEdxgQ/GML+71SETcyrBroSo=)
                          27: 323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa (hash: cACJn3CN44BJInMN2D1DUzz5f/u9M8K8ZaV5c704i0c=)
                          28: 323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa (hash: 5SgJA7bdr6raZ7Mqjwc8wZqhlg7dpVjh8FGcFa+U5rk=)
                          29: 323430303a343661303a3a2f34382d3438203d3e20313437313337.roa (hash: 0HDp+vfD+4sT/TKrDDPYxk4/65tF4UinBvnW6pYSahU=)
                          30: 323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa (hash: +wm/VK77fHrWVU/ZkF+Uqbjn7YBt3NYF+N/EiT1H9LU=)
                          31: 323430303a343661303a333a3a2f34382d3438203d3e20313437313337.roa (hash: gfbcpg+SVHwH5IjoNRXSMVdGISaiGt5LV1khyRPoF44=)
                          32: 323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (hash: AzVrbmw1D35LXqWCeqtZ4xDM2Ov824Fl8I4Xi69Tl/A=)
                          33: 323430303a343661303a33353a3a2f34382d3438203d3e20313437313337.roa (hash: 1xZJhr0aQYYOOzMLyDygpRTMMvY7vsa9JEcRlTrt0Lw=)
                          34: 3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (hash: WVnSwWyfbHb1cF4zK3nfAh3+4mXKYVShqhzNFGYV1/4=)
                          35: C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl (hash: pM8zi4kykKhVmdQ48qmPzci2kg1NWe1vOKoYo1HkI6A=)
                          36: 323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa (hash: zV398UgRTlptT97Qc1/wsPkzfK97ViGntlsJokWgHgg=)
                          37: 323430303a343661303a33343a3a2f34382d3438203d3e20313437313337.roa (hash: FpuosyUSWMTfhk1yjPzRRle4FSUaLD0RRnI3/i081xk=)
                          38: 323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa (hash: 5IqA+aFlD3C+qm5E4iE8TertLT23UTTXA9Svn7QpuMk=)
                          39: 323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa (hash: RgFmlKKxmL5ut1KmXAx7XdZwngIvPGxFdbg1RlK2QKc=)
                          40: 323430303a343661303a3a2f33322d3438203d3e20313437313337.roa (hash: O05Ps8hAd8rr0CaoB90NQsqUuO2fcg1LWgMOuLkP0To=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl
                          rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 17:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5e:d1:1a:1b:07:db:72:59:71:b1:28:e6:f3:74:38:37:cb:e4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9
        Validity
            Not Before: Sep 23 15:50:49 2026 GMT
            Not After : Sep 24 17:02:49 2026 GMT
        Subject: CN=1B3A351053078656CEA42814F3091BD00CF75E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ea:02:16:9d:e5:bd:59:34:8c:b9:7e:91:a1:
                    9c:16:2a:86:27:05:d4:24:f1:bf:19:d9:0e:39:b8:
                    d7:ed:3a:f5:8d:2c:ae:a0:24:61:c3:58:1a:c5:d5:
                    f8:fd:42:85:9d:cb:85:89:23:ef:4d:dc:66:28:24:
                    bf:ce:26:f9:46:f3:da:46:5e:81:d5:1a:78:54:cd:
                    9a:cf:e1:58:ab:24:04:09:7a:57:2e:c8:0d:9c:cb:
                    7e:8d:21:1c:f8:56:ef:c8:c3:b6:c6:57:51:25:51:
                    42:11:0f:ec:da:1a:c0:31:9f:9a:c2:7e:35:a5:2f:
                    51:1f:19:97:ac:3e:87:86:8d:99:a9:03:bf:7f:6a:
                    f9:bd:9a:5e:1f:cf:e3:62:b8:7e:8b:bb:24:5b:7a:
                    b3:6c:20:8b:5a:ea:f6:18:f0:ab:ff:db:21:b8:1e:
                    a8:f1:fc:3f:b9:11:f0:0e:44:a0:bc:1a:52:12:54:
                    fe:39:7e:7f:2b:b5:0c:9c:4c:48:97:d3:f7:7d:db:
                    8b:79:21:88:58:9a:c3:a8:70:5e:25:c2:bf:5f:f1:
                    f7:30:40:48:ca:44:73:90:8c:34:af:de:06:ae:61:
                    69:06:e4:85:ca:a4:c7:7f:87:25:76:9d:95:43:cd:
                    d0:e9:ed:5e:65:0f:c8:7d:70:c5:ab:2d:e8:ae:e5:
                    87:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3A:35:10:53:07:86:56:CE:A4:28:14:F3:09:1B:D0:0C:F7:5E:58
            X509v3 Authority Key Identifier:
                keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6e:13:33:cf:b8:ac:ae:97:f7:f0:e1:41:65:6a:70:af:58:
         89:44:d2:5d:1e:6d:78:1e:f1:8e:32:96:b1:ee:7a:6b:3b:e9:
         e3:4b:eb:bd:2a:91:10:7a:6e:40:a4:e3:ff:20:df:c1:fb:5b:
         2f:5f:4e:f0:fc:0a:1e:68:bc:6a:6d:9e:61:21:a7:f6:02:c9:
         c4:58:6c:ea:b5:d0:5c:29:fa:a4:ba:01:ce:79:8b:aa:23:b9:
         b3:47:a0:75:4c:28:21:9f:21:c0:36:0e:51:59:ea:c9:5f:58:
         7e:c1:93:43:9c:fd:7e:6b:8b:73:2c:a6:af:76:c7:01:7d:03:
         17:b6:aa:61:4c:cc:cb:cc:e2:c1:b9:2c:19:c7:42:92:3e:25:
         3e:f8:be:83:f2:cc:fe:59:3c:56:e3:56:a9:46:b1:c5:5e:72:
         87:66:58:ad:29:22:ce:d6:3a:9f:3c:7c:0d:6a:94:5b:78:3d:
         20:3f:f4:ee:cc:5b:b0:e5:62:de:63:22:bb:14:c6:70:2c:45:
         38:94:74:86:1f:97:0e:9a:59:b3:ed:33:65:84:08:e2:41:25:
         1c:ad:95:16:e0:03:1a:9a:6c:a8:44:78:a0:62:55:c6:95:2b:
         1e:8b:91:ef:af:e0:f4:e2:fa:74:fd:b0:f9:42:f0:2f:08:80:
         5d:a7:b7:95
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHl7RGhsH23JZcbEo5vN0ODfL5LswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBENzAyOEMwRkE2MjgzNDhBRTIyNDVERDBDQzAyRDND
NURDQjNGOTAeFw0yNjA5MjMxNTUwNDlaFw0yNjA5MjQxNzAyNDlaMDMxMTAvBgNV
BAMTKDFCM0EzNTEwNTMwNzg2NTZDRUE0MjgxNEYzMDkxQkQwMENGNzVFNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb6gIWneW9WTSMuX6RoZwWKoYn
BdQk8b8Z2Q45uNftOvWNLK6gJGHDWBrF1fj9QoWdy4WJI+9N3GYoJL/OJvlG89pG
XoHVGnhUzZrP4VirJAQJelcuyA2cy36NIRz4Vu/Iw7bGV1ElUUIRD+zaGsAxn5rC
fjWlL1EfGZesPoeGjZmpA79/avm9ml4fz+NiuH6LuyRberNsIIta6vYY8Kv/2yG4
Hqjx/D+5EfAORKC8GlISVP45fn8rtQycTEiX0/d924t5IYhYmsOocF4lwr9f8fcw
QEjKRHOQjDSv3gauYWkG5IXKpMd/hyV2nZVDzdDp7V5lD8h9cMWrLeiu5Yf9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGzo1EFMHhlbOpCgU8wkb0Az3XlgwHwYDVR0j
BBgwFoAUwNcCjA+mKDSK4iRd0MwC08Xcs/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2E2NjVjMzItNmRhZi00NzJiLWJjZTYtMzE3ZDVkNmM3ODllLzAvQzBENzAyOEMw
RkE2MjgzNDhBRTIyNDVERDBDQzAyRDNDNURDQjNGOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DMEQ3MDI4QzBGQTYyODM0OEFFMjI0NUREMENDMDJEM0M1RENC
M0Y5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E2NjVjMzItNmRhZi00NzJiLWJj
ZTYtMzE3ZDVkNmM3ODllLzAvQzBENzAyOEMwRkE2MjgzNDhBRTIyNDVERDBDQzAy
RDNDNURDQjNGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH5uEzPPuKyul/fw4UFlanCvWIlE0l0ebXge
8Y4ylrHuems76eNL670qkRB6bkCk4/8g38H7Wy9fTvD8Ch5ovGptnmEhp/YCycRY
bOq10Fwp+qS6Ac55i6ojubNHoHVMKCGfIcA2DlFZ6slfWH7Bk0Oc/X5ri3Mspq92
xwF9Axe2qmFMzMvM4sG5LBnHQpI+JT74voPyzP5ZPFbjVqlGscVecodmWK0pIs7W
Op88fA1qlFt4PSA/9O7MW7DlYt5jIrsUxnAsRTiUdIYflw6aWbPtM2WECOJBJRyt
lRbgAxqabKhEeKBiVcaVKx6Lke+v4PTi+nT9sPlC8C8IgF2nt5U=
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:43:39 2026 by rpki-client