Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft
File:                     84122DA5B146979D5AAE13129EB677B96C49C7F6.mft (raw, json)
Hash identifier:          FZ7s246y4HvtCaug9Xh3YUb7C9C/uAwWCeFor/eqo7Y=
Subject key identifier:   3D:A8:F9:93:FF:41:11:12:DC:7F:32:38:96:84:B0:2B:60:46:81:EC
Authority key identifier: 84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6
Certificate issuer:       /CN=84122DA5B146979D5AAE13129EB677B96C49C7F6
Certificate serial:       463B6EB33041E29629875B8C4588F5A98A12F05E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft
Manifest number:          C2
Signing time:             Wed 23 Sep 2026 14:08:37 +0000
Manifest this update:     Wed 23 Sep 2026 14:03:37 +0000
Manifest next update:     Thu 24 Sep 2026 14:46:37 +0000
Files and hashes:         1: 84122DA5B146979D5AAE13129EB677B96C49C7F6.crl (hash: dbYwvi20aUeOD3BBpyTNrd6M4TCpshDwjZXyjfazBjs=)
                          2: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: u+tKwHgjMKGgdgEnZPp2mwsftX+fJPIHxzdML3oWuA4=)
                          3: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: LXKwnzjsakvh6k668BXuaYJ1O5iQ9reQNkhpZI7YDu8=)
                          4: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: LWJq/XJLjGCHAx0PdP5FSd33v0EqmvbG5/RZUAKgCgs=)
                          5: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 2a7WLuRJ0dxekwgo8okkZl2guEN5PE3JgGMBxaSTXY4=)
                          6: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: jhYHGOtLAWmv9OcO3/5rDKvnFPZl5OTObgAsQoi8r50=)
                          7: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: fHid8e/HPZhTBqkYcMs+Y715ZVlDl6RBBe2DwEnsBPc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl
                          rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 14:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3b:6e:b3:30:41:e2:96:29:87:5b:8c:45:88:f5:a9:8a:12:f0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84122DA5B146979D5AAE13129EB677B96C49C7F6
        Validity
            Not Before: Sep 23 14:03:37 2026 GMT
            Not After : Sep 24 14:46:37 2026 GMT
        Subject: CN=3DA8F993FF411112DC7F32389684B02B604681EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8d:87:b6:c0:83:cd:cd:e7:d0:45:ef:21:f4:
                    65:9f:a1:a2:12:53:83:18:d1:e2:fd:c2:ba:5c:5b:
                    3b:29:08:1e:ed:8f:3f:25:83:5e:2e:ca:10:1e:00:
                    69:64:f1:51:4f:fa:cc:9d:2a:77:c7:d0:99:f7:23:
                    22:7e:36:db:02:b2:61:90:58:f8:1e:03:1b:25:10:
                    e3:f4:6f:b4:d8:61:0c:fc:05:c8:1b:bb:d8:93:f5:
                    8e:f7:20:b7:aa:2f:25:ca:6b:84:06:63:3f:7a:c6:
                    ca:46:3b:85:49:6a:22:56:07:fa:ff:b4:a8:4f:a9:
                    c5:67:27:8b:63:f0:bf:c3:a5:4a:37:f7:d8:4c:0e:
                    14:e1:4a:04:c9:f7:4e:53:dd:4e:c8:6b:45:4a:97:
                    93:36:92:34:12:da:7a:1e:c5:41:54:5c:5b:fa:fb:
                    68:16:e8:ea:e4:5f:fa:25:08:5a:e8:6d:2f:ce:d7:
                    53:3d:03:12:06:37:53:63:25:2c:34:75:88:1b:8b:
                    c7:92:ea:c8:dd:49:f3:7c:75:2d:31:8e:73:0e:7e:
                    b8:0f:91:44:4b:6c:be:05:68:c6:93:29:a0:c6:6e:
                    a0:cd:5b:41:cf:8d:c8:ef:28:f2:93:81:91:87:d4:
                    8c:42:cd:4c:bc:91:3e:c2:a6:2d:5c:61:4f:c0:c1:
                    fb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A8:F9:93:FF:41:11:12:DC:7F:32:38:96:84:B0:2B:60:46:81:EC
            X509v3 Authority Key Identifier:
                keyid:84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:13:b9:13:46:58:47:10:46:ae:5a:89:e3:fe:01:a8:8b:18:
         ce:5e:00:57:7d:43:f9:ef:3c:0f:83:6e:be:44:50:07:f0:ef:
         bd:54:fa:d6:af:3e:8a:fc:67:84:1c:e1:29:92:f0:8d:a7:68:
         ea:c1:a1:04:fd:23:e4:32:7d:73:92:b7:e9:0a:e7:5e:0d:aa:
         bd:2d:0c:0b:86:c5:87:7b:1e:39:54:0f:30:7b:f2:72:9b:30:
         a0:0b:d5:93:e2:d9:be:73:27:2a:0d:b8:f6:2e:7e:13:b6:1b:
         d0:fc:1c:75:af:f9:57:bc:fd:55:e8:64:ac:7f:6e:4f:b1:5b:
         4f:f2:16:52:da:70:40:40:dd:3c:78:ee:e5:bb:aa:f9:e7:a1:
         db:ea:15:45:b0:e5:6a:62:1a:07:e3:f3:74:f5:bd:18:0d:89:
         0f:bd:0d:06:b7:80:dc:5d:d0:2e:84:25:92:b2:21:a3:8c:06:
         79:85:54:52:31:07:ad:4e:20:a5:bf:1a:a0:68:c9:15:d1:fb:
         26:33:22:df:bb:87:85:97:ea:6e:e6:19:81:40:bf:3d:71:5f:
         f7:60:23:e8:fc:04:ae:3d:89:a1:99:e2:c7:7d:df:8b:0c:b2:
         6e:84:ea:b3:1c:d4:d9:31:a4:21:30:4a:39:f8:82:97:45:82:
         61:10:9e:91
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURjtuszBB4pYph1uMRYj1qYoS8F4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQxMjJEQTVCMTQ2OTc5RDVBQUUxMzEyOUVCNjc3Qjk2
QzQ5QzdGNjAeFw0yNjA5MjMxNDAzMzdaFw0yNjA5MjQxNDQ2MzdaMDMxMTAvBgNV
BAMTKDNEQThGOTkzRkY0MTExMTJEQzdGMzIzODk2ODRCMDJCNjA0NjgxRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcjYe2wIPNzefQRe8h9GWfoaIS
U4MY0eL9wrpcWzspCB7tjz8lg14uyhAeAGlk8VFP+sydKnfH0Jn3IyJ+NtsCsmGQ
WPgeAxslEOP0b7TYYQz8Bcgbu9iT9Y73ILeqLyXKa4QGYz96xspGO4VJaiJWB/r/
tKhPqcVnJ4tj8L/DpUo399hMDhThSgTJ905T3U7Ia0VKl5M2kjQS2noexUFUXFv6
+2gW6OrkX/olCFrobS/O11M9AxIGN1NjJSw0dYgbi8eS6sjdSfN8dS0xjnMOfrgP
kURLbL4FaMaTKaDGbqDNW0HPjcjvKPKTgZGH1IxCzUy8kT7Cpi1cYU/AwfvXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPaj5k/9BERLcfzI4loSwK2BGgewwHwYDVR0j
BBgwFoAUhBItpbFGl51arhMSnrZ3uWxJx/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWY4NmIxMmUtZTU3NC00MjZiLWFhNmItNDkzOWUzYjAzMGJhLzAvODQxMjJEQTVC
MTQ2OTc5RDVBQUUxMzEyOUVCNjc3Qjk2QzQ5QzdGNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84NDEyMkRBNUIxNDY5NzlENUFBRTEzMTI5RUI2NzdCOTZDNDlD
N0Y2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh
NmItNDkzOWUzYjAzMGJhLzAvODQxMjJEQTVCMTQ2OTc5RDVBQUUxMzEyOUVCNjc3
Qjk2QzQ5QzdGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIATuRNGWEcQRq5aieP+AaiLGM5eAFd9Q/nv
PA+Dbr5EUAfw771U+tavPor8Z4Qc4SmS8I2naOrBoQT9I+QyfXOSt+kK514Nqr0t
DAuGxYd7HjlUDzB78nKbMKAL1ZPi2b5zJyoNuPYufhO2G9D8HHWv+Ve8/VXoZKx/
bk+xW0/yFlLacEBA3Tx47uW7qvnnodvqFUWw5WpiGgfj83T1vRgNiQ+9DQa3gNxd
0C6EJZKyIaOMBnmFVFIxB61OIKW/GqBoyRXR+yYzIt+7h4WX6m7mGYFAvz1xX/dg
I+j8BK49iaGZ4sd934sMsm6E6rMc1NkxpCEwSjn4gpdFgmEQnpE=
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:01:01 2026 by rpki-client