Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
File:                     2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft (raw, json)
Hash identifier:          kp53TWH1D/prA/Te62V4nHVbFeJeQsoGD4IhuhieMyU=
Subject key identifier:   06:D0:3F:1E:29:5E:93:93:FA:D9:69:CC:4A:28:33:FD:D5:7E:AB:83
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Certificate issuer:       /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial:       289EA34BDD2E0474B80ED7DB290610D64FAA2D2B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
Manifest number:          C2
Signing time:             Wed 23 Sep 2026 20:41:38 +0000
Manifest this update:     Wed 23 Sep 2026 20:36:38 +0000
Manifest next update:     Thu 24 Sep 2026 22:01:38 +0000
Files and hashes:         1: 3230322e37322e3230372e302f32342d3234203d3e203538333839.roa (hash: WHBbJGZmdQKaYyhDTGiF9nJvtfUgtNB8fOyt7IgLmpo=)
                          2: 3230322e37322e3139352e302f32342d3234203d3e203138313533.roa (hash: SCHe3hYSRhgevYCfCBUBkvtKm+wlGx7OZOfJDoM+cQk=)
                          3: 3230322e37322e3230342e302f32332d3233203d3e203538353532.roa (hash: F2TMv35JZK5AIuzdcDqCbXvGPGE/OVFOpnP/LxPgY6M=)
                          4: 3230322e37322e3230342e302f32342d3234203d3e203538353532.roa (hash: 8elAsNukKO5kSDzzuWo1Aj5s9RVKBqJn0R9tAyalsQM=)
                          5: 3230322e37322e3230312e302f32342d3234203d3e203138313533.roa (hash: 5mZLoNgZhTm39U7OL1mXB6ctYVQTzYRY8BBmuLpMg4Y=)
                          6: 3230322e37322e3230332e302f32342d3234203d3e203538353532.roa (hash: iby8iV2U2RE+gf7SXobV11P3/zgUaZgIeET+QYf6T1o=)
                          7: 3230322e37322e3230322e302f32342d3234203d3e203138313533.roa (hash: 08R8uow6CkDSzpj8I0I6g9tHwsOaR/O2coPRJDLApcU=)
                          8: 3230322e37322e3139332e302f32342d3234203d3e203138313533.roa (hash: wJ0OIiNjTdldfLYb19hTKZ+fKESqf6C7MeF3YvJI8Ys=)
                          9: 3230322e37322e3139342e302f32342d3234203d3e203538353532.roa (hash: x2waDxAivuzwEakd8DLbazFG/EZswmywlTtLdaU69e8=)
                          10: 2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl (hash: mj7bxaJRp4UThxzKnoeNjUKIaNFrt7ehmSA9T8uIPs4=)
                          11: 3230322e37322e3139392e302f32342d3234203d3e203538353532.roa (hash: I7aNpMfH7ZHP4Lp/vWgPFU8KVrb9zX35ePeEEjLzIes=)
                          12: 3230322e37322e3139382e302f32342d3234203d3e203538353532.roa (hash: q93DQl+hjXIQfrcVhu9DN0JHvkzY8J25CxthuhIjous=)
                          13: 3230322e37322e3230352e302f32342d3234203d3e203538353532.roa (hash: FGoSsoOOffTNyyww3u8Ke14hUh1FetMzPI2ZAfmyzQs=)
                          14: 3230322e37322e3230362e302f32342d3234203d3e203138313533.roa (hash: rYb9medyxCLAhcgseCZT0SUDS0jCzHAqSI7lOKhEDGA=)
                          15: 3230322e37322e3139322e302f32342d3234203d3e203138313533.roa (hash: 8TVATmR1OegECSp2IvjWnV4bX9F7cZu1ILCCYkpbkRs=)
                          16: 3230322e37322e3139362e302f32342d3234203d3e203138313533.roa (hash: 0VsRrjsdIFJeamY9VCTKavELmYTFS3ilP2PUztX74Uc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
                          rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 19:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9e:a3:4b:dd:2e:04:74:b8:0e:d7:db:29:06:10:d6:4f:aa:2d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
        Validity
            Not Before: Sep 23 20:36:38 2026 GMT
            Not After : Sep 24 22:01:38 2026 GMT
        Subject: CN=06D03F1E295E9393FAD969CC4A2833FDD57EAB83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8f:f8:b6:fd:ba:a6:5c:be:03:1d:b9:35:42:
                    76:2f:4e:80:14:97:35:e5:24:96:b8:63:f7:0c:45:
                    88:59:97:43:0b:56:fd:3b:50:52:73:e4:2b:2d:6f:
                    03:49:f4:6e:0d:53:7d:77:73:eb:b1:88:1a:dd:38:
                    86:59:f5:e1:6a:10:b1:e2:b0:d1:52:24:50:fb:1f:
                    e3:74:2d:43:22:ba:03:f0:34:af:6b:36:76:e2:60:
                    0f:e5:97:25:39:f1:e3:6d:01:bd:ea:7e:0a:7c:dd:
                    00:2e:e3:6c:74:e3:9b:db:8f:31:e0:31:e8:c2:5b:
                    6d:f0:2b:99:22:86:63:c8:bc:42:0c:d0:d5:67:08:
                    02:ed:89:e9:c8:d7:3d:db:a6:12:cc:dc:55:cd:7e:
                    44:e8:22:9e:cb:98:ec:ba:43:a7:93:9c:61:da:c5:
                    ae:09:2f:cc:80:54:57:c0:96:5e:3a:eb:1a:e2:5b:
                    37:1d:d1:c6:10:08:6e:6f:30:59:27:67:f9:82:76:
                    56:1f:ab:ba:13:bc:7f:f0:82:b4:ac:83:6c:a7:ae:
                    ef:a2:49:1f:c1:a0:29:e2:1b:6f:6f:39:2b:7a:55:
                    9a:b3:a5:ce:d7:b8:ad:2a:49:11:12:60:51:93:5e:
                    e6:37:0c:a1:1e:64:ce:ff:b1:e4:f0:5c:7a:3a:9c:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D0:3F:1E:29:5E:93:93:FA:D9:69:CC:4A:28:33:FD:D5:7E:AB:83
            X509v3 Authority Key Identifier:
                keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e5:d2:67:2f:b2:f9:4e:27:30:4e:e7:24:93:d7:b8:f3:8b:
         3f:f9:f8:36:67:4e:c9:7d:19:d5:36:1b:c3:6e:4e:fa:9e:0b:
         cd:b8:aa:b3:a0:3c:27:ed:1f:ca:dd:3f:12:00:ca:d4:8a:48:
         b2:d0:18:42:f6:24:18:dd:3c:67:10:c9:17:60:ba:ec:75:ff:
         a4:1d:f5:eb:81:53:43:f3:35:3c:96:33:fa:6b:fc:fe:e8:14:
         78:fd:a0:d7:fc:cf:63:43:da:94:cb:c9:83:2e:c2:7d:33:2e:
         6a:ea:98:98:6f:60:ef:1f:0f:39:3b:bb:68:a5:f2:46:34:0a:
         28:64:ae:0b:08:79:9e:2a:f9:c2:78:0a:b6:2a:b1:e7:18:79:
         ac:95:a7:a6:15:66:3e:7b:3d:a0:e8:98:2f:f1:e5:42:0b:d8:
         6e:ff:e9:51:1e:7f:40:62:15:8d:d3:69:70:17:7a:1a:b4:22:
         28:0d:8d:fc:cc:dd:a4:bf:a6:47:a9:42:ec:54:02:0b:89:45:
         99:ab:a8:25:f3:b1:46:5b:63:dc:9c:26:2f:60:ff:ec:dd:f8:
         90:6e:a8:09:06:d4:4a:6b:7d:99:e4:e2:c8:d3:22:14:40:62:
         9c:e8:99:56:3c:a5:ed:e6:fd:0c:05:24:14:88:ee:d6:93:4f:
         8c:52:79:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:35:49 2026 by rpki-client