Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft
File:                     1029DD535EA34FFB57B387F3086D6C55F6685227.mft (raw, json)
Hash identifier:          mex6LaVAhH17sBrBvvlWBDt4caVQyDvBP01pHQtPX2A=
Subject key identifier:   22:E2:7E:DA:D1:02:CA:E6:30:DD:A5:15:7C:2C:AE:2E:FC:FA:3F:C7
Authority key identifier: 10:29:DD:53:5E:A3:4F:FB:57:B3:87:F3:08:6D:6C:55:F6:68:52:27
Certificate issuer:       /CN=1029DD535EA34FFB57B387F3086D6C55F6685227
Certificate serial:       09B7528050FB8BB1F77AC2CD2D54C6F6CE1DAD14
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft
Manifest number:          C3
Signing time:             Thu 24 Sep 2026 03:29:56 +0000
Manifest this update:     Thu 24 Sep 2026 03:24:56 +0000
Manifest next update:     Fri 25 Sep 2026 05:11:56 +0000
Files and hashes:         1: 323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa (hash: jjOCUf6cliEtxrLXbZn2dk07IB2wq2ND31yEFCqIvbc=)
                          2: 3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa (hash: QFaIaeqQHBfggokFY9Zd55eDaonsJzUZS5+52YBP+KY=)
                          3: 1029DD535EA34FFB57B387F3086D6C55F6685227.crl (hash: hurIVpdDYauX3HgsKP+EtSPFyrOUfugWnvC8osGvYV0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.crl
                          rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 05:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b7:52:80:50:fb:8b:b1:f7:7a:c2:cd:2d:54:c6:f6:ce:1d:ad:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1029DD535EA34FFB57B387F3086D6C55F6685227
        Validity
            Not Before: Sep 24 03:24:56 2026 GMT
            Not After : Sep 25 05:11:56 2026 GMT
        Subject: CN=22E27EDAD102CAE630DDA5157C2CAE2EFCFA3FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:c2:30:09:f3:98:2f:b5:74:2d:49:d1:0c:
                    41:7a:39:55:bc:f7:d1:85:d9:93:df:b8:d4:19:4a:
                    89:32:c0:88:7d:b8:e8:3b:83:04:8f:92:a0:66:74:
                    75:f8:ba:1d:c3:09:6e:91:fe:14:2b:d8:60:65:f4:
                    f6:9b:b8:d2:12:8a:d2:16:54:cc:bb:ce:13:f5:95:
                    f2:76:e5:bc:d0:d4:08:31:f1:9e:59:07:c2:84:1d:
                    c4:a5:06:56:9e:de:05:ea:73:8f:1f:a1:2d:41:99:
                    9b:a6:2c:f4:29:d1:f9:6b:1b:a3:ac:51:77:f8:a5:
                    29:b3:d7:52:bc:46:86:3b:bf:68:1f:ef:25:6e:d2:
                    7c:9a:40:2b:b0:1d:e8:a3:1a:6c:e1:92:b7:91:3f:
                    2c:9d:6c:3e:f0:74:a4:d3:7a:bc:a5:d6:cc:a4:07:
                    d1:e9:be:d1:11:3a:8f:02:12:94:a8:8d:60:35:e6:
                    96:60:cf:0c:3b:bb:b0:d1:65:a1:af:8d:f1:6f:28:
                    48:07:05:4d:52:f2:2b:35:8e:57:46:97:9f:b2:7d:
                    8f:11:b9:38:9b:0f:51:53:bd:7c:c4:00:55:fd:bc:
                    1e:d4:c6:a8:b6:c0:28:13:17:07:48:23:93:32:e2:
                    20:e3:21:c7:6f:95:a9:02:d7:b9:73:82:54:79:b9:
                    a6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E2:7E:DA:D1:02:CA:E6:30:DD:A5:15:7C:2C:AE:2E:FC:FA:3F:C7
            X509v3 Authority Key Identifier:
                keyid:10:29:DD:53:5E:A3:4F:FB:57:B3:87:F3:08:6D:6C:55:F6:68:52:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ea:3e:c8:1f:4f:43:7d:09:0c:ce:b1:ff:a1:88:d3:50:d3:
         d2:fc:ce:8e:5d:4c:00:36:00:7f:8b:c5:4f:d9:30:8c:5f:64:
         43:d3:42:9b:a8:e9:49:66:5d:0e:a4:d0:d9:5d:1c:23:70:ea:
         98:11:53:09:66:23:55:d8:f5:6a:21:3a:2b:cc:05:5c:0d:03:
         6c:8b:24:19:09:32:42:f1:de:0a:f5:44:3a:0b:51:b2:5d:96:
         9e:87:83:69:e3:da:ea:fb:ff:37:2b:85:2c:45:a3:33:29:9e:
         19:56:33:9c:58:6c:ab:c1:21:8d:1f:3a:3b:42:56:8a:0c:5b:
         ad:a4:b5:06:75:9b:e7:e3:20:bf:df:e6:2c:86:b3:6a:3a:17:
         f3:46:f6:98:56:78:c6:c9:96:cf:8c:a8:05:e2:c0:59:41:7a:
         9e:70:a5:68:ca:f3:de:28:95:2b:8c:16:05:9a:3d:e1:8f:2f:
         5c:1d:93:41:63:0e:7d:64:8d:cf:f3:a5:95:99:4c:62:bb:af:
         2d:63:3d:78:d4:be:18:7f:df:6a:76:2e:dd:62:94:e9:c4:ed:
         d7:64:c5:0c:43:3c:77:0f:0e:26:46:be:db:9f:c9:12:4b:3d:
         cc:71:f7:ef:a1:0e:a3:7c:e8:1c:e5:e3:a7:f6:ae:80:39:29:
         74:7e:e0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:22:11 2026 by rpki-client