Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
File:                     E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft (raw, json)
Hash identifier:          9GU2YKx+/i7KjRDdFGO8c5OM28DVQ66LichKscQTnh4=
Subject key identifier:   F3:9D:D4:6C:99:3A:DA:22:9A:52:8E:45:D5:C6:A0:13:CB:B9:9C:C6
Authority key identifier: E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
Certificate issuer:       /CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Certificate serial:       732A83B34A111BE1DC5EF1E45233D8FEA0F7F98F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
Manifest number:          C2
Signing time:             Wed 23 Sep 2026 12:36:42 +0000
Manifest this update:     Wed 23 Sep 2026 12:31:42 +0000
Manifest next update:     Thu 24 Sep 2026 13:22:42 +0000
Files and hashes:         1: 3130332e31382e32382e302f32322d3234203d3e20313339393338.roa (hash: I7UPuFvym8p8pJP6diQSrrFx2chmGGAd+K6o7fzpvv0=)
                          2: 3230322e34332e3131342e302f32332d3234203d3e20313339393338.roa (hash: zkpoPaCvym1nePddds0Q6RkGOhVKM8mr34gyM4UC8cI=)
                          3: 3130332e31382e32382e302f32322d3234203d3e203435373036.roa (hash: Pn0Z404yzeHHtXmdQ9DEjG8okFo36OY3UkZiEWBYoXE=)
                          4: 32372e3132332e302e302f32312d3234203d3e203435373036.roa (hash: kKeNFgEWYpxJdEVxaw5r/j+gOBdLDAvajOzNPHKCcoc=)
                          5: 3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa (hash: Jc9uidaalUxZZcIN6U2HF/YTypqnkC1z9uB0RypRbr8=)
                          6: 3230322e34332e3131342e302f32332d3234203d3e203435373036.roa (hash: PwwIV0M1bktSo20UeNkcLhDf5y3VQGfSd2Gx4evwdcY=)
                          7: E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl (hash: DibPuIhuHQ8UGPPl6pzAVTB6jgKOroN9ahCotJ5V0NM=)
                          8: 3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa (hash: 89cfsFLBXkB3WFs7rNpw78ZZSzujq+PLIJTF9YsulHg=)
                          9: 32372e3132332e302e302f32312d3234203d3e20313339393338.roa (hash: CrDosYMbaMymGSuAwPQv1AxOjr/T7uHU3jsk81GEu9s=)
                          10: 323430363a613330303a3a2f33322d3332203d3e203435373036.roa (hash: LXNYT1nV1xGIxdVsRECQ3Cj/A4MmgkuRi4tC78/lvhM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
                          rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 13:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2a:83:b3:4a:11:1b:e1:dc:5e:f1:e4:52:33:d8:fe:a0:f7:f9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
        Validity
            Not Before: Sep 23 12:31:42 2026 GMT
            Not After : Sep 24 13:22:42 2026 GMT
        Subject: CN=F39DD46C993ADA229A528E45D5C6A013CBB99CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:38:95:55:8f:08:ce:92:12:52:db:68:7b:e2:
                    24:b8:6e:ae:fa:99:0a:f6:3a:1c:a1:d6:33:df:3a:
                    4d:e6:79:30:e2:45:60:2e:cf:0a:91:7e:7e:63:09:
                    cd:e9:b1:d2:68:ac:6a:b0:a4:18:2b:e1:19:25:02:
                    79:61:c4:8c:7c:6c:90:2e:8c:9d:30:b2:d9:6e:58:
                    e7:9e:63:10:a9:7a:55:62:ad:5f:c0:de:5d:1f:53:
                    fb:3e:a7:1f:68:39:25:2e:49:15:50:b7:c9:b2:a0:
                    be:44:12:06:38:d3:53:fc:1f:40:90:9c:96:36:d2:
                    de:75:3d:b1:d1:3c:cb:88:63:93:a1:5b:75:19:96:
                    7f:c4:42:62:b6:21:fb:86:e2:78:b2:45:98:5b:06:
                    25:62:c8:cb:93:59:a9:bb:5a:08:55:34:ab:5f:dd:
                    1d:5c:12:16:ed:84:0f:9e:3c:f9:a2:50:9f:9a:a2:
                    0f:e5:48:51:53:d6:ae:0c:25:9c:68:64:4d:9d:d4:
                    5c:90:de:9c:de:81:ba:c9:d5:29:46:7a:f4:e5:9c:
                    0e:7d:fc:8c:c5:f2:a4:8c:7f:8a:f9:c4:e7:d0:89:
                    1f:d1:4d:f1:7e:02:f3:66:e9:67:d0:97:35:2e:95:
                    cd:5c:01:a7:f0:dd:b7:e9:b1:11:a4:de:94:0a:76:
                    0b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9D:D4:6C:99:3A:DA:22:9A:52:8E:45:D5:C6:A0:13:CB:B9:9C:C6
            X509v3 Authority Key Identifier:
                keyid:E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:5c:a0:7a:4e:8d:34:b1:bd:7f:f7:a1:93:19:61:f7:50:96:
         00:ac:aa:19:62:b9:17:77:ff:fe:39:33:84:58:40:30:3a:00:
         79:09:ad:93:b8:0b:ce:e1:f7:98:d3:94:5a:4b:e6:20:82:ae:
         95:71:f0:1e:f3:fc:fa:fd:d2:3a:46:42:5f:7b:71:78:33:54:
         ac:83:c9:70:ef:a8:53:1d:ae:fe:62:c9:bc:ef:3c:b8:95:2b:
         6c:3d:04:bf:59:a6:10:7f:9d:94:95:e9:41:55:6b:ee:54:0d:
         7a:90:39:0b:b2:ae:00:e5:fa:f4:8a:2b:e2:18:50:8a:64:ae:
         6d:26:85:d4:81:f7:71:c7:27:39:64:99:ba:f9:ce:6e:c0:20:
         23:f7:94:9a:b8:9f:4b:6c:43:66:0b:1f:08:36:88:38:24:12:
         e6:4a:8f:dd:0e:8b:a4:f9:7a:03:a0:29:ed:b7:30:0a:eb:8b:
         9b:34:2b:1a:31:41:85:81:f4:72:de:68:e5:56:68:21:d5:25:
         0a:17:87:88:69:19:73:21:31:28:2d:31:ac:4e:cc:d8:55:2a:
         04:c8:96:01:b7:58:1e:73:8f:4a:eb:a3:17:29:01:ef:04:d7:
         52:2f:23:6a:20:57:53:e6:5a:9e:e4:19:72:9a:19:1b:22:b9:
         63:7d:a9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:02:52 2026 by rpki-client