Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
File:                     4493CC2E574126EF2608CAE173DD92103E76A98C.mft (raw, json)
Hash identifier:          KuJSXZApnsQ6BzJAF9CQQziVWtFSmtOK5Efv8IpTBdI=
Subject key identifier:   A3:3B:F7:4D:C5:96:F6:13:AD:1C:1D:4C:C8:6B:D5:90:C5:5C:92:4B
Authority key identifier: 44:93:CC:2E:57:41:26:EF:26:08:CA:E1:73:DD:92:10:3E:76:A9:8C
Certificate issuer:       /CN=4493CC2E574126EF2608CAE173DD92103E76A98C
Certificate serial:       30A992398E8DE2318D3BFD63503CE1BE7A19C125
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
Manifest number:          C2
Signing time:             Thu 24 Sep 2026 15:14:43 +0000
Manifest this update:     Thu 24 Sep 2026 15:09:43 +0000
Manifest next update:     Fri 25 Sep 2026 16:50:43 +0000
Files and hashes:         1: 3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (hash: M2aI0TJnAz0O76NPtC1fdB1sxAIiTB3vENA8aunOOWY=)
                          2: 4493CC2E574126EF2608CAE173DD92103E76A98C.crl (hash: kICWK1ZYCooz3g3SUfh61uLBA0w9JCmMwWX/Df2Xzr4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.crl
                          rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 11:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a9:92:39:8e:8d:e2:31:8d:3b:fd:63:50:3c:e1:be:7a:19:c1:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4493CC2E574126EF2608CAE173DD92103E76A98C
        Validity
            Not Before: Sep 24 15:09:43 2026 GMT
            Not After : Sep 25 16:50:43 2026 GMT
        Subject: CN=A33BF74DC596F613AD1C1D4CC86BD590C55C924B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:69:8b:a6:df:45:d7:4d:0e:6f:48:a6:d4:be:
                    ae:66:de:b9:89:08:5a:b5:49:50:3f:9b:ff:c0:82:
                    dd:a7:b0:59:f6:3b:92:de:3d:11:6b:c2:56:0e:fe:
                    f4:2b:34:5b:11:d4:1c:8c:49:6c:dd:56:35:81:22:
                    f0:43:91:b2:05:82:05:e8:25:54:9f:53:a5:31:48:
                    aa:e9:be:66:28:ee:e1:4f:c1:27:97:d8:3a:4b:0d:
                    d0:b3:39:ba:87:50:d8:85:3a:4e:31:c4:7c:bb:38:
                    88:a7:9f:50:40:ce:72:a6:d5:96:a3:46:a3:3e:5e:
                    89:39:36:6d:0f:ad:cd:c3:e5:7e:cd:68:cf:f9:5b:
                    c9:c2:a6:f4:3e:c2:29:88:4a:95:f5:d7:1d:db:93:
                    18:34:fe:1b:05:bd:bc:b0:6e:6f:8e:89:30:17:11:
                    7a:f5:e7:d6:43:14:40:86:98:a1:96:22:ab:33:98:
                    f6:bf:95:e5:18:05:ed:54:c3:c2:30:7e:b4:ae:d6:
                    27:9d:af:1c:5f:2d:37:ee:5c:1a:59:5f:b0:21:a3:
                    a0:e7:1e:87:1c:d2:4d:ad:98:62:ca:c9:4e:d9:96:
                    73:50:bd:18:1f:5d:eb:44:10:f1:b8:c9:50:ec:5c:
                    6a:d6:a9:08:ef:51:49:bc:4a:1c:9f:cc:bb:0c:79:
                    68:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3B:F7:4D:C5:96:F6:13:AD:1C:1D:4C:C8:6B:D5:90:C5:5C:92:4B
            X509v3 Authority Key Identifier:
                keyid:44:93:CC:2E:57:41:26:EF:26:08:CA:E1:73:DD:92:10:3E:76:A9:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:91:fc:3d:5d:2d:a5:c3:e2:ee:c6:1a:6f:18:05:92:21:66:
         09:64:a7:66:f0:29:04:b8:ef:ec:5c:fe:54:2e:7c:68:f1:ef:
         4a:8e:89:ec:85:2b:7f:b6:0f:c8:2c:d1:96:08:60:4c:8a:c8:
         dd:f8:42:fb:89:d5:4d:16:0f:fd:56:5f:92:cd:c9:66:8e:72:
         05:b4:47:3e:c0:c2:c2:c0:6b:26:db:0e:b9:a3:23:81:d6:06:
         8e:ac:15:00:ef:91:1c:39:46:73:f8:2f:05:b1:bf:0b:e3:73:
         4d:33:82:39:8c:4c:16:4f:3a:fc:c0:ae:d1:e8:52:80:c9:68:
         ab:f6:df:fb:38:9c:b1:b7:23:78:9c:a2:12:4c:83:ef:1c:2c:
         6b:e8:b6:cc:cd:6b:ff:54:e5:78:37:ca:aa:87:92:f4:8f:88:
         4b:fa:39:5a:48:bf:03:88:02:e7:da:96:32:a0:44:fd:e2:7a:
         b1:63:ba:c9:9d:cc:a6:a8:b1:48:85:56:cc:74:14:e9:af:3d:
         ef:48:b9:e4:5c:21:fb:14:57:8c:34:b6:e7:41:b9:4f:5f:59:
         d9:89:d8:42:be:9e:72:0e:4c:61:42:3c:cf:6a:14:24:d6:0d:
         ad:6a:bd:aa:0b:1c:fe:21:9c:ee:1e:dd:bd:c1:d7:90:92:94:
         d2:4c:63:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:41:33 2026 by rpki-client