Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
File:                     C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft (raw, json)
Hash identifier:          usrIVrgYDQKKeTBWMyCtgVgTUD0uNzr9SLCubFk4JEY=
Subject key identifier:   7D:6E:32:0F:DD:97:1E:B1:13:51:D2:58:6A:43:B5:7A:26:85:D9:03
Authority key identifier: C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
Certificate issuer:       /CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Certificate serial:       688384AF9C2489A9A84B72DB166A88951206AC9C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
Manifest number:          C2
Signing time:             Thu 24 Sep 2026 02:13:22 +0000
Manifest this update:     Thu 24 Sep 2026 02:08:22 +0000
Manifest next update:     Fri 25 Sep 2026 05:52:22 +0000
Files and hashes:         1: 323430353a633434303a3a2f34382d3438203d3e20313339393732.roa (hash: GmyelAbGRQ5SP8uRB6uS1B5fEbf73mIPEGvTxHlDalw=)
                          2: 323430353a633434303a343a3a2f34382d3438203d3e20313339393732.roa (hash: eSA0GQYXA6tg4+rkB8mxLDGNoUJioqVLKpYyhC0BS7U=)
                          3: 323430353a633434303a393937323a3a2f34382d3438203d3e20313339393732.roa (hash: 7Wb8fPONNSHduul65dwelIc5/5kXZaXJePQ0HGB2Z20=)
                          4: 323430353a633434303a363a3a2f34382d3438203d3e20313339393732.roa (hash: 7F3WHLtEBntcrb4Ca+IwDZrHiakbSxJ9WK4RTWEn7q0=)
                          5: 323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa (hash: MRewP/mtcTmJvmAEti0jSDsyTirqW1oh+hUXZAYwK5M=)
                          6: 323430353a633434303a383a3a2f34382d3438203d3e20313339393732.roa (hash: XchOovNPvuofEcM3x4SJA/BJsOE2uDXK+i/n28/FDPQ=)
                          7: 323430353a633434303a313339393a3a2f34382d3438203d3e20313339393732.roa (hash: 7M/FpUDv0etwwu7ylJGJwAxNu3aekwI0m/HD51uF5Dg=)
                          8: 323430353a633434303a313a3a2f34382d3438203d3e20313339393732.roa (hash: +gpInYVfvDiUSg/ougsXZafgspK8aDfkWjNloNqtcJo=)
                          9: 323430353a633434303a323a3a2f34382d3438203d3e20313339393732.roa (hash: 6/n96Pug9V/OAfQQphzWdcVB4O+JA7BIOnJOjVVmWls=)
                          10: 323430353a633434303a393a3a2f34382d3438203d3e20313339393732.roa (hash: F4qXlNeW0qMmxaj0GytT6W5hjXADsYd42e+bOrj63To=)
                          11: 3130332e3134372e3234362e302f32332d3233203d3e20313339393732.roa (hash: 4yca+vF1UEkWkMfF4Bm7NWEBGak9nR/PsFLSUJTZc44=)
                          12: 323430353a633434303a3a2f33322d3332203d3e20313339393732.roa (hash: cPKV+RkV9s2A7YW1XiIN+pJgqnPcjdsqF0sGTYEVCuI=)
                          13: 323430353a633434303a653a3a2f34382d3438203d3e20313339393732.roa (hash: y68zFHghkSdjU7J3SSHx7a8FsoE9RE4A/YK0EM7QaeE=)
                          14: 323430353a633434303a333a3a2f34382d3438203d3e20313339393732.roa (hash: lue+qbDlTK8oVnigyB8upc57ElW1RteDV+iRS2CqRWY=)
                          15: C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl (hash: A9/eCT1dDJh+HQWKKkkg/dxYk2vYzRZAZWScMAgUt6I=)
                          16: 3130332e3134372e3234372e302f32342d3234203d3e20313339393732.roa (hash: 9v+/PAaAE3kB2jpL2nLAR6QUmzPRV+VwUIaowltdzjk=)
                          17: 323430353a633434303a353a3a2f34382d3438203d3e20313339393732.roa (hash: zxv50OB8eGnHw7wW65EFpQvLtNsIgME3y6GGTkZ9Hew=)
                          18: 3130332e3134372e3234362e302f32342d3234203d3e20313339393732.roa (hash: V0mbiV9kDw2cL8Vw5/to3TzMKA3DdBl/9Mpx2BO1J+s=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
                          rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:83:84:af:9c:24:89:a9:a8:4b:72:db:16:6a:88:95:12:06:ac:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
        Validity
            Not Before: Sep 24 02:08:22 2026 GMT
            Not After : Sep 25 05:52:22 2026 GMT
        Subject: CN=7D6E320FDD971EB11351D2586A43B57A2685D903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:36:26:59:67:0b:10:a9:4b:d3:b9:45:08:
                    f4:ec:ea:51:6c:00:b5:59:58:af:48:d8:d5:0b:46:
                    76:eb:aa:f7:6c:51:42:25:7b:dc:c9:ae:43:a1:c5:
                    03:a8:2f:bd:0c:23:a9:6b:9c:88:8b:c5:eb:6a:73:
                    92:6a:e7:91:7d:2d:53:ab:0d:23:3e:99:03:5f:33:
                    c6:5e:b9:0f:7f:8a:9f:de:6c:f7:d3:34:7b:e3:5e:
                    13:e9:ec:6c:9f:72:8e:63:97:40:40:2d:b0:d1:09:
                    cd:34:2a:01:e0:6e:41:2b:bb:64:da:10:0e:7f:70:
                    dd:db:be:1c:d6:63:b0:6f:fc:1b:4a:3b:bd:ef:c1:
                    54:2c:6f:5a:63:bd:d1:a9:ea:51:0f:31:fb:c6:c9:
                    a9:3c:ae:df:82:92:a7:53:c1:36:4c:23:71:4a:a1:
                    84:ad:42:d1:63:9e:eb:04:28:47:3f:b7:51:9d:83:
                    3f:c1:4c:44:ec:ac:67:e9:fa:a4:29:35:eb:31:d4:
                    22:db:9c:62:67:e6:3d:9b:a3:19:0b:f4:a6:ac:8c:
                    0e:a7:cf:67:03:97:0d:ce:9f:78:66:a2:1e:30:09:
                    5d:5f:0c:64:49:e0:b7:33:39:88:2c:55:3a:9f:1b:
                    37:b4:24:1d:56:aa:c9:04:db:38:3f:b0:62:59:87:
                    51:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6E:32:0F:DD:97:1E:B1:13:51:D2:58:6A:43:B5:7A:26:85:D9:03
            X509v3 Authority Key Identifier:
                keyid:C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f8:a2:95:3f:b8:bf:c5:d0:93:12:76:62:07:c7:6d:10:a4:
         02:80:3f:3b:23:a7:9e:52:1f:b5:5c:fc:1c:43:7e:7f:c3:14:
         d0:de:1d:44:cc:7f:16:46:76:cd:d5:0a:7e:f0:0f:15:94:9e:
         9d:a2:61:4f:a2:5c:8f:d8:2a:3c:e6:8a:99:4f:c7:09:59:1f:
         0f:3c:b2:4b:1a:1b:f2:c0:48:c5:d4:31:c6:ae:ee:41:59:1b:
         e5:92:b6:d1:13:c1:bd:2f:43:2a:36:e2:f6:54:dd:19:25:9e:
         6a:ae:c7:f8:5a:f5:1c:4c:d5:6d:98:b5:c0:9b:cd:00:97:7d:
         3d:d3:7f:3a:24:87:4f:5a:6d:ae:6a:51:68:a4:38:b9:4e:79:
         8d:7a:6c:ef:54:8e:59:66:83:50:e9:96:47:83:b0:e9:6a:da:
         8a:ef:a5:9d:2b:7b:e4:ec:e5:b3:6c:3a:c1:db:39:ac:83:f5:
         4d:c7:c2:39:e8:b2:41:24:4f:32:4d:c5:25:4e:b4:94:e0:b8:
         85:e8:e3:eb:8f:00:e8:b4:0c:86:9d:31:c1:75:60:c3:a4:a7:
         9e:02:9a:21:38:a0:86:16:4c:43:08:ff:2c:2c:93:0b:70:9b:
         56:23:0d:99:35:5a:72:04:19:77:91:9e:b9:46:ee:48:7d:9c:
         42:7e:87:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:20:35 2026 by rpki-client