Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft
File:                     01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft (raw, json)
Hash identifier:          glkNqw7LYO2ZKfeyar76r7I28nCTO7+N4Ef4IvgRV6U=
Subject key identifier:   8B:50:59:8C:47:5C:D7:8E:16:23:72:92:88:28:35:A2:48:BC:0A:53
Authority key identifier: 01:F3:24:EF:5A:8F:6A:CC:92:17:4D:6A:EE:D1:12:9E:16:23:A6:16
Certificate issuer:       /CN=01F324EF5A8F6ACC92174D6AEED1129E1623A616
Certificate serial:       505767F35FE0BAF0B96A3043A3F640B8CB2E7635
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft
Manifest number:          C3
Signing time:             Fri 25 Sep 2026 16:05:06 +0000
Manifest this update:     Fri 25 Sep 2026 16:00:06 +0000
Manifest next update:     Sat 26 Sep 2026 18:49:06 +0000
Files and hashes:         1: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (hash: VsXO58FTVSxasgY1Mnu3yqI7EZkkcRqpzQFvmDd4qLs=)
                          2: 01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl (hash: Lxs/hrCeSn6yuy6Xz7GN1mZqyFN07bI8VLda91/6Q94=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl
                          rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 17:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:57:67:f3:5f:e0:ba:f0:b9:6a:30:43:a3:f6:40:b8:cb:2e:76:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01F324EF5A8F6ACC92174D6AEED1129E1623A616
        Validity
            Not Before: Sep 25 16:00:06 2026 GMT
            Not After : Sep 26 18:49:06 2026 GMT
        Subject: CN=8B50598C475CD78E16237292882835A248BC0A53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3c:a3:b6:37:06:9b:52:0a:e7:1e:cb:cd:b8:
                    53:ef:1e:2d:83:99:13:c2:cf:6a:f8:56:7f:22:e7:
                    06:6b:8e:a6:0a:a1:cb:fa:d8:4c:3a:e7:25:21:73:
                    dd:1d:bd:47:a5:f5:dd:ca:ff:9a:86:52:40:11:12:
                    e8:4e:ca:93:18:7f:de:66:8a:7c:82:ea:b2:aa:21:
                    33:92:90:cb:66:1e:7d:6f:67:46:0d:e8:0b:d9:a5:
                    cc:4e:11:30:c5:05:05:05:41:90:18:3a:b5:6e:da:
                    95:34:cd:c7:e4:4a:a7:6e:7c:f5:5a:5b:1e:0d:82:
                    75:e1:e8:2d:b0:bf:60:be:01:05:58:24:45:ab:9f:
                    0e:0c:4a:01:d0:f2:48:72:d6:33:a1:10:2f:70:eb:
                    ac:ea:77:c4:16:04:7f:86:4f:7e:b3:6b:99:e1:f2:
                    7f:0d:0f:28:2d:19:33:ba:fd:72:57:6d:62:c2:ca:
                    fc:89:52:f3:9c:6b:dc:65:ed:6b:0c:8d:9c:60:e5:
                    aa:63:6b:ff:0a:d2:34:a8:7f:61:4e:57:5e:cd:de:
                    b4:6f:1b:5f:1b:33:f8:0f:54:9c:33:29:ae:71:87:
                    d0:50:f8:93:e5:e0:8c:25:63:59:2c:2a:f1:29:89:
                    1e:6b:b3:73:b6:e8:e5:6c:ea:b4:a8:a9:3f:70:d5:
                    a8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:50:59:8C:47:5C:D7:8E:16:23:72:92:88:28:35:A2:48:BC:0A:53
            X509v3 Authority Key Identifier:
                keyid:01:F3:24:EF:5A:8F:6A:CC:92:17:4D:6A:EE:D1:12:9E:16:23:A6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a8:b2:33:a2:04:7e:e6:71:fc:d6:57:64:7f:56:9f:44:5a:
         70:eb:29:31:ab:98:34:46:45:db:0b:03:b1:12:46:c7:bd:ea:
         8c:88:9c:55:22:91:3f:fc:9a:9e:d2:8d:d4:d5:bd:11:4d:17:
         af:ca:dd:4b:20:19:51:ac:25:a1:75:ff:f0:c2:b0:02:51:84:
         d2:36:99:3a:cb:34:c9:b6:79:90:99:40:9d:80:39:ee:1d:02:
         37:db:19:77:76:71:53:e4:c7:7b:24:ad:ff:ee:f7:c3:d7:cd:
         b6:46:5d:f9:8e:07:33:3d:56:47:48:6f:20:58:23:11:db:16:
         d3:cc:1c:89:1f:5f:e6:a8:1b:d9:11:54:08:72:74:6a:85:5f:
         5e:40:92:44:d9:fe:6c:a3:b6:e0:1d:f2:d5:1b:8f:57:62:c9:
         63:9a:f6:f9:8f:92:70:37:29:ef:f1:77:a5:aa:84:dd:ba:af:
         50:15:2c:f4:90:a1:2c:5e:35:29:6a:47:0d:49:61:f0:93:b9:
         90:3a:e9:a4:08:cc:90:85:91:99:2a:95:94:43:65:ba:a9:f4:
         7b:fe:bf:74:af:2b:57:cd:a3:b4:8f:cb:fd:f5:10:8e:f7:ac:
         f3:67:1b:8c:2c:b1:04:bf:1a:3e:45:9f:01:e1:8a:7a:ab:d8:
         9c:48:71:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:07:42 2026 by rpki-client