Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft
File:                     F03310D1D60B7C8D4880FEE5263129029C23044D.mft (raw, json)
Hash identifier:          pi6Go2gMruo0fRcBYLrQnTurPGsZ9C8waxmSpg8XijM=
Subject key identifier:   7B:3D:04:F6:58:20:1A:1E:21:F1:A8:5A:E4:40:EA:73:49:59:06:A8
Authority key identifier: F0:33:10:D1:D6:0B:7C:8D:48:80:FE:E5:26:31:29:02:9C:23:04:4D
Certificate issuer:       /CN=F03310D1D60B7C8D4880FEE5263129029C23044D
Certificate serial:       0BE3CBBC6D5A309426F838D6F737533517040C39
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F03310D1D60B7C8D4880FEE5263129029C23044D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft
Manifest number:          C1
Signing time:             Thu 24 Sep 2026 02:33:46 +0000
Manifest this update:     Thu 24 Sep 2026 02:28:46 +0000
Manifest next update:     Fri 25 Sep 2026 02:56:46 +0000
Files and hashes:         1: 3230322e35322e35392e302f32342d3234203d3e203436303538.roa (hash: oj0326y5Cx12gm92v2QPQwGd5h65A9BVPedBNOtACzM=)
                          2: 3230322e35322e35382e302f32342d3234203d3e203436303538.roa (hash: bhgEzRyKQSZ7x2UAdJ2y1POX6pQ5rtoByHdLeBGdbwk=)
                          3: F03310D1D60B7C8D4880FEE5263129029C23044D.crl (hash: yQ9xv2oY4C2sjOcNT+SkGRpw9Zb4z+nrV1UKEP1jrP8=)
                          4: 3230322e35322e35382e302f32332d3233203d3e203436303538.roa (hash: 0UDfWdK0ccDtOWv3TneU4N8dGsBm8DxDAXGKlhp/dv4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.crl
                          rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F03310D1D60B7C8D4880FEE5263129029C23044D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 02:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e3:cb:bc:6d:5a:30:94:26:f8:38:d6:f7:37:53:35:17:04:0c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F03310D1D60B7C8D4880FEE5263129029C23044D
        Validity
            Not Before: Sep 24 02:28:46 2026 GMT
            Not After : Sep 25 02:56:46 2026 GMT
        Subject: CN=7B3D04F658201A1E21F1A85AE440EA73495906A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0d:d2:de:23:39:fb:89:db:f7:cc:72:7f:64:
                    9e:9f:5c:c7:c6:3f:ff:73:92:5d:07:65:41:e1:7c:
                    8a:77:6d:52:a4:69:30:f7:3f:e7:a3:4f:b5:91:ec:
                    b0:0d:b9:59:cf:50:60:88:18:c4:a7:fd:21:bb:e9:
                    dd:e1:88:4c:73:6a:0d:c4:dc:12:8e:dd:69:ca:17:
                    e4:2b:2b:b4:f4:40:26:ea:fd:03:d6:aa:93:9c:9b:
                    05:82:a6:95:a3:8f:45:26:f3:64:ec:6e:40:55:cd:
                    cd:0f:b5:90:c2:e7:fd:86:39:fe:7f:9d:54:66:02:
                    71:e5:0e:34:77:db:19:ff:55:75:ec:56:7b:55:f0:
                    e1:6f:64:ee:89:b5:ee:ee:7f:db:03:f5:b7:2e:95:
                    69:a8:f9:2a:64:d3:86:8e:8f:01:72:38:a4:d5:fe:
                    db:30:ef:e9:4d:9d:20:6b:1e:d8:13:0a:fe:57:93:
                    07:11:57:52:93:8b:4c:36:62:06:b3:be:1c:8c:5c:
                    59:07:b7:3a:63:f1:df:f7:8b:df:3d:7c:48:72:55:
                    3b:cb:70:77:e2:14:15:33:4e:49:ed:eb:22:af:27:
                    b5:da:ad:9a:fc:c1:e4:2c:2a:99:0c:8f:59:eb:86:
                    6f:5e:40:0d:e4:ea:c8:36:07:e3:dd:96:c2:e5:5b:
                    ba:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3D:04:F6:58:20:1A:1E:21:F1:A8:5A:E4:40:EA:73:49:59:06:A8
            X509v3 Authority Key Identifier:
                keyid:F0:33:10:D1:D6:0B:7C:8D:48:80:FE:E5:26:31:29:02:9C:23:04:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F03310D1D60B7C8D4880FEE5263129029C23044D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:01:89:b3:83:68:1d:3e:8f:c4:82:67:f2:c3:1f:c3:d7:d1:
         59:9d:34:87:9e:db:7a:e1:ca:74:26:dd:c8:44:95:11:ef:7c:
         4e:89:77:9a:d9:08:c5:5d:75:55:b7:df:4e:44:94:4a:3f:b9:
         24:c8:3d:46:d9:62:ca:10:5b:19:55:bb:a5:07:0f:75:80:70:
         c5:6a:5a:0c:ab:fb:69:4e:3d:6b:03:1c:65:30:12:0a:2f:55:
         54:7f:c1:83:78:87:10:37:79:e5:1e:23:c4:c1:db:8d:e8:b0:
         3c:d7:ab:53:1b:0d:a3:31:d3:b5:49:71:1d:d4:ff:75:bd:0f:
         39:4c:97:f4:d4:ec:19:0e:fd:bb:ca:7d:16:39:07:98:d4:87:
         e1:4b:0d:51:76:ad:6f:9e:0f:22:5b:60:ef:41:68:c9:9d:6e:
         ad:17:fd:2a:be:23:8d:56:be:64:f5:4b:89:12:c6:e8:07:1f:
         dd:58:bb:c4:c8:c5:ee:10:2d:3f:0f:9e:d3:8d:14:f2:34:52:
         cf:5a:80:9f:6f:92:80:51:e4:13:d9:7f:bd:8b:e7:c4:64:98:
         37:bc:6a:8c:be:da:ee:59:60:32:21:bb:ed:ec:e9:80:10:2f:
         ae:6c:3c:63:03:3b:f7:92:d6:8a:a0:63:43:72:d8:99:60:ae:
         ae:30:cb:fb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUC+PLvG1aMJQm+DjW9zdTNRcEDDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjAzMzEwRDFENjBCN0M4RDQ4ODBGRUU1MjYzMTI5MDI5
QzIzMDQ0RDAeFw0yNjA5MjQwMjI4NDZaFw0yNjA5MjUwMjU2NDZaMDMxMTAvBgNV
BAMTKDdCM0QwNEY2NTgyMDFBMUUyMUYxQTg1QUU0NDBFQTczNDk1OTA2QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSDdLeIzn7idv3zHJ/ZJ6fXMfG
P/9zkl0HZUHhfIp3bVKkaTD3P+ejT7WR7LANuVnPUGCIGMSn/SG76d3hiExzag3E
3BKO3WnKF+QrK7T0QCbq/QPWqpOcmwWCppWjj0Um82TsbkBVzc0PtZDC5/2GOf5/
nVRmAnHlDjR32xn/VXXsVntV8OFvZO6Jte7uf9sD9bculWmo+Spk04aOjwFyOKTV
/tsw7+lNnSBrHtgTCv5XkwcRV1KTi0w2YgazvhyMXFkHtzpj8d/3i989fEhyVTvL
cHfiFBUzTknt6yKvJ7XarZr8weQsKpkMj1nrhm9eQA3k6sg2B+PdlsLlW7rJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUez0E9lggGh4h8aha5EDqc0lZBqgwHwYDVR0j
BBgwFoAU8DMQ0dYLfI1IgP7lJjEpApwjBE0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTJlMjNkYzQtNGZkNS00M2UyLWJiNmEtNGZkYzM4N2ViYzU4LzAvRjAzMzEwRDFE
NjBCN0M4RDQ4ODBGRUU1MjYzMTI5MDI5QzIzMDQ0RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMDMzMTBEMUQ2MEI3QzhENDg4MEZFRTUyNjMxMjkwMjlDMjMw
NDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJlMjNkYzQtNGZkNS00M2UyLWJi
NmEtNGZkYzM4N2ViYzU4LzAvRjAzMzEwRDFENjBCN0M4RDQ4ODBGRUU1MjYzMTI5
MDI5QzIzMDQ0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGwBibODaB0+j8SCZ/LDH8PX0VmdNIee23rh
ynQm3chElRHvfE6Jd5rZCMVddVW3305ElEo/uSTIPUbZYsoQWxlVu6UHD3WAcMVq
Wgyr+2lOPWsDHGUwEgovVVR/wYN4hxA3eeUeI8TB243osDzXq1MbDaMx07VJcR3U
/3W9DzlMl/TU7BkO/bvKfRY5B5jUh+FLDVF2rW+eDyJbYO9BaMmdbq0X/Sq+I41W
vmT1S4kSxugHH91Yu8TIxe4QLT8PntONFPI0Us9agJ9vkoBR5BPZf72L58RkmDe8
aoy+2u5ZYDIhu+3s6YAQL65sPGMDO/eS1oqgY0Ny2Jlgrq4wy/s=
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:57:49 2026 by rpki-client