Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
File:                     1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft (raw, json)
Hash identifier:          0oTLuN/zJZ8sFhxgk3FOVow391doxXZft7dXdPcAl/w=
Subject key identifier:   FE:FA:FC:1F:6A:EF:D6:1D:73:A2:09:01:57:63:68:40:B2:10:7C:28
Authority key identifier: 1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
Certificate issuer:       /CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Certificate serial:       25AD4FE957A616D0DEBDCE11C3966F6900C37B7F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
Manifest number:          C3
Signing time:             Thu 24 Sep 2026 23:04:04 +0000
Manifest this update:     Thu 24 Sep 2026 22:59:04 +0000
Manifest next update:     Sat 26 Sep 2026 01:27:04 +0000
Files and hashes:         1: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: W4OxxH0PyquWwT3oVoi6TfL9I1tMai3D4cWcBmXRIg8=)
                          2: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: 6jdofG9Wtkc0Blm7BytpJS1luG4FVORdWSiFv1pRnGo=)
                          3: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: kPTHx+hWG+LDuE6CeeYUrKB6mmUM7VHlb/As0JV8R5Y=)
                          4: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: YLpNL78dS+hrdN7t5xzPdvLY1lNxrdFsxq9VzIbxRC4=)
                          5: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: SBWhEba9nbctUyFhfmHmCGJfJLFuvZIwVJb4MxQzTUY=)
                          6: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: ZERu879JSfInetFD6X8u09OHoVJYMOwx32bifQ58o0I=)
                          7: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 5ASXDenOep5Tt7YJZHbFIGXZ+8+G0rFlHOjdxQjS0ok=)
                          8: 3230332e3137332e39312e302f32342d3234203d3e20313339343630.roa (hash: NOo+o1xJtEt1kXlDwTIpF0OuzTUZnud5A2M0CHSRBk0=)
                          9: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: CuN94QnhhFu2NHfTipRrUMIPrCdOqqGtN3MEo0A8ZXk=)
                          10: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: WvBKlshkFphXVWmpSdt/+evxZdbmBKGdDC7K6rMtEn8=)
                          11: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: NsGf/NKjXysT0NZWo8Ns+ZYja/LdeVhLVXCJP5P2m74=)
                          12: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: fH8oSgU7fmQVwzRayIdktJrCM/nMbyH0Ngj6vCl4r/k=)
                          13: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: 2n5/F9J9TnrohLmnHa9IVjRQNfO2Fv9UX/IHQLPC0cc=)
                          14: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: 8rfx5hsa0X1hhhAYAV+GnW9jNKRrSym9Qaq/7mxW1Sk=)
                          15: 1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl (hash: Zj4KMrDUN2esjrdMnZruHXpBto8iWyjZKaJXlKMUeNk=)
                          16: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: 6UH8eYTOp0aY/zXHw+l1TECmEHZ7Z5b3t8oyY92k670=)
                          17: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: Rpm98TP8lpn5L0MciL+HgBtsQPS4AoEpZ3E+uKifZME=)
                          18: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: AyON9uU/2WhJhJicI2tnaqaN5CXoHp/HaUSy7Pc2unw=)
                          19: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: pGgVnEQzqbPIt26vgoTmZkdvlEMdwjiT5NsiAgvS52I=)
                          20: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: zQ39zo17bNTdHhQWmkLn9luFrVhzUw3k/+vmz2gMem8=)
                          21: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: 5B5+pc329D1iQV3SlgDy544BDthefmzEqIq6UspEPv0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
                          rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 10:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ad:4f:e9:57:a6:16:d0:de:bd:ce:11:c3:96:6f:69:00:c3:7b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
        Validity
            Not Before: Sep 24 22:59:04 2026 GMT
            Not After : Sep 26 01:27:04 2026 GMT
        Subject: CN=FEFAFC1F6AEFD61D73A2090157636840B2107C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2e:a5:4c:b1:83:3f:c8:27:bb:6a:c7:da:8a:
                    c2:fa:2d:ed:52:ba:ee:92:7d:86:3d:81:16:92:97:
                    59:47:f4:d1:75:3d:7e:ae:ec:4a:8e:f8:62:af:cd:
                    e8:a4:ba:d2:18:0c:87:c3:32:b1:9a:75:0f:99:36:
                    83:bb:da:25:5d:c7:e3:84:2d:b6:86:a7:f3:21:b9:
                    ac:f8:02:7c:de:60:fe:b2:06:06:6e:36:f1:01:4c:
                    69:7c:2a:17:82:37:b3:d6:7c:9f:fa:84:f9:7f:0c:
                    83:43:50:54:31:f2:4c:56:c5:8c:48:6c:8b:c2:c0:
                    72:09:c5:86:a3:24:39:f3:40:a0:93:3c:ec:3d:67:
                    14:6e:dd:e4:90:20:22:e5:2e:6f:e8:e4:2e:75:66:
                    c9:e0:1c:8e:56:b6:27:25:18:07:64:59:d6:92:9f:
                    61:31:97:e7:f2:fa:cc:19:07:0b:b1:ad:98:2d:51:
                    d9:9c:d0:d8:fa:f0:12:bf:29:63:44:94:34:e8:92:
                    37:60:78:fa:fe:04:79:64:06:76:53:d7:73:75:0e:
                    39:67:33:9c:cd:4e:d6:a6:73:32:59:e5:7c:8e:a4:
                    cc:26:af:98:b1:9b:4f:31:d8:80:db:f0:fa:cb:a9:
                    78:d2:22:7d:63:49:c6:1b:b3:52:20:d2:91:1e:bb:
                    bf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FA:FC:1F:6A:EF:D6:1D:73:A2:09:01:57:63:68:40:B2:10:7C:28
            X509v3 Authority Key Identifier:
                keyid:1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:7f:95:96:6b:67:65:1c:c6:ce:2e:eb:44:0b:c1:3b:09:e8:
         ae:65:8c:40:50:d2:09:a4:e0:91:4b:ac:ae:5a:fd:cc:f6:83:
         9a:a6:cf:92:11:c6:c6:c0:45:d4:56:03:35:3d:fd:64:fe:8c:
         14:75:05:9e:5f:7c:27:eb:9e:83:c5:a9:33:4d:7f:b2:35:ac:
         f3:f4:39:5a:aa:49:de:c2:90:68:69:68:fd:0f:ec:32:3d:f5:
         67:13:b7:bf:55:6f:e4:5c:52:b4:e2:38:94:2d:ff:83:a1:1c:
         34:6a:0e:d8:9b:bd:48:1f:ea:33:47:c2:3e:d2:15:ee:8c:1d:
         1b:95:3f:e0:8d:7d:3f:b2:2c:dc:c5:4e:ae:40:54:e7:2d:2d:
         67:fa:cd:66:15:34:a7:0d:16:cb:4d:d9:80:aa:d5:ad:24:71:
         bb:ec:47:af:d5:fd:77:c1:eb:5b:55:47:6b:30:70:54:9a:80:
         d4:92:1b:02:09:ff:f1:1a:0d:50:1f:db:0e:e6:30:bc:ac:bf:
         5a:00:dd:7d:22:c0:e1:ed:d1:23:d9:dd:37:0d:be:e6:19:5d:
         1d:6b:b5:69:68:04:e1:09:3c:44:9a:b5:94:25:ad:05:c7:8c:
         b1:b4:d0:c8:49:b5:4b:2b:b8:6f:a5:9a:e2:c4:4d:c9:78:56:
         b9:3a:10:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:42:08 2026 by rpki-client