Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft
File:                     C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft (raw, json)
Hash identifier:          Qbdpa/NiFs13d0FtHPtQL39xMPgfUhtjHhtkvTQ/cjs=
Subject key identifier:   94:BE:12:73:F0:5C:8E:72:0C:D3:80:9E:FD:75:32:9C:72:73:CF:1C
Authority key identifier: C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21
Certificate issuer:       /CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721
Certificate serial:       3E12B08F4468B0EDCFA84BD448E9F4C049B0BBD9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft
Manifest number:          C0
Signing time:             Wed 23 Sep 2026 09:07:23 +0000
Manifest this update:     Wed 23 Sep 2026 09:02:23 +0000
Manifest next update:     Thu 24 Sep 2026 09:41:23 +0000
Files and hashes:         1: C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl (hash: RMVM0ClBFyCQ0DHSU9IFkiIMTm6PYMp5C9P0UQ84hII=)
                          2: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: 7fMJt0M4VQARtwl7gUUn1d68a36tK2tjagq7bmrxvDM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl
                          rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 09:41:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:12:b0:8f:44:68:b0:ed:cf:a8:4b:d4:48:e9:f4:c0:49:b0:bb:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721
        Validity
            Not Before: Sep 23 09:02:23 2026 GMT
            Not After : Sep 24 09:41:23 2026 GMT
        Subject: CN=94BE1273F05C8E720CD3809EFD75329C7273CF1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5d:ba:09:55:81:f3:aa:b8:48:23:ed:78:87:
                    69:33:3b:3b:58:75:5f:4b:a7:d2:04:ac:9f:28:d2:
                    77:8e:0f:93:88:2b:c7:89:f9:e8:a2:ec:0e:54:0f:
                    2f:ff:1c:13:54:0a:d0:4f:1a:d0:79:35:1e:6a:60:
                    da:fd:7f:fa:f4:ab:a7:1f:3a:fa:44:3c:a2:bf:76:
                    b8:40:15:9b:06:0c:7c:51:3a:1d:6e:27:a8:ca:6a:
                    e8:d9:3f:0b:a4:ef:ae:32:e8:fb:62:ca:6c:a5:74:
                    62:b5:ae:ce:6c:27:dd:b0:26:5b:67:ce:e0:55:dd:
                    48:77:ef:92:ef:fd:7b:bc:08:82:24:ee:96:0d:a8:
                    0e:59:4d:b2:3e:6c:46:25:34:ee:89:7d:be:8c:7d:
                    2b:5e:6f:32:55:84:da:a1:57:1f:64:9e:bd:32:a4:
                    4d:0e:5c:6f:cb:11:c5:86:6a:f0:f1:ff:b1:51:eb:
                    0c:e1:04:ab:27:5e:0c:e9:ad:ac:47:4e:48:59:1c:
                    19:da:de:d3:0c:31:28:c5:9a:13:17:bd:ce:68:1c:
                    f5:93:71:65:7b:b2:d6:16:97:ad:16:42:37:a3:aa:
                    b3:19:5b:ea:f5:94:27:d4:23:64:03:17:c7:16:ba:
                    09:76:25:dd:66:74:f9:09:c8:03:8b:fd:d2:99:93:
                    89:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BE:12:73:F0:5C:8E:72:0C:D3:80:9E:FD:75:32:9C:72:73:CF:1C
            X509v3 Authority Key Identifier:
                keyid:C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:44:d6:98:e5:f6:5a:ff:e3:85:b9:f9:2f:12:ae:95:7d:8e:
         bf:b8:b5:f0:96:0f:7d:71:19:61:f4:b0:83:28:d7:9e:e5:7f:
         6a:26:ae:9e:f6:fa:1f:b6:92:16:b4:3c:c0:fd:40:70:ee:54:
         d7:aa:62:bb:8c:dc:35:65:79:ad:2a:ee:14:ac:85:43:2d:80:
         18:da:98:34:5e:bf:e3:66:62:6a:70:d1:76:c6:f0:c7:da:69:
         8f:15:49:86:bc:e7:de:88:ca:bd:d8:17:70:02:d5:1d:e4:89:
         25:03:1c:58:69:45:77:26:47:d6:f7:60:2a:40:e2:47:70:6e:
         f3:88:ac:e5:47:cc:5f:64:e3:54:54:32:bc:b4:d0:b7:5a:a0:
         f9:d8:83:63:4c:44:ec:37:da:d0:56:af:90:aa:d9:e4:fc:33:
         59:ff:27:4a:33:63:83:d8:c6:25:4a:b0:02:0c:26:f7:ff:f4:
         24:7b:d5:7d:40:29:f8:b6:3e:c1:f7:0b:1d:b6:ee:e8:48:a6:
         dc:46:32:63:6a:49:5d:31:07:5c:db:de:af:9e:c2:71:2d:2e:
         50:f5:cf:8e:4d:57:13:0f:91:f7:13:b7:af:5f:80:fa:56:3c:
         98:1e:79:26:42:27:7f:cb:e2:3a:86:5c:68:e2:4f:9b:e5:53:
         c7:fc:a1:33
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPhKwj0RosO3PqEvUSOn0wEmwu9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAzRDVDMzZCQTEyMTQzRjYxRDM4QThFQkREQjY5RjNC
NTk5MDcyMTAeFw0yNjA5MjMwOTAyMjNaFw0yNjA5MjQwOTQxMjNaMDMxMTAvBgNV
BAMTKDk0QkUxMjczRjA1QzhFNzIwQ0QzODA5RUZENzUzMjlDNzI3M0NGMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpXboJVYHzqrhII+14h2kzOztY
dV9Lp9IErJ8o0neOD5OIK8eJ+eii7A5UDy//HBNUCtBPGtB5NR5qYNr9f/r0q6cf
OvpEPKK/drhAFZsGDHxROh1uJ6jKaujZPwuk764y6PtiymyldGK1rs5sJ92wJltn
zuBV3Uh375Lv/Xu8CIIk7pYNqA5ZTbI+bEYlNO6Jfb6MfStebzJVhNqhVx9knr0y
pE0OXG/LEcWGavDx/7FR6wzhBKsnXgzpraxHTkhZHBna3tMMMSjFmhMXvc5oHPWT
cWV7stYWl60WQjejqrMZW+r1lCfUI2QDF8cWugl2Jd1mdPkJyAOL/dKZk4k3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUlL4Sc/BcjnIM04Ce/XUynHJzzxwwHwYDVR0j
BBgwFoAUwD1cNroSFD9h04qOvdtp87WZByEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWIwMDI5OTItYWNiMi00Zjc3LTk5N2QtMzIxN2VhZDk5YmI1LzAvQzAzRDVDMzZC
QTEyMTQzRjYxRDM4QThFQkREQjY5RjNCNTk5MDcyMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9DMDNENUMzNkJBMTIxNDNGNjFEMzhBOEVCRERCNjlGM0I1OTkw
NzIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWIwMDI5OTItYWNiMi00Zjc3LTk5
N2QtMzIxN2VhZDk5YmI1LzAvQzAzRDVDMzZCQTEyMTQzRjYxRDM4QThFQkREQjY5
RjNCNTk5MDcyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABVE1pjl9lr/44W5+S8SrpV9jr+4tfCWD31x
GWH0sIMo157lf2omrp72+h+2kha0PMD9QHDuVNeqYruM3DVlea0q7hSshUMtgBja
mDRev+NmYmpw0XbG8MfaaY8VSYa8596Iyr3YF3AC1R3kiSUDHFhpRXcmR9b3YCpA
4kdwbvOIrOVHzF9k41RUMry00LdaoPnYg2NMROw32tBWr5Cq2eT8M1n/J0ozY4PY
xiVKsAIMJvf/9CR71X1AKfi2PsH3Cx227uhIptxGMmNqSV0xB1zb3q+ewnEtLlD1
z45NVxMPkfcTt69fgPpWPJgeeSZCJ3/L4jqGXGjiT5vlU8f8oTM=
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:09:38 2026 by rpki-client