Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.mft
File:                     930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.mft (raw, json)
Hash identifier:          lrSRR9VZj0UOwk7BTORex5uMq4TScGPmbCeXT0k0VXY=
Subject key identifier:   1D:5C:BD:07:2E:B7:86:01:93:BC:6F:06:B6:A3:1E:99:88:9A:E6:0B
Authority key identifier: 93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1
Certificate issuer:       /CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1
Certificate serial:       7C95F04A5BE62A7A5056F8331893FA5D2393EE8E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.mft
Manifest number:          C1
Signing time:             Wed 23 Sep 2026 18:23:42 +0000
Manifest this update:     Wed 23 Sep 2026 18:18:42 +0000
Manifest next update:     Thu 24 Sep 2026 21:25:42 +0000
Files and hashes:         1: 3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa (hash: iJX5sH3Bhksn+XNqPcn6ZO3Vn6gKWLlz7pKsmb67ses=)
                          2: 3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa (hash: Fv8RvrhsupyyxUnDKv7wvauD6fxtEcOlHtsZuM8+B7w=)
                          3: 3230322e3136392e3234392e302f32342d3234203d3e203338313433.roa (hash: LirwHaQXjXA15czzCoiWMa5imJInKS6BNFBusFBDU/c=)
                          4: 3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa (hash: vwl/A5wfDE/zQ3RkJ2qUpxheyGtB9xsZuOnqGjS14BY=)
                          5: 930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl (hash: t99fBuqRfr+Qvs/R2ZS1e600/XVOqqPD/UWta65000o=)
                          6: 3230322e3136392e3234312e302f32342d3234203d3e203338313433.roa (hash: gmth78B5QKxFJ6qGqfOK+IZVNq+i/kRjK0PkCqMqmuQ=)
                          7: 3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa (hash: UgF21NpBezbd1n4PIKEBvvLIFw9TBgmMt/brebiyI5Y=)
                          8: 3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa (hash: q8kkNiq0NJ2HE69ColVfNaev+4kehYvpIGs4HRz1aFg=)
                          9: 3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (hash: kTX+oQavRoiG8CROUsdY2d/jcuIrqIgudB90au7yKp0=)
                          10: 3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa (hash: 7yWk8NZh5ZZPVtFEx9o6JQB7EeCfs/beit8IzAgTCO8=)
                          11: 3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa (hash: HhMQb9YzE/WymXnw89UuAOEea6YaW7URZtF77Mn8PZk=)
                          12: 3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa (hash: KvMuUE0z8nYV0xU0ADop4StlWgJyErA/jBV532swhY0=)
                          13: 3230322e3136392e3235352e302f32342d3234203d3e203338313433.roa (hash: FVIrgZj/YAtozY1U43rfmudeDiB8Ef0noNqNR0eCSGQ=)
                          14: 3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa (hash: K67+Sn8Qcm4RPVdFgjEGgIOf1eYH+63GSSw4euAFDMU=)
                          15: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (hash: k55tM7sOjnd1JSEw3HIh7wp4lKTzOsvrWp+fmWXlT/0=)
                          16: 3230322e3136392e3235312e302f32342d3234203d3e203338313433.roa (hash: d04xO4iEtkdPTfXofmIXGyR3H9UzpR7OGrHdhWk13XI=)
                          17: 3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa (hash: YaMhyUyuJNpuQk67aRRdXgr5kzgkwR9zkAufBjEUob4=)
                          18: 3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa (hash: tqJyGHJ7EKGPHasc6sBvmeEoUoTfQK4I7LgoRILmZ4w=)
                          19: 3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa (hash: zwmWwJsvHzv3Y2XGal+eYDuFdGtEpe8DD8iKlGPT2no=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl
                          rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 19:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:95:f0:4a:5b:e6:2a:7a:50:56:f8:33:18:93:fa:5d:23:93:ee:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1
        Validity
            Not Before: Sep 23 18:18:42 2026 GMT
            Not After : Sep 24 21:25:42 2026 GMT
        Subject: CN=1D5CBD072EB7860193BC6F06B6A31E99889AE60B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:c8:77:a2:af:fd:96:11:50:87:0e:0c:d8:
                    f8:a5:5a:95:f5:b0:ca:87:a9:2c:f3:77:11:ad:d7:
                    8f:b3:5e:17:05:62:01:02:55:6d:93:36:d2:4d:5f:
                    10:e2:44:e0:31:ea:b3:5c:26:d5:03:67:d9:14:0b:
                    8c:4a:df:f9:4f:c0:7c:65:f9:8d:66:a7:6a:da:db:
                    28:64:1e:d1:77:03:26:33:ce:e2:bc:31:84:c6:1f:
                    ea:0c:d2:9f:36:ed:55:9b:e5:52:90:e9:f7:7e:1c:
                    39:a6:bf:2e:a6:81:02:64:0e:90:f9:72:9f:41:c0:
                    c8:76:a8:ba:a0:7d:56:d4:5e:3f:f3:3b:e9:25:ad:
                    fa:d6:e3:c0:7f:6c:bc:6d:28:31:bf:01:c4:34:42:
                    bf:e2:80:c6:1f:48:61:2d:90:95:2f:1d:55:76:eb:
                    3d:05:7f:33:cf:08:2a:79:7f:06:47:fc:e4:c8:a3:
                    ab:b3:b8:3c:ef:d8:e1:a8:2a:ec:f7:ca:da:36:e5:
                    c4:56:11:8c:ef:6c:f0:22:7c:3a:79:4a:df:02:6b:
                    ff:4c:7a:4a:ee:b0:7e:aa:19:10:ab:b2:50:cc:09:
                    a5:dc:1f:73:d6:c7:7c:d3:79:29:8c:d6:86:d7:5e:
                    b1:72:f0:2e:3c:22:05:41:42:08:76:52:60:0e:32:
                    bb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5C:BD:07:2E:B7:86:01:93:BC:6F:06:B6:A3:1E:99:88:9A:E6:0B
            X509v3 Authority Key Identifier:
                keyid:93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:cf:a1:3e:c1:8d:52:24:54:b9:17:07:83:70:24:51:92:76:
         c7:52:c5:24:4c:6c:06:2f:76:cd:08:e9:30:fb:eb:73:45:e4:
         64:d6:27:69:a3:0b:18:d0:49:a6:a7:5b:b7:17:40:44:eb:d0:
         09:80:93:e4:4f:97:2a:0f:14:67:af:e9:6f:0d:e9:4f:3d:87:
         93:7d:ca:94:dd:e7:98:c8:70:e8:08:77:9f:03:c2:75:e5:e2:
         be:b9:7e:bc:4a:0c:79:d9:47:aa:3f:ad:77:f3:1c:f3:82:3a:
         47:53:bb:98:64:c9:45:fa:fb:c3:4d:b6:fe:23:b2:5f:47:4e:
         21:1c:b6:3d:dc:3e:32:a8:c0:90:e0:12:c4:98:8c:b2:2b:1c:
         c4:22:52:77:fb:e8:ef:b4:c9:76:85:31:d1:a1:9e:32:17:f9:
         2b:78:28:1a:58:7d:37:6c:b8:83:9a:b1:67:ae:43:f7:d8:ea:
         35:d3:03:42:86:81:66:7e:48:a1:eb:10:8b:2c:3b:2f:18:fb:
         4f:0c:ac:82:19:e3:e1:26:bc:c5:29:bb:f5:32:f4:1a:6b:d7:
         e1:6a:17:47:3b:ab:9e:88:0d:5f:14:e2:e2:cc:e8:d8:87:f4:
         af:67:0c:a0:03:94:75:f4:2f:10:b4:7e:7e:48:6b:20:64:fd:
         f3:02:38:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:19:16 2026 by rpki-client