Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft
File:                     028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft (raw, json)
Hash identifier:          rE6gKxZFzyhjA6Iq2ciZBIRf6/Ox+xtKUHSCVE1n/d8=
Subject key identifier:   3B:47:9F:55:AA:C5:B8:45:DD:1F:E7:47:69:87:10:70:41:22:8C:B4
Authority key identifier: 02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9
Certificate issuer:       /CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9
Certificate serial:       797502D68D3F59B12B70659C613A496352181F48
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft
Manifest number:          C3
Signing time:             Fri 25 Sep 2026 03:14:16 +0000
Manifest this update:     Fri 25 Sep 2026 03:09:16 +0000
Manifest next update:     Sat 26 Sep 2026 04:18:16 +0000
Files and hashes:         1: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: BUSB0kLsC7pjKXi5bhLXUPIzYoFZsUEccBkiDUzp6D8=)
                          2: 028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl (hash: dpmUZFZ0ia62eMNCqhdAlPBxcYH0apqFoQw2Nbm67YE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl
                          rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 04:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:75:02:d6:8d:3f:59:b1:2b:70:65:9c:61:3a:49:63:52:18:1f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9
        Validity
            Not Before: Sep 25 03:09:16 2026 GMT
            Not After : Sep 26 04:18:16 2026 GMT
        Subject: CN=3B479F55AAC5B845DD1FE7476987107041228CB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:0c:e4:a1:de:06:d5:0b:2f:da:94:86:dd:
                    e7:14:72:5e:c2:67:73:b4:0c:ee:d3:e1:73:87:fb:
                    47:50:2e:d6:6e:7d:d7:4c:9e:69:19:d2:a0:c4:c4:
                    1f:95:fe:9b:e6:5f:6e:a1:a4:1d:55:ee:93:65:a5:
                    c2:b1:c1:11:02:c0:2d:3a:dc:ae:a6:b2:da:fd:65:
                    dc:a3:fa:aa:62:27:25:f8:fa:bc:e7:78:63:77:fd:
                    e1:dc:d6:cd:85:e2:1d:92:6d:2b:98:49:bb:ec:ba:
                    13:47:9a:c2:6d:6b:65:bc:2b:a3:2f:f7:9d:33:b7:
                    27:06:2b:13:10:45:cf:c7:02:ba:00:f4:a8:09:db:
                    cd:9e:1b:7a:a3:06:c9:c9:1a:65:57:56:95:52:b8:
                    19:d2:a9:e9:17:94:21:d0:8c:f7:f5:1c:97:29:1e:
                    74:7a:08:e0:09:e7:7d:e2:9e:dc:87:9c:20:45:7b:
                    c6:22:c8:4c:b4:89:e5:1a:de:33:99:54:ba:0e:07:
                    65:3b:da:7f:3b:b5:1c:82:26:2b:cb:8d:4a:47:e0:
                    eb:8b:81:3f:83:f0:7b:8d:16:0b:08:66:33:a5:34:
                    53:7c:1b:56:77:3e:74:4f:cc:91:53:e5:84:f4:3c:
                    c7:9d:f6:05:42:21:17:3b:b5:08:22:3d:3c:3e:bf:
                    94:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:47:9F:55:AA:C5:B8:45:DD:1F:E7:47:69:87:10:70:41:22:8C:B4
            X509v3 Authority Key Identifier:
                keyid:02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:63:ed:08:c7:36:38:ea:02:8e:96:55:97:94:29:f0:e4:e3:
         43:21:ea:f1:b7:88:12:3b:58:3c:2b:08:c3:9a:dc:d8:20:6f:
         bc:5f:14:63:49:15:66:99:d5:bd:c0:dd:03:cd:d2:c4:8e:7d:
         92:88:67:f2:15:31:dc:7c:25:72:04:f4:9e:4e:60:26:41:27:
         70:d1:37:fc:63:a6:89:01:f5:c0:1c:96:33:36:b6:e7:a8:58:
         a2:73:db:85:c6:03:a1:7b:53:ac:0f:aa:19:bf:c4:e5:54:90:
         ba:07:d4:b7:6f:9e:37:e7:59:a0:3e:d8:fe:ab:0d:58:05:b3:
         c6:5f:4c:27:83:48:4d:28:68:71:63:34:0d:a6:c1:00:62:ac:
         59:f9:d0:83:95:bc:bd:c5:96:0e:49:5f:d9:b6:6e:90:c1:6c:
         db:85:c9:55:38:44:18:3b:91:44:12:ae:e1:76:1a:0c:b9:15:
         ad:a7:91:51:c9:e8:fb:10:0b:85:8a:f4:aa:4c:78:85:f8:8a:
         6a:45:77:52:ac:57:bf:79:d9:95:e9:48:13:0e:e5:35:38:00:
         ba:ff:4b:b4:3d:28:af:9c:b4:30:50:8a:d7:a4:ad:34:97:44:
         09:58:43:75:c4:bc:4e:73:e3:81:0b:af:b3:b3:0e:a8:9f:99:
         c8:53:d8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:36:18 2026 by rpki-client