Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft
File:                     5109EC0B3BA28731E9E261F3B59F3600B563E644.mft (raw, json)
Hash identifier:          pekjhWTsY9CpWWdgAsg09VxoxMxcVRVqDxsUBkhaggw=
Subject key identifier:   3F:88:A3:E6:A4:3F:27:B1:23:17:11:E2:7C:32:2D:49:97:C1:05:88
Authority key identifier: 51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44
Certificate issuer:       /CN=5109EC0B3BA28731E9E261F3B59F3600B563E644
Certificate serial:       7462EB8D5664DB5DE2C5C2AC08836333F49676E2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft
Manifest number:          C3
Signing time:             Wed 23 Sep 2026 17:37:46 +0000
Manifest this update:     Wed 23 Sep 2026 17:32:46 +0000
Manifest next update:     Thu 24 Sep 2026 18:11:46 +0000
Files and hashes:         1: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: MF1opaQfJw+Iei/Le09BzIXkrXsDLiX2XTUMp350q1Q=)
                          2: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: WbqdW7MhiN2iDSZWaMRymz0suZjkKuhQk8kC3475/Ds=)
                          3: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: Sxg6YyOUpBblg3g3D4oNcKxKaQWWwQAvP3gO95G7uko=)
                          4: 5109EC0B3BA28731E9E261F3B59F3600B563E644.crl (hash: XbM8o4PX2xBYZ0HzEnIPmqoKN7fcRFz2XUVtDSqff1s=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl
                          rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 18:11:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:62:eb:8d:56:64:db:5d:e2:c5:c2:ac:08:83:63:33:f4:96:76:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5109EC0B3BA28731E9E261F3B59F3600B563E644
        Validity
            Not Before: Sep 23 17:32:46 2026 GMT
            Not After : Sep 24 18:11:46 2026 GMT
        Subject: CN=3F88A3E6A43F27B1231711E27C322D4997C10588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:76:f9:ea:0f:e8:36:e4:d3:cc:72:90:4d:
                    97:5d:c6:0f:35:f9:b4:7b:ae:31:27:08:16:55:23:
                    de:83:fb:b5:d2:c9:da:7e:1d:16:b6:2a:76:3e:a7:
                    9e:3f:5c:3d:15:13:3f:fd:a6:07:c3:0e:0f:4f:96:
                    2f:ca:a5:ab:ab:c8:55:41:80:b0:96:73:58:aa:79:
                    0a:27:59:a9:a9:b5:f4:73:61:8f:b1:48:b0:c6:d1:
                    cc:39:39:e4:3f:e7:4d:1c:81:e2:2a:a7:8a:4f:fd:
                    7b:5d:73:62:99:43:2a:67:b4:0c:04:50:c6:f8:d5:
                    da:d9:ad:6a:2a:8c:77:86:90:fd:7a:c9:c8:ba:f6:
                    dc:a0:02:1c:eb:ce:f9:a2:1c:81:bf:88:c4:f2:97:
                    5f:81:fb:6a:dd:68:3c:7a:46:26:7a:da:f7:76:d0:
                    d9:5f:a4:7d:fd:ae:50:05:8f:c5:c4:fd:94:30:ee:
                    ae:1a:17:11:08:06:5b:fd:92:27:dd:db:b0:93:e7:
                    bf:c3:47:ab:a3:00:11:b5:61:4e:ca:0c:00:45:07:
                    b2:20:55:a0:bc:27:49:da:1f:c3:10:eb:3c:0d:6c:
                    01:0c:f4:57:67:85:be:93:a6:41:01:52:a8:c4:98:
                    1d:58:b5:a3:ee:1f:af:ba:ca:02:10:28:a0:7a:c1:
                    9b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:88:A3:E6:A4:3F:27:B1:23:17:11:E2:7C:32:2D:49:97:C1:05:88
            X509v3 Authority Key Identifier:
                keyid:51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a7:77:66:89:a5:aa:49:24:42:04:70:76:70:a8:fb:9f:60:
         39:7a:6e:b9:00:04:97:ac:d3:05:16:21:c8:7c:b4:3c:00:bd:
         cc:98:14:50:ec:6c:4d:33:2f:2f:b0:9d:11:a3:b8:58:7f:5e:
         0c:d0:c0:af:20:62:27:a1:15:3a:03:47:05:f0:11:f2:48:66:
         d5:80:a1:08:3b:61:01:87:8e:6a:f6:a4:a5:d8:02:a6:23:cc:
         32:76:d3:56:1e:4a:9b:1e:10:43:ab:67:11:92:58:ae:22:54:
         44:0a:a0:81:50:46:31:3f:08:94:ee:22:80:c9:23:84:35:dd:
         8a:51:a4:06:94:f3:c7:52:1e:2b:82:89:65:f3:f8:c6:b3:e7:
         90:6d:c5:77:9c:21:63:73:4c:98:11:99:95:2d:0f:74:84:66:
         2c:28:8a:ca:34:81:06:00:c2:68:db:f4:40:83:60:9a:ca:c8:
         29:b1:3b:a8:96:c3:0f:74:89:45:ac:2f:ea:8b:62:ff:9c:34:
         ef:c5:f4:11:e0:9c:bb:d9:89:7a:18:f7:3b:5d:df:3d:9a:41:
         e6:48:09:16:91:42:88:90:42:a4:3d:92:c3:a1:a6:f1:df:eb:
         06:af:4e:85:cf:7d:f9:cd:6f:46:ee:b8:87:2b:7b:ca:62:51:
         3c:d5:ca:aa
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdGLrjVZk213ixcKsCINjM/SWduIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEwOUVDMEIzQkEyODczMUU5RTI2MUYzQjU5RjM2MDBC
NTYzRTY0NDAeFw0yNjA5MjMxNzMyNDZaFw0yNjA5MjQxODExNDZaMDMxMTAvBgNV
BAMTKDNGODhBM0U2QTQzRjI3QjEyMzE3MTFFMjdDMzIyRDQ5OTdDMTA1ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1IHb56g/oNuTTzHKQTZddxg81
+bR7rjEnCBZVI96D+7XSydp+HRa2KnY+p54/XD0VEz/9pgfDDg9Pli/KpauryFVB
gLCWc1iqeQonWamptfRzYY+xSLDG0cw5OeQ/500cgeIqp4pP/Xtdc2KZQypntAwE
UMb41drZrWoqjHeGkP16yci69tygAhzrzvmiHIG/iMTyl1+B+2rdaDx6RiZ62vd2
0NlfpH39rlAFj8XE/ZQw7q4aFxEIBlv9kifd27CT57/DR6ujABG1YU7KDABFB7Ig
VaC8J0naH8MQ6zwNbAEM9Fdnhb6TpkEBUqjEmB1YtaPuH6+6ygIQKKB6wZvzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUP4ij5qQ/J7EjFxHifDItSZfBBYgwHwYDVR0j
BBgwFoAUUQnsCzuihzHp4mHztZ82ALVj5kQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzliM2JiMzQtMTVlMi00NDg3LWI1MjctNmU3NTEyODZjZTdkLzAvNTEwOUVDMEIz
QkEyODczMUU5RTI2MUYzQjU5RjM2MDBCNTYzRTY0NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MTA5RUMwQjNCQTI4NzMxRTlFMjYxRjNCNTlGMzYwMEI1NjNF
NjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1
MjctNmU3NTEyODZjZTdkLzAvNTEwOUVDMEIzQkEyODczMUU5RTI2MUYzQjU5RjM2
MDBCNTYzRTY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKSnd2aJpapJJEIEcHZwqPufYDl6brkABJes
0wUWIch8tDwAvcyYFFDsbE0zLy+wnRGjuFh/XgzQwK8gYiehFToDRwXwEfJIZtWA
oQg7YQGHjmr2pKXYAqYjzDJ201YeSpseEEOrZxGSWK4iVEQKoIFQRjE/CJTuIoDJ
I4Q13YpRpAaU88dSHiuCiWXz+Maz55BtxXecIWNzTJgRmZUtD3SEZiwoiso0gQYA
wmjb9ECDYJrKyCmxO6iWww90iUWsL+qLYv+cNO/F9BHgnLvZiXoY9ztd3z2aQeZI
CRaRQoiQQqQ9ksOhpvHf6wavToXPffnNb0buuIcre8piUTzVyqo=
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:52:44 2026 by rpki-client