Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft
File:                     4263490508EE6D5873ACA7B620F66196D4A2AE63.mft (raw, json)
Hash identifier:          BPnXK1+BCTtguW9YHEnnO16tzhnStmHhrfnnzLlDWYo=
Subject key identifier:   94:F1:3C:69:4F:B9:51:AA:D0:08:E2:D6:9E:00:C0:70:46:EA:30:D2
Authority key identifier: 42:63:49:05:08:EE:6D:58:73:AC:A7:B6:20:F6:61:96:D4:A2:AE:63
Certificate issuer:       /CN=4263490508EE6D5873ACA7B620F66196D4A2AE63
Certificate serial:       4EDA547643887BD779279130AC1E7C4830DB9EC6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft
Manifest number:          C3
Signing time:             Wed 23 Sep 2026 20:26:15 +0000
Manifest this update:     Wed 23 Sep 2026 20:21:15 +0000
Manifest next update:     Thu 24 Sep 2026 23:12:15 +0000
Files and hashes:         1: 323030313a6466363a613434303a3a2f34382d3438203d3e20313432363339.roa (hash: iHApH4ig54MvTMEQeKGAbjPzbWKAy8vcZBqwYCxZPjg=)
                          2: 4263490508EE6D5873ACA7B620F66196D4A2AE63.crl (hash: 0vImoceSbjL79yjrp14c6OCzswDrnPbeZJnrijGkH+4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.crl
                          rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:da:54:76:43:88:7b:d7:79:27:91:30:ac:1e:7c:48:30:db:9e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4263490508EE6D5873ACA7B620F66196D4A2AE63
        Validity
            Not Before: Sep 23 20:21:15 2026 GMT
            Not After : Sep 24 23:12:15 2026 GMT
        Subject: CN=94F13C694FB951AAD008E2D69E00C07046EA30D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9c:51:9b:6f:6f:84:cc:d2:33:cb:d8:b6:00:
                    40:a6:2e:c9:fc:31:f2:16:ab:b7:0d:4e:7c:8b:bb:
                    49:41:85:04:9a:38:9a:64:46:0e:90:25:7d:b4:bd:
                    8a:98:24:d2:ab:3f:eb:75:a0:55:24:a6:cd:31:4a:
                    dd:fb:0a:c7:7a:f4:56:23:25:30:ae:6c:16:38:ea:
                    24:7d:30:af:13:b1:ee:48:60:bf:8b:36:24:c0:54:
                    d5:c5:9f:42:b2:e7:c7:ba:57:89:c8:43:f3:7c:2b:
                    a9:b4:e5:93:1a:71:a7:54:0d:72:10:38:1f:00:72:
                    40:09:f0:bc:44:72:37:de:60:b4:f4:ce:3e:7f:2f:
                    93:22:44:55:44:a9:fa:0c:62:9b:55:af:c2:1b:d2:
                    13:8d:34:9a:1e:92:72:88:72:84:80:e7:37:91:82:
                    6d:c3:3b:31:85:d2:c7:f3:6e:f4:8f:21:55:20:1d:
                    b7:3c:65:4b:5a:87:de:26:7c:c5:49:fa:ca:7e:11:
                    3c:14:a8:62:e2:37:e6:57:2d:5d:bf:21:ac:1c:14:
                    27:f7:1b:fd:e0:8b:26:31:54:38:d9:ab:fe:0c:68:
                    d6:c0:63:3b:93:07:e2:a6:9b:06:5b:e5:54:92:16:
                    0b:f3:1f:60:2f:05:0a:a0:8f:ed:a6:97:ec:08:e1:
                    99:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F1:3C:69:4F:B9:51:AA:D0:08:E2:D6:9E:00:C0:70:46:EA:30:D2
            X509v3 Authority Key Identifier:
                keyid:42:63:49:05:08:EE:6D:58:73:AC:A7:B6:20:F6:61:96:D4:A2:AE:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:5f:09:87:ab:82:a4:c4:f6:3a:67:be:84:3a:df:8f:3d:ae:
         77:5d:38:e7:45:a7:23:42:49:8f:44:2f:34:cd:23:d9:a9:1c:
         57:f0:6a:8f:a8:88:58:e8:d9:62:c8:64:fa:0d:70:44:57:ac:
         b3:d3:b3:1f:2d:66:69:cb:5b:ce:1a:eb:68:d0:f2:22:de:ee:
         b5:30:f0:3c:ba:25:74:4c:28:47:e0:17:f0:2b:32:b6:98:c7:
         8b:ac:d2:f1:7c:8c:6b:5b:ed:e8:23:ae:5c:bb:4d:28:01:dd:
         8a:51:19:89:b3:c4:6a:7d:e3:46:f6:2e:5a:bc:d5:17:b5:ce:
         bd:5c:8a:e0:b9:a2:46:e5:1a:34:10:1f:d8:77:9f:11:46:19:
         31:eb:e0:8b:f6:95:43:2c:65:5c:8d:d0:18:7b:0e:97:4e:83:
         41:57:72:e5:6c:a0:7f:09:26:d6:05:f8:fd:0d:70:a0:ef:03:
         17:6f:12:82:05:b0:9a:1a:8f:89:52:78:48:ba:bd:ae:11:66:
         4e:de:28:c9:0d:2c:02:51:a8:49:98:bc:42:84:01:b9:7a:21:
         2a:9a:bc:63:d9:0c:3d:8d:89:48:e0:01:8c:89:1a:0f:3e:4e:
         2f:d4:b7:c4:98:8c:c5:28:1e:ba:a7:80:fe:16:63:c5:b3:90:
         86:aa:e3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:28:50 2026 by rpki-client