Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft
File:                     1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft (raw, json)
Hash identifier:          Wlbv1eGHNl6Adsvgb7g2fYKp10mBISvDjQvpjVuqtms=
Subject key identifier:   11:CC:9B:69:40:0E:96:80:06:08:64:59:96:E4:19:CC:B7:90:07:3F
Authority key identifier: 14:20:48:4B:D9:8B:F8:3C:1C:6C:5F:F6:2F:97:72:3C:B3:69:F3:CD
Certificate issuer:       /CN=1420484BD98BF83C1C6C5FF62F97723CB369F3CD
Certificate serial:       653D8EFE051B498057352AE87D3F84E231CD0D61
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft
Manifest number:          C3
Signing time:             Thu 24 Sep 2026 04:56:49 +0000
Manifest this update:     Thu 24 Sep 2026 04:51:49 +0000
Manifest next update:     Fri 25 Sep 2026 05:53:49 +0000
Files and hashes:         1: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: 6AZ8JAgtI94iBZvhn289sOw/311Gf5HWF9lx3CgDg/c=)
                          2: 1420484BD98BF83C1C6C5FF62F97723CB369F3CD.crl (hash: RFxqwBSTgO30/WrKgyKyebrsGheLcH7hC8CAbp1B2X8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.crl
                          rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 05:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3d:8e:fe:05:1b:49:80:57:35:2a:e8:7d:3f:84:e2:31:cd:0d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1420484BD98BF83C1C6C5FF62F97723CB369F3CD
        Validity
            Not Before: Sep 24 04:51:49 2026 GMT
            Not After : Sep 25 05:53:49 2026 GMT
        Subject: CN=11CC9B69400E96800608645996E419CCB790073F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e8:86:31:e5:32:0d:ec:84:81:bb:68:b8:49:
                    74:d7:60:0f:19:45:cf:77:e3:d0:95:12:4e:b8:35:
                    fc:c1:8c:99:51:ef:f2:ee:b0:28:c9:ed:86:f9:6d:
                    18:6e:59:95:2c:29:8c:6c:46:25:e5:4e:95:71:8f:
                    8e:f9:94:99:60:55:49:bf:08:77:1a:c7:2a:65:be:
                    aa:2c:cb:7c:f6:ed:cc:33:67:a2:ba:ab:13:45:0a:
                    6d:6f:41:60:98:7b:df:2d:ca:3b:98:c3:29:8f:73:
                    55:bc:1c:b6:c7:e1:4c:ca:a7:69:e2:bb:ad:c7:81:
                    05:25:12:06:6a:ab:38:3e:39:ec:62:23:df:82:19:
                    32:9e:40:4d:4c:51:6b:1e:b1:da:24:f1:49:c3:bc:
                    e1:4e:0c:75:81:9c:53:ae:43:e9:3b:48:e3:81:16:
                    12:f6:b8:83:9c:30:96:21:b1:e1:46:5f:0f:eb:45:
                    66:87:72:fa:9e:0f:36:a9:d5:f8:29:d7:38:be:70:
                    6b:29:6a:8b:fd:17:60:74:43:54:58:6f:51:69:a3:
                    da:35:25:d5:70:3e:f3:f8:fe:b9:e2:91:15:b7:49:
                    5a:4d:ea:80:7d:52:b0:53:ae:33:6b:28:f5:2c:60:
                    9d:f0:58:f8:93:74:be:17:9b:04:3d:91:2c:94:96:
                    92:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CC:9B:69:40:0E:96:80:06:08:64:59:96:E4:19:CC:B7:90:07:3F
            X509v3 Authority Key Identifier:
                keyid:14:20:48:4B:D9:8B:F8:3C:1C:6C:5F:F6:2F:97:72:3C:B3:69:F3:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:03:05:6f:ce:cc:8e:5d:dc:85:2b:ab:c7:c0:bb:ca:36:81:
         22:5f:a4:e6:ac:74:48:dd:5f:b4:a5:43:69:8d:9f:e4:43:cc:
         83:e1:84:86:a1:a6:0f:d1:93:86:fb:9d:cd:c8:97:24:94:fd:
         b8:2c:df:d6:21:ee:80:a4:94:2d:4b:61:1b:15:77:58:c1:06:
         fb:37:e5:cc:b3:e9:80:b5:ba:e6:df:d4:57:78:28:3e:31:6e:
         2a:3b:f6:a7:34:ed:d3:64:2c:2f:02:fd:68:e6:e3:fe:f6:63:
         f4:ae:50:44:64:4f:5e:14:52:a5:cc:da:e6:75:97:00:af:37:
         54:24:d0:b8:20:42:d4:94:e8:70:e7:8b:1f:e0:ec:99:fd:93:
         e8:21:be:8d:d0:a7:91:a4:ff:19:05:37:08:0b:a7:ec:7d:9f:
         d2:bc:9d:59:18:cb:92:50:a6:65:03:46:cf:fd:b2:b7:35:f9:
         fa:30:37:b6:cd:b0:1d:b8:9b:42:b0:66:82:7e:02:ec:95:f3:
         5a:cc:e1:26:4b:59:de:95:f4:b5:dc:02:36:79:99:02:0d:04:
         55:38:4e:55:c4:d2:9a:4e:96:82:d9:f6:7b:f4:1f:74:8d:4c:
         fd:c9:3b:68:04:a2:fa:bf:3c:99:14:0e:49:9f:e7:47:06:3d:
         30:a2:cf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:01:40 2026 by rpki-client