Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.mft
File:                     934C6F41C654B1993222EAFE6F2C8AEB91C25C43.mft (raw, json)
Hash identifier:          wMAuu3unfoPbrfMYCk/gtNWZ+hDyjpEaOzjEg5h33tU=
Subject key identifier:   03:81:89:0A:50:FF:2C:94:21:D5:4B:EC:BE:66:49:4F:1D:ED:02:4C
Authority key identifier: 93:4C:6F:41:C6:54:B1:99:32:22:EA:FE:6F:2C:8A:EB:91:C2:5C:43
Certificate issuer:       /CN=934C6F41C654B1993222EAFE6F2C8AEB91C25C43
Certificate serial:       1B08846071FC03FE5A61F30F0F127824EAF29D7D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.mft
Manifest number:          C2
Signing time:             Fri 25 Sep 2026 04:15:34 +0000
Manifest this update:     Fri 25 Sep 2026 04:10:34 +0000
Manifest next update:     Sat 26 Sep 2026 04:46:34 +0000
Files and hashes:         1: 3130332e3138362e32362e302f32332d3234203d3e20313439363934.roa (hash: 1PrJaUHIWc4qUh8+kV5ygVFqkLMSodLr7rG/KYjeVKc=)
                          2: 934C6F41C654B1993222EAFE6F2C8AEB91C25C43.crl (hash: uKJUfTxVft9GdhE/X7HJ7lkzB4ohm8tCbyo7iHGTY5c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.crl
                          rsync://rpki-rsync.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 04:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:08:84:60:71:fc:03:fe:5a:61:f3:0f:0f:12:78:24:ea:f2:9d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934C6F41C654B1993222EAFE6F2C8AEB91C25C43
        Validity
            Not Before: Sep 25 04:10:34 2026 GMT
            Not After : Sep 26 04:46:34 2026 GMT
        Subject: CN=0381890A50FF2C9421D54BECBE66494F1DED024C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:9e:82:94:0c:90:b1:0f:80:ba:4e:26:81:
                    1f:1a:b1:73:60:b6:6e:ea:f8:0f:cf:c6:00:35:6b:
                    4c:64:09:37:ce:1a:9d:96:6f:ae:e9:57:ff:e4:bc:
                    36:b8:2c:f8:e3:45:c3:8e:54:10:9d:55:4f:de:68:
                    3d:a4:db:d1:43:27:45:ca:6f:dc:84:06:13:7c:63:
                    23:74:94:f1:9f:2b:03:f3:b1:6e:53:23:8f:b9:4c:
                    08:f2:06:13:54:56:d2:26:68:cb:51:16:e4:2f:37:
                    ec:13:6e:74:de:29:e2:75:3a:9b:ed:fa:61:fa:d5:
                    67:7e:c6:e0:ee:c1:6d:b2:08:03:12:78:97:53:37:
                    bb:13:b4:41:3a:95:8e:51:a6:79:f1:53:18:9d:dd:
                    ac:15:e4:79:17:65:22:45:91:f5:8c:f6:97:0a:c1:
                    b3:d5:99:0b:04:a7:69:d1:92:a8:7e:64:13:78:a2:
                    2d:0b:e3:72:21:6a:57:7e:c5:33:8d:fb:0d:87:79:
                    95:e3:1b:9d:8d:cf:4d:d1:70:78:e7:f7:c6:43:f7:
                    cb:dd:01:74:d8:cd:a2:e2:cf:2b:99:df:fc:53:fe:
                    55:6e:3e:38:f6:f9:04:61:c2:31:5c:71:94:05:ee:
                    38:87:22:40:f7:98:a3:7a:ac:0f:a5:cf:06:5b:b8:
                    77:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:81:89:0A:50:FF:2C:94:21:D5:4B:EC:BE:66:49:4F:1D:ED:02:4C
            X509v3 Authority Key Identifier:
                keyid:93:4C:6F:41:C6:54:B1:99:32:22:EA:FE:6F:2C:8A:EB:91:C2:5C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c6:ba:9d:83:ee:02:e9:82:a4:0f:0c:6f:d7:56:ed:0e:5c:
         8e:79:29:49:fd:76:01:fd:f6:e6:28:0f:19:37:b8:74:f4:ae:
         e0:cf:6d:17:7c:30:c6:06:7a:87:aa:b0:1f:d3:82:a0:46:55:
         ed:83:49:80:e6:14:fe:36:b3:80:d7:70:00:cd:66:87:95:79:
         ae:6d:36:2b:bf:ef:33:b9:b1:92:1a:1a:2a:54:ca:b1:5e:3b:
         75:05:08:1d:f8:4e:af:36:3f:e0:35:e1:2b:6c:96:ef:58:1a:
         f5:eb:de:a0:9a:b2:5f:8a:73:6d:01:d2:a3:f8:a4:4d:62:b7:
         bd:e7:7e:e1:2a:4a:5d:19:f7:fb:02:5a:3d:d2:65:5c:1c:e3:
         d7:cf:25:2e:c3:80:04:34:d6:cf:57:da:e3:c0:3e:a2:46:92:
         d9:23:69:13:78:48:a1:b5:5d:bb:dc:e8:d7:cf:8b:60:09:c7:
         39:01:b6:48:c1:b5:44:55:d2:f8:f5:a4:62:1b:7f:c5:6c:60:
         85:45:5f:b5:45:3f:c3:8f:f9:1f:1d:88:6a:95:ed:51:92:fb:
         d0:81:99:47:9c:1f:b0:6e:39:ac:22:56:a8:68:ea:1e:89:31:
         5d:5c:d6:cb:f8:6f:af:25:15:68:13:32:c7:ad:69:c1:d7:12:
         a2:95:86:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:47:10 2026 by rpki-client