Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft
File:                     3F5C3F8352410D0935346BFC981A5941F86DE152.mft (raw, json)
Hash identifier:          o/1+ghFoVB527toI+OSQ2I4dTwIH/bitdGU2ilSf8lg=
Subject key identifier:   9A:CE:01:DD:45:9B:A4:9A:2E:05:F0:BA:86:4D:81:B4:8A:93:07:F4
Authority key identifier: 3F:5C:3F:83:52:41:0D:09:35:34:6B:FC:98:1A:59:41:F8:6D:E1:52
Certificate issuer:       /CN=3F5C3F8352410D0935346BFC981A5941F86DE152
Certificate serial:       7E4E355A38732F9A1322C6D57AEA37FDCD1682E9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft
Manifest number:          C3
Signing time:             Wed 23 Sep 2026 18:59:29 +0000
Manifest this update:     Wed 23 Sep 2026 18:54:29 +0000
Manifest next update:     Thu 24 Sep 2026 20:15:29 +0000
Files and hashes:         1: 3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa (hash: 5KhdGAwFpBBISTY9aqPLqjFXwI/SAn/2iKibebTV35o=)
                          2: 3F5C3F8352410D0935346BFC981A5941F86DE152.crl (hash: a/K0L0o9qRJVbYGEUwwLZGTolS7r6zachxre4z2HRac=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.crl
                          rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 19:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4e:35:5a:38:73:2f:9a:13:22:c6:d5:7a:ea:37:fd:cd:16:82:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F5C3F8352410D0935346BFC981A5941F86DE152
        Validity
            Not Before: Sep 23 18:54:29 2026 GMT
            Not After : Sep 24 20:15:29 2026 GMT
        Subject: CN=9ACE01DD459BA49A2E05F0BA864D81B48A9307F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b8:28:40:04:42:f5:8d:ad:02:d6:1d:93:c8:
                    39:54:ec:20:3c:3d:ef:51:22:0b:75:bc:db:29:a3:
                    7a:56:3c:9e:ea:ae:0d:56:da:4b:7c:de:f7:a6:fa:
                    a8:70:a8:12:44:c7:f2:77:21:d0:fe:ec:4d:f8:ef:
                    93:3a:de:c4:d5:3e:08:bd:56:43:b5:54:14:71:c7:
                    92:2b:69:c3:48:2b:83:2e:76:f4:a6:b3:ac:d2:f0:
                    94:7d:d7:57:50:84:23:0a:8d:48:5c:ae:1d:fd:cf:
                    82:72:4f:10:df:f6:d4:59:d4:f3:99:d2:7a:df:f2:
                    18:22:6d:c2:ad:e5:3d:cb:53:f8:e3:e4:96:5f:26:
                    c3:a2:49:20:c7:94:f3:6b:76:3d:72:69:ef:6c:cd:
                    57:f9:ea:79:b2:ce:00:da:b3:e8:4e:df:6e:ca:86:
                    7a:93:1f:8a:25:64:82:12:75:06:6d:23:33:63:7d:
                    6c:2a:73:26:dd:38:8e:d7:f8:ef:ce:b5:a4:73:d8:
                    d8:0d:45:2b:f6:90:79:ae:c3:b1:a2:42:16:65:ed:
                    71:ee:d8:44:14:66:2a:8f:a0:4b:93:09:8a:5b:12:
                    e3:42:16:a2:19:c9:98:68:c1:de:be:66:f0:05:90:
                    9d:44:5c:1e:da:a9:8c:31:a6:8c:0d:6c:8f:92:d8:
                    b0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CE:01:DD:45:9B:A4:9A:2E:05:F0:BA:86:4D:81:B4:8A:93:07:F4
            X509v3 Authority Key Identifier:
                keyid:3F:5C:3F:83:52:41:0D:09:35:34:6B:FC:98:1A:59:41:F8:6D:E1:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f5:41:aa:53:8e:f8:14:fc:98:22:d7:67:de:80:e6:b3:d1:
         69:34:58:36:da:04:f3:84:53:8b:60:60:df:79:d8:2d:6c:72:
         70:33:c8:58:b7:39:d5:5d:75:9a:16:8e:93:cf:9c:1f:e0:47:
         b4:81:eb:31:50:86:79:02:e0:df:24:20:d0:f5:32:96:a7:20:
         bf:a0:19:81:ca:84:b5:9f:83:5d:6c:25:e4:83:f6:85:9d:3f:
         39:86:bf:e1:16:7d:35:73:6f:93:4c:53:ba:ce:6b:64:33:d3:
         9f:cd:fa:13:40:71:43:4f:57:46:e3:84:75:91:ff:36:dc:6b:
         43:8c:4b:25:62:a3:3f:53:a2:34:cc:e1:5c:de:b2:18:cb:cc:
         a8:39:42:a7:6e:a0:48:35:85:12:85:a8:e6:8b:e4:a6:ce:ed:
         9d:62:8d:e4:23:96:1a:a0:30:f6:98:7a:02:1b:2c:e9:f6:10:
         fb:06:0a:43:f0:51:09:75:04:ee:dd:fd:e5:92:53:a4:8e:61:
         94:04:7e:e9:06:87:2d:b0:df:62:5b:32:01:42:a8:79:0f:28:
         e8:b9:0b:cc:f9:cd:5f:41:5e:4d:74:20:c9:ef:ba:2f:d3:ea:
         5c:c8:f9:61:eb:a1:9d:fc:cb:e3:b1:b0:e1:80:27:7b:07:29:
         e1:b6:50:b7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfk41WjhzL5oTIsbVeuo3/c0WgukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y1QzNGODM1MjQxMEQwOTM1MzQ2QkZDOTgxQTU5NDFG
ODZERTE1MjAeFw0yNjA5MjMxODU0MjlaFw0yNjA5MjQyMDE1MjlaMDMxMTAvBgNV
BAMTKDlBQ0UwMURENDU5QkE0OUEyRTA1RjBCQTg2NEQ4MUI0OEE5MzA3RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbuChABEL1ja0C1h2TyDlU7CA8
Pe9RIgt1vNspo3pWPJ7qrg1W2kt83vem+qhwqBJEx/J3IdD+7E3475M63sTVPgi9
VkO1VBRxx5IracNIK4MudvSms6zS8JR911dQhCMKjUhcrh39z4JyTxDf9tRZ1POZ
0nrf8hgibcKt5T3LU/jj5JZfJsOiSSDHlPNrdj1yae9szVf56nmyzgDas+hO327K
hnqTH4olZIISdQZtIzNjfWwqcybdOI7X+O/OtaRz2NgNRSv2kHmuw7GiQhZl7XHu
2EQUZiqPoEuTCYpbEuNCFqIZyZhowd6+ZvAFkJ1EXB7aqYwxpowNbI+S2LAjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUms4B3UWbpJouBfC6hk2BtIqTB/QwHwYDVR0j
BBgwFoAUP1w/g1JBDQk1NGv8mBpZQfht4VIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2UxMjc0M2QtZDU2ZC00YTc3LTkwZTItYzUyZTZkZmUwNmMyLzAvM0Y1QzNGODM1
MjQxMEQwOTM1MzQ2QkZDOTgxQTU5NDFGODZERTE1Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zRjVDM0Y4MzUyNDEwRDA5MzUzNDZCRkM5ODFBNTk0MUY4NkRF
MTUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2UxMjc0M2QtZDU2ZC00YTc3LTkw
ZTItYzUyZTZkZmUwNmMyLzAvM0Y1QzNGODM1MjQxMEQwOTM1MzQ2QkZDOTgxQTU5
NDFGODZERTE1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAF31QapTjvgU/Jgi12fegOaz0Wk0WDbaBPOE
U4tgYN952C1scnAzyFi3OdVddZoWjpPPnB/gR7SB6zFQhnkC4N8kIND1MpanIL+g
GYHKhLWfg11sJeSD9oWdPzmGv+EWfTVzb5NMU7rOa2Qz05/N+hNAcUNPV0bjhHWR
/zbca0OMSyVioz9TojTM4VzeshjLzKg5QqduoEg1hRKFqOaL5KbO7Z1ijeQjlhqg
MPaYegIbLOn2EPsGCkPwUQl1BO7d/eWSU6SOYZQEfukGhy2w32JbMgFCqHkPKOi5
C8z5zV9BXk10IMnvui/T6lzI+WHroZ38y+OxsOGAJ3sHKeG2ULc=
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:33:44 2026 by rpki-client