Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.mft
File:                     02C3F17E0D809542F2AF03C8B741DB928B4A04DA.mft (raw, json)
Hash identifier:          4/o5eWEe+s1dqBItoXqlAPUkjdKiMegyD7gqQjJhbZY=
Subject key identifier:   30:C3:74:18:EE:25:6B:9B:B3:18:52:26:CC:72:14:83:E0:B3:1C:30
Authority key identifier: 02:C3:F1:7E:0D:80:95:42:F2:AF:03:C8:B7:41:DB:92:8B:4A:04:DA
Certificate issuer:       /CN=02C3F17E0D809542F2AF03C8B741DB928B4A04DA
Certificate serial:       4B2EEEB281582715F5A1702610382D64AECD01C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.mft
Manifest number:          BF
Signing time:             Mon 21 Sep 2026 15:51:18 +0000
Manifest this update:     Mon 21 Sep 2026 15:46:18 +0000
Manifest next update:     Tue 22 Sep 2026 18:53:18 +0000
Files and hashes:         1: 02C3F17E0D809542F2AF03C8B741DB928B4A04DA.crl (hash: TGFXkzJzgURigpZJoFzeXqwR3rsJvL/huYy+9Ju4BwQ=)
                          2: 3130332e38332e3130302e302f32332d3234203d3e20313336303633.roa (hash: m+/JYxA11ei8CCwmEdzoEURJAmFOVe4xHWxQv9o89w4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.crl
                          rsync://rpki-rsync.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 18:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2e:ee:b2:81:58:27:15:f5:a1:70:26:10:38:2d:64:ae:cd:01:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02C3F17E0D809542F2AF03C8B741DB928B4A04DA
        Validity
            Not Before: Sep 21 15:46:18 2026 GMT
            Not After : Sep 22 18:53:18 2026 GMT
        Subject: CN=30C37418EE256B9BB3185226CC721483E0B31C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:66:de:2e:f2:26:fd:cc:06:a1:82:77:1e:3d:
                    54:a7:0b:28:b2:04:c8:6f:17:dc:e5:a8:30:99:d9:
                    40:0d:df:88:fe:47:2b:60:ec:ce:81:b8:f2:43:5f:
                    ae:22:9f:6f:c5:f8:db:ba:df:57:b8:ad:68:24:1b:
                    4f:a9:82:15:55:c7:52:6d:50:5b:db:ff:9d:3d:ee:
                    cf:3f:7a:ad:5e:29:ac:10:66:12:db:b6:4b:5b:94:
                    55:c6:8c:55:ee:36:22:84:dd:9c:b3:dc:3a:75:bf:
                    d5:a8:96:fb:ae:f5:5d:8f:68:bc:bb:74:35:fb:fd:
                    20:30:61:c8:b4:2c:62:9d:a9:79:56:bf:50:7a:25:
                    49:d4:57:81:58:80:ff:b4:96:63:22:aa:14:7b:a3:
                    f4:45:45:01:9b:89:eb:08:7f:76:be:78:a1:6b:3a:
                    27:44:a6:4c:84:25:50:29:5b:bc:e9:e0:be:04:7e:
                    c2:e7:dc:df:b2:80:b7:43:a0:87:38:9e:d1:09:f9:
                    d9:c3:b4:3f:01:77:51:2b:20:8e:42:52:74:76:d5:
                    ec:6c:a0:e9:0d:1e:01:69:63:e1:a8:67:ac:12:3c:
                    cb:f9:5d:89:d7:5b:e0:83:58:9c:dd:2f:05:25:ff:
                    2f:f6:58:08:43:dd:dd:60:0f:7d:0b:b3:48:02:e2:
                    7a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C3:74:18:EE:25:6B:9B:B3:18:52:26:CC:72:14:83:E0:B3:1C:30
            X509v3 Authority Key Identifier:
                keyid:02:C3:F1:7E:0D:80:95:42:F2:AF:03:C8:B7:41:DB:92:8B:4A:04:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f7:38:db:87:3f:60:9e:56:03:37:f9:5b:30:11:25:51:bd:
         49:c1:6e:5c:8c:ed:95:92:03:34:dc:20:48:05:5d:a4:ea:01:
         c2:5f:41:ab:4b:f7:25:a4:87:0c:0f:85:b4:ec:19:e4:ee:a3:
         76:65:9d:8e:c2:19:d1:d2:74:cd:c5:e5:c8:38:58:34:c0:80:
         00:e9:28:61:08:18:6e:60:e5:3d:78:6f:b7:15:2b:05:3f:20:
         4e:e7:c9:0c:8b:43:11:99:c4:5c:95:5b:0a:1b:8f:04:87:d7:
         63:a1:31:87:08:56:d5:7c:77:55:37:b6:38:77:37:c7:a1:bd:
         6f:33:c8:a2:4b:ff:d7:f7:6e:1c:12:88:f5:fa:7d:6d:98:ed:
         68:1c:df:fc:47:f9:63:67:0b:24:c8:fe:bb:73:b9:f5:8d:d5:
         43:8b:3d:84:f3:cb:69:e8:25:fd:c9:30:ff:99:ac:26:4a:b4:
         9a:16:75:99:ec:09:29:94:fc:7a:e2:03:f3:f3:68:62:9e:cb:
         05:fb:88:f8:dd:f7:77:da:31:aa:ea:e3:02:4c:18:8c:44:da:
         ce:3e:aa:75:ba:cb:4c:a7:39:40:88:f8:b7:7f:a4:e2:4d:b5:
         43:61:64:d9:e7:4d:e9:09:ec:d6:d3:d8:8a:77:06:59:bb:1f:
         e0:f4:8d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:23:36 2026 by rpki-client