Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft
File:                     03B83E011591057E9C55D430A83D331349B52D74.mft (raw, json)
Hash identifier:          zjyHNtNGxS9ey6FHkZT2PuX14VfUga4KL6OC2fMNxRA=
Subject key identifier:   97:FB:A0:45:D7:AA:B9:AE:A7:33:58:CF:DB:63:18:C8:73:E2:F5:51
Authority key identifier: 03:B8:3E:01:15:91:05:7E:9C:55:D4:30:A8:3D:33:13:49:B5:2D:74
Certificate issuer:       /CN=03B83E011591057E9C55D430A83D331349B52D74
Certificate serial:       2E5F5DDE35ED01873B5AE374EB5CA123FF4CCF7A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft
Manifest number:          C2
Signing time:             Thu 24 Sep 2026 11:29:46 +0000
Manifest this update:     Thu 24 Sep 2026 11:24:46 +0000
Manifest next update:     Fri 25 Sep 2026 14:59:46 +0000
Files and hashes:         1: 3130332e33302e302e302f32322d3234203d3e20313331373738.roa (hash: MWGMyGsif1qG/JrFen/swi1iMUWK7kAxIalVFfa1ZhI=)
                          2: 03B83E011591057E9C55D430A83D331349B52D74.crl (hash: RxmKabVro//AEQpN7CS/wTpjcsW+A/2ov1Th/FsRVnQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.crl
                          rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 10:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5f:5d:de:35:ed:01:87:3b:5a:e3:74:eb:5c:a1:23:ff:4c:cf:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03B83E011591057E9C55D430A83D331349B52D74
        Validity
            Not Before: Sep 24 11:24:46 2026 GMT
            Not After : Sep 25 14:59:46 2026 GMT
        Subject: CN=97FBA045D7AAB9AEA73358CFDB6318C873E2F551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:95:39:b6:68:86:d5:0e:45:c2:06:f4:e3:79:
                    fb:c4:4a:95:fe:80:d9:65:ab:6c:f1:89:05:90:ed:
                    cf:70:45:c2:08:de:3a:c2:75:15:e9:1a:f0:1c:25:
                    63:d1:bd:bd:bd:77:59:41:cb:99:c1:04:a7:1e:d3:
                    7a:e8:b8:f1:ec:6b:68:da:81:9f:ed:9c:63:97:77:
                    64:1a:f1:54:05:c2:2b:e3:7b:d3:24:63:2f:84:61:
                    dd:40:f1:24:9e:f3:a8:df:e8:45:d7:0b:c5:a1:d9:
                    71:97:0b:61:c3:5b:31:bb:73:19:b1:1e:6b:cf:10:
                    8f:7b:8f:2b:95:5a:c4:28:40:c9:df:6e:b0:21:c8:
                    96:a8:17:fe:21:bc:d9:e4:cb:6d:5a:9b:b6:40:65:
                    6b:73:c7:4a:95:91:a8:3b:1d:8e:0b:f5:d4:ad:9b:
                    c6:ed:d2:96:0e:21:b6:aa:78:b7:a0:2a:e7:aa:99:
                    3c:50:26:95:42:a0:8f:1b:1c:14:18:74:db:00:45:
                    16:8d:8a:c8:82:51:07:94:e1:3c:6d:50:7f:96:9c:
                    dc:e7:b7:d7:4e:b6:e5:a5:02:ff:b0:db:cd:00:24:
                    f6:c5:53:39:1b:ff:fd:df:3e:cb:46:1f:d1:22:9e:
                    20:5e:26:8e:93:29:2e:60:9e:21:48:2f:04:14:7e:
                    b5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FB:A0:45:D7:AA:B9:AE:A7:33:58:CF:DB:63:18:C8:73:E2:F5:51
            X509v3 Authority Key Identifier:
                keyid:03:B8:3E:01:15:91:05:7E:9C:55:D4:30:A8:3D:33:13:49:B5:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:24:ad:50:c2:89:36:d7:80:61:f4:5f:73:a7:f7:75:4d:aa:
         6f:57:4b:cf:46:88:2e:cb:35:17:52:a8:8d:e8:0d:3b:03:8a:
         21:da:64:e9:40:f5:a6:48:09:76:0e:51:bc:ca:4d:c4:54:05:
         dd:ec:c1:ad:1a:8a:42:f9:30:39:25:90:3e:84:32:c1:77:46:
         f6:7f:f8:f7:b8:e7:dd:c0:c2:b3:01:1b:25:54:7d:dc:56:3e:
         cd:8a:20:25:4b:3c:d9:7d:91:17:af:c2:32:a4:8d:e7:a8:2a:
         00:2d:5b:ac:4b:6b:55:2f:22:fb:be:e4:46:19:2e:3a:54:ac:
         a4:94:f2:0e:b5:e2:6d:c2:04:0e:e6:65:ee:b6:15:4e:73:97:
         f8:28:c8:3e:45:98:b1:6f:e3:d4:ff:50:d9:23:15:f9:f0:70:
         85:3d:7c:d6:e4:ea:fb:6d:31:cb:f1:0c:28:41:e9:ec:c4:9a:
         39:83:6b:2e:61:09:31:83:52:ea:e8:35:03:73:ec:03:b8:9c:
         b7:8e:7b:c1:ef:ca:7d:38:72:9a:9b:37:84:f2:87:ba:2e:a2:
         f0:ca:db:8b:5f:cc:cb:d1:2d:06:56:3c:27:55:12:ca:c2:18:
         ba:e2:29:6e:33:9b:6b:62:b3:c6:a4:8b:8d:7b:e2:fa:80:a9:
         b2:5c:86:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:15:08 2026 by rpki-client