Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft
File:                     C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft (raw, json)
Hash identifier:          sh+jnbwH62mHJgfiQaoBiLoU0zE97RH0+B1PbqRyF1Y=
Subject key identifier:   99:2C:2E:58:71:5A:F9:29:00:83:D4:E1:1E:83:1C:5D:87:71:26:2C
Authority key identifier: C9:E3:CF:72:C3:47:D2:8B:4B:43:0D:B7:37:BE:80:CB:01:72:B1:06
Certificate issuer:       /CN=C9E3CF72C347D28B4B430DB737BE80CB0172B106
Certificate serial:       0370E7DE5D9FF8A4A979BF9E799F6C2649FAA279
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft
Manifest number:          D3
Signing time:             Thu 08 Oct 2026 02:24:36 +0000
Manifest this update:     Thu 08 Oct 2026 02:19:36 +0000
Manifest next update:     Fri 09 Oct 2026 02:45:36 +0000
Files and hashes:         1: 323430353a6334303a3a2f33322d3332203d3e20313338383837.roa (hash: O6flVT/BjgsdY42z9V2dLz5E/e2Z/+dSUp+QehcFeRU=)
                          2: 3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa (hash: /ia91hqzHCBrX/q+7Rzu1zW0X5ukwcV1dwBpHbDRCBI=)
                          3: 323430353a6334303a313030303a3a2f33362d3336203d3e20313338383837.roa (hash: itrmPgVHPMZm/0dP8jD7iKpiUgp5FDGwLgZlfdM0s6I=)
                          4: C9E3CF72C347D28B4B430DB737BE80CB0172B106.crl (hash: xSBn4F1qBh9S9UjXjXH2mYpy0Wl5uWxz/+fF5pChqZ8=)
                          5: 3130332e3134312e32302e302f32332d3233203d3e20313338383837.roa (hash: h0aJP09uXJR7/Jgpd677SbGBA5UD7o/TwIMtte0LAII=)
                          6: 3130332e3134312e32312e302f32342d3234203d3e20313338383837.roa (hash: 8JilOY3M6bmQigsj4ZkeI5e01YAdQG7yCEbyKOb2XWU=)
                          7: 323430353a6334303a363030303a3a2f33362d3336203d3e20313338383837.roa (hash: LdrXXHPkIXvu63segAbWDO8C0FmCk2NoI4rodpf99hs=)
                          8: 323430353a6334303a343030303a3a2f33362d3336203d3e20313338383837.roa (hash: Uw2DZXWdsbdLxITCw50MdBG6P/SrnICAOddefwFUHEU=)
                          9: 323430353a6334303a3a2f33332d3333203d3e20313338383837.roa (hash: f40WyqcJUx5CaPP5/qa5LhPHXzQ7tY9s/CnE73Q55+U=)
                          10: 323430353a6334303a3a2f33362d3336203d3e20313338383837.roa (hash: rp6/R1Wlz48G+rpBFS/l32yNHFJy7R2P6b7HlLCGNqQ=)
                          11: 323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa (hash: G3HPmbrylByhe8P0W3+v8DhwstU+DtkeFukqMhA3cww=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.crl
                          rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 02:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:70:e7:de:5d:9f:f8:a4:a9:79:bf:9e:79:9f:6c:26:49:fa:a2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9E3CF72C347D28B4B430DB737BE80CB0172B106
        Validity
            Not Before: Oct  8 02:19:36 2026 GMT
            Not After : Oct  9 02:45:36 2026 GMT
        Subject: CN=992C2E58715AF9290083D4E11E831C5D8771262C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6b:91:c7:6f:29:3f:40:b8:c6:ad:73:04:b8:
                    f1:3a:29:fc:65:cc:2f:43:4d:db:61:d3:ad:4d:de:
                    67:9d:c3:c7:d7:80:f7:28:a9:88:ac:2e:77:fe:a9:
                    e1:20:55:8d:67:5f:c8:9f:ee:bc:d5:2e:35:f3:d4:
                    74:d5:bf:c8:eb:d7:90:a0:e5:d2:d9:e8:ce:ed:87:
                    76:e5:dc:c9:b8:2e:b3:3d:2f:e5:d7:d9:e7:48:78:
                    b1:af:8d:ee:26:2e:4c:b3:17:76:1e:df:6e:e5:f8:
                    8e:ff:b5:83:98:b6:15:d6:23:a9:65:40:90:ee:e5:
                    01:41:55:6d:37:47:5f:0d:7b:05:45:d5:3c:ba:79:
                    6f:db:28:c5:c5:63:88:b8:03:10:66:bc:a2:3b:35:
                    bc:aa:47:21:f2:cf:e6:dd:9d:28:92:54:e3:c2:97:
                    75:57:a9:ec:98:d3:9e:15:cf:37:31:72:23:1e:2f:
                    c2:41:e7:a1:c7:e7:2b:43:42:22:cf:3d:47:c0:8c:
                    c4:4c:1b:e8:e6:d1:4b:a9:eb:35:72:68:29:93:ce:
                    38:2c:8a:ba:e0:1f:d2:61:a2:2e:32:ea:a3:98:02:
                    00:b6:f4:8d:cd:f2:50:0e:f4:fc:92:85:40:8c:75:
                    9c:8a:e2:da:56:76:3b:a9:6b:c3:7a:83:6a:fb:47:
                    3c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2C:2E:58:71:5A:F9:29:00:83:D4:E1:1E:83:1C:5D:87:71:26:2C
            X509v3 Authority Key Identifier:
                keyid:C9:E3:CF:72:C3:47:D2:8B:4B:43:0D:B7:37:BE:80:CB:01:72:B1:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:56:d4:cb:c9:82:ef:cb:d0:d9:30:23:8a:d8:66:dc:be:23:
         45:5b:45:8f:b2:e2:1e:6d:4a:01:2e:e0:06:47:36:1a:e3:5c:
         24:c5:88:7e:03:73:47:f2:b8:dc:a8:0c:70:cc:dd:19:fb:90:
         a9:0b:c6:5b:c5:4b:42:ca:24:4c:09:d9:25:a4:8b:2c:ce:3f:
         7b:ef:d7:ab:ed:96:96:74:4a:f5:49:b1:35:e9:e7:d0:d1:4a:
         79:c8:37:0a:bd:49:f0:3a:dd:3e:a1:c1:31:5b:23:fc:b1:f7:
         4a:61:e1:b2:28:70:ce:df:94:9d:21:20:c2:73:c3:c6:31:bd:
         4c:1c:4b:0e:b9:23:d9:23:4d:fe:90:22:63:1d:9b:dd:ec:b0:
         54:f1:e8:6c:8a:21:2d:51:c6:10:10:50:c6:cd:fb:c4:73:35:
         77:30:4f:14:92:2c:6c:a5:93:a1:2b:32:31:1f:ba:a8:bb:b0:
         d7:9a:54:64:fc:f7:fd:3c:c1:b3:02:c8:6a:27:b9:23:a9:c3:
         41:e6:4e:d8:d4:53:a2:7d:2c:78:22:f9:32:24:69:3b:4d:85:
         3c:9c:ad:22:e3:0f:37:1a:28:5e:72:94:3d:46:29:9a:2c:6f:
         e4:a4:ca:e0:cd:c4:f8:f5:8e:f3:d8:a4:42:43:95:f2:cc:88:
         be:f4:66:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:51:14 2026 by rpki-client