Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft
File:                     0D2802EC43905EEA387602B994B8B579041C8507.mft (raw, json)
Hash identifier:          0iJOOi+1Y8e7LqUyGt9cR1gR6JwAnAHj+S75sSAan/o=
Subject key identifier:   D2:26:D9:85:11:B6:73:F0:13:F0:16:B5:57:53:A4:BA:8F:4D:44:5B
Authority key identifier: 0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07
Certificate issuer:       /CN=0D2802EC43905EEA387602B994B8B579041C8507
Certificate serial:       1953B41451AEBAE90222060C4FA93E41C80FBE52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft
Manifest number:          C1
Signing time:             Sun 20 Sep 2026 15:51:37 +0000
Manifest this update:     Sun 20 Sep 2026 15:46:37 +0000
Manifest next update:     Mon 21 Sep 2026 18:50:37 +0000
Files and hashes:         1: 3130332e3133372e33382e302f32332d3234203d3e20313338303737.roa (hash: LpmeCYIxoWBDvzjeANLy6rKl3zTbux6LO0Gm7oz2kiY=)
                          2: 0D2802EC43905EEA387602B994B8B579041C8507.crl (hash: vnMNANwgr3i/91osch3rct5UR9eQSBNIwPC75icI28s=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl
                          rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 17:28:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:53:b4:14:51:ae:ba:e9:02:22:06:0c:4f:a9:3e:41:c8:0f:be:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D2802EC43905EEA387602B994B8B579041C8507
        Validity
            Not Before: Sep 20 15:46:37 2026 GMT
            Not After : Sep 21 18:50:37 2026 GMT
        Subject: CN=D226D98511B673F013F016B55753A4BA8F4D445B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:93:bc:f0:17:ac:66:67:69:68:6d:57:41:
                    52:1d:12:a7:45:ea:f6:48:c3:12:11:11:8c:c2:24:
                    22:aa:64:e0:e0:ce:82:37:1f:cd:b8:09:00:51:bf:
                    bb:0c:3a:f7:74:4e:47:ef:24:6c:30:62:97:5e:06:
                    9d:d6:c7:b5:f2:c0:8b:1a:f8:d9:66:34:28:5a:70:
                    dc:04:80:5a:ed:76:b1:f8:5e:ae:79:46:92:fd:bd:
                    84:ab:a3:20:b3:c3:bd:be:0f:63:b8:16:33:55:59:
                    9e:d1:72:1e:05:47:41:ed:79:61:f9:cf:35:d9:9c:
                    ac:24:a8:db:53:15:0d:94:ad:c9:dc:21:a1:fe:7f:
                    c1:cc:0d:c7:ed:ce:65:5f:a2:cb:a9:a0:27:ad:ab:
                    75:17:f5:de:c8:43:f9:6d:66:74:af:55:9f:61:c4:
                    64:11:c5:0d:3e:e9:a9:eb:e9:7c:54:7c:2e:5e:0c:
                    22:2d:e7:c5:b4:93:83:07:08:80:44:2b:07:16:37:
                    d9:c2:ed:04:bb:47:80:cd:fd:71:c0:a7:a7:89:ea:
                    ba:d7:84:6b:2f:fd:a0:75:f0:7b:fc:a1:1f:47:eb:
                    a5:3d:de:ab:fd:f4:77:e6:44:a7:a7:68:53:24:c5:
                    07:6e:54:69:b5:28:da:c2:8b:bd:00:1a:c1:23:26:
                    2f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:26:D9:85:11:B6:73:F0:13:F0:16:B5:57:53:A4:BA:8F:4D:44:5B
            X509v3 Authority Key Identifier:
                keyid:0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e9:14:c1:6f:a3:fa:4d:10:91:07:98:63:36:d7:b7:ff:3d:
         8f:60:88:8b:76:f4:3b:4b:9b:02:d0:5a:b7:40:44:72:8e:90:
         a7:fa:fd:98:71:f9:ba:d0:ae:5d:92:34:59:0d:a9:c3:e4:d2:
         e1:80:f9:19:0f:3f:f8:cc:af:1a:44:ac:0a:45:ad:e8:00:ac:
         38:48:a9:40:5f:55:34:5b:6b:0c:ce:ff:e5:83:80:9d:2a:ef:
         9f:1b:19:92:df:91:53:f5:43:9d:ef:15:9e:2f:4b:b5:4f:1b:
         83:8a:2d:70:4a:c6:f0:b8:d9:46:26:3e:77:de:8d:e3:7a:45:
         4d:ab:0e:ae:23:ea:ab:54:75:16:77:2c:4b:c9:34:b8:25:16:
         0d:7f:47:78:38:23:69:66:57:9a:48:72:75:b5:30:ff:2b:17:
         25:fc:98:40:6e:fc:50:67:8a:37:f7:3a:3d:31:6b:92:71:ff:
         e1:73:f8:9b:e7:cc:8f:de:5c:05:40:21:0c:16:b8:18:fa:35:
         50:8b:c7:f4:a6:0f:c4:8e:97:f7:b2:a9:54:f0:47:8e:8c:59:
         51:c9:7a:00:bd:c2:04:7a:85:81:12:71:4d:59:c6:64:6c:a6:
         44:97:ff:5e:34:ca:ed:54:2f:f3:d8:b9:3b:bc:12:46:6c:30:
         71:36:47:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:20:16 2026 by rpki-client