Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft
File:                     E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft (raw, json)
Hash identifier:          LmH56xoDExBYyB3QxvOiyY/SzWHDF5VX1/Bg8AZex2s=
Subject key identifier:   37:19:61:1E:93:FD:20:11:DE:FB:50:BB:FC:44:1B:30:88:DD:A9:EE
Authority key identifier: E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4
Certificate issuer:       /CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
Certificate serial:       41A2399FF897DC6198925EC4D4166C02E09A3C63
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft
Manifest number:          A2
Signing time:             Mon 31 Aug 2026 15:13:13 +0000
Manifest this update:     Mon 31 Aug 2026 15:08:13 +0000
Manifest next update:     Tue 01 Sep 2026 16:19:13 +0000
Files and hashes:         1: 3130332e31382e33322e302f32342d3234203d3e203435333132.roa (hash: 8wicQkZR30nncaU/DLuqEIgTrRTSD3IcmpJkjTUAUzA=)
                          2: 3230322e38312e35342e302f32342d3234203d3e203435333132.roa (hash: jdFN85sbuc8Md61yP/i0fcHruFTcQPmsIJIjC0c4qbo=)
                          3: 3230322e38312e35312e302f32342d3234203d3e203435333132.roa (hash: eaYIdZoRfK/FFwqzVZBV7b79mhdQycO2H+u3JU3jjwc=)
                          4: 3230322e38312e36312e302f32342d3234203d3e203435333132.roa (hash: sck/dOiW4dxaTHqfIU/Zcv0zuxLGvdUW0v3abFbK8ng=)
                          5: 3230322e38312e35322e302f32342d3234203d3e203435333132.roa (hash: vTNjqpcqoNu19MLSuMOK3Dtu6rOF3+qj+lLaQbzk9bI=)
                          6: 3230322e38312e36332e302f32342d3234203d3e20313432343031.roa (hash: VNit20zqj7HrzzhPqJaCQWs1p/vk45r49GsQ85vxRNs=)
                          7: 3230322e38312e35382e302f32342d3234203d3e203435333132.roa (hash: r9XaIFicWvjflnb5C6IQrMqeqHClGTG/0y5hohYskdQ=)
                          8: 3230322e38312e34382e302f32342d3234203d3e203435333132.roa (hash: TbLMwdxOSR1RZnrO3oN4B3HatggJeaAHR2DwUw/x/qI=)
                          9: 3130332e31342e34342e302f32342d3234203d3e203435333132.roa (hash: hW7TNWs1mGdEApM2CLxPuOjeCzaPIctjIOeQqh9605U=)
                          10: 3230322e38312e35362e302f32342d3234203d3e203435333132.roa (hash: SxlxyvL8WwrM5JGx08PzBKCeI+dMeMDbdJIGfQQ+jfY=)
                          11: E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl (hash: oQNjeuxUkOSt5EUt/fDAHXTkmlGZwdy4aAycdVT7nZg=)
                          12: 3130332e31342e34352e302f32342d3234203d3e203435333132.roa (hash: J5ZNSil+polrtC8tt/Fz4qrJB4jA72XAW0FjneWVBnA=)
                          13: 34332e3234372e33322e302f32342d3234203d3e203435333132.roa (hash: G18q8JLwlqfKLoA7DLJ4AF/qNYAZNJwcFEi8Kv0AWuY=)
                          14: 3230322e38312e35392e302f32342d3234203d3e203435333132.roa (hash: mMvkarfiVBBHzGgnkgg60LUcEEPHU3JKaX9eZkvqEcE=)
                          15: 3230322e38312e36322e302f32342d3234203d3e203435333132.roa (hash: w275dcR9CW07x1fc5CpNq23n+WxUwB1RsjR1eseeEvE=)
                          16: 3230322e38312e35372e302f32342d3234203d3e203435333132.roa (hash: YNLkjTQkG105OE/syp1GWHGqZ09ZNPBRni6eVtckJeI=)
                          17: 34332e3234372e33352e302f32342d3234203d3e203435333132.roa (hash: q9WB/muGcJ8++0qA2meMDEOddbA2BwalSzopAMix+i8=)
                          18: 34332e3234372e33332e302f32342d3234203d3e203435333132.roa (hash: erZtOAkoJsSCa1y/Ndx5gOuMo3npuD1uvhBg+kMr2B8=)
                          19: 3130332e31382e33332e302f32342d3234203d3e203435333132.roa (hash: aU4m29uJTMzxJuVSrUNNjPT6d7i8F5Zh6D1cAxCa4i4=)
                          20: 3130332e31342e34342e302f32332d3233203d3e203435333132.roa (hash: GiSO+4DO7dCeRW0dFH+TD5FoPnggccXNgYUdYh95G6E=)
                          21: 3230322e38312e35332e302f32342d3234203d3e203435333132.roa (hash: G+TqB61oqG58+DV9DA4U59T/VqCzJmMyaZqSiWubGKE=)
                          22: 3230322e38312e36302e302f32342d3234203d3e203435333132.roa (hash: G6+jLX2/BJBCVbxIwEE4bywS7b/5wQD74gZvpTObL0M=)
                          23: 3130332e31382e33322e302f32332d3234203d3e203435333132.roa (hash: jtW8+SKRhW2A7sJov2Bo4rUOMewWgGC6J56I70YJfnk=)
                          24: 3230322e38312e34392e302f32342d3234203d3e203435333132.roa (hash: 1HUfxp8C42VRJscve3mouT4cmDfQnA1vozNhV3w6Hzk=)
                          25: 3230322e38312e34382e302f32302d3234203d3e203435333132.roa (hash: Nh12qtmFEUf7/cb0jGcOONrkiVnhq66fBmdBDF4XPLQ=)
                          26: 34332e3234372e33322e302f32322d3234203d3e203435333132.roa (hash: d7VTC+pgE4wgKxdm6p11JaNocnGmzYscctgF4uVwaOg=)
                          27: 3230322e38312e35302e302f32342d3234203d3e203435333132.roa (hash: 8/Qkby+Hb/VCnImKT7P4nf5ZPH6w+Lq/+aUOYGy2QTg=)
                          28: 3230322e38312e35352e302f32342d3234203d3e203435333132.roa (hash: eQMgvbiIJS6qZDzTzmNY9zJd7P9TLx/60N8D6qwtINc=)
                          29: 323430343a663863303a3a2f33322d3332203d3e203435333132.roa (hash: M8J097gMPtwxL0sgN0vcbcSSpO+UPQcf0u2PB7ZoqKE=)
                          30: 323430343a663863303a3a2f34382d3438203d3e203435333132.roa (hash: rTq9zOlNTtZOrbja36rf6XUowmgf7qLMjm4V0bgYZ0o=)
                          31: 34332e3234372e33342e302f32342d3234203d3e203435333132.roa (hash: qx/6dJGtzychE9OYtvv22AJt3+rYGrj4aetT4KKd5Pc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl
                          rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 16:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a2:39:9f:f8:97:dc:61:98:92:5e:c4:d4:16:6c:02:e0:9a:3c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
        Validity
            Not Before: Aug 31 15:08:13 2026 GMT
            Not After : Sep  1 16:19:13 2026 GMT
        Subject: CN=3719611E93FD2011DEFB50BBFC441B3088DDA9EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:61:18:12:ab:d1:9e:5f:89:90:17:99:be:38:
                    d1:67:e8:81:a3:26:d6:40:6b:6a:45:b8:f9:2a:2c:
                    28:4a:33:5a:80:e2:b0:9b:fb:ac:09:66:90:cf:24:
                    46:89:53:09:0b:ff:e3:c9:53:b2:88:48:be:4f:3d:
                    1f:35:ea:b9:a1:c6:5d:62:47:a9:97:b3:e0:7e:0a:
                    53:38:a8:c3:08:0f:fd:5b:34:37:5c:a4:6c:3b:b0:
                    85:b1:9b:5a:ce:78:a9:db:45:b8:ed:cb:27:3a:6c:
                    24:3f:5a:5b:24:43:4e:98:55:6a:24:4c:33:e6:3f:
                    e5:8e:07:63:d9:2e:92:60:23:72:3a:46:6b:fd:f2:
                    70:35:17:58:26:70:ba:39:17:0b:93:ba:00:c4:ec:
                    a4:77:6a:7f:92:e2:40:a1:80:a0:9a:ea:4b:80:54:
                    8d:b0:7e:fb:e2:1e:95:83:35:ba:38:16:17:dd:df:
                    79:4d:7d:5f:f4:07:64:4b:0e:89:85:fd:e4:cd:e8:
                    8c:a5:7b:de:ef:ff:92:aa:7c:c6:de:7b:77:e7:7d:
                    ee:28:3d:3d:10:95:44:92:30:9c:ed:53:7d:b2:98:
                    1e:4a:2a:2b:d4:6a:4c:c8:c4:ad:c6:1b:17:2f:8c:
                    93:23:71:80:8f:cb:50:09:17:6d:42:7b:63:c9:fd:
                    3e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:19:61:1E:93:FD:20:11:DE:FB:50:BB:FC:44:1B:30:88:DD:A9:EE
            X509v3 Authority Key Identifier:
                keyid:E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:43:6a:df:7b:8e:3e:73:03:21:64:df:f7:4c:66:62:f8:e4:
         be:ac:1b:81:4a:5c:51:b9:c3:58:c8:48:f5:3f:48:c9:35:b2:
         ae:a6:d0:b3:d2:09:be:2d:a4:ff:9b:16:76:07:4a:ad:2c:49:
         fe:79:4a:fc:3b:67:26:30:ed:0b:d5:07:55:43:50:fe:3b:a9:
         7a:74:fd:d2:da:8d:70:6d:26:c4:9d:54:7d:46:73:28:d2:fc:
         18:4f:da:87:83:65:b9:45:93:69:69:43:cb:6a:35:57:47:30:
         e1:f0:ee:f0:f2:94:ec:bd:80:0a:53:03:b7:ae:c0:b7:5d:ea:
         84:87:11:0e:be:ab:4f:97:ad:68:b9:0b:d1:4a:dd:d1:38:ed:
         86:2d:87:a0:66:21:b1:84:b5:42:7b:e9:6c:6c:ab:c3:ad:c8:
         f6:bc:21:bb:49:f6:74:5c:55:8f:71:15:12:63:da:12:ca:b2:
         00:52:9c:44:5c:80:a8:40:a8:a7:de:6c:68:d1:aa:ce:8e:b8:
         e6:c2:ed:35:04:d9:f9:84:94:55:10:47:3b:62:a4:78:1b:49:
         a8:e5:5a:8e:31:9b:0d:92:21:83:ac:39:af:f6:74:5e:75:af:
         c6:89:a7:82:14:1e:14:4d:93:3f:29:b9:d3:1d:66:d4:63:e9:
         19:5b:a3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:06:37 2026 by rpki-client