Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.mft
File:                     E205BAF9253BD3679578372318D2263D430F4D99.mft (raw, json)
Hash identifier:          3vLNSpzTVD8Z2jNCY5BMyVaZgVR3Fpdxhe7oC0I3LMk=
Subject key identifier:   3C:C6:3B:D1:E4:CA:A8:79:9F:95:A0:38:4F:98:CC:A5:DC:6A:00:5E
Authority key identifier: E2:05:BA:F9:25:3B:D3:67:95:78:37:23:18:D2:26:3D:43:0F:4D:99
Certificate issuer:       /CN=E205BAF9253BD3679578372318D2263D430F4D99
Certificate serial:       4E0984D3D3EBBBA2429FB64A18E084971849F6B1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E205BAF9253BD3679578372318D2263D430F4D99.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.mft
Manifest number:          D3
Signing time:             Wed 07 Oct 2026 21:19:24 +0000
Manifest this update:     Wed 07 Oct 2026 21:14:24 +0000
Manifest next update:     Thu 08 Oct 2026 22:30:24 +0000
Files and hashes:         1: E205BAF9253BD3679578372318D2263D430F4D99.crl (hash: QZwoe5xAiZE9DR83QZeJkXHp0zMEtcxgR37veJkrsEA=)
                          2: 3130332e3136342e3133362e302f32332d3234203d3e203137393935.roa (hash: HZWp6s4pZWF/5Jmtyb043W9PpmxxelaQFAtDR552/AM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.crl
                          rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E205BAF9253BD3679578372318D2263D430F4D99.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 22:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:09:84:d3:d3:eb:bb:a2:42:9f:b6:4a:18:e0:84:97:18:49:f6:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E205BAF9253BD3679578372318D2263D430F4D99
        Validity
            Not Before: Oct  7 21:14:24 2026 GMT
            Not After : Oct  8 22:30:24 2026 GMT
        Subject: CN=3CC63BD1E4CAA8799F95A0384F98CCA5DC6A005E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c1:b3:82:e8:f6:b5:58:05:61:e2:ef:ed:37:
                    c2:05:66:f5:3a:9f:16:89:02:1f:b4:e9:01:8f:bb:
                    e3:93:7c:b9:e2:29:70:bb:77:43:fd:d8:34:ff:85:
                    4e:99:5b:e9:7f:52:eb:19:c1:86:5a:3b:69:9d:bf:
                    4a:3c:38:9f:e3:69:29:75:0c:4d:5e:51:28:ae:6b:
                    ef:e8:60:15:e6:09:02:2d:1c:3e:6a:90:cd:eb:1c:
                    bb:bf:fc:d4:9e:0b:40:78:6b:ef:02:62:36:1d:67:
                    b3:bd:ef:51:9e:90:33:c8:34:1e:2b:b5:0e:19:c5:
                    6d:a1:a1:c5:ec:be:24:89:5f:6f:a3:df:6a:27:0f:
                    25:3c:0f:ac:8f:b5:a8:d8:7f:04:7a:68:25:ef:ac:
                    57:5f:37:ee:55:9a:c0:2c:06:d3:32:58:09:60:67:
                    b4:82:04:b7:a1:36:46:19:df:bf:24:83:31:c6:73:
                    17:97:b7:70:a9:30:83:e9:3d:b5:28:9b:d6:f8:9a:
                    83:5a:91:e7:f4:d2:b4:aa:4d:96:37:dc:da:bf:f3:
                    59:18:fc:89:df:51:60:0b:d3:8d:39:ad:2e:ee:a9:
                    4b:a3:80:2d:fd:84:2a:c8:71:38:49:26:3d:6a:76:
                    92:00:0f:67:f3:e4:3a:e3:ea:2e:a8:87:db:3f:52:
                    40:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C6:3B:D1:E4:CA:A8:79:9F:95:A0:38:4F:98:CC:A5:DC:6A:00:5E
            X509v3 Authority Key Identifier:
                keyid:E2:05:BA:F9:25:3B:D3:67:95:78:37:23:18:D2:26:3D:43:0F:4D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E205BAF9253BD3679578372318D2263D430F4D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/E205BAF9253BD3679578372318D2263D430F4D99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:55:ae:f7:0b:a6:f6:74:49:e1:7e:62:3c:a2:b2:0a:be:
         70:72:f9:a7:2b:c3:59:b1:e2:83:79:6b:57:44:55:eb:c7:30:
         c1:de:cd:1e:ed:b7:33:ba:08:b8:57:6c:ec:8a:0b:2b:03:41:
         aa:ab:d4:c1:fa:4f:4b:17:11:9f:0c:d0:a3:eb:da:8f:5d:3c:
         66:43:70:d3:9b:d5:30:53:30:7e:50:46:53:fd:60:04:3a:d5:
         6b:f7:a8:a6:30:0f:2a:47:69:d2:8e:8c:9c:40:54:c7:34:a7:
         18:0a:0c:d1:a6:05:a1:52:83:1b:a4:2d:4f:b8:f5:e0:f5:73:
         bc:34:d7:e4:e3:dd:73:8f:f2:52:16:fa:cb:09:ad:84:82:f7:
         02:54:02:1e:31:d5:70:bd:88:c5:85:fe:6f:38:67:10:07:27:
         4d:a4:f5:36:c1:c7:27:b2:25:84:26:bc:e1:28:3d:76:4a:df:
         5a:6e:a8:e8:55:28:d9:0f:d6:3c:5d:d5:92:96:d7:11:76:c4:
         c1:21:9f:36:bb:1b:26:0b:2b:64:d8:84:69:39:55:ac:a9:4a:
         8b:e3:d8:6e:e8:7a:e1:8c:e1:ef:a0:a1:e7:55:d4:55:5c:c2:
         1c:30:06:b3:60:7a:0e:5d:75:45:45:41:d0:24:4c:99:07:4d:
         ff:e2:af:de
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTgmE09Pru6JCn7ZKGOCElxhJ9rEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTIwNUJBRjkyNTNCRDM2Nzk1NzgzNzIzMThEMjI2M0Q0
MzBGNEQ5OTAeFw0yNjEwMDcyMTE0MjRaFw0yNjEwMDgyMjMwMjRaMDMxMTAvBgNV
BAMTKDNDQzYzQkQxRTRDQUE4Nzk5Rjk1QTAzODRGOThDQ0E1REM2QTAwNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRwbOC6Pa1WAVh4u/tN8IFZvU6
nxaJAh+06QGPu+OTfLniKXC7d0P92DT/hU6ZW+l/UusZwYZaO2mdv0o8OJ/jaSl1
DE1eUSiua+/oYBXmCQItHD5qkM3rHLu//NSeC0B4a+8CYjYdZ7O971GekDPINB4r
tQ4ZxW2hocXsviSJX2+j32onDyU8D6yPtajYfwR6aCXvrFdfN+5VmsAsBtMyWAlg
Z7SCBLehNkYZ378kgzHGcxeXt3CpMIPpPbUom9b4moNakef00rSqTZY33Nq/81kY
/InfUWAL0405rS7uqUujgC39hCrIcThJJj1qdpIAD2fz5Drj6i6oh9s/UkBPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPMY70eTKqHmflaA4T5jMpdxqAF4wHwYDVR0j
BBgwFoAU4gW6+SU702eVeDcjGNImPUMPTZkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDA0ZDY0MjctM2YwMy00ZDIxLWI4Y2MtYmJmZDJhM2Y4YzMzLzAvRTIwNUJBRjky
NTNCRDM2Nzk1NzgzNzIzMThEMjI2M0Q0MzBGNEQ5OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FMjA1QkFGOTI1M0JEMzY3OTU3ODM3MjMxOEQyMjYzRDQzMEY0
RDk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA0ZDY0MjctM2YwMy00ZDIxLWI4
Y2MtYmJmZDJhM2Y4YzMzLzAvRTIwNUJBRjkyNTNCRDM2Nzk1NzgzNzIzMThEMjI2
M0Q0MzBGNEQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEmPVa73C6b2dEnhfmI8orIKvnBy+acrw1mx
4oN5a1dEVevHMMHezR7ttzO6CLhXbOyKCysDQaqr1MH6T0sXEZ8M0KPr2o9dPGZD
cNOb1TBTMH5QRlP9YAQ61Wv3qKYwDypHadKOjJxAVMc0pxgKDNGmBaFSgxukLU+4
9eD1c7w01+Tj3XOP8lIW+ssJrYSC9wJUAh4x1XC9iMWF/m84ZxAHJ02k9TbBxyey
JYQmvOEoPXZK31puqOhVKNkP1jxd1ZKW1xF2xMEhnza7GyYLK2TYhGk5VaypSovj
2G7oeuGM4e+goedV1FVcwhwwBrNgeg5ddUVFQdAkTJkHTf/ir94=
-----END CERTIFICATE-----
Generated at Thu Oct 8 07:29:13 2026 by rpki-client