Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
File:                     595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft (raw, json)
Hash identifier:          7E42omxFvRsPvVHbbjTksU2/zlt0MvPIu6+sA999Te0=
Subject key identifier:   01:CC:85:15:A6:3B:27:C3:72:95:16:F9:0E:14:E1:D2:5B:81:F9:F7
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Certificate issuer:       /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial:       0E9DE231E9149A541612623A593B42CE1BBCA25E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
Manifest number:          0108
Signing time:             Sun 15 Nov 2026 07:33:42 +0000
Manifest this update:     Sun 15 Nov 2026 07:28:42 +0000
Manifest next update:     Mon 16 Nov 2026 09:20:42 +0000
Files and hashes:         1: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: YnpwLS3qShrtat5vFr4GKHpgIrsqYW7nhd/bbP/N9z4=)
                          2: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: kbsHwCF+kLPIM6LmBzd7ReTnbGaVE3pJ2tb1Y6LGrMo=)
                          3: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: eOdt05IAfcrKKZUnC2uIX6d/C9w0dr4HU6UCs9176ek=)
                          4: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 0dcgbUIE4O45ZJeQQknhi7QzWy9JrD3T/y5JsTnfFC0=)
                          5: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: oIB0azCHKZZD4LUQLYG0Yqlb4f/9KSBQ4JwecEqWsUw=)
                          6: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: eR32X6TB9dCvTyEj8xcbUe0oCJGcSbLwWM78VEF/mIM=)
                          7: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: OsRtYTl/a4gBsIVTCYGY7UbsLX5kl3Dd0rUx9sxMLF8=)
                          8: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: Gf7+JDdgZXaOoBD3FCXccmzSiqspLprw2RT0W6wNy+U=)
                          9: 3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa (hash: EZ+ZMEszQ0FNnAyScxrOoCf6N5MbYNv0AIqesnyNkY8=)
                          10: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: jO/LVsBGp/hIYW/T7V2ve/LWVG5Avg+yBl19oxnQ+Ok=)
                          11: 323030313a6466313a316334303a3a2f34382d3438203d3e20313339323035.roa (hash: YbOI5aFhnLmVxr4CRLkG88zjm2Rznib1BrI9wVME05k=)
                          12: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: jNXjwR9NoJrp9dtiwnlZ8ZD+nF3IUWQs6hiqUnrS/Ok=)
                          13: 595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl (hash: w5EgKtBWdrfXGxeyPXEvzMKit/vw+6inpPRFvjqVcEQ=)
                          14: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: pBXuYTqReMplN2AY6AolkobEan90DNcRX+8WnFHv1IY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
                          rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 09:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:9d:e2:31:e9:14:9a:54:16:12:62:3a:59:3b:42:ce:1b:bc:a2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
        Validity
            Not Before: Nov 15 07:28:42 2026 GMT
            Not After : Nov 16 09:20:42 2026 GMT
        Subject: CN=01CC8515A63B27C3729516F90E14E1D25B81F9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:20:72:45:af:43:de:40:c7:51:31:1a:8b:56:
                    e5:46:a6:76:5f:ef:7b:12:a7:f5:64:c0:3f:67:fb:
                    58:23:c3:f2:e6:0d:ff:52:21:b0:0d:26:37:0e:b0:
                    a4:4f:6d:b6:f4:25:c9:2b:e1:38:a3:f7:96:39:9e:
                    fd:56:a5:81:21:18:5b:77:c0:35:54:b1:a3:b7:b5:
                    b5:c3:84:ac:f9:a9:00:ac:e6:a9:63:58:29:e2:df:
                    ec:23:34:86:81:a8:48:0c:26:1d:9c:cf:ea:09:fc:
                    04:47:48:63:69:49:26:8d:0e:f9:39:4b:d9:90:2d:
                    4b:8c:3e:ba:c2:58:e0:f8:a2:7f:08:65:0c:f2:53:
                    5c:a9:e6:0b:90:6b:0f:1d:92:43:93:b2:e0:00:54:
                    90:ec:35:78:14:69:2b:99:c2:ac:b8:79:24:ab:23:
                    07:27:aa:38:69:59:8d:65:9d:99:0d:26:93:8c:08:
                    61:02:f0:c7:85:ec:a9:db:4e:a0:49:16:c0:aa:f1:
                    43:57:aa:61:36:ac:a5:96:49:43:a5:96:bc:7b:96:
                    bc:8b:4b:44:36:a1:e1:22:74:b4:a5:de:e5:d4:bb:
                    2e:df:e7:c9:12:b3:cc:9f:65:3e:ad:94:3a:4e:5b:
                    d4:0a:21:57:bf:63:b0:ad:8c:59:6d:23:2d:b4:5f:
                    a2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CC:85:15:A6:3B:27:C3:72:95:16:F9:0E:14:E1:D2:5B:81:F9:F7
            X509v3 Authority Key Identifier:
                keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:e1:74:ad:db:1f:0c:48:7e:ff:21:45:eb:f1:f2:2a:ec:fd:
         29:60:a9:c2:c9:b5:04:58:a7:51:77:ce:94:25:7a:b5:cd:9f:
         ed:66:80:1d:8a:b7:6b:12:c7:c0:8c:20:03:f4:32:fc:ff:5a:
         de:b4:b7:ec:b1:22:9c:61:8e:29:ee:51:25:78:e8:3f:c4:80:
         b5:8a:ec:e6:9d:4e:b5:52:0e:86:9b:97:ea:fb:d9:05:57:c9:
         ee:df:b8:14:ca:da:26:83:99:2d:ab:d9:d4:47:07:08:d9:3f:
         61:f4:13:68:d8:4b:41:48:7f:ce:65:11:ce:b6:5f:4d:fe:2e:
         92:e5:dd:22:79:6a:b2:3c:8d:ef:fc:31:23:37:21:d8:4c:5f:
         c6:4b:21:d6:59:c0:76:f8:a6:fd:bf:0d:1d:b0:da:96:e7:bc:
         2f:3a:c3:f3:09:dd:d3:33:7b:19:81:74:d3:c3:0c:2e:5c:a6:
         91:3f:0a:68:75:bb:d0:47:5d:74:7f:f6:75:55:60:8d:16:65:
         3c:51:0c:ce:22:e8:c4:48:b3:dc:18:a5:3d:4e:aa:dd:8e:02:
         1f:33:eb:09:15:64:de:35:d9:cb:ad:08:3a:64:92:55:80:8a:
         c9:e4:89:54:ac:e8:07:96:e9:e8:4a:f8:4b:e5:0d:d2:bc:dd:
         d1:0d:54:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:11:23 2026 by rpki-client