Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
File:                     C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft (raw, json)
Hash identifier:          49CgjCmEO3VUOENKX8pec+HOplGFrpf0y6WSxT8HiyE=
Subject key identifier:   FD:98:7F:28:8C:EB:BF:3C:FA:41:F2:AE:8A:B5:4F:3B:70:47:D2:0A
Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9
Certificate issuer:       /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9
Certificate serial:       79FAB480AAE0116698762983F885CB93F79B1825
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 03:01:49 +0000
Manifest this update:     Tue 12 May 2026 02:56:49 +0000
Manifest next update:     Wed 13 May 2026 06:24:49 +0000
Files and hashes:         1: 323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (hash: AzVrbmw1D35LXqWCeqtZ4xDM2Ov824Fl8I4Xi69Tl/A=)
                          2: 3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (hash: WVnSwWyfbHb1cF4zK3nfAh3+4mXKYVShqhzNFGYV1/4=)
                          3: 323430303a343661303a32323a3a2f34382d3438203d3e20313437313337.roa (hash: Z17KOPUimeqYA1aZq3SNkRhgncaUQxfgpGD5Ws+TmaM=)
                          4: 323430303a343661303a31303a3a2f34382d3438203d3e20313437313337.roa (hash: Xtekq0XfiyDF84CgG01kPnBfk5gv3roxTAHumf4Y5lY=)
                          5: 323430303a343661303a33343a3a2f34382d3438203d3e20313437313337.roa (hash: FpuosyUSWMTfhk1yjPzRRle4FSUaLD0RRnI3/i081xk=)
                          6: 323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa (hash: zV398UgRTlptT97Qc1/wsPkzfK97ViGntlsJokWgHgg=)
                          7: 323430303a343661303a33353a3a2f34382d3438203d3e20313437313337.roa (hash: 1xZJhr0aQYYOOzMLyDygpRTMMvY7vsa9JEcRlTrt0Lw=)
                          8: 323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa (hash: OLNk+VWdGI1qmIPu8Drgqpmv6WGw5uCOToriZ5VHa9w=)
                          9: 323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa (hash: 5SgJA7bdr6raZ7Mqjwc8wZqhlg7dpVjh8FGcFa+U5rk=)
                          10: 323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa (hash: 5IqA+aFlD3C+qm5E4iE8TertLT23UTTXA9Svn7QpuMk=)
                          11: 323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa (hash: 0dcMygO+Bc+TXcrUgmdBEdxgQ/GML+71SETcyrBroSo=)
                          12: C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl (hash: l0bp3MLHSGlzdZ8VFU3PalFP90jn9fYAABdquG8BLws=)
                          13: 323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa (hash: b3pQDI/eP+0SwgVnsmQmkeZ1d2w8eSJ1YWWJnGvXDz8=)
                          14: 323430303a343661303a313a3a2f34382d3438203d3e20313437313337.roa (hash: 9y9riMr8hw8IaD+ig1yYTfIKYToP3AFvgLBOvq0dUqA=)
                          15: 323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa (hash: RZNwhsdWPwHsJ1753q7l7RVtxdL0EUNu722JNRatZoc=)
                          16: 323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa (hash: UT1h2LMTjTQJ7ZJ7JztoMi17EHjsbtJIUvBVi8DlKSo=)
                          17: 323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa (hash: cACJn3CN44BJInMN2D1DUzz5f/u9M8K8ZaV5c704i0c=)
                          18: 323430303a343661303a363a3a2f34382d3438203d3e20313437313337.roa (hash: ysVciOe07++0v5Vr1hzLx8fA/0jTLiYdiUqf/6pXrkA=)
                          19: 323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa (hash: +wm/VK77fHrWVU/ZkF+Uqbjn7YBt3NYF+N/EiT1H9LU=)
                          20: 323430303a343661303a33313a3a2f34382d3438203d3e20313437313337.roa (hash: oQlQCcGSIyApZwe0zh02JHB8NgdLlqCqb+hc+WKLBAk=)
                          21: 323430303a343661303a3a2f34382d3438203d3e20313437313337.roa (hash: 0HDp+vfD+4sT/TKrDDPYxk4/65tF4UinBvnW6pYSahU=)
                          22: 323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa (hash: bUiGB1W7Se2nx9Nc64eycOugCZo681BWG/duCoJZWeI=)
                          23: 323430303a343661303a32393a3a2f34382d3438203d3e20313437313337.roa (hash: HLJY57d7qqR9FiGfUIjlFjjQrGocl/3YC5fSm+HtD9U=)
                          24: 323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa (hash: VEWKVQt8y/8GPWkN8tAdK8b4mgUdgFzyKGEQfkduN98=)
                          25: 323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa (hash: rrbo9gFfKTg6spECSvy8Q2yWG7nEl4xu5sTVFZ6rz7o=)
                          26: 323430303a343661303a323a3a2f34382d3438203d3e20313437313337.roa (hash: +c41dutgFT2ZE2lEvbuAaTazQUEb6UW8ui2Kg7nMrVo=)
                          27: 323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (hash: OzuliA2N8wNt6MGtPujtGB6U6rXsRoWhjjYaeaS0yAs=)
                          28: 323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa (hash: RgFmlKKxmL5ut1KmXAx7XdZwngIvPGxFdbg1RlK2QKc=)
                          29: 3130332e3137372e392e302f32342d3234203d3e20313437313337.roa (hash: LiXvBI/+0aSmpVLjojfaeEmHB07g7RdwE9fmn4IWLtc=)
                          30: 323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa (hash: sk3ZxSGwRUSHyuGSOaKTetRq+YknC9DBGmC5NH67SNI=)
                          31: 323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa (hash: AMjnyAEfiOVxNwyzM8O6HXzZGTxkgyap27aKj3W6Skk=)
                          32: 323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa (hash: R1kE9uKrZbeLkgzHC7e5BusLmDv674DkMdgzbBvwhAw=)
                          33: 323430303a343661303a3a2f33322d3438203d3e20313437313337.roa (hash: O05Ps8hAd8rr0CaoB90NQsqUuO2fcg1LWgMOuLkP0To=)
                          34: 323430303a343661303a31373a3a2f34382d3438203d3e20313437313337.roa (hash: MuOtiRCK+tp6U+hzr1x3k/1BlmKfEwjNnXDtMTn3C54=)
                          35: 323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa (hash: CqP8eUG+XNHe2ZRDBQbbiW1JHTmz7eUiEFlYMZh4rHY=)
                          36: 323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa (hash: QdXCuvjo6r6bGTPWedrJUM8DCfGtVmTE0qQwjHkmDQ4=)
                          37: 323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa (hash: 8i1yDAIM/jiddL2Dyt3x+4fTdzbaN44q0VQUxOtuXgI=)
                          38: 323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa (hash: 5JKbjJnU69SJlm4fg3FPZyCqBIfVS060Z1KnNVEVtkw=)
                          39: 323430303a343661303a333a3a2f34382d3438203d3e20313437313337.roa (hash: gfbcpg+SVHwH5IjoNRXSMVdGISaiGt5LV1khyRPoF44=)
                          40: 323430303a343661303a31333a3a2f34382d3438203d3e20313437313337.roa (hash: /GIxYy0vSq64HynAB2s2ChjySqHSwoYFUlMZoPK4jfs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl
                          rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 06:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fa:b4:80:aa:e0:11:66:98:76:29:83:f8:85:cb:93:f7:9b:18:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9
        Validity
            Not Before: May 12 02:56:49 2026 GMT
            Not After : May 13 06:24:49 2026 GMT
        Subject: CN=FD987F288CEBBF3CFA41F2AE8AB54F3B7047D20A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:34:08:b3:70:db:08:e0:ab:8a:ef:28:2a:
                    e9:50:47:42:d1:0a:a4:f6:d9:53:03:68:56:61:31:
                    22:82:9b:bc:b9:e1:d3:dd:03:29:45:88:8d:1d:13:
                    1c:98:6e:32:66:13:c2:63:4f:43:5c:2c:48:f6:28:
                    d3:11:b8:06:cb:2b:05:4a:68:74:9b:c5:61:78:27:
                    8a:1c:ae:aa:96:30:33:b3:f1:c6:e2:16:62:65:d6:
                    e3:71:19:d3:19:48:f6:37:ed:8f:90:5a:84:1e:de:
                    2f:12:4f:31:94:7a:40:b0:99:22:89:b4:fd:e4:37:
                    35:1e:0a:9e:82:13:81:f4:66:00:26:ab:85:60:f6:
                    91:32:42:34:c6:b3:ec:32:47:5b:fc:2b:a6:e2:ee:
                    df:72:5f:d3:a0:7a:5a:94:1f:0e:d5:ec:45:d9:2b:
                    08:3a:d5:35:4b:34:72:10:17:82:ff:d1:00:2d:ce:
                    cd:65:4e:79:08:7e:40:c2:28:0d:0b:2c:58:29:8a:
                    36:cc:09:4f:56:84:30:30:23:62:a3:b1:48:da:1c:
                    f0:39:d1:9d:e1:d6:55:67:53:5c:4c:42:33:0a:5c:
                    f0:7c:f4:9a:1f:7f:0b:cd:03:6b:a0:fe:69:6c:1a:
                    ec:cc:40:2a:d6:ee:0a:2b:eb:f9:09:b5:2a:5c:39:
                    57:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:98:7F:28:8C:EB:BF:3C:FA:41:F2:AE:8A:B5:4F:3B:70:47:D2:0A
            X509v3 Authority Key Identifier:
                keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:24:18:9b:18:83:db:ba:9a:d7:19:50:5d:41:4e:63:b7:ce:
         3f:9e:6f:3a:20:49:dd:d5:90:54:8f:67:02:5a:1f:e4:54:d5:
         04:b5:ac:91:67:e1:dd:da:7c:20:8b:29:3b:81:ba:69:6c:1d:
         98:1c:85:09:73:ed:4d:9e:91:26:a0:ab:39:3f:9f:e6:70:8e:
         4e:2e:3f:cc:8d:88:ab:7c:69:16:aa:8c:ff:f1:1e:b9:59:9c:
         fc:93:14:a9:63:7c:61:d4:65:85:b2:3c:c9:83:c3:dd:fc:c8:
         8c:5b:33:a3:25:25:b7:16:d5:b0:ac:13:34:d6:44:a9:c9:ed:
         23:69:20:35:2b:50:ad:53:2f:7c:d5:02:5c:fa:0a:99:41:4f:
         ab:3f:a6:7f:3c:e0:f2:91:9e:ff:a2:3d:b7:0d:e3:c0:05:9d:
         83:01:dd:ca:44:d2:73:6a:f4:c8:bb:09:2f:4e:e1:57:66:8c:
         94:27:dd:0d:7d:ee:47:76:88:1d:48:37:ea:69:f3:b1:1f:e3:
         4b:8f:10:22:c5:e9:79:4d:7e:cb:9d:1a:12:d5:b7:5d:c7:c7:
         87:fd:53:36:db:5f:88:85:01:5f:0f:fe:d6:a7:0e:39:b6:14:
         df:6f:3f:b9:54:03:2d:bd:a8:c2:94:ca:9c:1a:3a:c9:1e:b5:
         fe:76:57:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:49:43 2026 by rpki-client