Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
File:                     0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft (raw, json)
Hash identifier:          N68tGynEcCZezvkgHLyTGQRojNBgcvJKXuL6hNDPjog=
Subject key identifier:   E8:FC:85:66:A7:F5:32:19:D8:28:CB:0B:CA:60:BD:DE:CA:DA:D7:86
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Certificate issuer:       /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial:       21873232214F8EED9D01557DF5DAC8D19C254A2A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 19:35:41 +0000
Manifest this update:     Tue 12 May 2026 19:30:41 +0000
Manifest next update:     Wed 13 May 2026 22:48:41 +0000
Files and hashes:         1: 323430353a616163303a383a3a2f34382d3438203d3e20313339393439.roa (hash: Tqgt3drK7GXDeIa386l7SvcEvHjLdUOZAMzwjcI/FPU=)
                          2: 323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa (hash: 8VZ6yOrpPP8qj0ebl3Xe0ocJwI+ajmU1uSDgJG8H+0U=)
                          3: 323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa (hash: 86KYh5c/IuLAigWeCuMUAIuQFk/EhQGZhdAQOuiZKLs=)
                          4: 323430353a616163303a35363a3a2f34382d3438203d3e20313339393439.roa (hash: kvPmkHg80Y42Kmf/Fnmg9nfxSrysPpOetVrslvSXQbc=)
                          5: 0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl (hash: OQYDfRj3kR1mWCtBr4RhxHfbtFw4ZcOfmkok06iXZQQ=)
                          6: 3130332e3134372e35332e302f32342d3234203d3e20313339393730.roa (hash: H7UZTOATPI1EY0s4RZx0dyJdXlMKNuBirKezh1tvoeM=)
                          7: 323430353a616163303a35323a3a2f34382d3438203d3e20313339393439.roa (hash: Kcwg+OCYa0l1c3T4L3Hw0O+SycguIuf5aVxWUqMU4IE=)
                          8: 3130332e3134372e35332e302f32342d3234203d3e20313339393439.roa (hash: LNgwgKg7/TC2FJnghlu6rZrO15KD26+bO9sGt4Bn1Os=)
                          9: 323430353a616163303a3330303a3a2f34302d3430203d3e20313339393439.roa (hash: 3LSZHo7KGcFIped77/dY/bj2hvD5BuU/fpoTjmswjh0=)
                          10: 323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa (hash: XYxICLX+/f7ZO54ISlllPUXnMREujzuZEBysKGSvbEc=)
                          11: 323430353a616163303a3232313a3a2f34382d3438203d3e20313339393730.roa (hash: AImEpLaZlZCowmT3C3g+xQPkvrTnQt/TzobixD36XlE=)
                          12: 323430353a616163303a31303a3a2f34382d3438203d3e20313339393439.roa (hash: u0O5vTBofznHSsZnXIqEqyWifadBtav5TUAMlqeY8Jg=)
                          13: 323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa (hash: ByNHObLn5iawwqUssg4fznvmFNVGWZf3GbNxjGk0nAU=)
                          14: 3130332e3134372e35322e302f32342d3234203d3e20313339393439.roa (hash: QkPPeMA8Un2oI7NOUy6EySATK1nS2aw0ZjUaFx+fneU=)
                          15: 323430353a616163303a3130303a3a2f34382d3438203d3e20313339393439.roa (hash: UgtghYKKKDTuSQQA5kpJNDjN8zk6XfG5zxbAoPcP27c=)
                          16: 323430353a616163303a3232323a3a2f34382d3438203d3e20313339393439.roa (hash: +/9yqVJ5UdWAp+ldudcLbH+/pVyZ/a8Xrgf00Kkb260=)
                          17: 323430353a616163303a31323a3a2f34382d3438203d3e20313339393439.roa (hash: wmKU9Cpua2Cm0JXd2dDsC2D66awUL0rL5rPGt0jpS0k=)
                          18: 323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa (hash: prQ0STU300ws+20gWkOKVn47VB6KOKFl9q8JOYL+sAI=)
                          19: 323430353a616163303a35353a3a2f34382d3438203d3e20313339393439.roa (hash: yepW4rxiv3xBZozfQ2Ef+5zX2LB7NNFuF1axwEvIjvY=)
                          20: 323430353a616163303a3232323a3a2f34382d3438203d3e20313339393730.roa (hash: EednHd6/tC8rA1Q4FZEYjM/np8pZkcMMsYRhFqqrYbs=)
                          21: 323430353a616163303a3530303a3a2f34382d3438203d3e20313339393439.roa (hash: xoOSeDdZEmS1QirY8AKjSGZxwc+FVGRb+TmxzGEzBOI=)
                          22: 323430353a616163303a373a3a2f34382d3438203d3e20313339393439.roa (hash: 0+GyLeKkWKJ8TVOfe9fU58eqoMjNvF8Cv7/VNlXdbh4=)
                          23: 323430353a616163303a35333a3a2f34382d3438203d3e20313339393439.roa (hash: pIBcky8PhZ8lbAaksvs2Ue/3STOwF1hzQOT3OATuGHg=)
                          24: 323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa (hash: 4PKU8D4LDtx+JijJab3nhgdhfIOpu2XH2Kk8Q5hpOLI=)
                          25: 323430353a616163303a31343a3a2f34382d3438203d3e20313339393439.roa (hash: 2uItblLkmHUtUXNvF9T75S0Y41mhc0tiaoJz8UwHxqo=)
                          26: 323430353a616163303a3430303a3a2f34302d3430203d3e20313339393439.roa (hash: Nvj659+mApnonGTEGwCTBqqPqjy73hJnAHzzweAPAkA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
                          rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:87:32:32:21:4f:8e:ed:9d:01:55:7d:f5:da:c8:d1:9c:25:4a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
        Validity
            Not Before: May 12 19:30:41 2026 GMT
            Not After : May 13 22:48:41 2026 GMT
        Subject: CN=E8FC8566A7F53219D828CB0BCA60BDDECADAD786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:07:15:95:cb:c5:ec:c9:88:45:30:d7:55:
                    ad:b6:ba:20:7e:92:2d:c1:cd:b0:d6:f3:82:18:64:
                    86:38:fb:e0:8a:b4:fb:5f:3b:2b:2c:4d:27:b2:81:
                    29:f5:58:54:00:f1:83:d5:45:8e:83:36:a7:6d:4f:
                    8b:9d:5f:fd:3c:16:6d:5c:d2:a6:d4:e6:6e:74:63:
                    52:38:01:56:bc:d1:b2:cb:70:87:54:2b:29:73:31:
                    6a:0b:c5:ed:e9:50:86:1e:e3:e5:96:d6:25:49:4b:
                    dd:ff:27:ee:8c:cb:b3:fa:b2:10:b5:b2:41:cc:aa:
                    4b:2d:95:41:ff:a1:d6:2d:d6:ff:5a:7a:26:e2:f7:
                    ec:87:84:1d:c2:21:09:46:57:3d:0e:85:42:5c:98:
                    06:b2:54:f5:29:f8:04:d4:b7:0a:64:4b:1f:d9:78:
                    3b:aa:d8:a1:39:4d:16:06:74:47:62:bd:00:8d:6f:
                    ba:86:77:fc:f4:6e:b0:64:10:85:d2:18:64:ea:f2:
                    73:c8:cc:ae:f6:27:72:e8:0e:fa:a6:54:11:cb:ca:
                    ae:26:a1:b2:fd:18:b4:ed:42:a0:2f:ae:01:e5:15:
                    6e:22:88:55:1d:47:f7:ad:5e:90:f8:c2:8a:cc:0e:
                    a8:b9:d8:a5:53:3d:b6:79:53:ce:8e:18:b2:9b:6e:
                    20:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FC:85:66:A7:F5:32:19:D8:28:CB:0B:CA:60:BD:DE:CA:DA:D7:86
            X509v3 Authority Key Identifier:
                keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4c:b2:ae:e7:64:28:03:9d:b1:2c:6f:3e:08:a3:7b:43:3c:
         c7:79:28:e4:15:ee:77:b5:81:86:e7:82:5f:38:3e:25:9f:64:
         11:0b:a3:c7:d6:d9:6a:0f:ec:29:cd:83:41:49:14:d3:7b:f2:
         eb:a9:e4:0d:39:f7:41:ec:60:47:c2:bf:d4:b2:27:2c:dd:1b:
         ee:78:94:d8:c8:ef:f6:69:f6:80:7a:c9:0a:22:51:7e:fd:f4:
         ba:7e:90:8f:50:29:c1:fd:f5:b4:8a:bf:62:05:0e:df:54:c5:
         69:a5:ff:50:5e:5a:a9:8d:d7:da:6f:17:37:72:c9:71:12:bb:
         7c:ea:f7:37:1f:ce:ea:f9:1c:6e:b0:f1:9e:9a:83:8d:bc:8c:
         dc:43:11:d0:02:ec:8e:79:96:95:a6:b8:1e:19:a5:85:88:8b:
         3e:21:66:74:d8:64:8c:0a:94:44:4d:2c:88:90:34:9a:60:47:
         95:cd:9f:8b:08:bd:75:a8:d2:30:95:01:a1:d8:fb:d5:d6:74:
         0a:d8:3b:24:ca:3d:3e:c8:cf:ec:b7:26:a6:32:3d:6c:42:09:
         31:67:c9:7b:06:dd:e7:56:bf:b6:9b:ce:95:97:9d:b5:42:0e:
         b7:b6:f5:16:2f:dd:b4:eb:c7:d2:e5:b5:b0:74:0e:2a:91:19:
         9e:fe:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:39:12 2026 by rpki-client