Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
File:                     E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft (raw, json)
Hash identifier:          ox0KQFixhlpGWEI1YCMdcO3bB4goLNaP0xyKuZXOMh8=
Subject key identifier:   0D:16:73:13:F3:83:0C:CF:C0:BF:9C:5F:C7:17:C9:88:B7:AA:4E:0F
Authority key identifier: E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93
Certificate issuer:       /CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
Certificate serial:       3247CE105B6AF8E2447B7288272617F4B8A41A1B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
Manifest number:          0106
Signing time:             Sun 15 Nov 2026 03:02:59 +0000
Manifest this update:     Sun 15 Nov 2026 02:57:59 +0000
Manifest next update:     Mon 16 Nov 2026 06:37:59 +0000
Files and hashes:         1: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: M9jyn5/cfkiIh8r7xaktGDoS2J9kM31RBGKJ46gBojU=)
                          2: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: ho4hOFufXidWAYsTbOliD6cEtUCuHGtc5gpjUTGtn7w=)
                          3: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: Sd3fhLkfAzIYKIa+lxI8//LD+Sqt+jk5hVCJVdmO8ro=)
                          4: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: 0O4aswxD1VoxCc8I8JRXFhna+2fhOQAti4akwG9PjgQ=)
                          5: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: phcDv0m0vLlfwZ99qeKbMtyh63ijZFKiTdhh4MVincM=)
                          6: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: E6gLrMvPbF2DgnqL5izEh9JlZeBZOXfgDDhLttXgRCM=)
                          7: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: PekXXJ/q55kTEO5kx0CRU0xx2H+12J366upyeQ1nZA8=)
                          8: E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl (hash: P4/1Kf9LEuyx2drttLXvdVS/vpK58Y0WQv2MklJmPKs=)
                          9: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: v44LsT6qMPli0zPJF9qTEG8AjfBqu7Oywt77FQr+HWc=)
                          10: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: m1pNwOSLl0bdCga72bgV0UjJBtOBSgU1ellU74iVk3k=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl
                          rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 06:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:47:ce:10:5b:6a:f8:e2:44:7b:72:88:27:26:17:f4:b8:a4:1a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
        Validity
            Not Before: Nov 15 02:57:59 2026 GMT
            Not After : Nov 16 06:37:59 2026 GMT
        Subject: CN=0D167313F3830CCFC0BF9C5FC717C988B7AA4E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:53:08:71:97:f8:85:2a:e3:c7:8c:8f:15:c8:
                    d3:24:ce:47:c5:55:42:2f:7f:ce:39:2c:fc:9c:a7:
                    a1:14:4c:12:85:e0:77:f3:9d:e9:c7:6e:c0:d1:7b:
                    a9:06:b3:99:52:99:33:01:5d:9f:c5:0e:d2:76:89:
                    14:89:33:09:8e:2f:e0:ff:20:6f:41:fc:6b:51:d3:
                    1f:d1:d4:d7:2a:29:70:0d:19:7b:d4:65:c9:51:ec:
                    6f:c3:86:dd:34:4b:e8:78:75:43:24:b9:6a:69:7f:
                    85:19:77:58:7a:10:34:da:82:62:0d:9a:ac:b6:2e:
                    2f:c7:72:61:1a:cd:2d:f1:7f:52:56:a8:32:43:54:
                    62:15:bf:5c:02:f7:50:9e:d4:5d:91:25:c7:62:40:
                    ca:1a:0f:e4:e5:31:40:ca:fb:cc:b8:bf:3a:ab:5d:
                    fb:0d:e9:37:c8:ad:30:08:b4:ff:57:89:3c:b1:13:
                    2a:49:7e:bf:9f:a0:09:ee:ce:04:03:a7:fa:d3:63:
                    8e:61:62:2a:b6:35:01:d1:ad:73:e9:15:fb:41:74:
                    bb:47:12:10:91:05:ad:5a:c6:84:1f:b8:5e:67:ee:
                    bd:9b:d8:ea:a0:fc:fd:8f:62:34:83:b6:87:d8:eb:
                    25:a6:bc:db:5d:b0:13:a9:ba:47:53:8a:aa:ab:14:
                    94:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:16:73:13:F3:83:0C:CF:C0:BF:9C:5F:C7:17:C9:88:B7:AA:4E:0F
            X509v3 Authority Key Identifier:
                keyid:E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:2f:98:72:5e:e4:7c:e4:8d:92:f1:01:dd:b1:c6:b2:22:c1:
         ac:c0:5c:55:d6:30:93:79:fd:cb:4f:9c:46:b6:82:03:d0:02:
         02:d2:fb:23:c3:d5:bf:f0:fe:f0:75:ae:d5:f3:5f:ec:fd:7e:
         9c:b1:14:39:bd:93:0b:1b:e7:97:e6:4c:c4:1a:7c:50:3d:6e:
         bf:cf:ee:82:9c:ab:bb:c3:1d:f6:ca:42:fb:0d:4b:11:f0:57:
         aa:4e:6d:bc:74:2e:15:a4:ec:96:6b:7e:12:a4:64:5a:53:4b:
         38:94:0c:27:bd:06:79:82:f8:79:a8:c5:8e:3d:4b:d0:55:05:
         3e:42:38:2d:63:ce:14:57:53:c6:0e:7f:b1:69:f5:e8:33:a1:
         26:74:d4:85:11:16:d6:c3:09:68:65:85:21:ee:3c:d3:a3:06:
         bc:52:db:bc:86:f0:8d:56:88:b4:ee:1b:34:6a:26:27:57:5e:
         54:dd:82:b3:44:da:3e:33:82:29:56:49:0a:d4:8e:53:30:bd:
         9c:8a:d5:22:ea:b5:23:92:ad:4b:c1:c2:22:21:d7:e4:ab:2c:
         dc:bc:41:99:dd:a6:b1:94:ab:2d:a6:45:29:e7:1f:f3:e5:6f:
         15:1a:42:11:c4:f2:08:c2:86:33:c5:5c:68:58:07:67:59:e0:
         f7:89:7b:8e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMkfOEFtq+OJEe3KIJyYX9LikGhswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZFQzM1Q0ZDMjQ5M0EzQTc5RENENTlEMUMxREJBRkIy
RTc0Mjc5MzAeFw0yNjExMTUwMjU3NTlaFw0yNjExMTYwNjM3NTlaMDMxMTAvBgNV
BAMTKDBEMTY3MzEzRjM4MzBDQ0ZDMEJGOUM1RkM3MTdDOTg4QjdBQTRFMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrUwhxl/iFKuPHjI8VyNMkzkfF
VUIvf845LPycp6EUTBKF4HfznenHbsDRe6kGs5lSmTMBXZ/FDtJ2iRSJMwmOL+D/
IG9B/GtR0x/R1NcqKXANGXvUZclR7G/Dht00S+h4dUMkuWppf4UZd1h6EDTagmIN
mqy2Li/HcmEazS3xf1JWqDJDVGIVv1wC91Ce1F2RJcdiQMoaD+TlMUDK+8y4vzqr
XfsN6TfIrTAItP9XiTyxEypJfr+foAnuzgQDp/rTY45hYiq2NQHRrXPpFftBdLtH
EhCRBa1axoQfuF5n7r2b2Oqg/P2PYjSDtofY6yWmvNtdsBOpukdTiqqrFJSNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDRZzE/ODDM/Av5xfxxfJiLeqTg8wHwYDVR0j
BBgwFoAU5uw1z8JJOjp53NWdHB26+y50J5MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGY1ZDM2NGEtZGEwYi00NTQwLTkzNDktNTkzMGJkNzI1Y2UzLzAvRTZFQzM1Q0ZD
MjQ5M0EzQTc5RENENTlEMUMxREJBRkIyRTc0Mjc5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNkVDMzVDRkMyNDkzQTNBNzlEQ0Q1OUQxQzFEQkFGQjJFNzQy
NzkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY1ZDM2NGEtZGEwYi00NTQwLTkz
NDktNTkzMGJkNzI1Y2UzLzAvRTZFQzM1Q0ZDMjQ5M0EzQTc5RENENTlEMUMxREJB
RkIyRTc0Mjc5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGUvmHJe5HzkjZLxAd2xxrIiwazAXFXWMJN5
/ctPnEa2ggPQAgLS+yPD1b/w/vB1rtXzX+z9fpyxFDm9kwsb55fmTMQafFA9br/P
7oKcq7vDHfbKQvsNSxHwV6pObbx0LhWk7JZrfhKkZFpTSziUDCe9BnmC+HmoxY49
S9BVBT5COC1jzhRXU8YOf7Fp9egzoSZ01IURFtbDCWhlhSHuPNOjBrxS27yG8I1W
iLTuGzRqJidXXlTdgrNE2j4zgilWSQrUjlMwvZyK1SLqtSOSrUvBwiIh1+SrLNy8
QZndprGUqy2mRSnnH/PlbxUaQhHE8gjChjPFXGhYB2dZ4PeJe44=
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:12:00 2026 by rpki-client