Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
File:                     70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft (raw, json)
Hash identifier:          U/sxcW4WfA8pJUAcjZmpI2CqFIe4nuZ168M7oQo8PyA=
Subject key identifier:   CB:10:53:C1:E4:40:0B:31:02:E3:76:9A:81:60:05:19:CF:82:9D:03
Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA
Certificate issuer:       /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA
Certificate serial:       35A90ED682B878AEA25FC0784278E5B5A7D61D69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
Manifest number:          CF
Signing time:             Sat 26 Sep 2026 21:16:22 +0000
Manifest this update:     Sat 26 Sep 2026 21:11:22 +0000
Manifest next update:     Mon 28 Sep 2026 00:38:22 +0000
Files and hashes:         1: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: lCknCbn1e4JowaioeH82UQR3fwZeR46CsNwrligI+W0=)
                          2: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: 1pB/Nqd7vJqSwm7DTejyzXpeJQSOjzzPkrlOSeZoqb4=)
                          3: 3130332e3231332e3132382e302f32342d3234203d3e203137363730.roa (hash: h9ERyEefV9I1A5M4z4tK9bpFBxWOGmWoS5oxSOOg/AU=)
                          4: 3130332e3231332e3133312e302f32342d3234203d3e203535373031.roa (hash: vzgewcG3oAbC7AbL8VbFC07s+SgG6tK6AAtDNUKrFRI=)
                          5: 3132332e3235332e3233322e302f32342d3234203d3e20313937353337.roa (hash: xAscsICyofL4lf/JlgWQbrEID5bG/l0KAfIP4/G7jFo=)
                          6: 3130332e3231332e3133302e302f32342d3234203d3e20313331373735.roa (hash: E4OuQve25g0RwEBZtMq76vR5kCBtJoV9ABMkUioQyWA=)
                          7: 3132332e3235332e3233342e302f32342d3234203d3e203137363730.roa (hash: cND9IkoYQx+CLaj+y6Gh0x9QJKJQc+ErI+RneqD6xKo=)
                          8: 3130332e3231332e3132392e302f32342d3234203d3e20313331373735.roa (hash: HY+aJPxaezirRr4NHeslZY3QFJWf9uO7z+CkSmEbtwg=)
                          9: 3131302e35302e38322e302f32342d3234203d3e20313431383932.roa (hash: 38Va62FPSyr8Ygtpz8ja6Vo7jaIjqhcu6Gg/Q1NLZ1M=)
                          10: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: pEjlBEcf4SMwhsnq2l8vEuSNRarcFG9m4tfJC8/w2lc=)
                          11: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: 7JThFy92/VpEXEDJA9kwrgcgGhSHAfaM/+d1+Zp5aK8=)
                          12: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: uVaL+tfCNM5zPaOPcfVzgSdj2M5cAqybg0t35qHDKfE=)
                          13: 3132332e3235332e3233352e302f32342d3234203d3e203137363730.roa (hash: yikJb7rqENDrSWYcBrdRV/I5pxUbP3osYLhvy9m38sE=)
                          14: 70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl (hash: +N3xF/K5lc+NM+17YaDu/2RCEEVN8mwcfY9zYNM2YE0=)
                          15: 3132332e3235332e3233332e302f32342d3234203d3e20313937353337.roa (hash: O5FLNbUlt0ivd4BC3VQEtKA8g1c9yRV5LDB8OAY9HXU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl
                          rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 12:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a9:0e:d6:82:b8:78:ae:a2:5f:c0:78:42:78:e5:b5:a7:d6:1d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA
        Validity
            Not Before: Sep 26 21:11:22 2026 GMT
            Not After : Sep 28 00:38:22 2026 GMT
        Subject: CN=CB1053C1E4400B3102E3769A81600519CF829D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:de:90:fd:a6:a7:b3:bd:27:93:5a:40:21:3f:
                    66:fc:0a:36:bc:3c:a1:7c:65:d4:1f:c2:05:9f:2e:
                    0b:f5:81:42:91:62:8f:dc:c4:13:d7:86:b9:56:24:
                    7b:53:85:6c:94:23:1b:00:0b:d0:c3:84:01:e8:d8:
                    7f:c7:53:fc:fa:83:e9:bc:27:e0:15:f4:5e:07:05:
                    24:17:91:9c:3c:39:87:ef:5a:ec:49:50:4b:69:73:
                    21:e0:d2:43:83:40:08:ad:37:b6:94:2a:a5:c6:0c:
                    d5:fd:3f:12:51:8c:46:47:ca:32:ca:05:fb:ba:a9:
                    d1:a5:5d:7b:d7:a8:6b:4c:29:8e:31:65:ea:6f:82:
                    48:79:2b:44:9f:b9:0c:f8:8b:d0:ae:7d:11:82:59:
                    08:aa:fc:d1:fd:e5:ca:83:89:9b:7f:96:97:69:45:
                    63:0c:c1:21:aa:1c:0b:8f:3d:4e:b9:a4:83:8d:2a:
                    b1:52:09:b6:92:28:2f:da:0b:ea:2e:e0:1c:98:1c:
                    29:4f:e1:84:56:87:a5:80:80:07:b8:17:9d:8f:53:
                    be:e9:11:a0:9d:99:0f:ab:54:8d:b1:91:bf:8b:50:
                    db:06:70:9f:53:29:ec:2d:5a:63:39:0c:b5:6d:e7:
                    49:3e:6c:16:55:63:80:9b:22:ee:c6:9d:10:68:1d:
                    9c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:10:53:C1:E4:40:0B:31:02:E3:76:9A:81:60:05:19:CF:82:9D:03
            X509v3 Authority Key Identifier:
                keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b4:03:ba:e1:c4:05:e1:41:c8:50:45:8f:af:53:33:c3:ca:
         d1:7d:9f:cd:b7:13:f8:6e:a2:4d:15:aa:f5:3d:59:c7:d0:ea:
         fb:c3:73:b3:18:a5:41:4d:5c:77:83:80:b3:ef:18:b8:dd:36:
         d2:ba:c1:39:79:bc:37:dc:62:bc:95:63:27:b4:e8:da:ce:a2:
         6c:f1:57:72:ca:f4:4f:22:f1:f7:c4:8a:fe:03:31:01:f3:57:
         5d:ef:58:fa:35:1f:14:53:0f:8e:24:62:05:c4:f4:f3:25:c4:
         b6:c2:8a:37:94:06:9f:5a:e1:24:c2:b3:78:16:b6:cc:fd:ba:
         59:6f:e2:cd:ad:70:3f:28:b1:ab:13:46:91:10:61:74:5d:d1:
         b8:ec:a5:1c:29:d5:fe:19:5d:8b:9a:9a:d7:d8:ca:a2:08:45:
         65:3e:2b:89:fe:c1:cc:63:7f:e1:5d:bb:4e:1f:05:10:4d:5d:
         f7:25:80:f8:34:bc:12:14:a6:e4:a6:27:84:a5:44:eb:a7:05:
         15:ef:7c:d6:8d:3b:0d:9f:64:04:cc:37:13:15:7f:5f:76:48:
         2b:6c:65:9c:d3:a7:c0:97:65:bb:15:a1:20:a1:97:d5:68:da:
         32:94:28:74:ad:e8:cf:df:e1:0f:d6:20:13:ca:0e:d1:39:9e:
         9f:7c:7e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:59:38 2026 by rpki-client