Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft
File:                     9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft (raw, json)
Hash identifier:          vWDTXGku+8e3k9AeD0vePRf6yQB/73H1QacRxFGulew=
Subject key identifier:   C4:2C:10:DD:0C:B8:5E:8B:A4:FD:11:45:F5:A1:09:46:DA:75:70:CA
Authority key identifier: 9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B
Certificate issuer:       /CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B
Certificate serial:       5761426D186A0658F6303E6E8B529C00AC5F142B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 20:27:21 +0000
Manifest this update:     Tue 12 May 2026 20:22:21 +0000
Manifest next update:     Wed 13 May 2026 23:44:21 +0000
Files and hashes:         1: 3130332e32382e31342e302f32332d3234203d3e203538343034.roa (hash: aOkYTZDHg/L8yWlo8vIxFqsm7+o0K/8UpGxOwkkG7Ss=)
                          2: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (hash: aDJ/BlhAr3ZuI6P3BU0POvE1//aOF15U+ofqLi0TcqU=)
                          3: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (hash: v6dOLx0SCwjzqMjQ3ImqjGTnffSPJhWT9kStYUIxMa8=)
                          4: 3130332e32382e31322e302f32332d3234203d3e203538343034.roa (hash: rtaQaHq+P5lP9auuPcmaB5K4uqxx/eB7GaUrzPNCTXU=)
                          5: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (hash: oJcDC3gbkkbl6CgR5ozKOicxGaK/b8KkIxtfAPuJSR4=)
                          6: 9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl (hash: O5VSa2irh9/iFdCXz8EJaV3i3H66asQaRTSX8xQd+BA=)
                          7: 34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (hash: VOA028A1R3RrEVD4Qi7zXJp992kxYY/J4fv4wuhxPKY=)
                          8: 323030313a6466303a3266633a3a2f34382d3438203d3e203538343034.roa (hash: lNPR2Tg6FsNQHU8b29t3TQ5Lu6T1+vm92/GyLs+/lXo=)
                          9: 3130332e32382e31322e302f32322d3233203d3e203538343034.roa (hash: B7lLwYyGx/CkKBE8Qhv5JNipvmsoWuu5k92uqzr9wrU=)
                          10: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (hash: yzlUlkzhlS0Tkdbt12yLVL6Icb64xveQ3bA5i4msJ2M=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl
                          rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:61:42:6d:18:6a:06:58:f6:30:3e:6e:8b:52:9c:00:ac:5f:14:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B
        Validity
            Not Before: May 12 20:22:21 2026 GMT
            Not After : May 13 23:44:21 2026 GMT
        Subject: CN=C42C10DD0CB85E8BA4FD1145F5A10946DA7570CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:56:fe:a4:01:23:db:e9:ba:6b:1a:ab:90:64:
                    31:a3:ce:a0:f1:1d:75:59:8f:d5:6c:74:07:89:04:
                    7e:68:2b:61:2c:ec:03:96:de:3c:57:e4:44:bd:1d:
                    ba:07:c8:fb:9f:b3:bf:df:99:90:f9:1e:2d:6e:15:
                    55:68:06:67:60:c8:b1:35:8f:0f:ab:03:c8:69:11:
                    63:70:2d:9e:63:68:38:18:50:41:81:f7:c1:d7:65:
                    9a:f0:ae:c4:ff:cc:1a:7f:34:30:a3:45:0c:e6:b7:
                    41:1f:d4:13:69:ac:a9:ae:d1:aa:0b:da:cd:62:10:
                    a5:e7:5c:60:07:eb:30:7c:5b:c8:ec:5b:9a:7e:f4:
                    c3:66:ab:8d:8c:89:1d:14:b7:f8:bc:97:32:ae:01:
                    25:cb:0c:7e:5e:ab:bc:fe:e3:d1:9e:32:85:f0:c0:
                    a4:2a:cb:bb:8a:0f:07:76:dc:13:a8:6e:33:a3:9b:
                    4c:d1:d3:0f:bc:8d:02:24:8a:54:c8:66:4b:db:87:
                    e5:13:8b:59:24:98:73:b0:fa:d6:8b:2b:a7:57:af:
                    91:2a:ea:32:cf:9b:8c:e2:6f:b6:2c:5d:b0:d5:7a:
                    1d:c3:50:90:05:7a:bf:4d:0a:b9:bc:1f:17:ef:93:
                    6d:fc:69:3d:00:d0:8d:28:59:e7:38:69:67:a4:15:
                    64:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2C:10:DD:0C:B8:5E:8B:A4:FD:11:45:F5:A1:09:46:DA:75:70:CA
            X509v3 Authority Key Identifier:
                keyid:9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2f:08:45:fa:b0:eb:be:e2:c6:82:9c:8c:df:9f:97:09:4d:
         37:48:ae:bc:f5:ba:62:b9:2a:f7:ea:28:e0:c6:bd:fb:b1:0e:
         b8:73:ea:44:71:99:ad:fa:21:3d:c8:4a:f6:d6:c6:09:ad:42:
         6c:85:8a:d8:a8:04:37:8e:39:23:99:c3:33:c8:33:9f:cc:e8:
         f0:5f:fd:ab:0e:1f:96:6d:fe:ce:71:81:82:47:27:80:f6:3c:
         b9:70:7c:9d:aa:a0:1e:bf:ca:29:5e:3d:8e:db:a4:2a:34:5f:
         2a:e7:19:3c:29:bd:1f:c0:9a:eb:f4:67:5d:3b:7e:0a:4c:b8:
         dc:f1:2d:4f:c9:61:9e:63:7a:dc:5d:92:7a:d6:c8:91:05:10:
         c4:5e:4a:a2:c0:06:24:d7:20:40:ca:33:ca:f9:1b:a4:0d:1c:
         3b:2f:94:99:08:b0:05:f6:cf:a3:c5:09:ec:d6:b0:6e:6b:fc:
         4f:25:6a:38:45:f6:da:4a:8a:11:9d:fa:0f:f7:ad:37:27:2d:
         a4:6e:c8:16:b4:47:85:da:61:11:34:a7:ad:eb:cd:5e:b0:0b:
         02:e0:5b:1d:f1:08:4d:7e:86:fb:e7:fc:3d:24:b2:c4:9a:5b:
         79:42:34:fd:1f:cf:2b:17:6d:75:f5:a0:01:fe:f0:6e:25:8d:
         27:48:69:b8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUV2FCbRhqBlj2MD5ui1KcAKxfFCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM1OEMxQzZBRkJCNUI2NkM2NDA2OTRBOTg1OTczMDZD
Qzg4REEwQjAeFw0yNjA1MTIyMDIyMjFaFw0yNjA1MTMyMzQ0MjFaMDMxMTAvBgNV
BAMTKEM0MkMxMEREMENCODVFOEJBNEZEMTE0NUY1QTEwOTQ2REE3NTcwQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRVv6kASPb6bprGquQZDGjzqDx
HXVZj9VsdAeJBH5oK2Es7AOW3jxX5ES9HboHyPufs7/fmZD5Hi1uFVVoBmdgyLE1
jw+rA8hpEWNwLZ5jaDgYUEGB98HXZZrwrsT/zBp/NDCjRQzmt0Ef1BNprKmu0aoL
2s1iEKXnXGAH6zB8W8jsW5p+9MNmq42MiR0Ut/i8lzKuASXLDH5eq7z+49GeMoXw
wKQqy7uKDwd23BOobjOjm0zR0w+8jQIkilTIZkvbh+UTi1kkmHOw+taLK6dXr5Eq
6jLPm4zib7YsXbDVeh3DUJAFer9NCrm8Hxfvk238aT0A0I0oWec4aWekFWQHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxCwQ3Qy4Xouk/RFF9aEJRtp1cMowHwYDVR0j
BBgwFoAUnFjBxq+7W2bGQGlKmFlzBsyI2gswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmUwZjkxNjMtM2U1YS00ZWZhLThiZDktNGFjNGJjNjMwNDE0LzAvOUM1OEMxQzZB
RkJCNUI2NkM2NDA2OTRBOTg1OTczMDZDQzg4REEwQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85QzU4QzFDNkFGQkI1QjY2QzY0MDY5NEE5ODU5NzMwNkNDODhE
QTBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmUwZjkxNjMtM2U1YS00ZWZhLThi
ZDktNGFjNGJjNjMwNDE0LzAvOUM1OEMxQzZBRkJCNUI2NkM2NDA2OTRBOTg1OTcz
MDZDQzg4REEwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC0vCEX6sOu+4saCnIzfn5cJTTdIrrz1umK5
KvfqKODGvfuxDrhz6kRxma36IT3ISvbWxgmtQmyFitioBDeOOSOZwzPIM5/M6PBf
/asOH5Zt/s5xgYJHJ4D2PLlwfJ2qoB6/yilePY7bpCo0XyrnGTwpvR/Amuv0Z107
fgpMuNzxLU/JYZ5jetxdknrWyJEFEMReSqLABiTXIEDKM8r5G6QNHDsvlJkIsAX2
z6PFCezWsG5r/E8lajhF9tpKihGd+g/3rTcnLaRuyBa0R4XaYRE0p63rzV6wCwLg
Wx3xCE1+hvvn/D0kssSaW3lCNP0fzysXbXX1oAH+8G4ljSdIabg=
-----END CERTIFICATE-----
Generated at Wed May 13 08:27:58 2026 by rpki-client