Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
File:                     0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft (raw, json)
Hash identifier:          S87DmIv9O6amKVtb71YUoMOhIjikEcorldK6MpSIjBY=
Subject key identifier:   92:60:37:9A:71:6E:1C:3D:60:20:2F:03:6B:26:15:B6:A9:1F:09:D1
Authority key identifier: 0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83
Certificate issuer:       /CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783
Certificate serial:       44C3B8774AFBCEBB789FED181907822996340C71
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
Manifest number:          C0
Signing time:             Wed 23 Sep 2026 13:38:01 +0000
Manifest this update:     Wed 23 Sep 2026 13:33:01 +0000
Manifest next update:     Thu 24 Sep 2026 15:53:01 +0000
Files and hashes:         1: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: yMPJNSkMGIl2UvT1CYNlCKulD32gYlJwLvlyIrBqbfE=)
                          2: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: jn+K6WOORye+NOCB1GXieBBnyp4klMVwEtXChM9Gflg=)
                          3: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: 0buGIXn5F8o+JhXrXgmfNJ2sJWtjHLxvA64EOEEpl5Q=)
                          4: 0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl (hash: rmjbUmbsL1258UHWvhp5se3eqypn2KwhtRujVSNlUoc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl
                          rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 15:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c3:b8:77:4a:fb:ce:bb:78:9f:ed:18:19:07:82:29:96:34:0c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783
        Validity
            Not Before: Sep 23 13:33:01 2026 GMT
            Not After : Sep 24 15:53:01 2026 GMT
        Subject: CN=9260379A716E1C3D60202F036B2615B6A91F09D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ca:df:7b:05:4e:2c:8d:ec:23:73:ff:fb:92:
                    8d:c5:e6:04:5c:f1:42:de:ce:ec:05:ba:39:ce:78:
                    00:19:67:2c:46:a9:75:6b:72:64:dd:8d:b2:e6:fd:
                    53:49:c5:4d:1b:b9:0a:e8:ef:7f:70:03:38:3a:30:
                    70:75:72:25:36:8b:93:5c:04:72:b6:87:3d:c7:4b:
                    9e:0c:98:30:ee:81:ae:cc:52:2f:1d:06:d8:39:9d:
                    29:1f:08:fe:36:66:34:d5:77:34:64:5a:c8:89:9e:
                    37:c0:40:07:06:d8:68:c4:97:c2:68:6d:88:be:d2:
                    75:8a:ea:03:0e:71:dc:0c:f3:fa:26:5a:5b:30:67:
                    c8:a9:ab:8d:1b:94:4a:0e:20:32:c6:b3:26:a0:44:
                    87:62:fa:bb:41:e1:15:0c:13:fd:05:cd:8f:f8:39:
                    81:10:85:17:93:7b:a0:ff:99:6a:57:15:cb:6f:e5:
                    f2:3b:8a:3b:76:8b:3b:73:31:ad:70:2b:c8:be:cd:
                    80:e4:ad:f8:da:85:58:88:a9:f7:1e:f3:f0:ac:1f:
                    91:d2:de:28:09:6b:fe:ba:a8:39:af:c6:50:e0:37:
                    70:4e:82:6f:21:bb:cc:ee:88:91:21:47:f2:6b:c1:
                    18:ca:b6:fc:31:5c:28:fd:da:a8:54:29:19:42:d1:
                    2c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:60:37:9A:71:6E:1C:3D:60:20:2F:03:6B:26:15:B6:A9:1F:09:D1
            X509v3 Authority Key Identifier:
                keyid:0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4b:df:4c:85:99:34:42:f0:2e:07:47:70:f0:a2:79:68:ad:
         0a:c8:1d:5e:c7:06:a0:19:63:30:3b:91:45:ad:be:05:b3:4f:
         46:77:13:67:a4:33:f3:c2:9f:76:aa:ca:03:31:95:fb:96:da:
         dd:93:66:7f:b2:a3:13:91:3c:29:89:9b:7b:96:5f:8e:c3:2c:
         b2:ef:a6:6a:f6:58:9a:75:95:d1:2b:80:be:db:41:f2:d4:c6:
         41:44:d7:4a:dd:22:50:a7:c2:3a:c4:fb:fa:91:ec:76:a2:ba:
         d7:43:8f:29:8d:17:1f:ff:8b:15:6e:81:32:06:12:c2:d1:7b:
         52:13:ba:3b:e8:cf:54:1f:72:cd:97:28:69:1b:02:b8:fa:1a:
         3e:7a:bc:a1:5b:97:65:cc:99:37:72:96:70:93:15:0b:8b:60:
         26:92:0f:2c:50:c8:eb:f3:6a:ba:3d:26:29:e0:41:38:30:01:
         83:60:25:25:f0:2b:97:60:92:32:ca:91:f8:2c:6a:ca:7a:99:
         b2:95:b2:a0:41:8c:72:74:8f:07:26:ff:2f:f7:fd:c7:ae:2b:
         0f:b9:92:9d:94:a5:c3:dc:05:c2:10:4f:24:aa:c0:02:4b:18:
         11:c4:f2:c0:3a:b7:a2:fd:49:c6:f8:0f:0c:84:73:94:d1:a0:
         c6:4b:19:00
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURMO4d0r7zrt4n+0YGQeCKZY0DHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENDRjk0OEYzREEyQ0MwOEYwNjJERkNCNTdDQTA3MDY3
RDQxOTc4MzAeFw0yNjA5MjMxMzMzMDFaFw0yNjA5MjQxNTUzMDFaMDMxMTAvBgNV
BAMTKDkyNjAzNzlBNzE2RTFDM0Q2MDIwMkYwMzZCMjYxNUI2QTkxRjA5RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtyt97BU4sjewjc//7ko3F5gRc
8ULezuwFujnOeAAZZyxGqXVrcmTdjbLm/VNJxU0buQro739wAzg6MHB1ciU2i5Nc
BHK2hz3HS54MmDDuga7MUi8dBtg5nSkfCP42ZjTVdzRkWsiJnjfAQAcG2GjEl8Jo
bYi+0nWK6gMOcdwM8/omWlswZ8ipq40blEoOIDLGsyagRIdi+rtB4RUME/0FzY/4
OYEQhReTe6D/mWpXFctv5fI7ijt2iztzMa1wK8i+zYDkrfjahViIqfce8/CsH5HS
3igJa/66qDmvxlDgN3BOgm8hu8zuiJEhR/JrwRjKtvwxXCj92qhUKRlC0SwPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUkmA3mnFuHD1gIC8DayYVtqkfCdEwHwYDVR0j
BBgwFoAUDM+Ujz2izAjwYt/LV8oHBn1Bl4MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmZmOGY0YWItMWFiOC00ODk0LWI3NTgtZDliY2UzODAzZTRjLzAvMENDRjk0OEYz
REEyQ0MwOEYwNjJERkNCNTdDQTA3MDY3RDQxOTc4My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQ0NGOTQ4RjNEQTJDQzA4RjA2MkRGQ0I1N0NBMDcwNjdENDE5
NzgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmZmOGY0YWItMWFiOC00ODk0LWI3
NTgtZDliY2UzODAzZTRjLzAvMENDRjk0OEYzREEyQ0MwOEYwNjJERkNCNTdDQTA3
MDY3RDQxOTc4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADVL30yFmTRC8C4HR3DwonlorQrIHV7HBqAZ
YzA7kUWtvgWzT0Z3E2ekM/PCn3aqygMxlfuW2t2TZn+yoxORPCmJm3uWX47DLLLv
pmr2WJp1ldErgL7bQfLUxkFE10rdIlCnwjrE+/qR7HaiutdDjymNFx//ixVugTIG
EsLRe1ITujvoz1Qfcs2XKGkbArj6Gj56vKFbl2XMmTdylnCTFQuLYCaSDyxQyOvz
aro9JingQTgwAYNgJSXwK5dgkjLKkfgsasp6mbKVsqBBjHJ0jwcm/y/3/ceuKw+5
kp2UpcPcBcIQTySqwAJLGBHE8sA6t6L9Scb4DwyEc5TRoMZLGQA=
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:07:27 2026 by rpki-client