Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
File:                     99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft (raw, json)
Hash identifier:          H6ybZJPHu621gYPHZTgRSQAsvOoPfwBeSI+spjj4eTQ=
Subject key identifier:   DE:F4:2C:79:98:EA:7E:5D:52:66:DD:9C:F7:57:9F:27:E2:11:DE:34
Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
Certificate issuer:       /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Certificate serial:       13A75A1431ECAC3CAC0FF814B330E4F3379552CD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
Manifest number:          C7
Signing time:             Sun 27 Sep 2026 04:04:16 +0000
Manifest this update:     Sun 27 Sep 2026 03:59:16 +0000
Manifest next update:     Mon 28 Sep 2026 07:25:16 +0000
Files and hashes:         1: 323430343a3838303a31323a3a2f34382d3438203d3e203338373530.roa (hash: QNrAoCsUOKZCnY1N/fc3km7EG9A1f+dPgBphZu0nJbw=)
                          2: 3230322e3137392e3138362e302f32342d3234203d3e203338373530.roa (hash: AzT5TPIp9fZ7Lzw08VDmHNbwLWKNghx+Y7H+VOnzBzQ=)
                          3: 3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa (hash: UKS72Ik2t69VNkZx10eznMiDop94XfhDTWq/cxqZMcs=)
                          4: 3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa (hash: PRboNqucT4aVoRVOc4nRu3lOYaSHw3BpjErOfcflPnE=)
                          5: 3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa (hash: P+T4tPAca5KIeh3NpH+v8b7bFtAY7StYgksmfQ3/9cM=)
                          6: 3130332e3231332e3131382e302f32332d3233203d3e203338373530.roa (hash: 9TeQcqWDARNn53jqbj5jMqu8OaGQOBp3BzElbwHdS0o=)
                          7: 3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa (hash: s0tvtnOzBx2wg+4vUHWBA8KcfOBbxN88qTxKuGgJguU=)
                          8: 3230322e3137392e3138372e302f32342d3234203d3e203338373530.roa (hash: jzsgtTn7mipYVhReFlEPzAsVetPtmxUsBitMhsGc8oI=)
                          9: 3130332e3231332e3131372e302f32342d3234203d3e203338373530.roa (hash: MlpXJYuG8TKs4UXbWN+4r8Aq3XSuZvsK0qVMIYngvjU=)
                          10: 3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa (hash: Aetna6+21CQMAQqjAiUJIu47yG7i7XqoQJ5+dzrZLGg=)
                          11: 3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa (hash: wtJefws1IQawoe8yb4jVgj5X5P3cewMGRSuqKr8w5/I=)
                          12: 3230322e3137392e3139302e302f32332d3233203d3e203338373530.roa (hash: /g2f6okgGj8HKNPWnvqkUbF7FmFrL81D5X1Q6gvNPZk=)
                          13: 99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl (hash: r0Pv7gWlfZ/NSfbbxQEQv2LUb8v715hY7/UiEG9iSZM=)
                          14: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (hash: 7tVf8gGpMSKXIGs5t/hRwc2QOWzsG/fnuruBADT3qTU=)
                          15: 323430343a3838303a31303a3a2f34382d3438203d3e203338373530.roa (hash: YRbfvStJ8Xz50EBiTCoGlectFVsjTE1eI7CsInhJEBw=)
                          16: 3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa (hash: JSpaszPWtP5AqDUfpY+T4zXizj7Q33fbh+pedpw+rSQ=)
                          17: 3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa (hash: REpKs/RXrD6+kSVY+pi8I08ad5JiVlI+VsKG+qhKX6I=)
                          18: 323430343a3838303a3a2f34382d3438203d3e203338373530.roa (hash: VgQXPBS32nNSzlwVl57OwsniexA2zZE5SydGF9v31zc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
                          rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a7:5a:14:31:ec:ac:3c:ac:0f:f8:14:b3:30:e4:f3:37:95:52:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
        Validity
            Not Before: Sep 27 03:59:16 2026 GMT
            Not After : Sep 28 07:25:16 2026 GMT
        Subject: CN=DEF42C7998EA7E5D5266DD9CF7579F27E211DE34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:20:a0:7b:1c:af:6c:78:16:b1:b6:78:6b:63:
                    84:99:20:13:5b:9e:b0:b9:87:84:d3:e6:7b:53:60:
                    d3:a8:56:ea:51:3c:9d:73:58:1f:7f:83:e5:a2:0e:
                    cb:de:5c:c3:4f:2b:dd:41:d7:7d:72:7f:1e:43:17:
                    05:49:36:38:e0:cc:65:a6:e0:79:08:05:d5:5f:c6:
                    e8:1b:01:01:22:4c:88:c0:f1:b3:f3:21:44:2d:67:
                    7d:db:72:48:09:82:a7:2b:1c:c0:a2:a4:f9:be:d2:
                    c6:29:17:9f:0b:a6:bd:af:93:18:bd:98:bf:76:34:
                    a9:09:d8:38:cc:d9:a2:02:90:90:8d:61:a4:09:3e:
                    3f:ef:c7:7a:45:a0:24:23:90:0c:0c:ff:bf:a4:ee:
                    c8:f4:2e:b5:21:8d:b5:dd:d4:a1:99:d7:44:fd:69:
                    fd:ff:3c:f8:e7:11:1f:e2:7a:7f:fc:f3:3c:c8:a8:
                    0a:90:9a:89:d2:1b:eb:19:67:47:9f:d6:42:21:59:
                    63:db:a1:4b:b7:6c:b1:50:62:11:46:60:87:52:8b:
                    05:b2:06:d3:10:28:b9:36:62:c0:6c:d8:2a:16:8c:
                    9f:3d:56:5e:2f:10:09:70:96:2e:10:04:00:47:01:
                    e5:c2:1e:7f:90:e5:54:7b:3c:6c:6b:ee:19:06:09:
                    98:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F4:2C:79:98:EA:7E:5D:52:66:DD:9C:F7:57:9F:27:E2:11:DE:34
            X509v3 Authority Key Identifier:
                keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c1:77:59:e2:ce:a4:b2:df:ec:9b:3b:dc:d5:9e:1b:f9:d8:
         35:f1:f7:c4:02:57:8d:43:29:6e:b9:35:75:8e:3c:9b:6b:19:
         45:61:da:df:ec:f8:e1:6a:8a:56:da:f0:11:6a:a7:55:eb:af:
         5b:c5:93:d1:a5:96:22:db:63:af:36:1a:39:f7:95:f1:e8:76:
         67:be:59:d9:ef:29:29:df:fc:e3:f4:55:e1:92:42:de:32:7b:
         b4:73:b4:da:26:db:63:36:5c:34:61:d6:6d:c6:10:4b:b2:53:
         7f:30:1d:04:af:e1:0e:d4:17:41:9f:b3:32:c9:2c:f1:75:f5:
         89:91:2a:39:06:10:99:34:40:1f:d5:4f:f2:95:5e:7c:ec:a1:
         15:6b:7d:20:06:ae:33:6c:c2:ea:a2:72:c4:be:ec:e1:3c:e9:
         ad:0f:85:1a:3f:61:02:ce:70:52:be:55:2d:57:7b:a8:52:56:
         a3:0e:cd:53:0b:62:50:a8:3b:54:06:48:5a:02:6a:8c:e6:e9:
         c8:f1:8b:7c:28:4c:d0:7f:a8:f3:f8:5f:d2:a5:37:3b:e5:a2:
         af:6b:cf:46:dc:f7:3f:94:5b:04:6d:04:63:80:8a:a3:a9:45:
         29:a4:62:60:62:fb:5d:cf:cc:35:74:9e:6b:d1:c3:c1:1c:0b:
         90:3c:d3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:25:09 2026 by rpki-client