Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
File:                     99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft (raw, json)
Hash identifier:          jLpqErFueZAiJ1KlT26dwa4EIr4EtHobeu8raNJM/78=
Subject key identifier:   88:BB:5A:5D:BA:19:D6:AA:87:E9:91:3D:CC:6C:9D:95:03:48:8C:2C
Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
Certificate issuer:       /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Certificate serial:       35D958846A842212849E99A80E48DA2E73D694DD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
Manifest number:          C4
Signing time:             Thu 24 Sep 2026 23:09:11 +0000
Manifest this update:     Thu 24 Sep 2026 23:04:11 +0000
Manifest next update:     Sat 26 Sep 2026 00:58:11 +0000
Files and hashes:         1: 3130332e3231332e3131382e302f32332d3233203d3e203338373530.roa (hash: 9TeQcqWDARNn53jqbj5jMqu8OaGQOBp3BzElbwHdS0o=)
                          2: 3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa (hash: JSpaszPWtP5AqDUfpY+T4zXizj7Q33fbh+pedpw+rSQ=)
                          3: 3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa (hash: Aetna6+21CQMAQqjAiUJIu47yG7i7XqoQJ5+dzrZLGg=)
                          4: 3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa (hash: REpKs/RXrD6+kSVY+pi8I08ad5JiVlI+VsKG+qhKX6I=)
                          5: 3230322e3137392e3138362e302f32342d3234203d3e203338373530.roa (hash: AzT5TPIp9fZ7Lzw08VDmHNbwLWKNghx+Y7H+VOnzBzQ=)
                          6: 3230322e3137392e3139302e302f32332d3233203d3e203338373530.roa (hash: /g2f6okgGj8HKNPWnvqkUbF7FmFrL81D5X1Q6gvNPZk=)
                          7: 3130332e3231332e3131372e302f32342d3234203d3e203338373530.roa (hash: MlpXJYuG8TKs4UXbWN+4r8Aq3XSuZvsK0qVMIYngvjU=)
                          8: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (hash: 7tVf8gGpMSKXIGs5t/hRwc2QOWzsG/fnuruBADT3qTU=)
                          9: 3230322e3137392e3138372e302f32342d3234203d3e203338373530.roa (hash: jzsgtTn7mipYVhReFlEPzAsVetPtmxUsBitMhsGc8oI=)
                          10: 3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa (hash: PRboNqucT4aVoRVOc4nRu3lOYaSHw3BpjErOfcflPnE=)
                          11: 323430343a3838303a31323a3a2f34382d3438203d3e203338373530.roa (hash: QNrAoCsUOKZCnY1N/fc3km7EG9A1f+dPgBphZu0nJbw=)
                          12: 3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa (hash: UKS72Ik2t69VNkZx10eznMiDop94XfhDTWq/cxqZMcs=)
                          13: 3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa (hash: wtJefws1IQawoe8yb4jVgj5X5P3cewMGRSuqKr8w5/I=)
                          14: 323430343a3838303a31303a3a2f34382d3438203d3e203338373530.roa (hash: YRbfvStJ8Xz50EBiTCoGlectFVsjTE1eI7CsInhJEBw=)
                          15: 3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa (hash: P+T4tPAca5KIeh3NpH+v8b7bFtAY7StYgksmfQ3/9cM=)
                          16: 3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa (hash: s0tvtnOzBx2wg+4vUHWBA8KcfOBbxN88qTxKuGgJguU=)
                          17: 99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl (hash: p7xIs+kFGZ+5qimUWEIQfFu1Y+MQvacFCVvdwLNrWMc=)
                          18: 323430343a3838303a3a2f34382d3438203d3e203338373530.roa (hash: VgQXPBS32nNSzlwVl57OwsniexA2zZE5SydGF9v31zc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
                          rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 00:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d9:58:84:6a:84:22:12:84:9e:99:a8:0e:48:da:2e:73:d6:94:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
        Validity
            Not Before: Sep 24 23:04:11 2026 GMT
            Not After : Sep 26 00:58:11 2026 GMT
        Subject: CN=88BB5A5DBA19D6AA87E9913DCC6C9D9503488C2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:d1:a5:84:3d:d8:50:79:b5:0f:2a:89:45:
                    52:4b:2d:43:4d:b6:ca:1a:34:da:26:ae:09:2c:1b:
                    ab:fd:ff:0c:e6:68:1b:78:5b:db:6a:fb:fa:86:23:
                    0c:be:86:df:69:80:86:b6:db:3e:34:40:04:df:8f:
                    44:70:d0:99:51:91:76:d9:b4:e8:a8:9c:e3:cc:5f:
                    d9:b0:f3:f4:f3:94:90:9e:53:0c:a1:20:dd:f8:1f:
                    56:96:b1:bc:e2:4d:61:1c:34:be:ab:a4:7a:00:8a:
                    af:a9:20:9b:d0:2d:af:91:9c:3a:93:24:60:95:79:
                    5c:f8:09:e0:93:89:b0:68:99:7c:f1:73:c8:35:78:
                    4b:4f:ba:9e:3f:26:95:73:82:95:42:8f:59:0b:93:
                    a4:c6:d8:68:93:fc:b6:25:d6:be:61:ab:6a:b7:01:
                    c7:b4:a6:dc:34:da:b0:8d:9a:b4:0a:63:a2:8b:75:
                    b9:39:29:09:2b:d9:10:c0:7b:7a:a4:0a:65:ef:3f:
                    c3:d3:23:32:d0:7e:48:d4:79:0d:96:f8:8c:9d:a2:
                    b5:5a:26:46:aa:a2:63:f0:c7:73:42:0d:30:6f:18:
                    a2:17:25:ce:d6:20:7d:ff:b9:5f:03:73:aa:9a:ed:
                    9e:cf:d7:bb:2b:3c:4c:e6:c1:64:3f:d1:11:55:fe:
                    e9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BB:5A:5D:BA:19:D6:AA:87:E9:91:3D:CC:6C:9D:95:03:48:8C:2C
            X509v3 Authority Key Identifier:
                keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:62:1c:02:3b:5c:f2:38:72:a1:50:ed:c0:a7:86:b0:dc:ba:
         04:0d:67:7d:93:c4:39:8c:8a:ad:3d:75:47:69:50:41:97:b4:
         74:f6:2c:06:c0:56:3c:dc:10:bb:36:1e:47:02:51:1e:7d:77:
         35:e4:00:6d:c8:9b:7d:12:91:d4:ea:d6:a0:c9:23:c6:70:3e:
         62:71:87:9e:19:2e:8d:7e:89:15:fc:8f:48:a4:81:c6:e8:7e:
         1b:40:41:f4:11:e5:8e:97:1e:3c:25:4f:23:ac:bf:d4:74:a0:
         f7:d1:6b:71:d5:89:cc:d6:b6:b6:2f:e1:83:35:3d:5f:aa:8a:
         00:7b:b9:06:e2:cc:42:52:3c:fd:c6:aa:87:67:c9:50:ad:59:
         55:80:69:3f:01:66:80:e7:c1:38:50:80:80:bc:13:37:a1:af:
         74:b8:91:c2:c0:2f:4c:50:57:6d:74:a2:32:45:fd:b4:0e:6d:
         79:a9:2f:0d:0b:94:e6:db:d4:6a:d9:b1:ce:e1:f1:85:23:b4:
         88:98:09:dc:61:cf:f4:2b:e8:e5:dc:2a:1f:5a:d3:bd:8a:c0:
         23:24:5a:65:dc:db:a6:11:4e:68:9f:48:08:9a:05:5a:5e:ca:
         d1:43:73:7a:1c:05:21:28:ff:e9:ef:be:a4:7c:c3:d6:89:21:
         47:5c:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:32:18 2026 by rpki-client