Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft
File:                     95C2241DAF3580597A730032BDD8356019AA8598.mft (raw, json)
Hash identifier:          8Da8P6OfoP8RxRYnnEIUNyatGUQcYOHe0suazoRG2Wo=
Subject key identifier:   11:73:C6:FA:F3:44:8C:0D:E6:A3:FE:03:20:A9:24:1E:23:E1:2C:F9
Authority key identifier: 95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98
Certificate issuer:       /CN=95C2241DAF3580597A730032BDD8356019AA8598
Certificate serial:       758D8B3C60A66D34825CF8CC8FA2EC034E23183F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 18:13:22 +0000
Manifest this update:     Tue 12 May 2026 18:08:22 +0000
Manifest next update:     Wed 13 May 2026 21:37:22 +0000
Files and hashes:         1: 3130332e39362e35322e302f32342d3234203d3e20313534343130.roa (hash: DZZr3wFG43up9aE69tnG8Ls9OH8+Et1zoRrcXN9QSWM=)
                          2: 3130332e39362e35322e302f32332d3233203d3e20323135373237.roa (hash: Qx+7jCeA4ACEoLOWICApKLjJLJEDMdzGbyJBoCyvwDU=)
                          3: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: zqwI6m4XrFv8eZM9FUpfWXpZ18MF12p+MPV+FGxatII=)
                          4: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: dzNpcw838jqHTmD5WMvONS88+Ve5iK9R+so7TDu1v9o=)
                          5: 3130332e39362e35322e302f32342d3234203d3e20323135373237.roa (hash: XQXfUBbOhxVs8/s2589fLuZ2gOOuek0QydHFHlibVLk=)
                          6: 3130332e39362e35332e302f32342d3234203d3e20323135373237.roa (hash: 0wPUMAsuo5ZHSc/EbFWdWxfuAnUpnc2Dl/9rdO80RmQ=)
                          7: 95C2241DAF3580597A730032BDD8356019AA8598.crl (hash: YUuLoU++uQobBLtpWqUFZnSb9/T9FHL6H0fF649f9vw=)
                          8: 3130332e39362e35332e302f32342d3234203d3e20313534343130.roa (hash: lhdzmYQ+4NDivJfAldib42nRBStQ7ZYmo6omhPmOepI=)
                          9: 3130332e39362e35322e302f32332d3233203d3e20313534343130.roa (hash: 1ThuN5znJDyBHXMDEeUc73QYCJg2P4WsNNUGGs+3coA=)
                          10: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: HPli/3Qu6kod/7xjBSFbg6jtPr5ON8VO23CexUu2Djc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl
                          rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8d:8b:3c:60:a6:6d:34:82:5c:f8:cc:8f:a2:ec:03:4e:23:18:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95C2241DAF3580597A730032BDD8356019AA8598
        Validity
            Not Before: May 12 18:08:22 2026 GMT
            Not After : May 13 21:37:22 2026 GMT
        Subject: CN=1173C6FAF3448C0DE6A3FE0320A9241E23E12CF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f2:0a:e4:35:19:36:7d:42:d0:81:db:fb:cb:
                    c4:43:10:a4:c5:eb:6c:23:a4:d0:88:e8:06:3d:c4:
                    1a:69:6b:41:68:88:20:88:e7:ee:24:29:ac:11:42:
                    44:b8:99:c3:d4:e5:90:5f:04:a8:ca:46:89:39:32:
                    c7:31:44:06:85:cd:56:48:e0:b2:1a:23:d4:94:54:
                    b6:00:8d:a2:7f:70:02:01:d9:91:97:83:19:53:1e:
                    dc:08:01:6c:6b:f5:33:d6:f8:42:1f:34:a0:ba:2e:
                    80:3f:da:11:ba:91:a5:82:6e:cf:21:9d:f5:42:2b:
                    da:84:97:e8:f5:a2:cc:91:43:bd:ba:49:11:39:5a:
                    58:2b:fb:ae:2a:6a:46:8d:d5:e0:b6:90:2c:3e:ec:
                    5d:84:f6:a9:97:b6:19:6a:61:f3:e0:78:73:6c:8b:
                    75:8b:a4:81:23:ce:31:71:3c:bf:7a:32:75:09:84:
                    a0:8e:49:23:4a:82:9c:72:d7:e9:1b:d9:d8:2c:89:
                    df:f4:5c:3b:4a:f1:da:52:5e:d4:a3:95:df:3a:ca:
                    9b:9c:9d:4f:68:d0:3e:f3:8f:42:c4:4d:d8:37:b7:
                    03:d6:13:fe:c9:8d:a4:e0:9f:3b:f2:8c:da:35:54:
                    c0:f2:fe:31:ea:43:5e:98:37:51:dd:1c:0f:58:f8:
                    db:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:73:C6:FA:F3:44:8C:0D:E6:A3:FE:03:20:A9:24:1E:23:E1:2C:F9
            X509v3 Authority Key Identifier:
                keyid:95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4c:a1:d0:88:7b:78:83:ac:b6:bd:e5:3d:bf:6a:d7:e0:7e:
         f7:14:34:61:0f:61:77:2f:1a:06:67:28:92:86:99:d3:48:bf:
         c1:29:d2:f0:39:72:54:ef:bf:a6:89:f6:9f:9f:80:39:bc:c8:
         be:ae:5e:91:30:e9:12:fd:73:c0:bc:f8:a6:95:50:ff:b2:09:
         78:8b:88:4f:fb:97:70:aa:31:85:d5:39:da:93:de:f4:ef:61:
         e2:0e:be:42:6d:33:2b:cc:b5:53:30:64:5b:5f:be:39:82:b2:
         0b:37:24:3a:ec:cf:e2:ce:b4:b4:62:80:64:05:e9:25:49:9f:
         4a:e2:36:b9:50:9c:a6:dc:f0:80:83:52:09:1a:27:b7:45:ec:
         7a:c6:49:32:69:1e:25:75:80:d0:b2:64:7b:bd:e7:c0:af:72:
         47:9a:d2:91:73:66:df:f8:5c:24:d8:57:8c:8b:11:2a:26:e5:
         e5:f1:1e:fa:90:d7:a7:8f:7a:ae:53:8c:83:06:68:87:68:dc:
         71:42:4f:43:4a:6e:7e:97:00:ca:8a:d1:b3:91:53:8c:77:0a:
         39:0e:06:0c:52:d6:8a:81:a6:c0:bc:f6:6f:26:89:50:69:48:
         57:a3:2c:43:93:11:a1:10:c8:69:56:47:f0:b7:56:50:d5:e1:
         b3:a1:6e:01
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdY2LPGCmbTSCXPjMj6LsA04jGD8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1NjAx
OUFBODU5ODAeFw0yNjA1MTIxODA4MjJaFw0yNjA1MTMyMTM3MjJaMDMxMTAvBgNV
BAMTKDExNzNDNkZBRjM0NDhDMERFNkEzRkUwMzIwQTkyNDFFMjNFMTJDRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8grkNRk2fULQgdv7y8RDEKTF
62wjpNCI6AY9xBppa0FoiCCI5+4kKawRQkS4mcPU5ZBfBKjKRok5MscxRAaFzVZI
4LIaI9SUVLYAjaJ/cAIB2ZGXgxlTHtwIAWxr9TPW+EIfNKC6LoA/2hG6kaWCbs8h
nfVCK9qEl+j1osyRQ726SRE5Wlgr+64qakaN1eC2kCw+7F2E9qmXthlqYfPgeHNs
i3WLpIEjzjFxPL96MnUJhKCOSSNKgpxy1+kb2dgsid/0XDtK8dpSXtSjld86ypuc
nU9o0D7zj0LETdg3twPWE/7JjaTgnzvyjNo1VMDy/jHqQ16YN1HdHA9Y+Ns5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEXPG+vNEjA3mo/4DIKkkHiPhLPkwHwYDVR0j
BBgwFoAUlcIkHa81gFl6cwAyvdg1YBmqhZgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2ExYzRjMWYtNzE0MS00N2Q2LWE3ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURB
RjM1ODA1OTdBNzMwMDMyQkREODM1NjAxOUFBODU5OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NUMyMjQxREFGMzU4MDU5N0E3MzAwMzJCREQ4MzU2MDE5QUE4
NTk4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3
ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1
NjAxOUFBODU5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGJModCIe3iDrLa95T2/atfgfvcUNGEPYXcv
GgZnKJKGmdNIv8Ep0vA5clTvv6aJ9p+fgDm8yL6uXpEw6RL9c8C8+KaVUP+yCXiL
iE/7l3CqMYXVOdqT3vTvYeIOvkJtMyvMtVMwZFtfvjmCsgs3JDrsz+LOtLRigGQF
6SVJn0riNrlQnKbc8ICDUgkaJ7dF7HrGSTJpHiV1gNCyZHu958Cvckea0pFzZt/4
XCTYV4yLESom5eXxHvqQ16ePeq5TjIMGaIdo3HFCT0NKbn6XAMqK0bORU4x3CjkO
BgxS1oqBpsC89m8miVBpSFejLEOTEaEQyGlWR/C3VlDV4bOhbgE=
-----END CERTIFICATE-----
Generated at Wed May 13 02:26:32 2026 by rpki-client