Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
File:                     149E265C01ED66DA98905D22913EE8E5950357C5.mft (raw, json)
Hash identifier:          wTcoNNlOejE1mhTl58oLTGFv+9733mLpu8YYOUnzrpc=
Subject key identifier:   AA:FF:0A:3F:22:99:02:CB:FD:C8:A6:14:B5:56:E3:8B:4E:18:03:24
Authority key identifier: 14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5
Certificate issuer:       /CN=149E265C01ED66DA98905D22913EE8E5950357C5
Certificate serial:       0969A1C182D48E2F8D8161FE17C665F27F3F93D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
Manifest number:          C0
Signing time:             Wed 23 Sep 2026 12:21:23 +0000
Manifest this update:     Wed 23 Sep 2026 12:16:23 +0000
Manifest next update:     Thu 24 Sep 2026 12:26:23 +0000
Files and hashes:         1: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: o6su7IMCtejCKrMWVaKfnnGbeizQl5tOylIJ73OtfwA=)
                          2: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: 2go2VsHnKk8a4v5C9iDrB1c2z6BX7uzmEdbp34kt9Ig=)
                          3: 149E265C01ED66DA98905D22913EE8E5950357C5.crl (hash: zytIRfnJpjKmj1vASQgSWPcWwoP2jjqN41a7dsqrN8E=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl
                          rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 12:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:69:a1:c1:82:d4:8e:2f:8d:81:61:fe:17:c6:65:f2:7f:3f:93:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149E265C01ED66DA98905D22913EE8E5950357C5
        Validity
            Not Before: Sep 23 12:16:23 2026 GMT
            Not After : Sep 24 12:26:23 2026 GMT
        Subject: CN=AAFF0A3F229902CBFDC8A614B556E38B4E180324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:06:f9:0f:5e:27:e2:73:02:f1:18:06:91:78:
                    99:06:26:6a:91:8f:df:0b:58:1c:a9:33:cc:7a:1e:
                    ea:95:5c:5b:d0:0d:17:b7:57:45:c9:37:dc:7d:26:
                    0d:b6:41:e9:25:dd:27:4a:e2:a8:6f:05:65:c4:24:
                    99:0c:6a:e9:e6:f2:aa:8e:26:d4:c7:df:5f:17:da:
                    2d:f2:8a:f5:01:4a:53:6f:45:a3:49:84:59:12:9d:
                    23:4b:d0:24:1d:c4:39:61:88:a1:f7:c6:9c:23:22:
                    c4:cb:13:e0:17:ec:c1:95:d0:10:7c:79:4b:ff:4a:
                    ac:66:a9:bc:3d:56:6f:70:8f:d4:a4:bf:48:60:b8:
                    90:03:cc:b8:95:9e:36:70:2b:40:75:ed:34:47:ea:
                    21:26:8d:e0:55:42:6b:b0:be:41:65:4b:84:2c:92:
                    34:50:0c:81:ee:b5:31:c8:d5:cf:0d:e0:fe:62:e3:
                    8c:a7:c2:9f:4c:45:48:c7:b9:5e:ac:cb:3a:30:96:
                    6a:c6:5c:c6:04:cc:d6:7b:b4:ba:c2:e5:11:6b:e2:
                    74:bc:10:80:b9:6d:bf:f4:0b:71:54:f8:5e:c6:bb:
                    b2:8d:40:3c:66:62:04:81:51:e6:cd:2f:86:68:74:
                    c9:ef:ec:dc:0e:03:af:db:48:bb:16:36:63:4f:7e:
                    34:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FF:0A:3F:22:99:02:CB:FD:C8:A6:14:B5:56:E3:8B:4E:18:03:24
            X509v3 Authority Key Identifier:
                keyid:14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f6:5e:97:f8:96:a9:43:7a:30:c7:db:90:d0:7a:17:5c:2e:
         bb:f6:97:98:3a:f0:74:7c:4a:98:f1:48:6b:21:87:72:87:92:
         09:2d:1e:7d:37:ba:f3:c4:21:a5:06:9d:6c:96:a4:6e:96:35:
         ef:9e:3a:99:b8:ab:d3:d9:cc:f0:79:1a:23:cb:cb:75:0d:2d:
         a6:01:00:46:48:d4:ce:14:71:3f:6e:21:cd:97:ca:0b:5b:6f:
         7b:51:63:27:26:14:ae:c4:3f:a3:2e:b7:be:5e:6d:fd:1b:52:
         9f:34:a8:9a:33:15:98:17:33:8e:69:f5:73:5c:29:23:24:ef:
         fb:ba:d6:2a:7b:f0:e9:9f:10:ee:8c:03:7e:ca:24:20:53:d4:
         1d:6f:0c:f1:ef:4a:f2:9c:d5:cd:cd:f0:a8:b3:47:86:7b:41:
         b9:a6:57:da:6f:9e:27:e8:5b:84:47:06:6d:6b:0f:fb:32:e2:
         53:a6:ba:0d:b3:54:c3:6c:e8:ec:6e:df:94:c7:77:38:d2:51:
         3c:97:04:f1:fa:4f:af:24:7f:26:2d:84:47:a6:41:36:16:f1:
         ea:1f:40:b0:a9:3c:99:28:e0:22:fc:31:49:14:de:33:0c:cf:
         bd:df:b7:81:34:6c:22:74:51:55:e7:1e:5b:a5:5e:12:f9:cd:
         f7:f7:a5:be
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCWmhwYLUji+NgWH+F8Zl8n8/k9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5RTI2NUMwMUVENjZEQTk4OTA1RDIyOTEzRUU4RTU5
NTAzNTdDNTAeFw0yNjA5MjMxMjE2MjNaFw0yNjA5MjQxMjI2MjNaMDMxMTAvBgNV
BAMTKEFBRkYwQTNGMjI5OTAyQ0JGREM4QTYxNEI1NTZFMzhCNEUxODAzMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUBvkPXificwLxGAaReJkGJmqR
j98LWBypM8x6HuqVXFvQDRe3V0XJN9x9Jg22Qekl3SdK4qhvBWXEJJkMaunm8qqO
JtTH318X2i3yivUBSlNvRaNJhFkSnSNL0CQdxDlhiKH3xpwjIsTLE+AX7MGV0BB8
eUv/Sqxmqbw9Vm9wj9Skv0hguJADzLiVnjZwK0B17TRH6iEmjeBVQmuwvkFlS4Qs
kjRQDIHutTHI1c8N4P5i44ynwp9MRUjHuV6syzowlmrGXMYEzNZ7tLrC5RFr4nS8
EIC5bb/0C3FU+F7Gu7KNQDxmYgSBUebNL4ZodMnv7NwOA6/bSLsWNmNPfjQlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqv8KPyKZAsv9yKYUtVbji04YAyQwHwYDVR0j
BBgwFoAUFJ4mXAHtZtqYkF0ikT7o5ZUDV8UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2JlZjZlOGQtMWFiMC00MWM0LWIzYWUtYTIwMGQxN2E4MjFjLzAvMTQ5RTI2NUMw
MUVENjZEQTk4OTA1RDIyOTEzRUU4RTU5NTAzNTdDNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNDlFMjY1QzAxRUQ2NkRBOTg5MDVEMjI5MTNFRThFNTk1MDM1
N0M1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JlZjZlOGQtMWFiMC00MWM0LWIz
YWUtYTIwMGQxN2E4MjFjLzAvMTQ5RTI2NUMwMUVENjZEQTk4OTA1RDIyOTEzRUU4
RTU5NTAzNTdDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHz2Xpf4lqlDejDH25DQehdcLrv2l5g68HR8
SpjxSGshh3KHkgktHn03uvPEIaUGnWyWpG6WNe+eOpm4q9PZzPB5GiPLy3UNLaYB
AEZI1M4UcT9uIc2Xygtbb3tRYycmFK7EP6Mut75ebf0bUp80qJozFZgXM45p9XNc
KSMk7/u61ip78OmfEO6MA37KJCBT1B1vDPHvSvKc1c3N8KizR4Z7QbmmV9pvnifo
W4RHBm1rD/sy4lOmug2zVMNs6Oxu35THdzjSUTyXBPH6T68kfyYthEemQTYW8eof
QLCpPJko4CL8MUkU3jMMz73ft4E0bCJ0UVXnHlulXhL5zff3pb4=
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:43:08 2026 by rpki-client