Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
File:                     04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft (raw, json)
Hash identifier:          T4Z9pHj4fryaYcGj70JDrBLqKejmAZek3IOAfIlSzCg=
Subject key identifier:   F1:09:B1:61:17:93:8F:1B:C9:27:22:C0:61:62:FF:C7:A7:23:60:AF
Authority key identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93
Certificate issuer:       /CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993
Certificate serial:       5974A89447F89E9A1E782D1CC0F26DCD1DED83E2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 04:29:18 +0000
Manifest this update:     Tue 12 May 2026 04:24:18 +0000
Manifest next update:     Wed 13 May 2026 05:39:18 +0000
Files and hashes:         1: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: +N9+uIvrbV+jDpFQEoLWVMjE7Tiq4ZoJyUrk8aQRIxU=)
                          2: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: FB0gJNbI9gb2zm9vAMp0QwCkUB/Jt+h+ezAWp0ZQAY4=)
                          3: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: X3p+VR9fHu2hyTBK0FsVrH6VXDfYDH8j4Zpx8G4MzCs=)
                          4: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: U8aX+Se6czCWSw8AT++C8Q2LboeUeYibiDJAjvnWwyg=)
                          5: 323430313a316430303a3a2f33322d3438203d3e203338353035.roa (hash: 6BMdJfjQOk6ZMP+r3PWXA1452jn4jTz5h082fXgG9S4=)
                          6: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: oVIkdyLyFS+O6KZi8z7bLz7e36SBDG2DA+r6DHbMRLY=)
                          7: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: D63R0HJY3dfFSWeAvX/hnIAUP8j3QRAbibvDX3rchmw=)
                          8: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: E7icouKmlM2nRKVKG7S5JwzSzIgKbeMao7gLF/MZ7HU=)
                          9: 3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa (hash: DkvTwpRqRkCZlooRpiKY2+Wy5hBTCQFkxeE1RiY6Adw=)
                          10: 04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl (hash: eYq7Omvl0mrijnzkUKsqbPPfg6p6x4Gtve2iCvKKxrY=)
                          11: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: HsxEHeytaLeXbzMYkGNZ4CxQC7x6cG09R70sugNWXM0=)
                          12: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: mnaX8OyQaRRI+TIyOqMa6qm7Y6uLOjvzrF8R5k5MsjU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl
                          rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 05:39:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:74:a8:94:47:f8:9e:9a:1e:78:2d:1c:c0:f2:6d:cd:1d:ed:83:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993
        Validity
            Not Before: May 12 04:24:18 2026 GMT
            Not After : May 13 05:39:18 2026 GMT
        Subject: CN=F109B16117938F1BC92722C06162FFC7A72360AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:f1:04:45:ef:e5:dd:54:a4:d3:d5:a9:5a:
                    8d:89:e8:b6:81:fb:ec:5f:75:a4:30:be:68:f5:a9:
                    4d:f8:8b:9e:a4:3f:aa:53:54:fd:88:ee:92:a2:65:
                    c5:6a:ed:eb:eb:3f:56:eb:3f:0c:3d:b3:7e:93:09:
                    27:b3:6e:38:0d:5e:0d:13:82:4a:b9:cb:bc:19:91:
                    16:7a:e6:09:0f:d7:81:50:c3:27:5a:c1:e4:86:72:
                    53:b4:af:13:82:54:f6:57:c3:25:46:db:08:c1:9a:
                    42:27:41:19:3f:95:8c:7d:6f:86:be:91:91:e3:35:
                    ee:ff:a5:67:68:14:9f:24:4c:84:d6:c1:76:7e:15:
                    95:e8:6d:65:7c:4f:28:9f:3e:2f:9e:92:07:88:ff:
                    b0:6d:42:0b:ba:9c:cc:42:6c:fe:48:dd:e0:1c:5d:
                    7d:ce:8c:d0:d8:38:19:4f:6e:1d:e8:0d:b1:f7:64:
                    5b:e7:ca:fe:89:8d:73:ba:b2:d7:f0:ba:3f:0c:e3:
                    65:95:2b:d3:ea:e0:a9:5b:96:78:ff:69:59:0d:5d:
                    95:b7:21:02:42:55:a2:53:4b:93:18:83:7d:e9:aa:
                    5c:0a:98:9b:7d:56:39:79:07:a8:d9:b9:fc:37:25:
                    b0:30:b5:b0:01:2f:fa:15:cd:15:66:08:98:d4:29:
                    f1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:09:B1:61:17:93:8F:1B:C9:27:22:C0:61:62:FF:C7:A7:23:60:AF
            X509v3 Authority Key Identifier:
                keyid:04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a3:a2:b2:13:8e:9b:b2:35:f4:82:b7:32:7f:e0:4e:79:d7:
         a3:86:42:9b:16:1c:75:94:09:60:53:c8:53:49:1d:25:f6:f3:
         71:24:1e:cc:98:a9:ff:16:77:d4:ff:31:75:59:34:f4:89:da:
         98:4d:2e:bd:79:a4:97:9f:4a:fc:20:54:52:cf:97:9f:9b:fa:
         a0:8f:8f:d4:dd:d6:f1:62:3b:d3:be:ba:55:b9:3f:37:1b:f9:
         e7:8b:f4:ec:85:1b:3e:d7:5d:b8:7a:8b:d0:df:dd:d9:38:a8:
         b8:79:4d:79:44:b3:e3:06:bb:d3:ae:98:da:e9:8a:be:59:c9:
         f7:11:01:c8:71:28:8b:94:c9:42:54:57:1a:39:d4:40:e5:2c:
         51:9d:f4:6e:f2:e4:f9:56:85:8c:fc:15:cc:b5:c1:f4:ae:5f:
         4e:78:af:04:d1:27:a6:18:ef:10:86:35:3c:16:7f:d5:de:2f:
         ae:e0:40:75:a5:90:68:71:d1:97:fd:4a:08:f7:50:8a:db:d2:
         34:73:10:4d:d4:ee:c1:da:58:c1:da:5c:81:1b:01:4b:36:63:
         35:42:a4:25:ef:98:ea:ef:09:e6:a2:5f:f5:11:7b:ae:a6:bd:
         7f:06:f0:37:b6:8d:ff:c1:10:95:00:89:2a:18:30:6a:68:cd:
         40:86:36:2e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWXSolEf4npoeeC0cwPJtzR3tg+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRDOEVGNkY1MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4
RTdDNDk5MzAeFw0yNjA1MTIwNDI0MThaFw0yNjA1MTMwNTM5MThaMDMxMTAvBgNV
BAMTKEYxMDlCMTYxMTc5MzhGMUJDOTI3MjJDMDYxNjJGRkM3QTcyMzYwQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZfEERe/l3VSk09WpWo2J6LaB
++xfdaQwvmj1qU34i56kP6pTVP2I7pKiZcVq7evrP1brPww9s36TCSezbjgNXg0T
gkq5y7wZkRZ65gkP14FQwydaweSGclO0rxOCVPZXwyVG2wjBmkInQRk/lYx9b4a+
kZHjNe7/pWdoFJ8kTITWwXZ+FZXobWV8TyifPi+ekgeI/7BtQgu6nMxCbP5I3eAc
XX3OjNDYOBlPbh3oDbH3ZFvnyv6JjXO6stfwuj8M42WVK9Pq4Klblnj/aVkNXZW3
IQJCVaJTS5MYg33pqlwKmJt9Vjl5B6jZufw3JbAwtbABL/oVzRVmCJjUKfGHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU8QmxYReTjxvJJyLAYWL/x6cjYK8wHwYDVR0j
BBgwFoAUBMjvb1Jg/aBmYdnpUwRXK458SZMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODNkMDc4NmQtM2QzZS00NWI3LTk2NjUtOGQ0NzRmZDE0YWVhLzAvMDRDOEVGNkY1
MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4RTdDNDk5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wNEM4RUY2RjUyNjBGREEwNjY2MUQ5RTk1MzA0NTcyQjhFN0M0
OTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNkMDc4NmQtM2QzZS00NWI3LTk2
NjUtOGQ0NzRmZDE0YWVhLzAvMDRDOEVGNkY1MjYwRkRBMDY2NjFEOUU5NTMwNDU3
MkI4RTdDNDk5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC+jorITjpuyNfSCtzJ/4E5516OGQpsWHHWU
CWBTyFNJHSX283EkHsyYqf8Wd9T/MXVZNPSJ2phNLr15pJefSvwgVFLPl5+b+qCP
j9Td1vFiO9O+ulW5Pzcb+eeL9OyFGz7XXbh6i9Df3dk4qLh5TXlEs+MGu9OumNrp
ir5ZyfcRAchxKIuUyUJUVxo51EDlLFGd9G7y5PlWhYz8Fcy1wfSuX054rwTRJ6YY
7xCGNTwWf9XeL67gQHWlkGhx0Zf9Sgj3UIrb0jRzEE3U7sHaWMHaXIEbAUs2YzVC
pCXvmOrvCeaiX/URe66mvX8G8De2jf/BEJUAiSoYMGpozUCGNi4=
-----END CERTIFICATE-----
Generated at Tue May 12 22:19:48 2026 by rpki-client