Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
File:                     69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft (raw, json)
Hash identifier:          oYWMrDSOsTZ86FsF7Dj9ts1vrtqkkUoiLF9EQiNhyHw=
Subject key identifier:   D8:E1:44:5F:69:B5:99:3B:FC:6B:0A:7D:4D:94:A3:0E:E2:C6:E1:DF
Authority key identifier: 69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D
Certificate issuer:       /CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
Certificate serial:       0D3A32E5727E9D34AA53A6AA866A834F6038B8B2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
Manifest number:          C3
Signing time:             Fri 25 Sep 2026 19:44:55 +0000
Manifest this update:     Fri 25 Sep 2026 19:39:55 +0000
Manifest next update:     Sat 26 Sep 2026 22:35:55 +0000
Files and hashes:         1: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: 9or0Aovq+itDbFnRJWHEFOrI8Bwnt6OpiiswZ3Ku8uc=)
                          2: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: JaMj7Mn/vinF3SqmQ06RkAsyunCmsAh4LYSl4fBlc2I=)
                          3: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: WD6WZpSz8UlJoAksSemqODUiQFTWMxl5dgMtTtpGDTY=)
                          4: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: 3ex6+M1Mdtsc4EjQuuzwJkgMQ9mnmgEROmDyzDTwmbw=)
                          5: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: AXYnJAEv7z2tUD33+NaHrltSBMuBOMW49EVRFoSQzz8=)
                          6: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: G+PtaUwDO5r5hMHQJK1W4RibPlp9/hiGTwpahVF+du8=)
                          7: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: v3ZYWa8XXb+DFvl8j2lAq20FkxITb0PL+31yaFuYI5A=)
                          8: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: S3vlimdvoGzFuAyUKAon3zByGdBKiazihI8BHyvXGC8=)
                          9: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: nMOG+6n+KLcdsuMUUFRu80+hEtB8VuNBpV2dkQOcKbY=)
                          10: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: GY27HpG2WJNhWravikGEHrDTrV6iGWCs3DNw3rStizU=)
                          11: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: K2rJXObunbVeGUGmNLr3mwtBf8bkZX6YYlP1we9FNao=)
                          12: 69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl (hash: pKmNZTeIRjRu1WOdxCXwem7/uYAnWdz8hsBCjvXSGk8=)
                          13: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4wept2TXybZZ4wiG2lTGiLdJKO6+UiKFaeUDDPHh8cw=)
                          14: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: /ARpDaobiYOepxRHR1PDX5TMsKlHHu4YXqHKwEPmRk8=)
                          15: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: z+PDM1yaJVso/7iy8s/DYFAcGnjvjuuUqet4qK7is+I=)
                          16: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: cjnevU0RPzXKOiUMI3NVUlG7JVEKvWFFOPDxZT7zvG0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl
                          rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 17:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3a:32:e5:72:7e:9d:34:aa:53:a6:aa:86:6a:83:4f:60:38:b8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
        Validity
            Not Before: Sep 25 19:39:55 2026 GMT
            Not After : Sep 26 22:35:55 2026 GMT
        Subject: CN=D8E1445F69B5993BFC6B0A7D4D94A30EE2C6E1DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:7a:bf:df:08:dc:ee:9d:8a:5e:f5:03:15:
                    4c:4c:05:e8:82:ac:11:61:e7:5b:8f:dd:b5:8c:a7:
                    03:bc:76:f7:d9:1b:d5:b4:c9:d6:24:c9:86:e1:b8:
                    15:c5:3d:8a:a8:f9:ac:4e:89:bb:c6:aa:bc:97:c7:
                    61:60:3d:94:3a:5c:0e:86:fe:b4:8f:38:f8:50:fb:
                    74:8f:8d:82:3d:7d:b1:63:16:5c:77:c3:eb:ff:68:
                    1f:ca:cf:5f:69:62:09:9c:43:3c:3e:72:1a:6f:f9:
                    f5:de:6d:cd:33:67:65:e9:8f:6f:25:2e:48:6c:56:
                    c5:68:4f:48:45:8b:72:23:85:f8:ef:c3:93:a0:0d:
                    6b:97:0f:fa:20:a4:32:74:86:8c:5b:d7:3e:d9:3b:
                    4d:ce:e9:61:6e:da:7c:a4:4b:26:2f:b8:5a:0f:29:
                    d9:9c:0c:21:22:8f:79:75:b0:c6:ed:0d:ae:f8:81:
                    c5:33:89:a4:1e:f5:92:85:10:c6:fb:58:04:7c:1b:
                    2a:39:a4:2c:55:7b:78:7d:e3:2d:16:6a:f0:62:5a:
                    10:97:27:c8:71:01:b0:4a:6d:d1:4c:e3:88:32:dd:
                    9c:9e:02:08:08:2b:50:35:d9:94:4e:e0:d7:a2:6c:
                    d8:18:6a:23:b0:50:61:42:9b:06:e3:87:28:98:27:
                    15:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E1:44:5F:69:B5:99:3B:FC:6B:0A:7D:4D:94:A3:0E:E2:C6:E1:DF
            X509v3 Authority Key Identifier:
                keyid:69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a0:53:d8:04:ca:e7:1c:68:cc:22:b3:07:01:78:86:4f:07:
         55:bc:0b:b8:e9:fc:61:75:00:d2:cc:22:1f:3a:bd:53:68:a2:
         71:e9:c3:ca:8a:5f:79:2d:72:dc:b7:9d:17:51:94:7c:7a:07:
         12:69:d9:5d:2f:cd:9e:e6:49:46:b1:fc:2d:e7:6e:b7:a1:8f:
         e3:d3:89:57:d3:d0:17:41:b3:cc:89:80:df:9b:95:e2:0b:2a:
         64:94:37:57:f7:11:37:0d:96:48:95:44:da:68:ed:87:f9:1f:
         ea:54:68:9e:7e:bc:5c:24:63:db:f9:bc:46:b8:66:72:62:aa:
         e6:be:da:28:cb:cb:24:3f:3c:73:18:0d:d4:c0:30:09:aa:9c:
         d0:f6:85:9a:5d:ad:79:64:05:34:04:f3:c0:63:4a:7d:e2:f2:
         f6:4d:d0:67:10:53:f7:bf:fa:68:66:3c:b1:73:c7:1b:ce:dc:
         8d:fc:3d:ba:b2:ff:ed:e0:42:f0:78:4c:4f:4f:0a:12:7b:1f:
         c6:8f:a1:6b:e6:48:7c:ca:fd:5a:a1:5f:e8:05:da:ab:40:c5:
         f9:e2:95:56:68:fd:8c:e0:9c:e5:96:17:bc:b0:5f:d9:dc:8d:
         db:62:a9:dd:6d:8f:36:70:51:6e:7f:2f:f8:17:86:e9:5a:fb:
         a1:08:02:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:19:43 2026 by rpki-client