Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
File:                     69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft (raw, json)
Hash identifier:          gNPqRS5WKSGwLswp+md+EYv2WCU6vd+YWnm5FH+h6vg=
Subject key identifier:   EC:EE:68:0D:93:B5:38:7F:64:29:46:AC:D2:B1:B5:A9:67:DE:28:5E
Authority key identifier: 69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D
Certificate issuer:       /CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
Certificate serial:       42BC20F03654BBDE157E19EB84995E5581A2D2CE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
Manifest number:          C2
Signing time:             Fri 25 Sep 2026 01:01:18 +0000
Manifest this update:     Fri 25 Sep 2026 00:56:18 +0000
Manifest next update:     Sat 26 Sep 2026 03:41:18 +0000
Files and hashes:         1: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: G+PtaUwDO5r5hMHQJK1W4RibPlp9/hiGTwpahVF+du8=)
                          2: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: z+PDM1yaJVso/7iy8s/DYFAcGnjvjuuUqet4qK7is+I=)
                          3: 69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl (hash: ljPbCoW6HwISJFmjm31WLTKc3MCjFp9K83KVYuhZnjw=)
                          4: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4wept2TXybZZ4wiG2lTGiLdJKO6+UiKFaeUDDPHh8cw=)
                          5: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: S3vlimdvoGzFuAyUKAon3zByGdBKiazihI8BHyvXGC8=)
                          6: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: 9or0Aovq+itDbFnRJWHEFOrI8Bwnt6OpiiswZ3Ku8uc=)
                          7: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: WD6WZpSz8UlJoAksSemqODUiQFTWMxl5dgMtTtpGDTY=)
                          8: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: nMOG+6n+KLcdsuMUUFRu80+hEtB8VuNBpV2dkQOcKbY=)
                          9: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: K2rJXObunbVeGUGmNLr3mwtBf8bkZX6YYlP1we9FNao=)
                          10: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: /ARpDaobiYOepxRHR1PDX5TMsKlHHu4YXqHKwEPmRk8=)
                          11: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: v3ZYWa8XXb+DFvl8j2lAq20FkxITb0PL+31yaFuYI5A=)
                          12: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: JaMj7Mn/vinF3SqmQ06RkAsyunCmsAh4LYSl4fBlc2I=)
                          13: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: cjnevU0RPzXKOiUMI3NVUlG7JVEKvWFFOPDxZT7zvG0=)
                          14: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: GY27HpG2WJNhWravikGEHrDTrV6iGWCs3DNw3rStizU=)
                          15: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: AXYnJAEv7z2tUD33+NaHrltSBMuBOMW49EVRFoSQzz8=)
                          16: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: 3ex6+M1Mdtsc4EjQuuzwJkgMQ9mnmgEROmDyzDTwmbw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl
                          rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 03:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bc:20:f0:36:54:bb:de:15:7e:19:eb:84:99:5e:55:81:a2:d2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
        Validity
            Not Before: Sep 25 00:56:18 2026 GMT
            Not After : Sep 26 03:41:18 2026 GMT
        Subject: CN=ECEE680D93B5387F642946ACD2B1B5A967DE285E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:26:c8:43:37:5e:c3:cb:2b:d3:d2:11:ef:f6:
                    a0:e2:b8:bf:aa:44:50:49:5b:89:b6:95:8c:93:7b:
                    f4:34:27:56:91:c0:fb:67:9c:5f:78:19:cf:b0:fd:
                    14:67:7b:27:2c:23:8f:96:9e:64:4f:7d:a9:e4:b3:
                    58:11:d8:cd:39:b8:fa:91:15:a5:fd:bd:21:b1:3c:
                    84:cc:f1:44:44:9e:81:1b:60:55:6f:15:bf:83:a1:
                    80:67:98:60:f7:1f:28:9c:9f:17:98:58:85:15:2d:
                    1f:2a:7a:48:93:66:db:de:59:f2:f1:3d:45:f5:05:
                    5a:18:aa:6a:73:76:f8:7c:6e:bb:81:fd:22:f5:d4:
                    31:da:fa:41:eb:33:69:6a:da:53:8d:79:cc:34:0c:
                    3b:aa:e7:c5:e2:08:52:37:e1:60:0b:92:81:96:f8:
                    d6:6f:89:4d:dd:57:a9:93:35:dd:b6:50:ed:e0:1a:
                    ed:db:c1:cd:76:4f:4b:79:61:7a:fc:23:74:02:65:
                    84:ff:2e:2a:c2:0b:43:d2:41:0c:53:be:bb:dd:95:
                    4f:ee:20:34:24:15:24:08:53:50:72:31:a9:01:fa:
                    81:1c:fb:0f:a2:57:38:67:6c:a0:5d:03:a7:ef:fd:
                    94:4e:79:c1:89:10:ca:11:30:ec:e8:83:62:63:d8:
                    79:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EE:68:0D:93:B5:38:7F:64:29:46:AC:D2:B1:B5:A9:67:DE:28:5E
            X509v3 Authority Key Identifier:
                keyid:69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:49:78:80:35:e1:7b:36:d0:04:6e:5f:9e:29:52:db:43:67:
         b8:11:fc:aa:31:fa:1d:94:64:c0:97:00:9c:de:fe:b2:9a:c4:
         a2:81:15:f9:b0:3e:79:c6:26:6f:5e:3c:34:ad:79:be:9e:9c:
         77:88:40:82:f4:ee:ff:30:30:57:c1:2e:d4:d2:77:77:a0:c4:
         f8:c4:f5:2a:c6:69:9d:27:86:08:d5:16:09:f3:22:49:be:62:
         93:08:1a:9d:5d:35:f2:fe:d1:b3:26:95:e4:d6:c0:22:8d:e0:
         36:88:27:67:3b:81:36:58:5e:9f:88:5f:d1:fb:5a:bd:6f:2e:
         bf:01:f0:34:dc:d1:c0:66:d1:7f:79:71:8d:dd:80:69:4b:3a:
         0a:36:92:e8:ce:63:c8:e2:48:49:30:1e:20:f3:2f:f4:92:05:
         96:c1:eb:58:2e:86:07:e4:90:8b:6a:9b:4f:a7:30:89:ed:7f:
         08:fc:32:c9:1a:82:d7:a3:2f:2b:9d:a8:0a:0b:d3:bc:03:cf:
         ae:2e:dd:55:b7:df:be:6e:13:a8:50:eb:3b:07:90:60:5f:87:
         e9:be:a6:bf:38:06:68:52:a9:4e:ef:35:c2:b2:5e:a9:48:2f:
         4e:79:cc:36:48:63:ab:72:3e:71:bd:c8:3f:d3:99:8b:98:39:
         15:2c:51:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:11:10 2026 by rpki-client