Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
File:                     4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft (raw, json)
Hash identifier:          v5w2oLNp/NutjWi3HLXFwdZiaFvFj3Wkpj3TLXAaXso=
Subject key identifier:   BC:99:26:CE:70:B3:84:2A:51:9C:01:D8:1A:EC:0D:F6:05:FB:C7:8F
Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93
Certificate issuer:       /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
Certificate serial:       678EAF19A1A6A268A83BEF282F56281A17A39232
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
Manifest number:          C0
Signing time:             Wed 23 Sep 2026 22:28:52 +0000
Manifest this update:     Wed 23 Sep 2026 22:23:52 +0000
Manifest next update:     Thu 24 Sep 2026 23:33:52 +0000
Files and hashes:         1: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: FpwgktK1DQqLal+31qD50dL+9IE6iqH71YHo/zowge0=)
                          2: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: 66aA75QUcB6PMDAVxPn0l4kedL6JSinUSrD/FjvLrOY=)
                          3: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: G52CYZhUDrFCUCiXjLaytTYVhllqOW5hgj+MEiJQrDA=)
                          4: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: q58scCW7sBCYqA/7Gndz9LKwymI96P89Wvy+Agpx7Mc=)
                          5: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl (hash: SgqI2sKCjLDK3GN7M/epjxwif+FIZuXXDHMNywchATQ=)
                          6: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: g1I0bBx5cjAJOzumuYvYP7lbpo4MSyJWdm8CedSYPpI=)
                          7: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: WalfT1mL5d9q2qz66c+NikOGnrlzK5PgkQomXo+2N10=)
                          8: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: urgfoaYh1o6UsdX1mUmdbsm+CcX88/2KXBm9Z1HG15I=)
                          9: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: W25/R8+HpdSmi7KzPEgroFOQ480UBFrJ5yvQhWXeJXQ=)
                          10: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: F+gSAhyteOkmJD/CsnwawpfqMUKtHHVAzkHCqnUyAyI=)
                          11: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: 8L5+IN2jLctjeA6EMT3ij4Mxdk3Uel+Y6ekXcJbLdyM=)
                          12: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: IW6kFtW7lOTzfvLnRGitZxVOzbp+5ns5aGwVJLG1nQc=)
                          13: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: JSmaKD9Eb9InTbBwEjQnvpvNRxQcyoooyCEpIv/JUMs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl
                          rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8e:af:19:a1:a6:a2:68:a8:3b:ef:28:2f:56:28:1a:17:a3:92:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
        Validity
            Not Before: Sep 23 22:23:52 2026 GMT
            Not After : Sep 24 23:33:52 2026 GMT
        Subject: CN=BC9926CE70B3842A519C01D81AEC0DF605FBC78F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:97:7a:b6:a8:80:74:d4:02:f8:ea:b5:7a:4d:
                    48:18:30:d8:f1:a5:f9:b9:ad:b3:1c:74:89:60:9c:
                    b7:1c:30:ab:d8:f2:72:7f:1c:18:0a:3b:30:3d:ad:
                    5c:2a:ab:78:78:2b:3b:2b:96:88:6b:86:bc:08:69:
                    e7:a0:93:7d:4b:d7:f8:b7:a9:32:1d:39:40:63:48:
                    cd:84:0f:c7:ba:e9:cf:47:84:0f:ad:a3:62:18:d2:
                    6c:cd:f0:33:ff:bb:1f:e0:e4:8d:a7:c9:09:e9:5e:
                    78:43:a9:e5:c5:b2:84:37:65:47:41:5a:0b:be:11:
                    83:d0:8d:eb:0d:02:2e:b9:ca:73:a5:9e:24:0d:f8:
                    ba:44:e7:ad:4b:45:f2:6e:69:1f:4d:7f:45:60:ec:
                    e8:05:52:59:df:1f:56:12:7a:29:42:63:37:48:9e:
                    84:cc:69:eb:f3:e2:8d:77:7d:97:be:9b:6c:44:e1:
                    ed:98:81:90:e9:e4:c6:c3:8b:38:35:b3:2a:1a:85:
                    d1:2a:54:82:c9:69:a1:f0:26:5f:75:75:74:64:74:
                    9b:a7:c3:63:7b:a1:27:38:00:8f:c5:b0:62:a6:93:
                    4d:d9:89:d5:b4:d4:e3:dc:f4:a4:89:e2:dd:57:5d:
                    62:c8:17:9e:2f:eb:98:c0:7b:bf:9d:0d:7a:ad:d5:
                    9e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:99:26:CE:70:B3:84:2A:51:9C:01:D8:1A:EC:0D:F6:05:FB:C7:8F
            X509v3 Authority Key Identifier:
                keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:00:ac:63:1c:b9:59:5e:c5:1b:bf:b3:da:4f:1f:64:d0:c7:
         8f:fa:61:e9:aa:69:39:df:a1:3e:58:e4:46:27:84:a1:97:8a:
         2c:a9:3c:8f:ac:8e:c3:ba:5d:ee:dc:8a:00:f8:77:3e:3c:59:
         29:e6:41:ac:c6:bd:46:fb:46:12:d8:a3:f7:3b:0b:11:04:66:
         c2:ff:6b:8b:28:0e:ee:d8:c1:85:3c:0b:47:67:4d:13:1b:a6:
         2e:7b:fa:50:a8:19:29:23:65:6b:31:9f:ba:12:1f:88:a2:1b:
         f4:5c:86:f6:cd:6a:31:82:98:89:11:a7:70:e9:8e:82:34:4b:
         61:56:43:48:26:1e:4f:bf:d6:2c:1f:be:d2:d1:5c:b1:1f:44:
         6d:5a:11:06:4c:91:bd:63:0e:1d:00:b7:b5:73:b4:31:f1:e3:
         31:44:0e:18:21:ab:16:a0:e2:ce:98:06:6c:d2:47:b9:92:04:
         4c:c6:27:e3:16:88:5a:d5:6b:c6:a0:85:4b:03:3a:03:fb:59:
         6e:f0:b0:36:e2:3c:f7:71:bb:92:a8:bb:a0:e7:df:1e:7c:cc:
         61:3f:5a:4a:24:0c:c0:29:53:d4:22:ad:e1:07:3f:35:ff:7b:
         8c:f6:e9:c9:52:db:35:a2:5f:8d:ca:fe:6a:06:b8:8b:ea:6b:
         1b:56:15:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:51:43 2026 by rpki-client