Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
File:                     0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft (raw, json)
Hash identifier:          xqqw806QXH3kqffI9igK16LwPrrWK/DsQvrTVyxTO0I=
Subject key identifier:   A8:32:EF:B8:7B:8A:13:07:8B:2C:A2:B2:1E:E7:0E:3B:91:D6:35:5D
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Certificate issuer:       /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial:       06A934FA5B3524565BA2E6812D9B4D07E418F00F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
Manifest number:          BF
Signing time:             Wed 23 Sep 2026 08:47:06 +0000
Manifest this update:     Wed 23 Sep 2026 08:42:05 +0000
Manifest next update:     Thu 24 Sep 2026 09:45:05 +0000
Files and hashes:         1: 3130332e31312e39392e302f32342d3234203d3e203535363533.roa (hash: tgMOLRKHLk6AeegSxwagm//NkkSHrRBSK1EEwqWmlG0=)
                          2: 3230322e35322e31332e302f32342d3234203d3e203535363533.roa (hash: RTunN5WvZPwzhuRDaOCGYBctUeKdomE1xa5xw2crzZk=)
                          3: 34332e3234392e3134332e302f32342d3234203d3e203535363533.roa (hash: qdZ5s/RPKJd1zWpn0OA8oOkj/7C1tf+45M/HrbWmTwI=)
                          4: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: HPeBWQRE7Nzk6K93OWZYdv8ZiGkz5Xm/tDmbLAYTX/8=)
                          5: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 7kCoo2bMrWx+NgrVIZTs8BnZTFozYrI1Yx+Eu/FeGxM=)
                          6: 3230322e35322e31342e302f32342d3234203d3e203535363533.roa (hash: +X2AKDLUi7EEV0pZEa+LT88OPryzNndvmpim+oMxEjk=)
                          7: 31342e3130322e3135352e302f32342d3234203d3e203535363533.roa (hash: t0eDmBySGGi3M6vpcaHWuK77uuciFXZsi3Bv2CvN2vw=)
                          8: 31342e3130322e3135332e302f32342d3234203d3e203535363532.roa (hash: 4TVT+M+1OynDiPmgdYeocC5p7/VKvqBlsqaUMV+uRAs=)
                          9: 34332e3234392e3134302e302f32342d3234203d3e203535363533.roa (hash: 2k2h/lLJh4y28GreNoFDXEw9j2lKUZ4eXzUUiII60sQ=)
                          10: 3230322e35322e31352e302f32342d3234203d3e203535363533.roa (hash: VHZA3TuBf4nLKV2pTnmQZgiFCXveS7LsJ0nVeKIEvQQ=)
                          11: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: M9ZVVTNiZw+8g7eKubBdE5bO++zVmlUills7R3bh+8E=)
                          12: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: 2FalOm0wymIUOR6b6eMABH/GePb1gQsHB2PkapVhslQ=)
                          13: 0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl (hash: n/kwMP4asAN5hjQ+WGSgAcxq/MtDaluxjyS12r33ePI=)
                          14: 3130332e31312e39362e302f32342d3234203d3e203535363533.roa (hash: Ou8COM1+4QBZTfW7oPb8lvGJwrPW2b9YrMH3Sw2uBUo=)
                          15: 3230322e35322e31322e302f32342d3234203d3e203535363533.roa (hash: gb1IwBwgBC3bVtPwvnx/RPu7Ia6Ag29mP7Tz4sfDgHE=)
                          16: 34332e3234392e3134312e302f32342d3234203d3e203535363533.roa (hash: Bc5YFcqICb+bh4tRwH4x3D73YQXCDozUg5+ESseoBXI=)
                          17: 31342e3130322e3135342e302f32342d3234203d3e203535363533.roa (hash: 2xEncKZB7XKpCLMYg2xigci5uudnJs/KRQjGyEQoyfA=)
                          18: 3130332e31312e39372e302f32342d3234203d3e203535363533.roa (hash: QXGWZFsc9f71b86soW4vxADReeKw3WdzjpJwgfFCmCI=)
                          19: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: aTFM/g9W9unRb/uZnofVUS9SPuRIxxAlxUviQTXpEaI=)
                          20: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: UIaj9X3lfb9VOoNSMQt3FPXNkkUvi5Cnj1c6MU0v1/8=)
                          21: 31342e3130322e3135322e302f32342d3234203d3e203535363533.roa (hash: 7m1lsj+R46fwy5EhA0AVTVR6lA5VWMrVBvJWrnKZtRo=)
                          22: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: wL/pHkWZYlSpOpNVjgz7YgIvq4xTapnBHJvFGC824+g=)
                          23: 3130332e31312e39382e302f32342d3234203d3e203535363533.roa (hash: 1Ar9cC6jZkLzAdlFLEVr635I57ciOymkfzzDC1PNwsE=)
                          24: 34332e3234392e3134322e302f32342d3234203d3e203535363533.roa (hash: nVmldivYscT9yIlUPfak+eYDC8xGQfjxxTwl5kvmf58=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
                          rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 09:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a9:34:fa:5b:35:24:56:5b:a2:e6:81:2d:9b:4d:07:e4:18:f0:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
        Validity
            Not Before: Sep 23 08:42:05 2026 GMT
            Not After : Sep 24 09:45:05 2026 GMT
        Subject: CN=A832EFB87B8A13078B2CA2B21EE70E3B91D6355D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9d:28:ae:4e:a9:65:c3:c3:a8:c7:09:b6:dc:
                    a3:ce:06:b1:2d:11:b3:8d:9b:bb:2c:d0:72:6a:fe:
                    07:a2:f0:2d:53:dc:9f:6b:9c:1c:be:a0:f9:c0:55:
                    0e:0d:01:b8:4f:2e:87:63:25:90:5f:56:97:8c:a8:
                    c9:48:b3:dd:e1:77:83:a5:21:d2:c6:2a:26:15:f7:
                    88:dd:f1:a3:72:e1:13:dc:a0:93:19:c1:5f:fd:cc:
                    d6:72:5d:ce:d8:e2:0e:5f:3d:be:2d:50:d9:8f:b7:
                    79:b8:30:4f:61:58:6c:0f:55:0d:ec:c3:8f:d4:c1:
                    c5:cd:c0:15:dd:9b:21:d2:c6:2a:d0:e1:ab:65:38:
                    2b:90:40:25:ec:4b:9e:4e:6c:2b:a0:19:bc:44:91:
                    16:ab:40:04:24:0d:ba:d7:59:1b:c5:ce:16:57:10:
                    e6:dd:96:a6:be:33:2d:97:bf:4a:5a:f1:04:6e:7c:
                    81:20:9e:d9:53:ef:0f:ef:b1:94:3a:26:dc:b9:e0:
                    63:94:07:44:5b:57:65:55:3b:d9:a0:6f:fa:14:ef:
                    ac:36:16:ae:81:4e:b6:1e:6a:d7:1a:33:96:5f:e2:
                    29:ba:33:fa:2e:62:27:c1:f6:93:b8:08:d3:a8:9e:
                    fd:e6:0b:f7:d0:ca:33:0d:01:e7:8f:ab:e9:38:f0:
                    4a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:32:EF:B8:7B:8A:13:07:8B:2C:A2:B2:1E:E7:0E:3B:91:D6:35:5D
            X509v3 Authority Key Identifier:
                keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c7:ff:4c:e5:c8:f3:21:55:49:43:26:4c:24:35:d9:1e:da:
         ae:b5:44:e7:f5:f9:f3:c4:c2:3f:f0:aa:43:31:9c:ef:9d:22:
         61:bf:d6:3d:a2:5c:b5:ff:85:63:05:26:c1:cb:8e:c5:85:d4:
         cb:c6:63:c2:f8:77:54:29:a0:a7:3b:b7:9e:ee:0f:4b:a3:b0:
         32:bf:e1:f2:3b:df:59:08:39:38:8d:4e:02:02:c9:4f:09:52:
         8f:f4:e2:43:c2:77:e0:55:d1:c2:dc:f0:a4:59:4b:ac:c1:fc:
         9f:22:3f:72:14:65:94:7d:03:ac:28:ee:e6:b9:43:09:13:20:
         84:d3:35:ef:94:84:d3:d3:47:14:1e:35:27:f8:5b:c1:51:b2:
         59:b4:fd:75:0e:f4:7e:07:35:3f:34:2f:4f:5e:70:6c:1c:1d:
         77:07:c9:05:d4:2d:bc:5c:08:66:f1:83:91:9f:e6:33:13:92:
         a3:0a:78:11:cb:6d:61:98:1f:3e:f1:c5:1b:65:65:10:2f:98:
         29:5b:bc:c9:9c:56:9f:99:c3:0c:11:fa:5c:5c:a1:ab:b1:48:
         7d:24:96:a9:67:1a:87:8c:6a:d5:27:b8:72:cc:dc:22:f5:99:
         4d:e5:8a:e5:65:ed:15:e3:c4:9d:2f:4f:20:a8:6b:65:39:73:
         1f:89:08:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:16:24 2026 by rpki-client