Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
File:                     CB0A606FD0642E68B5212AE751953E0B9A92959F.mft (raw, json)
Hash identifier:          JIZEuWNPCQwBPStuHFJRpTdQVaj16qwJRdfYgn6aydA=
Subject key identifier:   C1:5F:45:66:42:86:62:F1:1E:2D:6F:B1:9F:1C:39:74:0E:C0:CB:D4
Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
Certificate issuer:       /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Certificate serial:       298087D631BA4F75706D158B9F2B8840223EC7AE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
Manifest number:          C2
Signing time:             Thu 24 Sep 2026 03:24:49 +0000
Manifest this update:     Thu 24 Sep 2026 03:19:49 +0000
Manifest next update:     Fri 25 Sep 2026 05:20:49 +0000
Files and hashes:         1: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: W5LcKD4qmyridtk0HHxoc6aUkig5ncs0tdqV8KTXwMk=)
                          2: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: Z9BOHD/0KrdQ2ipOJFVWwYLdiKLHdOuinxG+lCgyfSU=)
                          3: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: oXW42mmGQUgoWkxhSR0n+zgivDmIH7l+dG/1UKZo3a4=)
                          4: CB0A606FD0642E68B5212AE751953E0B9A92959F.crl (hash: HikdweFmwgTOy/7NMeUYHauhz/yvzc6xlswh5xHLiDc=)
                          5: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: wcqHrqI3rqZ/cg1ulVOK7tcT1pphG3X5jdB33VoSub8=)
                          6: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: pwtW5wr69XSa+qZr3l0EvDhYLbCZs1lpWX5AfsziilE=)
                          7: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: zvyBHXFbCbQNnOHxvObPOxxpHvAaypqH5xRId3rVWNo=)
                          8: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: J+BYXWntjVPciAkV8uAI34vToZOhTHZAVg1OfJSHksA=)
                          9: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: NngQ0IQfUPOCY/8TWuIA/cVIqSFiTXs2casQNFQDWbs=)
                          10: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: 2M+FnZ1ZBmMQrnhoHJr000wngHRS8OoEKdb0quE5URw=)
                          11: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: ywl7AR88MYiWygarcTKtVBDK6lhCOvMO3Qakyf62g7s=)
                          12: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: SV66tcdcW0NqPU/aqR6DolEDFMy8zRwKuiBnvzj6cUg=)
                          13: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: 2cmHQI8Ii2ZFNygrFMRrShrlpj0r3MxaKMXRFrpSYWY=)
                          14: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: c+MUV7F3nnYwWrux4q4qrlxJQ1ToGP6qwbUAs1FDJW0=)
                          15: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: YBmRyy3cm/KALp/wtAif41lJP/42XGDuyciPr2frXjE=)
                          16: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: 38tHcC/t7dfxoKy3b2Q3TXm2WXDZWbTD7Vr8HTgP8Ys=)
                          17: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: fRTHSzlS/kkerP4SjyexReRSZRyzRj6VQ2sAHATlKhQ=)
                          18: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: pmR02dkQafQv6lkZHXLfGyWNIfCNGG5yyCQI8aG1kiY=)
                          19: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: /7ofNppVXJF7mFM2WeV7e0wu+6LZLrIveqoSX8uAT6s=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
                          rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 05:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:80:87:d6:31:ba:4f:75:70:6d:15:8b:9f:2b:88:40:22:3e:c7:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
        Validity
            Not Before: Sep 24 03:19:49 2026 GMT
            Not After : Sep 25 05:20:49 2026 GMT
        Subject: CN=C15F4566428662F11E2D6FB19F1C39740EC0CBD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:68:03:d0:9a:4b:50:92:6c:da:ef:fc:bc:
                    54:46:49:15:fa:fb:c7:68:9a:d3:0f:aa:9e:95:e5:
                    65:74:25:8a:16:75:63:c0:40:f5:52:33:21:c7:25:
                    b6:42:a2:6b:54:71:67:3d:60:eb:3d:00:01:f4:57:
                    67:2c:10:a6:14:31:8f:60:57:8b:1b:24:8e:d0:12:
                    47:2a:56:ee:76:db:3c:c7:e2:fb:b7:fd:f2:28:fd:
                    d6:b5:ef:70:b9:52:04:05:82:90:71:41:6e:e4:3a:
                    71:3c:d5:c1:77:e8:ba:b7:ed:8a:34:e5:9e:56:ba:
                    8d:58:ad:5e:f4:56:ae:73:f0:e5:a2:09:fa:63:b3:
                    69:85:8a:b2:de:5d:33:6c:68:1a:7f:ac:68:b0:7d:
                    28:b9:32:78:38:10:97:ed:65:7b:78:89:a4:a4:4b:
                    a9:56:f1:f6:9c:41:ed:73:d4:af:c0:b6:3e:f3:be:
                    84:a4:14:79:3a:78:27:11:78:b5:7b:c8:88:d6:90:
                    82:3c:ef:69:6a:f7:12:7e:32:8e:af:0c:a4:99:61:
                    65:c2:a7:0b:f6:15:dd:d3:e8:d2:ee:6e:94:c6:2a:
                    30:56:47:f5:2f:7e:36:49:8d:e7:1b:a5:b8:45:f7:
                    73:22:f3:e2:3b:12:32:f2:fa:03:d3:37:b7:ab:e6:
                    84:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5F:45:66:42:86:62:F1:1E:2D:6F:B1:9F:1C:39:74:0E:C0:CB:D4
            X509v3 Authority Key Identifier:
                keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e0:d5:78:b0:e5:0f:39:d8:23:8d:fe:8e:e9:f3:0a:6c:6b:
         18:31:af:d7:f7:e2:36:77:73:9a:02:34:b1:1c:37:bc:f6:03:
         61:94:aa:f9:d1:d7:01:08:c0:46:16:81:67:c7:66:29:e9:25:
         ae:4f:c8:22:53:e1:a0:7e:77:9d:bf:53:17:df:40:a4:a6:03:
         6e:4f:a8:05:a5:ee:ca:f3:16:ed:13:00:16:02:22:16:7e:c0:
         cc:cb:60:14:a0:72:0e:e4:5a:08:29:27:ec:0c:d7:1c:35:6b:
         68:7b:42:b0:f5:ef:fa:03:43:31:f6:f7:20:95:46:ca:3f:7f:
         fd:46:54:49:97:00:84:14:cb:88:c8:57:1d:62:fe:a2:63:a7:
         b0:e7:5d:dd:f6:ad:8a:78:73:e2:b0:17:f4:93:d5:a1:91:51:
         91:46:a7:66:f7:18:11:8a:46:11:23:e9:7f:63:9f:5f:fe:a7:
         0b:b0:2e:be:fb:3c:8c:5b:57:3f:a0:64:23:09:2b:70:a8:fe:
         f2:21:41:36:c7:0a:97:bc:b0:e0:29:19:78:b4:b7:f2:55:1d:
         c3:5e:70:4c:bd:fe:f4:61:a7:43:5a:ef:da:6f:80:94:34:56:
         1a:a8:59:1b:82:28:23:b9:81:c1:73:10:b1:46:b9:39:17:4f:
         e9:f1:f4:d0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKYCH1jG6T3VwbRWLnyuIQCI+x64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0IwQTYwNkZEMDY0MkU2OEI1MjEyQUU3NTE5NTNFMEI5
QTkyOTU5RjAeFw0yNjA5MjQwMzE5NDlaFw0yNjA5MjUwNTIwNDlaMDMxMTAvBgNV
BAMTKEMxNUY0NTY2NDI4NjYyRjExRTJENkZCMTlGMUMzOTc0MEVDMENCRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUmgD0JpLUJJs2u/8vFRGSRX6
+8domtMPqp6V5WV0JYoWdWPAQPVSMyHHJbZComtUcWc9YOs9AAH0V2csEKYUMY9g
V4sbJI7QEkcqVu522zzH4vu3/fIo/da173C5UgQFgpBxQW7kOnE81cF36Lq37Yo0
5Z5Wuo1YrV70Vq5z8OWiCfpjs2mFirLeXTNsaBp/rGiwfSi5Mng4EJftZXt4iaSk
S6lW8facQe1z1K/Atj7zvoSkFHk6eCcReLV7yIjWkII872lq9xJ+Mo6vDKSZYWXC
pwv2Fd3T6NLubpTGKjBWR/UvfjZJjecbpbhF93Mi8+I7EjLy+gPTN7er5oQzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUwV9FZkKGYvEeLW+xnxw5dA7Ay9QwHwYDVR0j
BBgwFoAUywpgb9BkLmi1ISrnUZU+C5qSlZ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDA3NDcxYTMtZWU1My00OTljLTlmMmQtY2YxNmIxZTRhMzUzLzAvQ0IwQTYwNkZE
MDY0MkU2OEI1MjEyQUU3NTE5NTNFMEI5QTkyOTU5Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DQjBBNjA2RkQwNjQyRTY4QjUyMTJBRTc1MTk1M0UwQjlBOTI5
NTlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA3NDcxYTMtZWU1My00OTljLTlm
MmQtY2YxNmIxZTRhMzUzLzAvQ0IwQTYwNkZEMDY0MkU2OEI1MjEyQUU3NTE5NTNF
MEI5QTkyOTU5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEjg1Xiw5Q852CON/o7p8wpsaxgxr9f34jZ3
c5oCNLEcN7z2A2GUqvnR1wEIwEYWgWfHZinpJa5PyCJT4aB+d52/UxffQKSmA25P
qAWl7srzFu0TABYCIhZ+wMzLYBSgcg7kWggpJ+wM1xw1a2h7QrD17/oDQzH29yCV
Rso/f/1GVEmXAIQUy4jIVx1i/qJjp7DnXd32rYp4c+KwF/ST1aGRUZFGp2b3GBGK
RhEj6X9jn1/+pwuwLr77PIxbVz+gZCMJK3Co/vIhQTbHCpe8sOApGXi0t/JVHcNe
cEy9/vRhp0Na79pvgJQ0VhqoWRuCKCO5gcFzELFGuTkXT+nx9NA=
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:14:00 2026 by rpki-client