Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft
File:                     4242BEFAB7FD9E772FB16847C540331384EE1024.mft (raw, json)
Hash identifier:          S5Hq0l2Jnqjt6rqa+008scwLjr6nottlxWZNK0Fh/sg=
Subject key identifier:   D4:2D:DB:85:0D:F2:CE:09:7F:6E:6B:87:17:CA:FE:63:6B:1D:A1:39
Authority key identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24
Certificate issuer:       /CN=4242BEFAB7FD9E772FB16847C540331384EE1024
Certificate serial:       69B9F74DB2D99ADD2ABFCAEABFA552D20FC2599E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 01:15:46 +0000
Manifest this update:     Fri 24 Jul 2026 01:10:46 +0000
Manifest next update:     Sat 25 Jul 2026 03:31:46 +0000
Files and hashes:         1: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (hash: Cw/pDcSCd6i3ij4/wfpHGGndxOrkB5cRBItVY3wwyXY=)
                          2: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (hash: nXrFney4rm86RaxvLz8FHxrD0eDVyhHMOFWuNh0v780=)
                          3: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (hash: PfMnHFIZGrnZM82g+rsBwK7aW3WScriYgqF0KRQ2e7o=)
                          4: 3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (hash: ZoyEeEkhjYB7kmWXbankgfqmtUA/RIwDGWmG85rq3MM=)
                          5: 323030313a6632303a663030303a3a2f33362d3438203d3e203338313534.roa (hash: yBBw20MUl3ywel5nMkYQ+sxWLo0uKsXTdelznoPGQgw=)
                          6: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (hash: 8HTV0U7VPfbofWQktj6RT5pn5RIkHHJ7XlxCG7/lIR4=)
                          7: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (hash: tIIyaOJKHjPPuva/q/Aqc1Qh+BSiqDBH0wmDFkgmMzY=)
                          8: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (hash: 5cRboxzFOLvbyc9aSM3Coqx837mIFEIAXFoJ+a6/PqQ=)
                          9: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (hash: df7n82FEObULXOysxP6bG6yjwPocx8D3thReHoveLMI=)
                          10: 4242BEFAB7FD9E772FB16847C540331384EE1024.crl (hash: kdYoJnz2dPRWXTtodxiC4yH6RMg2JNaNJuHWmNiUblk=)
                          11: 3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa (hash: ENboBx8oAXnbGQ10S7i2zUMk/RdQE6cutileOuH+d/M=)
                          12: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (hash: C/tjvABwEX3e3XuDh6lRQ/cpU/5HYFGHpATqucNO6pQ=)
                          13: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (hash: HZhaUoMvo6PbB0DDiHNG1KzdNqQKbOCBQCGJxhRr7TU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl
                          rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:31:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b9:f7:4d:b2:d9:9a:dd:2a:bf:ca:ea:bf:a5:52:d2:0f:c2:59:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4242BEFAB7FD9E772FB16847C540331384EE1024
        Validity
            Not Before: Jul 24 01:10:46 2026 GMT
            Not After : Jul 25 03:31:46 2026 GMT
        Subject: CN=D42DDB850DF2CE097F6E6B8717CAFE636B1DA139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:76:18:fb:6a:2c:03:42:36:2c:d2:e7:c2:b1:
                    3c:bb:fd:b8:c5:48:f2:0b:f3:4e:aa:9d:5e:2e:58:
                    80:4d:2c:60:a2:49:44:5d:bd:49:3e:c9:99:02:c8:
                    47:b2:bd:b2:8a:27:8f:61:ef:72:a8:51:12:af:fb:
                    10:48:2e:77:a3:e2:89:2a:08:63:2b:13:2b:e4:21:
                    7a:4d:a3:ff:2b:a4:f3:bd:04:24:00:0e:85:4f:c0:
                    a7:0c:ef:72:77:37:7d:df:f6:4d:63:e8:af:1b:20:
                    0d:6e:9d:b2:46:65:82:cb:5e:e2:9f:ca:c3:2e:18:
                    ab:84:b4:c1:6e:20:1e:30:ba:29:f4:83:a3:7e:5d:
                    cd:80:4c:f4:f1:a7:da:81:38:d9:fd:db:37:31:38:
                    a6:c7:c4:86:79:30:4d:1f:83:85:a7:59:e8:ae:dd:
                    4e:c6:12:d4:a7:c7:88:7a:71:fb:e8:5d:4b:f5:81:
                    ff:2e:a8:db:7f:00:56:9b:bc:ce:b8:fa:e2:73:a5:
                    6a:25:d7:2d:ff:f9:96:d6:bf:87:fc:4d:25:70:6d:
                    60:47:2c:d9:39:46:08:a3:96:f7:26:aa:7f:21:3f:
                    42:fc:8d:1c:6a:ce:f9:79:cf:98:0e:69:9c:72:57:
                    1e:dc:cd:b0:1d:f3:fc:20:60:f5:52:f4:5c:bd:a2:
                    69:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2D:DB:85:0D:F2:CE:09:7F:6E:6B:87:17:CA:FE:63:6B:1D:A1:39
            X509v3 Authority Key Identifier:
                keyid:42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b9:5e:b2:18:64:3d:aa:80:c3:b5:5e:9b:49:8e:32:00:e6:
         d7:c6:1f:38:8e:19:0a:21:01:a3:fc:26:d3:b4:b9:35:8e:7b:
         8b:7e:64:39:20:1e:9f:24:4d:67:c1:a1:17:91:10:3b:93:47:
         a7:4f:44:55:ae:2a:9a:77:5d:fa:fc:da:4a:b7:2a:65:e3:03:
         31:c4:25:18:0e:df:f1:44:66:f1:c2:40:d0:d9:e5:69:7a:51:
         67:df:43:46:73:5a:be:08:3a:3a:12:b8:4f:bb:9f:0b:89:66:
         9f:f8:d5:2c:13:db:94:79:c0:1d:9b:4e:49:35:be:33:5b:46:
         b8:23:7d:7d:34:12:c9:2d:69:6b:d8:0a:89:0a:d2:95:cd:ec:
         43:85:ec:c5:02:92:0a:49:28:6b:75:3d:23:b1:f5:b3:6a:4a:
         85:de:23:e8:00:69:87:3b:cd:86:59:e5:73:c2:02:79:00:94:
         c8:a8:b4:f8:26:35:d6:ce:e8:8b:36:77:fc:d7:57:4f:1d:ab:
         16:27:3c:f5:60:c1:0d:cc:3a:86:e2:b0:ff:5a:13:56:43:f3:
         cf:54:2e:93:d2:8c:fe:c0:16:1d:1b:64:e5:4b:b0:33:33:1e:
         4a:3c:d2:8c:fa:82:7b:d0:61:c8:35:09:eb:8c:b2:5a:d3:a2:
         b3:a0:be:0b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUabn3TbLZmt0qv8rqv6VS0g/CWZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4
NEVFMTAyNDAeFw0yNjA3MjQwMTEwNDZaFw0yNjA3MjUwMzMxNDZaMDMxMTAvBgNV
BAMTKEQ0MkREQjg1MERGMkNFMDk3RjZFNkI4NzE3Q0FGRTYzNkIxREExMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUdhj7aiwDQjYs0ufCsTy7/bjF
SPIL806qnV4uWIBNLGCiSURdvUk+yZkCyEeyvbKKJ49h73KoURKv+xBILnej4okq
CGMrEyvkIXpNo/8rpPO9BCQADoVPwKcM73J3N33f9k1j6K8bIA1unbJGZYLLXuKf
ysMuGKuEtMFuIB4wuin0g6N+Xc2ATPTxp9qBONn92zcxOKbHxIZ5ME0fg4WnWeiu
3U7GEtSnx4h6cfvoXUv1gf8uqNt/AFabvM64+uJzpWol1y3/+ZbWv4f8TSVwbWBH
LNk5Rgijlvcmqn8hP0L8jRxqzvl5z5gOaZxyVx7czbAd8/wgYPVS9Fy9omlLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1C3bhQ3yzgl/bmuHF8r+Y2sdoTkwHwYDVR0j
BBgwFoAUQkK++rf9nncvsWhHxUAzE4TuECQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWJiZmU3NzYtMDBhMy00Nzc2LWJmM2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFC
N0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4NEVFMTAyNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MjQyQkVGQUI3RkQ5RTc3MkZCMTY4NDdDNTQwMzMxMzg0RUUx
MDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJiZmU3NzYtMDBhMy00Nzc2LWJm
M2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMz
MTM4NEVFMTAyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFa5XrIYZD2qgMO1XptJjjIA5tfGHziOGQoh
AaP8JtO0uTWOe4t+ZDkgHp8kTWfBoReREDuTR6dPRFWuKpp3Xfr82kq3KmXjAzHE
JRgO3/FEZvHCQNDZ5Wl6UWffQ0ZzWr4IOjoSuE+7nwuJZp/41SwT25R5wB2bTkk1
vjNbRrgjfX00EsktaWvYCokK0pXN7EOF7MUCkgpJKGt1PSOx9bNqSoXeI+gAaYc7
zYZZ5XPCAnkAlMiotPgmNdbO6Is2d/zXV08dqxYnPPVgwQ3MOobisP9aE1ZD889U
LpPSjP7AFh0bZOVLsDMzHko80oz6gnvQYcg1CeuMslrTorOgvgs=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:45:34 2026 by rpki-client