Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
File:                     A9BFA348A050E46482F4E00C605FF9961247FC64.mft (raw, json)
Hash identifier:          VbGRbfHxcdMnRp1r7n3zkuoncvnypBTcMxdv4lOcz3M=
Subject key identifier:   4A:3E:E3:8B:51:D5:85:28:C8:1F:47:7F:11:27:92:38:9A:4D:11:D2
Authority key identifier: A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64
Certificate issuer:       /CN=A9BFA348A050E46482F4E00C605FF9961247FC64
Certificate serial:       637DFA35179FA42302B413850F353155374AE53B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
Manifest number:          C3
Signing time:             Fri 25 Sep 2026 04:00:14 +0000
Manifest this update:     Fri 25 Sep 2026 03:55:14 +0000
Manifest next update:     Sat 26 Sep 2026 05:04:14 +0000
Files and hashes:         1: 3131312e39322e3136342e302f32342d3234203d3e203233363731.roa (hash: wNQ3Qkv9biOpVvnJgROiOoJs/1gZSgV49b5TXX2+3Z4=)
                          2: 323430333a623230303a3a2f33322d3438203d3e203233363731.roa (hash: 2aLawRYLy3KCYufu2NaJ3HYybrz6F8WpwigQMHaYOu8=)
                          3: 3230322e3136392e3232342e302f32302d3234203d3e203233363731.roa (hash: 4ByDuJtt3A8/OMYgUMLRW5zT+7DYjf2+SVe78YDt8J8=)
                          4: 3131312e39322e3137342e302f32332d3234203d3e203233363731.roa (hash: w12lGkVliS3y+76XSl6gzHQHimzilNFu+hS9Qt8ntF0=)
                          5: 3131312e39322e3136352e302f32342d3234203d3e203233363731.roa (hash: H7aX+6aTRF1Nj4kzc1OuSxt8gZOvC6ixFR9qSLZfj6Q=)
                          6: A9BFA348A050E46482F4E00C605FF9961247FC64.crl (hash: 8viF4XheBXKQfnaLTjiIEaMNYXkOTB0Go2jHFawTtJE=)
                          7: 3131312e39322e3136322e302f32342d3234203d3e203338353036.roa (hash: 2dlHVfZFD/szRhd8hUNYHiAVCewx+xASxFEiirRYGTg=)
                          8: 3131312e39322e3137312e302f32342d3234203d3e203233363731.roa (hash: LSQJykz8Xa8OUBE1CJt+TyLaezRgkEysTciohkEfAhc=)
                          9: 3131312e39322e3137302e302f32342d3234203d3e203233363731.roa (hash: UwBVAcKHZ4f4hQBOzL0Sd4Fm5LmC4c+ionV2pYmo7/o=)
                          10: 323430333a623230303a3166653a3a2f34382d3438203d3e203233363731.roa (hash: r6fMNtgJIoHgjV3DFpNsgQ1H8cmQbjMCcbKig24MDXk=)
                          11: 323430333a623230303a3233303a3a2f34382d3438203d3e203233363731.roa (hash: GGTpraPioXOfseSGJKXessD1JJQRRiypizczW1Hzdy0=)
                          12: 3131312e39322e3137342e302f32342d3234203d3e203233363731.roa (hash: GuV6Rg2wTEoGKg9NRtGF/nlE2uCUCHsreSMW9u/k6bA=)
                          13: 323430333a623230303a3233373a3a2f34382d3438203d3e203233363731.roa (hash: S+jEWzFEnfshlynIM2/L8ivR0r7b8KQ+/HC/tf13JGI=)
                          14: 3131312e39322e3136372e302f32342d3234203d3e203233363731.roa (hash: 7eo+DUwzfso/gGHNjcQAtGfgWMCxkON/A6PVQqojzIw=)
                          15: 323430333a623230303a613939633a3a2f34382d3438203d3e203338353036.roa (hash: XAeIzu631fi3CwuOFGNDoY933yMIfsvYuPPKWulTcYM=)
                          16: 3131312e39322e3136362e302f32342d3234203d3e203233363731.roa (hash: ZVviuvnexquFN2F18kLTWUBNgOrAM1n1Wa8GZF9ayTM=)
                          17: 3131312e39322e3136382e302f32342d3234203d3e203233363731.roa (hash: Zs7TRnZe5BNsoAw7Vlg7d8WTD6Yej6D1y1DZK+qwGSo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl
                          rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 05:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7d:fa:35:17:9f:a4:23:02:b4:13:85:0f:35:31:55:37:4a:e5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9BFA348A050E46482F4E00C605FF9961247FC64
        Validity
            Not Before: Sep 25 03:55:14 2026 GMT
            Not After : Sep 26 05:04:14 2026 GMT
        Subject: CN=4A3EE38B51D58528C81F477F112792389A4D11D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:27:8b:f0:b6:2c:59:43:03:87:20:fb:89:82:
                    2c:d3:39:39:33:23:39:cf:d9:92:10:3a:bd:d1:b7:
                    51:51:01:2f:de:3e:17:91:d9:a9:16:27:65:df:79:
                    b6:e9:80:e4:a0:b2:db:73:06:3b:26:4e:19:d2:aa:
                    0b:88:75:61:63:9d:90:02:98:f5:6c:c0:53:d1:a3:
                    6d:33:85:4f:56:3b:b2:9f:82:fb:22:01:ef:e1:23:
                    7f:58:6d:e5:da:15:c2:dc:cc:4b:80:76:7e:87:1e:
                    fa:f1:6d:7f:13:db:ed:a2:6c:3a:b9:ca:a8:8c:5f:
                    53:24:41:4a:0b:4d:45:c2:bc:ff:62:30:d3:26:22:
                    81:9d:5f:4c:07:e4:86:21:1f:7e:b8:95:21:90:e7:
                    9a:83:61:63:42:c3:71:18:5e:fa:54:4d:aa:c3:0f:
                    8c:8d:67:18:4c:69:71:72:c6:c3:22:e1:fa:8e:a5:
                    7d:97:6c:e6:db:68:e7:b5:60:3f:31:e8:5b:30:e8:
                    2f:11:a1:48:2d:ac:45:21:e1:75:85:41:22:ee:bd:
                    f8:b9:b6:d6:56:93:cf:a9:3f:2e:a7:b7:be:58:99:
                    7a:86:80:9a:58:54:02:75:88:f5:7d:00:41:39:32:
                    14:5b:34:ac:39:a5:2b:ed:f2:96:7a:35:30:a5:ed:
                    ba:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3E:E3:8B:51:D5:85:28:C8:1F:47:7F:11:27:92:38:9A:4D:11:D2
            X509v3 Authority Key Identifier:
                keyid:A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:31:a2:af:c6:38:4f:97:59:ee:c7:3d:65:9d:35:46:7f:b5:
         e0:ba:e9:50:a5:43:de:1c:ae:dd:58:73:50:80:bb:c7:f1:4a:
         e7:fe:a0:85:23:51:99:a3:05:58:54:d8:5b:b1:42:58:34:24:
         9b:e2:f4:b0:1c:13:b5:e1:fb:12:a4:09:bb:47:81:68:48:7d:
         a3:48:16:e2:17:fc:75:c1:6d:94:bf:0f:25:45:54:4d:73:0c:
         4e:d0:97:b9:6f:44:7c:dd:07:1b:03:91:dd:2a:1c:ee:72:73:
         28:06:60:ed:89:04:e5:3f:30:e4:fa:b3:9d:48:24:f9:87:4c:
         75:4d:9e:5f:12:74:d8:26:ae:b3:ba:96:f9:16:c9:c9:49:6e:
         3a:a2:2d:44:27:cf:66:57:d5:ce:5d:65:b4:38:23:60:6e:4a:
         8d:70:51:0f:ba:d1:64:da:67:26:63:52:3e:27:28:4b:77:85:
         35:74:c4:7e:8e:8b:7f:b3:5a:00:d3:e7:02:bc:8e:b3:e2:d5:
         f3:80:cd:c1:f2:13:c0:0b:41:01:0c:30:f8:97:dd:1a:ba:ff:
         4d:7c:82:86:b5:2d:d3:23:33:45:13:62:36:8d:9b:3f:7a:07:
         82:a1:7c:91:65:1a:cd:ce:61:c8:3f:05:66:8f:38:8c:d5:0a:
         10:99:10:57
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUY336NRefpCMCtBOFDzUxVTdK5TswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlCRkEzNDhBMDUwRTQ2NDgyRjRFMDBDNjA1RkY5OTYx
MjQ3RkM2NDAeFw0yNjA5MjUwMzU1MTRaFw0yNjA5MjYwNTA0MTRaMDMxMTAvBgNV
BAMTKDRBM0VFMzhCNTFENTg1MjhDODFGNDc3RjExMjc5MjM4OUE0RDExRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoJ4vwtixZQwOHIPuJgizTOTkz
IznP2ZIQOr3Rt1FRAS/ePheR2akWJ2XfebbpgOSgsttzBjsmThnSqguIdWFjnZAC
mPVswFPRo20zhU9WO7KfgvsiAe/hI39YbeXaFcLczEuAdn6HHvrxbX8T2+2ibDq5
yqiMX1MkQUoLTUXCvP9iMNMmIoGdX0wH5IYhH364lSGQ55qDYWNCw3EYXvpUTarD
D4yNZxhMaXFyxsMi4fqOpX2XbObbaOe1YD8x6Fsw6C8RoUgtrEUh4XWFQSLuvfi5
ttZWk8+pPy6nt75YmXqGgJpYVAJ1iPV9AEE5MhRbNKw5pSvt8pZ6NTCl7brJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUSj7ji1HVhSjIH0d/ESeSOJpNEdIwHwYDVR0j
BBgwFoAUqb+jSKBQ5GSC9OAMYF/5lhJH/GQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWQ5YmE5NTMtODQ4OS00NTBlLWJiZGYtNzY0NTcxZmJhY2U3LzAvQTlCRkEzNDhB
MDUwRTQ2NDgyRjRFMDBDNjA1RkY5OTYxMjQ3RkM2NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BOUJGQTM0OEEwNTBFNDY0ODJGNEUwMEM2MDVGRjk5NjEyNDdG
QzY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWQ5YmE5NTMtODQ4OS00NTBlLWJi
ZGYtNzY0NTcxZmJhY2U3LzAvQTlCRkEzNDhBMDUwRTQ2NDgyRjRFMDBDNjA1RkY5
OTYxMjQ3RkM2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKQxoq/GOE+XWe7HPWWdNUZ/teC66VClQ94c
rt1Yc1CAu8fxSuf+oIUjUZmjBVhU2FuxQlg0JJvi9LAcE7Xh+xKkCbtHgWhIfaNI
FuIX/HXBbZS/DyVFVE1zDE7Ql7lvRHzdBxsDkd0qHO5ycygGYO2JBOU/MOT6s51I
JPmHTHVNnl8SdNgmrrO6lvkWyclJbjqiLUQnz2ZX1c5dZbQ4I2BuSo1wUQ+60WTa
ZyZjUj4nKEt3hTV0xH6Oi3+zWgDT5wK8jrPi1fOAzcHyE8ALQQEMMPiX3Rq6/018
goa1LdMjM0UTYjaNmz96B4KhfJFlGs3OYcg/BWaPOIzVChCZEFc=
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:09:38 2026 by rpki-client