Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
File:                     A9DFB6024D05A37CA0C756EC747E898140885BC9.mft (raw, json)
Hash identifier:          D5zKHKH47XcVbL/+iyWO/KagShs9QJmXF1wqleqDno8=
Subject key identifier:   5F:E4:21:1A:3E:10:CF:38:EA:6A:6C:59:D5:47:35:A3:C9:C1:9B:53
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Certificate issuer:       /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial:       010BC51D9AE16ADAFAFFAF374008B9BC41EBB151
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
Manifest number:          C4
Signing time:             Fri 25 Sep 2026 22:58:57 +0000
Manifest this update:     Fri 25 Sep 2026 22:53:57 +0000
Manifest next update:     Sat 26 Sep 2026 23:52:57 +0000
Files and hashes:         1: 3130332e3234372e31362e302f32332d3234203d3e203338313635.roa (hash: X2L0BGiTvmgLJtgSEYwPB9xF12na1ku6hIINh+wHP14=)
                          2: 3131342e33302e39312e302f32342d3234203d3e203338313635.roa (hash: hwrp8oltXPCRSuxrHgsojYMMFzDn1UCIz4HCYehypeU=)
                          3: 3131362e31322e34362e302f32342d3234203d3e203338313635.roa (hash: VdZyujauditCo5BInDzGT86RLe022tUhB8aqRECGwWM=)
                          4: 323430313a646363303a3a2f33322d3438203d3e203338313635.roa (hash: 2ylo3HpAhVkvHZhTyyQa6+TpBddihUGH17bMztGMO8Y=)
                          5: 3131342e33302e39342e302f32342d3234203d3e203338313635.roa (hash: G8aUIjts1s/SyprhduUQ7undoZSDOgnTsSv1h0ZIPBI=)
                          6: 3131342e33302e39332e302f32342d3234203d3e203338313635.roa (hash: Y4OQkQ+6pCKwFE7J9SktmKY2Oia99e7uSzB1cyzK/sw=)
                          7: 3131342e33302e39322e302f32342d3234203d3e203338313635.roa (hash: XxFeX4bK2Dh55oFKthxbGwYO1QPL6JkUjpiac/LGmFc=)
                          8: 3130332e38332e3134302e302f32342d3234203d3e203338313635.roa (hash: fksrul4lMZ1/XL5r5cu/WNsWpdzw6wwNzqAHD2IefPw=)
                          9: 3131342e33302e38382e302f32342d3234203d3e203338313635.roa (hash: TYxvOObRiApVHdygkcJ79px01l2EeTEanmBRk9sEhU8=)
                          10: 3131362e31322e34302e302f32342d3234203d3e203338313635.roa (hash: solCgiJ0IBXmILHhdk+WcwssrUHzmifkTZH0iCFde94=)
                          11: 3131362e31322e34352e302f32342d3234203d3e203338313635.roa (hash: /Qbizla9Rd9j7hntYwBfkRjqiwhDVjGQMjdVjta/V4o=)
                          12: 3131362e31322e34332e302f32342d3234203d3e203338313635.roa (hash: vuNc4l/9yLIs4KyCpx5p6F1jMwXXBMM4BQHYhbheraI=)
                          13: 3130332e38332e3134302e302f32322d3234203d3e203338313635.roa (hash: Ik3fxLSlXA2Xnh23AevRPdy9KUS+oUVTjYCiGIABhYM=)
                          14: 3131342e33302e38382e302f32312d3234203d3e203338313635.roa (hash: PbHEb+XaCGRxOonc9+PyBhvmLickz9HVhiTfl0wL8wY=)
                          15: 3131362e31322e34312e302f32342d3234203d3e203338313635.roa (hash: F7W3l45HCPDJENu+RobZMG7HgvBdxexYhGm3GKsDUsc=)
                          16: 3130332e3234372e31362e302f32342d3234203d3e203338313635.roa (hash: glySjVWaeYKKJGdVLX98kL01SxrrhC2o5DvZ/OFZzes=)
                          17: 3131362e31322e34302e302f32312d3234203d3e203338313635.roa (hash: XG2kEfirxjj/sDq/rblsGtFwcedIIKGdVI/XxKks4EQ=)
                          18: 3131342e33302e39302e302f32342d3234203d3e203338313635.roa (hash: sDSoeXLG7m9Vd+TPJvOtkj0D0bh9+lF74Y6p0yHJT2w=)
                          19: 3131342e33302e38392e302f32342d3234203d3e203338313635.roa (hash: maWh9CwQAwSd/hgh31AypikUc85sBDX5Qkb/wXAwqQ4=)
                          20: 3131362e31322e34372e302f32342d3234203d3e203338313635.roa (hash: ls6pClLibFG+ZtAvlvA5DPGIjVB65RJG/A/2js2edZI=)
                          21: 3131362e31322e34342e302f32342d3234203d3e203338313635.roa (hash: 4eVsgYjQx/GwRQGHLYtsEEdD640KhW1jdNg/AXAmGj8=)
                          22: 3131362e31322e34322e302f32342d3234203d3e203338313635.roa (hash: Tzz51V+z7G+M0amuU470kd9KxBTkAYh2VanJBe/CIik=)
                          23: 3130332e38332e3134332e302f32342d3234203d3e203338313635.roa (hash: PzK9iamlsHrrCIK36AFek4huEos9vJO/Mb+qJmCN8TU=)
                          24: 3130332e38332e3134322e302f32342d3234203d3e203338313635.roa (hash: YrZIFaqaTChjnkZ/BX+Yt+LiIgZZAfEd+7+0eXA8anQ=)
                          25: 3130332e38332e3134312e302f32342d3234203d3e203338313635.roa (hash: caorMzAk2rhKrHkZPEylYGbz3q7q/4kgUFG0ZpSaKuk=)
                          26: A9DFB6024D05A37CA0C756EC747E898140885BC9.crl (hash: +MEQ/t40N6Xz5UIp75F3LrXaymkXGf08DG1AqJQIfeo=)
                          27: 3130332e3234372e31372e302f32342d3234203d3e203338313635.roa (hash: 5amtZ+LM77tqz27nu3gKgm99BvgZZy43q/i93530bY0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
                          rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 17:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0b:c5:1d:9a:e1:6a:da:fa:ff:af:37:40:08:b9:bc:41:eb:b1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
        Validity
            Not Before: Sep 25 22:53:57 2026 GMT
            Not After : Sep 26 23:52:57 2026 GMT
        Subject: CN=5FE4211A3E10CF38EA6A6C59D54735A3C9C19B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ee:da:11:00:a5:eb:38:b3:b7:c8:d0:a9:a2:
                    f1:f0:17:0b:47:f8:4c:b8:9e:20:d5:66:24:0c:b8:
                    63:de:db:4a:fc:67:de:49:bb:64:8e:37:64:cb:56:
                    e3:56:58:16:5d:ef:1a:2c:dc:83:fc:07:ed:9f:8f:
                    a1:83:e7:70:73:8b:29:c8:8e:61:7f:f8:60:7c:78:
                    8d:35:a4:3e:1d:d4:65:66:ac:aa:18:36:08:59:e5:
                    cb:0e:d7:d5:31:0f:07:3d:75:8b:ef:a2:42:b4:d5:
                    94:d9:6f:0e:d4:b1:f8:5d:f0:87:60:be:9d:1d:3d:
                    f2:d1:3f:85:fc:05:6e:3f:c4:e9:bb:45:cd:96:a2:
                    ab:ff:73:0e:3b:2c:ec:07:0b:12:8b:0f:33:53:54:
                    fc:49:4a:08:70:ec:f6:3f:62:60:8c:9d:56:12:06:
                    c7:d8:d0:cf:86:a2:5d:07:df:ce:4f:d5:a4:71:a7:
                    f5:48:af:8c:d3:04:09:8c:95:2e:89:c5:f6:52:70:
                    51:9d:d1:1a:89:7d:1e:47:b7:7d:f2:5b:27:1f:bb:
                    bf:a3:c0:ce:94:90:2b:37:46:f3:96:10:28:41:f1:
                    61:80:f5:96:cb:f0:42:32:74:80:7d:09:fd:8b:ae:
                    0f:7a:d3:19:b6:ab:03:94:8a:ba:74:7f:77:73:e3:
                    96:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E4:21:1A:3E:10:CF:38:EA:6A:6C:59:D5:47:35:A3:C9:C1:9B:53
            X509v3 Authority Key Identifier:
                keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:da:3a:d8:85:e5:9e:3e:da:2e:38:38:98:c7:9b:09:ae:c6:
         14:00:56:9d:a5:95:d7:28:78:55:b2:43:71:fb:dc:2d:13:99:
         cf:3c:88:32:10:d1:b9:d4:50:64:3b:07:e6:9c:00:a9:56:70:
         68:f6:7f:b5:14:a0:9f:74:42:b0:5b:7e:7e:ea:3e:46:56:df:
         f2:22:9a:31:97:67:94:d8:3b:3d:69:ba:14:09:df:fa:25:de:
         46:bf:37:e7:7f:4c:86:5b:4a:af:00:5c:e8:68:cc:9b:e1:70:
         96:62:6f:d2:ed:f1:97:ed:98:b3:8a:35:7b:23:b9:b5:d9:85:
         a1:ff:18:ae:02:a8:e8:d6:5e:3c:69:40:27:94:37:4f:bf:a2:
         29:95:fe:92:88:4b:a8:53:36:1a:4c:9f:87:65:0e:d9:6d:4c:
         da:be:12:1e:3c:4e:50:86:64:99:f0:2c:7f:ea:c7:40:67:78:
         95:c5:4c:2b:c7:56:2c:db:87:e8:42:0a:69:03:ba:06:99:de:
         18:5a:d0:31:9f:55:a6:05:b1:d0:13:79:b4:76:cb:ae:91:22:
         37:f3:44:97:39:c1:3d:94:3d:88:7f:4d:44:d7:72:b6:e7:52:
         30:ad:7e:c4:4d:95:96:3a:24:31:fc:c9:72:5c:4d:a7:b9:ea:
         50:dc:d2:52
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAQvFHZrhatr6/683QAi5vEHrsVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlERkI2MDI0RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0
MDg4NUJDOTAeFw0yNjA5MjUyMjUzNTdaFw0yNjA5MjYyMzUyNTdaMDMxMTAvBgNV
BAMTKDVGRTQyMTFBM0UxMENGMzhFQTZBNkM1OUQ1NDczNUEzQzlDMTlCNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY7toRAKXrOLO3yNCpovHwFwtH
+Ey4niDVZiQMuGPe20r8Z95Ju2SON2TLVuNWWBZd7xos3IP8B+2fj6GD53BziynI
jmF/+GB8eI01pD4d1GVmrKoYNghZ5csO19UxDwc9dYvvokK01ZTZbw7Usfhd8Idg
vp0dPfLRP4X8BW4/xOm7Rc2Woqv/cw47LOwHCxKLDzNTVPxJSghw7PY/YmCMnVYS
BsfY0M+Gol0H385P1aRxp/VIr4zTBAmMlS6JxfZScFGd0RqJfR5Ht33yWycfu7+j
wM6UkCs3RvOWEChB8WGA9ZbL8EIydIB9Cf2Lrg960xm2qwOUirp0f3dz45anAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUX+QhGj4QzzjqamxZ1Uc1o8nBm1MwHwYDVR0j
BBgwFoAUqd+2Ak0Fo3ygx1bsdH6JgUCIW8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Zjc0NDhjMTEtZjhkMy00NTdkLThlMjItODQ4ODdhYjIyYTMwLzAvQTlERkI2MDI0
RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0MDg4NUJDOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BOURGQjYwMjREMDVBMzdDQTBDNzU2RUM3NDdFODk4MTQwODg1
QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjc0NDhjMTEtZjhkMy00NTdkLThl
MjItODQ4ODdhYjIyYTMwLzAvQTlERkI2MDI0RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5
ODE0MDg4NUJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIzaOtiF5Z4+2i44OJjHmwmuxhQAVp2lldco
eFWyQ3H73C0Tmc88iDIQ0bnUUGQ7B+acAKlWcGj2f7UUoJ90QrBbfn7qPkZW3/Ii
mjGXZ5TYOz1puhQJ3/ol3ka/N+d/TIZbSq8AXOhozJvhcJZib9Lt8ZftmLOKNXsj
ubXZhaH/GK4CqOjWXjxpQCeUN0+/oimV/pKIS6hTNhpMn4dlDtltTNq+Eh48TlCG
ZJnwLH/qx0BneJXFTCvHVizbh+hCCmkDugaZ3hha0DGfVaYFsdATebR2y66RIjfz
RJc5wT2UPYh/TUTXcrbnUjCtfsRNlZY6JDH8yXJcTae56lDc0lI=
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:08:03 2026 by rpki-client