Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/13467636-b721-496f-8e99-8368c0ee27f7/0/99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.mft
File:                     99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.mft (raw, json)
Hash identifier:          R0dKYSDYzqV9wzcA+we99ZZ4eXtEBcqeZ/p4S6JfP34=
Subject key identifier:   79:54:BB:74:2C:01:77:C3:43:61:30:48:FA:7D:50:9D:A2:B5:38:8A
Authority key identifier: 99:BA:BE:71:7C:FE:78:82:76:D1:7F:95:FE:9B:0F:FC:FE:07:B3:F0
Certificate issuer:       /CN=99BABE717CFE788276D17F95FE9B0FFCFE07B3F0
Certificate serial:       69189C5CB7D47E70683670313D18627912A8F92F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/13467636-b721-496f-8e99-8368c0ee27f7/0/99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.mft
Manifest number:          2D
Signing time:             Sun 15 Nov 2026 01:46:22 +0000
Manifest this update:     Sun 15 Nov 2026 01:41:22 +0000
Manifest next update:     Mon 16 Nov 2026 03:36:22 +0000
Files and hashes:         1: 3136332e35322e3138312e302f32342d3234203d3e20313534393139.roa (hash: BqGxiUgZJ1DM+eDB8yM7SgcgG2GT5XaPf4Fxm2AFLPc=)
                          2: 99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.crl (hash: Urp58pfWcvZP/pSTS0EkPCldn6gfz4DL43igT5WnmI0=)
                          3: 3136332e35322e3138302e302f32342d3234203d3e20313534393139.roa (hash: 8tkXKrrxyXHeGT+R72qB6l4khle3i37l4L9Q43+ntbg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/13467636-b721-496f-8e99-8368c0ee27f7/0/99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.crl
                          rsync://rpki-rsync.idnic.net/repo/13467636-b721-496f-8e99-8368c0ee27f7/0/99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 03:36:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:18:9c:5c:b7:d4:7e:70:68:36:70:31:3d:18:62:79:12:a8:f9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99BABE717CFE788276D17F95FE9B0FFCFE07B3F0
        Validity
            Not Before: Nov 15 01:41:22 2026 GMT
            Not After : Nov 16 03:36:22 2026 GMT
        Subject: CN=7954BB742C0177C343613048FA7D509DA2B5388A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a4:4d:23:f4:b4:54:1c:f2:b4:fe:e3:3b:3a:
                    82:68:00:e9:44:b1:bb:a8:d1:8b:b9:a0:96:8e:16:
                    18:e1:36:32:c4:72:41:6d:9f:7d:96:0f:a7:6a:ab:
                    a5:6d:6a:bc:14:c4:3d:a7:a9:47:dd:4e:7e:81:aa:
                    c9:9c:b2:13:47:61:2f:39:56:3a:3f:d9:81:6b:00:
                    fe:32:27:b2:f9:e6:d2:86:43:8c:0e:f8:52:07:a4:
                    42:7e:3f:ff:2a:3d:7f:80:66:a7:d2:80:42:d1:60:
                    3b:80:0d:ee:b4:87:3d:ad:01:00:86:1b:a4:4a:6c:
                    04:fa:3b:0c:59:22:f5:2d:f6:cf:fe:de:83:b5:04:
                    68:12:4e:2f:aa:91:d6:a4:be:f4:bc:0e:26:7d:53:
                    31:d8:4d:29:df:a5:82:3e:f9:8f:c0:dc:86:28:0d:
                    8e:07:65:95:53:84:1f:0f:5f:2b:c3:ce:a0:d1:c6:
                    2f:54:a3:10:64:21:c8:0f:e8:e8:b4:ed:74:aa:ef:
                    8a:29:6b:1c:e6:33:4f:36:ef:20:2b:f4:7a:9e:6f:
                    0c:30:62:1e:cb:82:ce:b7:48:bd:1f:4c:61:6c:d0:
                    96:27:3a:0c:41:bd:7a:7c:85:60:f8:75:c1:30:23:
                    9f:3a:7f:91:02:c7:a3:eb:68:bf:43:7d:74:10:20:
                    63:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:54:BB:74:2C:01:77:C3:43:61:30:48:FA:7D:50:9D:A2:B5:38:8A
            X509v3 Authority Key Identifier:
                keyid:99:BA:BE:71:7C:FE:78:82:76:D1:7F:95:FE:9B:0F:FC:FE:07:B3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/13467636-b721-496f-8e99-8368c0ee27f7/0/99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13467636-b721-496f-8e99-8368c0ee27f7/0/99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:24:d7:af:76:f8:86:72:e0:42:af:83:c2:b0:08:df:57:bf:
         7e:20:a0:45:5e:df:7b:ac:38:3b:17:d5:b1:4d:9e:b4:76:90:
         f2:0b:1b:da:a7:63:5f:36:b9:b6:4d:cd:2a:c2:69:7c:2c:3d:
         11:dd:d3:d6:18:10:f2:74:64:7f:c6:76:d9:a5:28:a8:6a:c7:
         21:aa:27:64:80:96:07:7f:d7:d7:e4:8d:8f:fd:40:18:23:51:
         84:2e:15:fc:00:4c:ea:a3:63:30:d4:16:cc:b0:7e:35:3a:88:
         96:49:05:67:fa:fa:56:fd:f5:eb:7f:ac:a8:0e:22:85:8a:d5:
         bc:78:3f:8e:59:22:35:85:67:66:df:97:cf:eb:68:dd:51:04:
         03:6f:0e:24:b4:0c:45:f8:55:6a:c7:36:cb:87:2e:17:a9:81:
         43:79:cb:d9:58:31:31:b7:ae:b0:c9:fc:87:ae:28:86:2e:63:
         2e:65:c7:ca:75:89:ec:18:81:71:7b:fd:7d:fe:78:0e:7c:03:
         0c:05:9a:c8:35:d3:22:93:40:51:21:dd:90:92:b0:69:86:aa:
         5a:c4:86:8e:0f:39:1a:ae:f0:46:45:d9:95:e4:5d:d5:3e:c7:
         40:78:26:39:6f:72:2a:99:0b:fb:4f:13:26:57:b7:b2:f6:5c:
         7a:b9:ce:c8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaRicXLfUfnBoNnAxPRhieRKo+S8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlCQUJFNzE3Q0ZFNzg4Mjc2RDE3Rjk1RkU5QjBGRkNG
RTA3QjNGMDAeFw0yNjExMTUwMTQxMjJaFw0yNjExMTYwMzM2MjJaMDMxMTAvBgNV
BAMTKDc5NTRCQjc0MkMwMTc3QzM0MzYxMzA0OEZBN0Q1MDlEQTJCNTM4OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLpE0j9LRUHPK0/uM7OoJoAOlE
sbuo0Yu5oJaOFhjhNjLEckFtn32WD6dqq6VtarwUxD2nqUfdTn6BqsmcshNHYS85
Vjo/2YFrAP4yJ7L55tKGQ4wO+FIHpEJ+P/8qPX+AZqfSgELRYDuADe60hz2tAQCG
G6RKbAT6OwxZIvUt9s/+3oO1BGgSTi+qkdakvvS8DiZ9UzHYTSnfpYI++Y/A3IYo
DY4HZZVThB8PXyvDzqDRxi9UoxBkIcgP6Oi07XSq74opaxzmM0827yAr9Hqebwww
Yh7Lgs63SL0fTGFs0JYnOgxBvXp8hWD4dcEwI586f5ECx6PraL9DfXQQIGM5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUeVS7dCwBd8NDYTBI+n1QnaK1OIowHwYDVR0j
BBgwFoAUmbq+cXz+eIJ20X+V/psP/P4Hs/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTM0Njc2MzYtYjcyMS00OTZmLThlOTktODM2OGMwZWUyN2Y3LzAvOTlCQUJFNzE3
Q0ZFNzg4Mjc2RDE3Rjk1RkU5QjBGRkNGRTA3QjNGMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85OUJBQkU3MTdDRkU3ODgyNzZEMTdGOTVGRTlCMEZGQ0ZFMDdC
M0YwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTM0Njc2MzYtYjcyMS00OTZmLThl
OTktODM2OGMwZWUyN2Y3LzAvOTlCQUJFNzE3Q0ZFNzg4Mjc2RDE3Rjk1RkU5QjBG
RkNGRTA3QjNGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI4k1692+IZy4EKvg8KwCN9Xv34goEVe33us
ODsX1bFNnrR2kPILG9qnY182ubZNzSrCaXwsPRHd09YYEPJ0ZH/GdtmlKKhqxyGq
J2SAlgd/19fkjY/9QBgjUYQuFfwATOqjYzDUFsywfjU6iJZJBWf6+lb99et/rKgO
IoWK1bx4P45ZIjWFZ2bfl8/raN1RBANvDiS0DEX4VWrHNsuHLhepgUN5y9lYMTG3
rrDJ/IeuKIYuYy5lx8p1iewYgXF7/X3+eA58AwwFmsg10yKTQFEh3ZCSsGmGqlrE
ho4PORqu8EZF2ZXkXdU+x0B4JjlvciqZC/tPEyZXt7L2XHq5zsg=
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:11:35 2026 by rpki-client