Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
File:                     595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft (raw, json)
Hash identifier:          BUGQeW+sVfT7GjKhFx7rtCfPZRSRF0uNIUkizBZgCtg=
Subject key identifier:   FD:EF:4B:33:49:85:3D:26:B1:A1:F4:F1:1E:96:7A:B6:68:7C:DE:A7
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Certificate issuer:       /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial:       34E354BA1F739FD4BBC7A7D6220F265337A0CE2A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
Manifest number:          BD
Signing time:             Sun 20 Sep 2026 08:01:59 +0000
Manifest this update:     Sun 20 Sep 2026 07:56:59 +0000
Manifest next update:     Mon 21 Sep 2026 09:00:59 +0000
Files and hashes:         1: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: eOdt05IAfcrKKZUnC2uIX6d/C9w0dr4HU6UCs9176ek=)
                          2: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: YnpwLS3qShrtat5vFr4GKHpgIrsqYW7nhd/bbP/N9z4=)
                          3: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: Gf7+JDdgZXaOoBD3FCXccmzSiqspLprw2RT0W6wNy+U=)
                          4: 323030313a6466313a316334303a3a2f34382d3438203d3e20313339323035.roa (hash: YbOI5aFhnLmVxr4CRLkG88zjm2Rznib1BrI9wVME05k=)
                          5: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: jNXjwR9NoJrp9dtiwnlZ8ZD+nF3IUWQs6hiqUnrS/Ok=)
                          6: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 0dcgbUIE4O45ZJeQQknhi7QzWy9JrD3T/y5JsTnfFC0=)
                          7: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: pBXuYTqReMplN2AY6AolkobEan90DNcRX+8WnFHv1IY=)
                          8: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: jO/LVsBGp/hIYW/T7V2ve/LWVG5Avg+yBl19oxnQ+Ok=)
                          9: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: eR32X6TB9dCvTyEj8xcbUe0oCJGcSbLwWM78VEF/mIM=)
                          10: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: kbsHwCF+kLPIM6LmBzd7ReTnbGaVE3pJ2tb1Y6LGrMo=)
                          11: 595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl (hash: 8NBiqoaqP+PwJXWSLEO3/S2wyYFOjLTsG/y/Bh/q5hs=)
                          12: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: oIB0azCHKZZD4LUQLYG0Yqlb4f/9KSBQ4JwecEqWsUw=)
                          13: 3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa (hash: EZ+ZMEszQ0FNnAyScxrOoCf6N5MbYNv0AIqesnyNkY8=)
                          14: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: OsRtYTl/a4gBsIVTCYGY7UbsLX5kl3Dd0rUx9sxMLF8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
                          rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 09:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e3:54:ba:1f:73:9f:d4:bb:c7:a7:d6:22:0f:26:53:37:a0:ce:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
        Validity
            Not Before: Sep 20 07:56:59 2026 GMT
            Not After : Sep 21 09:00:59 2026 GMT
        Subject: CN=FDEF4B3349853D26B1A1F4F11E967AB6687CDEA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:a5:80:99:16:7d:f0:08:61:4a:f1:bd:d0:
                    df:88:27:5d:69:4d:39:8f:34:b6:27:6f:a1:ec:b1:
                    05:c9:f9:1e:c2:cb:46:de:71:80:24:cd:1b:93:0f:
                    f4:56:bc:4e:d3:2f:89:d6:28:11:81:5a:41:75:32:
                    2f:81:58:d6:3a:ae:72:1b:6e:64:f6:06:e5:c6:43:
                    fe:bd:56:5c:fb:e4:32:5f:c8:d0:2b:07:bb:5d:8c:
                    6b:f3:2b:ff:e5:f7:80:7a:69:61:6c:ad:a3:a5:d0:
                    8c:c0:06:5d:2c:d9:f2:6f:c3:03:7d:64:98:1e:d4:
                    e1:e6:5f:69:46:fa:b3:16:ad:67:b0:dd:a0:1e:be:
                    78:b8:d7:59:3c:a3:80:c5:b3:5f:cf:38:fd:39:b0:
                    61:9d:ab:76:a7:32:18:4e:cd:13:9c:74:ff:13:2e:
                    50:f8:a7:f7:5a:6a:c4:a4:45:98:a2:11:0a:eb:0f:
                    79:9c:06:5a:6f:92:53:24:c4:ac:23:6c:8e:8d:24:
                    c8:9c:71:3b:55:a6:c4:d7:ba:75:50:5a:12:0c:55:
                    d8:c4:24:70:1c:e0:07:d7:c0:34:4a:22:9e:ac:e7:
                    1a:93:9f:80:ca:c0:9b:dd:b9:df:a0:31:36:08:eb:
                    c0:9d:92:a4:a6:43:4e:f9:f8:8e:c2:03:5f:23:13:
                    40:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EF:4B:33:49:85:3D:26:B1:A1:F4:F1:1E:96:7A:B6:68:7C:DE:A7
            X509v3 Authority Key Identifier:
                keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:35:dd:83:cd:e1:2d:e4:3e:28:08:d4:22:80:de:1c:1a:3b:
         54:cf:b0:46:91:f3:c8:69:3e:8e:e5:c3:0e:ab:fc:0a:6d:ac:
         53:ff:6e:88:72:41:4a:7c:5f:85:7e:6d:02:7f:f8:fc:c1:48:
         53:7e:a3:ce:a2:57:f5:3a:50:54:c9:ae:46:2a:7d:23:eb:0e:
         c6:72:40:85:11:46:bf:5c:dd:90:4f:6d:0d:3d:9d:a2:40:4b:
         fb:3d:e5:e8:e4:0c:09:bb:c6:1d:59:b6:ea:9d:ab:e9:f0:70:
         ab:d6:80:70:ee:b2:37:08:61:21:eb:35:55:41:6d:ae:83:50:
         f0:78:85:47:92:21:a1:00:1a:3f:b5:c9:0d:9a:46:bb:2a:a3:
         a7:44:e0:99:b6:41:61:25:4d:e2:ba:17:22:b2:21:ff:fb:64:
         bc:f6:9a:1c:07:ab:fd:f6:61:8b:e7:db:22:0d:d5:81:7c:58:
         83:f0:d9:ac:4c:f9:e3:4b:7e:e2:00:b4:ba:79:18:35:aa:e7:
         9d:93:69:86:5b:14:b2:b4:6b:05:dc:57:54:d0:55:ac:0b:bb:
         8c:00:0f:da:2f:43:dd:32:d6:c7:7a:95:3e:a0:5f:cc:4b:13:
         01:fe:f5:86:67:4b:a6:6d:eb:65:63:4c:26:59:54:07:5c:e4:
         2c:11:00:db
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNONUuh9zn9S7x6fWIg8mUzegziowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk1QURFOTVDRDM5NzEyNjQ1Mzc5MzRDN0E0MDYxRTJG
Q0E2Q0NDMjAeFw0yNjA5MjAwNzU2NTlaFw0yNjA5MjEwOTAwNTlaMDMxMTAvBgNV
BAMTKEZERUY0QjMzNDk4NTNEMjZCMUExRjRGMTFFOTY3QUI2Njg3Q0RFQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1TKWAmRZ98AhhSvG90N+IJ11p
TTmPNLYnb6HssQXJ+R7Cy0becYAkzRuTD/RWvE7TL4nWKBGBWkF1Mi+BWNY6rnIb
bmT2BuXGQ/69Vlz75DJfyNArB7tdjGvzK//l94B6aWFsraOl0IzABl0s2fJvwwN9
ZJge1OHmX2lG+rMWrWew3aAevni411k8o4DFs1/POP05sGGdq3anMhhOzROcdP8T
LlD4p/daasSkRZiiEQrrD3mcBlpvklMkxKwjbI6NJMiccTtVpsTXunVQWhIMVdjE
JHAc4AfXwDRKIp6s5xqTn4DKwJvdud+gMTYI68CdkqSmQ075+I7CA18jE0AzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/e9LM0mFPSaxofTxHpZ6tmh83qcwHwYDVR0j
BBgwFoAUWVrelc05cSZFN5NMekBh4vymzMIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjdkOWQ3Y2ItNmNmYi00ZGUwLTlkYWEtZDIyMmI3YTg5MDcyLzAvNTk1QURFOTVD
RDM5NzEyNjQ1Mzc5MzRDN0E0MDYxRTJGQ0E2Q0NDMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81OTVBREU5NUNEMzk3MTI2NDUzNzkzNEM3QTQwNjFFMkZDQTZD
Q0MyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjdkOWQ3Y2ItNmNmYi00ZGUwLTlk
YWEtZDIyMmI3YTg5MDcyLzAvNTk1QURFOTVDRDM5NzEyNjQ1Mzc5MzRDN0E0MDYx
RTJGQ0E2Q0NDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMI13YPN4S3kPigI1CKA3hwaO1TPsEaR88hp
Po7lww6r/AptrFP/bohyQUp8X4V+bQJ/+PzBSFN+o86iV/U6UFTJrkYqfSPrDsZy
QIURRr9c3ZBPbQ09naJAS/s95ejkDAm7xh1Ztuqdq+nwcKvWgHDusjcIYSHrNVVB
ba6DUPB4hUeSIaEAGj+1yQ2aRrsqo6dE4Jm2QWElTeK6FyKyIf/7ZLz2mhwHq/32
YYvn2yIN1YF8WIPw2axM+eNLfuIAtLp5GDWq552TaYZbFLK0awXcV1TQVawLu4wA
D9ovQ90y1sd6lT6gX8xLEwH+9YZnS6Zt62VjTCZZVAdc5CwRANs=
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:32:48 2026 by rpki-client