Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
File:                     595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft (raw, json)
Hash identifier:          VD5tU5HoOw9BCrR4UE5HrfkCBDI0tqt+UER+SsmgU/8=
Subject key identifier:   C4:2A:FF:3D:EB:51:E7:58:C3:7B:56:D9:AD:A7:29:61:0B:04:2C:B0
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Certificate issuer:       /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial:       7387DE5C527E281AE092CD000EECA89FAF5E363A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
Manifest number:          FA
Signing time:             Thu 05 Nov 2026 04:29:34 +0000
Manifest this update:     Thu 05 Nov 2026 04:24:34 +0000
Manifest next update:     Fri 06 Nov 2026 04:40:34 +0000
Files and hashes:         1: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: oIB0azCHKZZD4LUQLYG0Yqlb4f/9KSBQ4JwecEqWsUw=)
                          2: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: OsRtYTl/a4gBsIVTCYGY7UbsLX5kl3Dd0rUx9sxMLF8=)
                          3: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: eR32X6TB9dCvTyEj8xcbUe0oCJGcSbLwWM78VEF/mIM=)
                          4: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: YnpwLS3qShrtat5vFr4GKHpgIrsqYW7nhd/bbP/N9z4=)
                          5: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: eOdt05IAfcrKKZUnC2uIX6d/C9w0dr4HU6UCs9176ek=)
                          6: 3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa (hash: EZ+ZMEszQ0FNnAyScxrOoCf6N5MbYNv0AIqesnyNkY8=)
                          7: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: jO/LVsBGp/hIYW/T7V2ve/LWVG5Avg+yBl19oxnQ+Ok=)
                          8: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 0dcgbUIE4O45ZJeQQknhi7QzWy9JrD3T/y5JsTnfFC0=)
                          9: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: jNXjwR9NoJrp9dtiwnlZ8ZD+nF3IUWQs6hiqUnrS/Ok=)
                          10: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: kbsHwCF+kLPIM6LmBzd7ReTnbGaVE3pJ2tb1Y6LGrMo=)
                          11: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: pBXuYTqReMplN2AY6AolkobEan90DNcRX+8WnFHv1IY=)
                          12: 595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl (hash: b5zMQfjMJoYhm7X6MvL5NXaNoCZmrlC5V6ZlS1tQDVw=)
                          13: 323030313a6466313a316334303a3a2f34382d3438203d3e20313339323035.roa (hash: YbOI5aFhnLmVxr4CRLkG88zjm2Rznib1BrI9wVME05k=)
                          14: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: Gf7+JDdgZXaOoBD3FCXccmzSiqspLprw2RT0W6wNy+U=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
                          rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Nov 2026 04:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:87:de:5c:52:7e:28:1a:e0:92:cd:00:0e:ec:a8:9f:af:5e:36:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
        Validity
            Not Before: Nov  5 04:24:34 2026 GMT
            Not After : Nov  6 04:40:34 2026 GMT
        Subject: CN=C42AFF3DEB51E758C37B56D9ADA729610B042CB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:01:ac:6d:52:d6:65:25:bd:f3:66:f1:12:
                    d6:af:58:99:58:fd:57:ce:41:15:6f:2c:13:87:91:
                    7d:f6:93:d8:72:e1:76:45:ac:45:1e:ed:76:5f:57:
                    4b:27:04:b9:a6:dd:b3:88:54:37:ce:bb:51:80:42:
                    88:46:9b:eb:c8:96:da:2f:a7:22:3f:73:b2:6c:aa:
                    60:1b:5b:43:12:45:94:fe:7a:0f:7d:36:e5:28:7b:
                    53:20:cb:89:c9:13:2d:52:1e:81:c1:2d:8b:ec:ab:
                    56:96:c9:a5:48:d1:bb:bf:1c:de:fe:ab:4e:fc:b6:
                    e6:ed:b0:ed:89:ab:b2:ae:d2:9e:ac:90:f1:37:56:
                    df:0e:e0:cc:e3:ec:98:02:e1:eb:72:ab:da:3d:dc:
                    c7:0d:c7:73:56:c4:fa:3a:58:6d:3e:4a:56:ac:e4:
                    79:1f:03:64:31:22:f5:67:e1:2b:21:80:c5:e3:4f:
                    7d:c4:81:27:12:94:84:88:1b:4f:ab:2c:68:1d:1f:
                    e4:d4:e4:41:89:2a:03:36:8e:0c:39:de:bc:57:ba:
                    7a:ef:87:3c:f5:fb:34:b3:ee:00:da:e0:ac:f4:fd:
                    71:a3:08:2e:53:b3:5d:c5:b7:c2:c7:92:ce:76:27:
                    77:a1:b4:86:e6:29:61:22:54:e1:c4:d0:3e:4a:f0:
                    cf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2A:FF:3D:EB:51:E7:58:C3:7B:56:D9:AD:A7:29:61:0B:04:2C:B0
            X509v3 Authority Key Identifier:
                keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:fa:05:4e:34:e7:ca:75:4c:65:5c:b8:2f:88:dc:dd:01:75:
         e1:67:7c:62:42:8f:bf:36:0f:c3:77:f8:c3:ff:87:41:90:cc:
         a7:e9:c4:fe:3b:1a:07:a8:6c:b5:53:6b:9d:08:6a:50:44:49:
         3c:8d:bf:2a:55:cf:69:91:ba:69:b5:75:4b:af:39:75:7e:05:
         04:84:c9:71:38:0c:56:c2:4e:59:4c:b9:bb:b2:94:14:a8:22:
         40:8e:0c:50:d1:0b:6e:a3:71:a8:4d:01:da:ff:5a:f4:09:85:
         61:ed:a1:ad:72:0f:a7:51:a6:b2:f2:21:e0:5b:a5:45:d7:17:
         34:9c:59:ee:78:3f:60:5a:35:de:cf:ef:4d:19:3d:62:20:15:
         76:cd:48:d7:6e:20:f8:2c:1c:ab:53:03:b0:39:d1:00:2d:55:
         c0:ba:68:8b:1d:09:cc:7b:d7:50:53:4c:87:42:af:3f:83:fe:
         cd:fb:aa:7a:b4:3c:20:69:c7:1e:a3:8a:c5:32:68:74:a0:31:
         c2:30:72:8c:e8:85:5e:0c:4c:43:c0:96:eb:c6:14:e0:dc:83:
         8e:37:39:d7:4f:c6:eb:f5:50:77:fd:05:1b:38:88:fa:66:1d:
         0a:d3:86:f6:7a:7a:7f:74:8f:3a:09:ad:da:d5:14:64:83:ec:
         3f:31:6d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:55:53 2026 by rpki-client