Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
File:                     0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft (raw, json)
Hash identifier:          N9JHYfTXHkWuFwZA8cYW5OgJl8ahj823Ztc0USQzOmw=
Subject key identifier:   F2:0D:37:3E:D8:C5:4D:21:50:3D:57:FD:F8:C9:14:FC:0B:1E:37:90
Authority key identifier: 0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2
Certificate issuer:       /CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2
Certificate serial:       632EFCAC5FE2FFD1FDD8E633EFE2B51DA3F62210
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 11:56:08 +0000
Manifest this update:     Mon 21 Sep 2026 11:51:08 +0000
Manifest next update:     Tue 22 Sep 2026 15:37:08 +0000
Files and hashes:         1: 3130332e32342e37322e302f32322d3232203d3e203436303631.roa (hash: HPMtJkG9vBmkfKDdQcScUoOmdbP+traQt1X9CJZPJyo=)
                          2: 3130332e32342e37322e302f32332d3233203d3e203436303631.roa (hash: G9sq4ErGZj+4CsLlGYQ96xB1AH1Q/5k7LHe36UaA1Pw=)
                          3: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (hash: prcWJfhlUErzmRWR1H7hkcJb4s+PiXSVs4vIyO1/46s=)
                          4: 3130332e32342e37322e302f32342d3234203d3e203436303631.roa (hash: 6afeRIJnDM/uUZHogbKxMoXG/M34lmpUP/58vATJWAM=)
                          5: 3230322e35322e3134312e302f32342d3234203d3e203436303631.roa (hash: ooDWixoDrf/cdih9Rb8FLtagmcLYMAGnpLpX2ocgURU=)
                          6: 3130332e32342e37342e302f32332d3233203d3e203436303631.roa (hash: YEcfoQjDpMi0GF8b5kmh9JJ3H1tnO76M1gzrmxVWaMc=)
                          7: 3130332e32342e37332e302f32342d3234203d3e203436303631.roa (hash: MyQFtjJqg7ZYwpERzdoDmD5jzoRErmzO01EIiv31fWg=)
                          8: 0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl (hash: dawIgwcpWsykJD8rpgbC/4R/+AkqJFP5+YewAuTkov8=)
                          9: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (hash: sfhfAHrl757lamU4yGIl09WzhCGt6COimj3NHeX2Rnc=)
                          10: 323430303a656134303a3a2f33322d3332203d3e203436303631.roa (hash: /Mgyo9ff3zy6arAcZsb+8DNgEw9iCUEDLwcPq3vZVTM=)
                          11: 3130332e32342e37352e302f32342d3234203d3e203436303631.roa (hash: k7wAQ0uD+feQhS7bp4KkJxo3uZUwNKoeGm20CJyRgyc=)
                          12: 3130332e32342e37342e302f32342d3234203d3e203436303631.roa (hash: 4mD9TjqePo/yOB3/Fiwn7z8Fd4y7bA97GyieYO2qTlw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl
                          rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 15:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2e:fc:ac:5f:e2:ff:d1:fd:d8:e6:33:ef:e2:b5:1d:a3:f6:22:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2
        Validity
            Not Before: Sep 21 11:51:08 2026 GMT
            Not After : Sep 22 15:37:08 2026 GMT
        Subject: CN=F20D373ED8C54D21503D57FDF8C914FC0B1E3790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:2f:f6:8d:82:38:64:60:89:0e:87:fd:b5:
                    7b:50:f5:b1:c6:d1:a2:3f:6d:c3:86:41:68:d7:0c:
                    fe:39:e3:6b:23:1b:0d:ef:d0:ba:8a:64:93:31:1a:
                    c9:04:97:9c:d3:3c:bd:6e:a7:e2:27:34:ec:2a:28:
                    cf:a0:37:ee:94:04:e3:c7:8e:62:91:91:8d:97:e1:
                    a2:f8:19:c5:7d:aa:d3:a9:58:32:42:35:d6:2e:58:
                    75:ae:21:2e:60:0f:d3:0b:6b:ba:49:93:21:50:5c:
                    1b:89:b3:e8:d4:c4:46:a3:09:e0:68:74:64:bc:c2:
                    54:81:49:53:de:dd:5f:cb:8f:cb:35:8a:58:a8:57:
                    4c:52:f3:b3:bb:00:19:5c:c5:3a:69:c9:e7:55:d7:
                    4f:01:dc:56:89:35:5c:10:14:f3:a2:ca:2f:b7:59:
                    6b:b4:1a:85:66:13:d2:8e:f4:b7:4b:0b:a3:7d:4a:
                    0d:78:48:66:59:05:56:ef:e1:27:78:f6:10:a3:4e:
                    0d:e8:f9:dd:86:0c:b6:4b:c6:ec:ad:e5:17:e3:94:
                    12:a8:e0:8e:d7:ca:21:58:9f:13:46:f1:e0:10:a5:
                    c2:93:23:dc:61:c4:df:6a:4a:bb:2a:6c:dc:93:88:
                    7b:9c:0b:f8:1e:14:b1:14:9f:97:70:0c:dc:e6:04:
                    2b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0D:37:3E:D8:C5:4D:21:50:3D:57:FD:F8:C9:14:FC:0B:1E:37:90
            X509v3 Authority Key Identifier:
                keyid:0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:cd:00:f9:93:d5:48:e7:d3:19:70:91:1b:4c:0f:4f:01:9d:
         4c:70:7c:aa:65:ac:17:7e:35:06:79:73:e9:a2:a7:1c:53:ab:
         41:02:ea:55:97:4a:94:1e:c0:95:2b:46:4b:6f:ef:f9:67:04:
         20:f6:f9:cb:0f:08:da:fc:a9:d0:9b:9e:35:93:72:a0:f7:10:
         fb:e1:46:df:59:4d:5f:4a:6e:bc:23:79:d8:fd:38:a6:28:e7:
         7e:74:d7:00:5e:cb:87:12:01:5c:3d:98:0c:b0:0c:b1:b0:0a:
         8a:c4:e2:e7:ef:40:5f:8a:0b:b3:eb:49:3f:b8:17:98:70:8f:
         86:65:8c:83:3b:fc:19:0c:3f:34:8b:18:6a:8c:ac:fa:97:b8:
         42:66:d3:5b:c0:26:23:42:d0:92:96:2d:27:91:ae:9f:6e:56:
         68:8c:f3:a0:e1:e6:fd:48:62:fb:32:99:72:85:2c:2d:1c:72:
         ed:54:4d:01:b1:aa:26:26:f9:d5:17:ee:9b:22:ae:f4:db:21:
         d3:b0:5a:d5:1c:37:51:6f:d8:08:ff:1b:e1:fc:48:e8:17:1e:
         78:3e:ec:74:24:ff:03:a4:33:a2:47:a5:fb:2a:e4:23:33:64:
         d1:b5:2e:36:6d:09:4b:9c:05:d8:5b:99:a8:c3:19:be:e0:0c:
         d4:74:c7:5b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYy78rF/i/9H92OYz7+K1HaP2IhAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEwNjY5NzkyODgzQkY3RERERUI4MkFENjIxNEUwRkE5
MDczMTNFMjAeFw0yNjA5MjExMTUxMDhaFw0yNjA5MjIxNTM3MDhaMDMxMTAvBgNV
BAMTKEYyMEQzNzNFRDhDNTREMjE1MDNENTdGREY4QzkxNEZDMEIxRTM3OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdLS/2jYI4ZGCJDof9tXtQ9bHG
0aI/bcOGQWjXDP4542sjGw3v0LqKZJMxGskEl5zTPL1up+InNOwqKM+gN+6UBOPH
jmKRkY2X4aL4GcV9qtOpWDJCNdYuWHWuIS5gD9MLa7pJkyFQXBuJs+jUxEajCeBo
dGS8wlSBSVPe3V/Lj8s1ilioV0xS87O7ABlcxTppyedV108B3FaJNVwQFPOiyi+3
WWu0GoVmE9KO9LdLC6N9Sg14SGZZBVbv4Sd49hCjTg3o+d2GDLZLxuyt5RfjlBKo
4I7XyiFYnxNG8eAQpcKTI9xhxN9qSrsqbNyTiHucC/geFLEUn5dwDNzmBCuBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU8g03PtjFTSFQPVf9+MkU/AseN5AwHwYDVR0j
BBgwFoAUCgZpeSiDv33d64KtYhTg+pBzE+IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmMzMjZmNGUtNjYwNS00OTZhLWI5ZjgtZDZlNzdiMjliY2M2LzAvMEEwNjY5Nzky
ODgzQkY3RERERUI4MkFENjIxNEUwRkE5MDczMTNFMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQTA2Njk3OTI4ODNCRjdERERFQjgyQUQ2MjE0RTBGQTkwNzMx
M0UyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMzMjZmNGUtNjYwNS00OTZhLWI5
ZjgtZDZlNzdiMjliY2M2LzAvMEEwNjY5NzkyODgzQkY3RERERUI4MkFENjIxNEUw
RkE5MDczMTNFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHDNAPmT1Ujn0xlwkRtMD08BnUxwfKplrBd+
NQZ5c+mipxxTq0EC6lWXSpQewJUrRktv7/lnBCD2+csPCNr8qdCbnjWTcqD3EPvh
Rt9ZTV9Kbrwjedj9OKYo53501wBey4cSAVw9mAywDLGwCorE4ufvQF+KC7PrST+4
F5hwj4ZljIM7/BkMPzSLGGqMrPqXuEJm01vAJiNC0JKWLSeRrp9uVmiM86Dh5v1I
YvsymXKFLC0ccu1UTQGxqiYm+dUX7psirvTbIdOwWtUcN1Fv2Aj/G+H8SOgXHng+
7HQk/wOkM6JHpfsq5CMzZNG1LjZtCUucBdhbmajDGb7gDNR0x1s=
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:58:19 2026 by rpki-client