Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
File:                     3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft (raw, json)
Hash identifier:          ryCwacZjR6Qzamq7XZE9KU340bjQeErWJhhxVn6c6uM=
Subject key identifier:   F9:41:1E:57:87:64:7F:72:0E:72:DE:E0:B2:3E:64:A5:AD:DA:3E:AA
Authority key identifier: 3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
Certificate issuer:       /CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Certificate serial:       1F26F276AD775370FC31B62BB88D488C71FAB9F5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
Manifest number:          D9
Signing time:             Sun 11 Oct 2026 05:13:19 +0000
Manifest this update:     Sun 11 Oct 2026 05:08:19 +0000
Manifest next update:     Mon 12 Oct 2026 05:53:19 +0000
Files and hashes:         1: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (hash: 5bkG3r6aOam2UYiAyDRHJLOMYGtAoc4TWZuSkWY6DW8=)
                          2: 3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (hash: Fncw6ejzrq4zIDml7sJv0ARYNNSdP3usP81sr9K6idM=)
                          3: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (hash: QO5w5W9cp8cI6poTkpuXpM9F3mhiRyQeqAdZ2Rfgw6w=)
                          4: 3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl (hash: wAah/PF+24VDsfCMuPeHNoc/w1kobkgiFcUfKzV/Ii0=)
                          5: 3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (hash: 8kncCReHuUftWwxEVQGeXIdZhJBx7PmiqOaqTEDqEqo=)
                          6: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (hash: J+zYKwZ+SXdC6vvuqB/51PHxQKuHMJSM0Dgp8PV/GWI=)
                          7: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (hash: P12FJNsFFyWSsRexfHM3kWn+2VKYuVhwIEq6slsbCcg=)
                          8: 3231302e35372e3230382e302f32302d3234203d3e203338313432.roa (hash: FGw2BZbAPXB424pj8gkt+KyDf13NBMafjHJz1qqtroA=)
                          9: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (hash: SZ3yY2r9mzkD9TfHT8RxuOv5AwUhsGvKGPEF8U53ZKI=)
                          10: 3231302e35372e3231332e302f32342d3234203d3e203338313432.roa (hash: tc07x6I5GlIGtQm74mFDwkPY7veOT+58YPaMpLFuMP8=)
                          11: 3231302e35372e3231322e302f32342d3234203d3e203338313432.roa (hash: 9Uh4g+j84Dsp+SQG55jiqFV/GXapMzCJHzdMQ8QVMIs=)
                          12: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (hash: mUUIB+/mtgQYA4ZJFgHA5FD7YbXkeVVQm5wqTm9otqY=)
                          13: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (hash: S43umrQnayZCpSzQYIAmH2LGDnCAWJ6VcBOOrq/ns7Y=)
                          14: 3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (hash: furgG1WGsI/SaHbEkYDIDFe9YchJUqhB/+OGElUaiP4=)
                          15: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (hash: Y9dwS9JvSaOl4mADQu18dqt11q2d+GtfYQ7OjGf2xvk=)
                          16: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (hash: dVzU+GqvAS7Wn+MjXVPbLdaACaAzf5gsplbVnIYe7RI=)
                          17: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (hash: ZJYJND6cBL2XfAoUPgiKsDkKfS/wfCExUcg8XPfgBm0=)
                          18: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (hash: FPgfsxknLRU1LHc9BebuH01+tHe4lP7NUuhwY6WPhmk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
                          rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 21:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:26:f2:76:ad:77:53:70:fc:31:b6:2b:b8:8d:48:8c:71:fa:b9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
        Validity
            Not Before: Oct 11 05:08:19 2026 GMT
            Not After : Oct 12 05:53:19 2026 GMT
        Subject: CN=F9411E5787647F720E72DEE0B23E64A5ADDA3EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7a:59:30:2f:9f:b2:41:19:90:74:c1:31:3a:
                    04:fe:18:4e:7c:ef:94:3e:f8:89:79:cb:f8:03:c2:
                    17:88:62:72:8d:12:cb:64:ac:22:14:31:e4:42:87:
                    cf:c3:e5:6d:d1:5b:55:4e:b3:67:54:31:f3:12:11:
                    7e:d2:0b:10:8a:25:39:c4:d6:5f:36:4c:c9:06:95:
                    ab:15:28:a4:7b:b9:1c:8b:0d:76:bc:ed:90:18:1c:
                    d5:01:11:e9:b1:b3:df:83:17:58:c1:c4:5b:e9:46:
                    52:79:2c:57:c9:73:f0:c0:36:4f:9a:ef:ff:9f:c8:
                    c4:0a:dd:50:dd:a6:2a:e3:a6:cf:b6:d8:8e:fd:78:
                    d4:64:36:59:63:3e:5d:85:7f:16:e8:c6:88:eb:0a:
                    38:63:66:f7:c7:dd:dd:e8:8c:6f:0f:3e:6f:1f:da:
                    1a:39:29:ed:a5:cb:5f:59:bd:45:25:4e:be:6a:8b:
                    ce:24:a9:0a:06:8f:65:1d:4e:95:06:d5:01:56:79:
                    2b:c5:ff:b3:3a:43:ed:71:ab:70:e0:3b:22:b0:b4:
                    ce:b3:18:24:19:8e:b9:d6:5d:f3:7a:67:a2:51:cc:
                    8d:68:5c:d5:a3:1d:a8:b2:d3:1f:03:e3:89:dd:69:
                    af:90:2b:0c:aa:e6:ec:2f:f8:e1:be:89:c1:9b:f6:
                    3f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:41:1E:57:87:64:7F:72:0E:72:DE:E0:B2:3E:64:A5:AD:DA:3E:AA
            X509v3 Authority Key Identifier:
                keyid:3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ff:98:68:61:f3:cb:e4:19:70:b8:11:7e:f2:92:ca:6a:1b:
         55:8f:f2:78:22:c3:93:92:d5:cb:ac:2d:2c:5d:39:3a:c2:ef:
         83:19:6d:65:8e:96:53:d2:3d:a4:e0:4b:33:2e:10:bc:d5:53:
         19:92:6a:ff:ba:9c:21:76:e7:3b:7c:21:fe:c9:17:13:55:a7:
         fe:64:e4:6c:52:05:19:7c:0b:c3:15:0f:4a:8d:12:5d:75:e6:
         00:04:a2:3c:46:69:4d:af:2a:55:02:b9:e4:28:58:0d:91:7e:
         5b:21:42:70:97:8f:98:7c:7a:6f:40:40:e4:4e:41:8b:11:b1:
         35:46:13:e6:99:10:1b:dd:f0:9d:59:76:7a:48:ac:c9:4a:a2:
         26:e6:bb:88:de:f5:8a:90:4a:19:07:57:17:7d:99:2f:6d:a0:
         81:65:6a:52:07:8e:38:43:61:51:9f:74:1a:03:2d:6b:08:2e:
         c8:cf:01:8f:0e:3b:9a:f8:12:0e:8f:f3:f6:52:d1:6b:ee:39:
         be:a0:4b:38:f9:6b:31:24:ce:ff:59:09:47:50:fe:3c:c2:2f:
         f5:4e:83:72:c0:0c:c8:29:1c:b6:eb:56:34:6f:bf:f8:a7:e7:
         c1:89:de:bc:31:47:4a:6d:90:a9:eb:f5:51:15:0e:9c:34:5e:
         d6:2f:21:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:17:47 2026 by rpki-client