Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
File:                     C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft (raw, json)
Hash identifier:          ifNI9iaCtTa4vL47y8q8rnHymH0JQs28SnIrEtNhQR0=
Subject key identifier:   49:5E:14:88:FD:D7:68:A9:D2:1F:46:90:CA:9B:0D:80:73:01:B4:6A
Authority key identifier: C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
Certificate issuer:       /CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Certificate serial:       372FBEB266934872A815A265BC52E935281E8222
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
Manifest number:          0100
Signing time:             Tue 10 Nov 2026 02:54:08 +0000
Manifest this update:     Tue 10 Nov 2026 02:49:08 +0000
Manifest next update:     Wed 11 Nov 2026 06:15:08 +0000
Files and hashes:         1: 323430353a633434303a383a3a2f34382d3438203d3e20313339393732.roa (hash: XchOovNPvuofEcM3x4SJA/BJsOE2uDXK+i/n28/FDPQ=)
                          2: 323430353a633434303a3a2f34382d3438203d3e20313339393732.roa (hash: GmyelAbGRQ5SP8uRB6uS1B5fEbf73mIPEGvTxHlDalw=)
                          3: 3130332e3134372e3234372e302f32342d3234203d3e20313339393732.roa (hash: 9v+/PAaAE3kB2jpL2nLAR6QUmzPRV+VwUIaowltdzjk=)
                          4: 323430353a633434303a313339393a3a2f34382d3438203d3e20313339393732.roa (hash: 7M/FpUDv0etwwu7ylJGJwAxNu3aekwI0m/HD51uF5Dg=)
                          5: 323430353a633434303a393a3a2f34382d3438203d3e20313339393732.roa (hash: F4qXlNeW0qMmxaj0GytT6W5hjXADsYd42e+bOrj63To=)
                          6: 323430353a633434303a323a3a2f34382d3438203d3e20313339393732.roa (hash: 6/n96Pug9V/OAfQQphzWdcVB4O+JA7BIOnJOjVVmWls=)
                          7: 323430353a633434303a333a3a2f34382d3438203d3e20313339393732.roa (hash: lue+qbDlTK8oVnigyB8upc57ElW1RteDV+iRS2CqRWY=)
                          8: 323430353a633434303a313a3a2f34382d3438203d3e20313339393732.roa (hash: +gpInYVfvDiUSg/ougsXZafgspK8aDfkWjNloNqtcJo=)
                          9: 3130332e3134372e3234362e302f32342d3234203d3e20313339393732.roa (hash: V0mbiV9kDw2cL8Vw5/to3TzMKA3DdBl/9Mpx2BO1J+s=)
                          10: 323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa (hash: MRewP/mtcTmJvmAEti0jSDsyTirqW1oh+hUXZAYwK5M=)
                          11: 323430353a633434303a653a3a2f34382d3438203d3e20313339393732.roa (hash: y68zFHghkSdjU7J3SSHx7a8FsoE9RE4A/YK0EM7QaeE=)
                          12: 323430353a633434303a353a3a2f34382d3438203d3e20313339393732.roa (hash: zxv50OB8eGnHw7wW65EFpQvLtNsIgME3y6GGTkZ9Hew=)
                          13: 323430353a633434303a3a2f33322d3332203d3e20313339393732.roa (hash: cPKV+RkV9s2A7YW1XiIN+pJgqnPcjdsqF0sGTYEVCuI=)
                          14: 3130332e3134372e3234362e302f32332d3233203d3e20313339393732.roa (hash: 4yca+vF1UEkWkMfF4Bm7NWEBGak9nR/PsFLSUJTZc44=)
                          15: 323430353a633434303a393937323a3a2f34382d3438203d3e20313339393732.roa (hash: 7Wb8fPONNSHduul65dwelIc5/5kXZaXJePQ0HGB2Z20=)
                          16: 323430353a633434303a363a3a2f34382d3438203d3e20313339393732.roa (hash: 7F3WHLtEBntcrb4Ca+IwDZrHiakbSxJ9WK4RTWEn7q0=)
                          17: C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl (hash: XZRKyy+YJeKbN7sOsuckMkney9UI+UM6U0Y+pwDVOFo=)
                          18: 323430353a633434303a343a3a2f34382d3438203d3e20313339393732.roa (hash: eSA0GQYXA6tg4+rkB8mxLDGNoUJioqVLKpYyhC0BS7U=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
                          rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 04:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2f:be:b2:66:93:48:72:a8:15:a2:65:bc:52:e9:35:28:1e:82:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
        Validity
            Not Before: Nov 10 02:49:08 2026 GMT
            Not After : Nov 11 06:15:08 2026 GMT
        Subject: CN=495E1488FDD768A9D21F4690CA9B0D807301B46A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:65:5f:17:ec:84:4b:0e:d2:a4:16:42:bf:62:
                    9d:57:31:91:98:85:0e:83:f5:ff:9c:b4:de:e2:20:
                    06:73:1d:48:09:e4:16:b5:f8:eb:8c:4d:09:c6:fc:
                    48:e0:da:97:e6:07:22:de:ff:d9:26:01:48:2b:e1:
                    03:86:28:4d:24:90:fd:46:98:ad:20:16:2b:25:cc:
                    86:f6:9a:c5:8e:e7:09:94:32:1a:58:fd:46:04:9f:
                    1b:45:0d:61:19:18:d9:96:e9:0e:a0:66:ac:f3:72:
                    36:4e:13:40:f5:95:9a:44:92:f7:56:62:bd:39:b9:
                    6d:fa:9a:13:f3:f8:41:08:ca:d7:b2:72:a9:53:8c:
                    c6:60:d8:80:4e:82:e1:0e:be:86:85:1b:51:d7:06:
                    4f:ba:ff:33:7a:db:b0:6a:8e:a5:5f:fc:b9:95:a7:
                    d8:cd:da:5b:17:7a:bb:9d:cc:27:e0:30:e8:3f:2a:
                    c1:fd:0e:d9:a5:cb:d1:b4:73:2a:9e:e7:8c:d3:bb:
                    9c:ad:7a:c4:1f:b4:e3:12:2e:c0:44:6d:c0:f2:d6:
                    97:4b:66:a5:40:9c:43:ad:05:ac:61:95:56:b6:1c:
                    48:ce:57:14:9e:95:4d:8d:5c:30:d2:64:94:b0:17:
                    74:ed:e9:80:42:32:29:da:18:08:8a:5d:33:f1:e2:
                    cd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5E:14:88:FD:D7:68:A9:D2:1F:46:90:CA:9B:0D:80:73:01:B4:6A
            X509v3 Authority Key Identifier:
                keyid:C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:99:53:ef:1a:00:c4:aa:fd:54:da:20:d8:f7:67:0f:87:e0:
         52:7b:cb:e5:b3:3e:5c:03:48:d7:91:11:6b:a4:e3:ac:a2:b0:
         fd:69:cf:8e:0d:bf:10:b9:c0:1a:c3:f9:9f:81:73:f8:ca:d7:
         aa:0c:df:88:60:78:a5:39:94:15:ed:44:83:bd:dc:67:d1:66:
         cc:f8:06:3a:68:36:aa:67:6e:a5:11:69:b8:69:00:30:69:f8:
         0f:57:09:d3:e0:dc:a9:42:c0:42:48:78:e4:ed:3c:b5:f0:bd:
         b9:04:cf:b6:cb:fe:65:5a:40:f7:b3:9a:1e:3a:06:eb:cb:8e:
         a9:da:45:56:79:6c:dc:87:50:db:35:24:7b:4a:fe:51:4b:3b:
         bc:9c:a5:4e:15:36:98:37:cc:bb:59:7a:44:04:1c:99:7d:37:
         e8:a7:c8:a1:44:7f:92:87:6d:3d:91:91:a0:a6:fb:1a:06:47:
         a8:ad:d4:ca:ce:8e:db:3b:09:91:df:5f:00:97:f9:ab:36:e7:
         0d:40:db:c3:c0:ef:e2:80:6e:24:68:54:f4:2e:3f:f3:ba:17:
         58:17:99:ac:23:c3:b7:94:bc:58:62:47:fe:45:81:7c:2e:d7:
         7f:c1:97:5f:90:5d:49:29:aa:a4:40:5b:68:c4:7d:7d:f1:ec:
         52:6d:6e:0b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNy++smaTSHKoFaJlvFLpNSgegiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFBNEFCNDA3MjZENENFREQ2NjNEMUMzNEVCQkU4MTdG
QTQ0QzQyQzAeFw0yNjExMTAwMjQ5MDhaFw0yNjExMTEwNjE1MDhaMDMxMTAvBgNV
BAMTKDQ5NUUxNDg4RkRENzY4QTlEMjFGNDY5MENBOUIwRDgwNzMwMUI0NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ZV8X7IRLDtKkFkK/Yp1XMZGY
hQ6D9f+ctN7iIAZzHUgJ5Ba1+OuMTQnG/Ejg2pfmByLe/9kmAUgr4QOGKE0kkP1G
mK0gFislzIb2msWO5wmUMhpY/UYEnxtFDWEZGNmW6Q6gZqzzcjZOE0D1lZpEkvdW
Yr05uW36mhPz+EEIyteycqlTjMZg2IBOguEOvoaFG1HXBk+6/zN627BqjqVf/LmV
p9jN2lsXerudzCfgMOg/KsH9Dtmly9G0cyqe54zTu5ytesQftOMSLsBEbcDy1pdL
ZqVAnEOtBaxhlVa2HEjOVxSelU2NXDDSZJSwF3Tt6YBCMinaGAiKXTPx4s2BAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUSV4UiP3XaKnSH0aQypsNgHMBtGowHwYDVR0j
BBgwFoAUwaSrQHJtTO3WY9HDTrvoF/pExCwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTllZWJmN2MtZmUzOC00NmE5LTgzMTEtZTA1M2ZjYTUwZGZkLzAvQzFBNEFCNDA3
MjZENENFREQ2NjNEMUMzNEVCQkU4MTdGQTQ0QzQyQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DMUE0QUI0MDcyNkQ0Q0VERDY2M0QxQzM0RUJCRTgxN0ZBNDRD
NDJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTllZWJmN2MtZmUzOC00NmE5LTgz
MTEtZTA1M2ZjYTUwZGZkLzAvQzFBNEFCNDA3MjZENENFREQ2NjNEMUMzNEVCQkU4
MTdGQTQ0QzQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB+ZU+8aAMSq/VTaINj3Zw+H4FJ7y+WzPlwD
SNeREWuk46yisP1pz44NvxC5wBrD+Z+Bc/jK16oM34hgeKU5lBXtRIO93GfRZsz4
BjpoNqpnbqURabhpADBp+A9XCdPg3KlCwEJIeOTtPLXwvbkEz7bL/mVaQPezmh46
BuvLjqnaRVZ5bNyHUNs1JHtK/lFLO7ycpU4VNpg3zLtZekQEHJl9N+inyKFEf5KH
bT2RkaCm+xoGR6it1MrOjts7CZHfXwCX+as25w1A28PA7+KAbiRoVPQuP/O6F1gX
mawjw7eUvFhiR/5FgXwu13/Bl1+QXUkpqqRAW2jEfX3x7FJtbgs=
-----END CERTIFICATE-----
Generated at Tue Nov 10 09:12:28 2026 by rpki-client