Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
File:                     F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft (raw, json)
Hash identifier:          aJMSYMe+dhJqsJW59WjXJxDztpV+LARdu3yPcCnf2M0=
Subject key identifier:   CF:B3:87:1A:EE:72:9F:31:1D:52:56:44:06:8C:61:18:4C:23:71:C1
Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
Certificate issuer:       /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Certificate serial:       6681A8E2BC1B427785AAB423D5C9DE1E190D9288
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
Manifest number:          13E5
Signing time:             Sun 20 Sep 2026 12:07:09 +0000
Manifest this update:     Sun 20 Sep 2026 12:02:09 +0000
Manifest next update:     Mon 21 Sep 2026 14:59:09 +0000
Files and hashes:         1: 3135312e3135382e38322e302f32332d3234203d3e20313534353337.roa (hash: /EQh7qiYa71VUGjV3Zf7X0Yu8GoGKgMCvZHxTHwAUIc=)
                          2: 3135312e3135382e3130362e302f32332d3234203d3e20313534343934.roa (hash: K7vtTo3ZnWeNKSiRcxh0HNGX04hgeoWacm4JGy+ef5A=)
                          3: 38352e3133372e32382e302f32332d3234203d3e20313439373334.roa (hash: N0muEr2CHWOJEJspJ/kOuNqS04weyVGfm19MrpSJyWw=)
                          4: F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl (hash: LIh5BStSlzyneYQ2NeiSYQ418jIRHdzGo7j04CH31pg=)
                          5: 3135312e3135382e3233342e302f32342d3234203d3e20313534353230.roa (hash: iMci771EdbngNC3JqCB+18eXRv37Op5CXUs80U5K+Yc=)
                          6: A65A7370A28DA71B1C11B89E09D51753C498246D.cer (hash: hD5ahI6OlNIrBidjDo0DQ9XivTLjzAFH4lRCuMtEAR4=)
                          7: 3135312e3135382e342e302f32332d3234203d3e20313432313938.roa (hash: Yh3luDDzif39OPZq/ydXU15pZHfs9Yd5WxJV7KII49o=)
                          8: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer (hash: akz8cOkupMnRthI9XgGjwyJVDXEBd1lUSYg8gBZ8c+Y=)
                          9: 10B2C61A3BF002D69AD557B8392E1F340162A168.cer (hash: fyrSVzmnddMaAd+arHcofsdcWO4KTqfA8zZGEF0lCrY=)
                          10: 38322e3135382e3133322e302f32342d3234203d3e203436303635.roa (hash: tOxxL7zn18yWZvrkhQ7IMkV5ohEbFf926lidGzIe3nY=)
                          11: 3135312e3135382e3230342e302f32332d3234203d3e20313534353232.roa (hash: 6Rb9zk4c8mH3/Ntw2KBKvfo60D8HuKArZgXhAaeD3xM=)
                          12: 3135312e3135382e31302e302f32332d3234203d3e20313331303735.roa (hash: yeV3c4+JX/2U+NVSQ5ggFfmzlSf0IlAdryc4tm9JKAU=)
                          13: 3135312e3135382e34322e302f32332d3234203d3e20313534343935.roa (hash: UsQcK7u4ovVqhPl6ugCIkTgy2rqWQpA+Gb6/heR8fMQ=)
                          14: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer (hash: 4chPlJCS5tv2jVHpl4IAEO/8bEck4j0VqO47ztGUA3c=)
                          15: 3135312e3135382e3234302e302f32332d3234203d3e20313534353237.roa (hash: +jxiZuVDvVJb0gZO08c6gVEhC1lfYEQPJlUGotAmVxk=)
                          16: 38322e3135382e3132382e302f31392d3234203d3e2039333431.roa (hash: D3tiG7/WB1jqD4U3AzWTuk20OEGadYU05eGOdX2UkMk=)
                          17: 3135312e3135382e3133322e302f32332d3234203d3e20313334373238.roa (hash: LPNPknC2NFYPKlKq/f2QVV/gjvYW791z3reDy4x4Tto=)
                          18: 3135312e3135382e33362e302f32332d3234203d3e20313432323330.roa (hash: 5mcrPh9MHfGIi1I+qEwVVt+3mqWDmCqBeWepTQidito=)
                          19: 3135312e3135382e3135302e302f32332d3234203d3e20313430333034.roa (hash: WAUQsk8BPPoFbx5MA2S1xVbqfmgAtZSVC1LK3kuO3bM=)
                          20: 3135312e3135382e39322e302f32332d3234203d3e20313534343739.roa (hash: Fxu5dqOkHqf+nR+l4cQxih7nooPvZm2mFv9De2wjgqU=)
                          21: CD846D565A6E2859697B59C438907050C12DE37D.cer (hash: 6CN90lTrLRk5hg+hADC3XlD75i0dqjeqZqyWiRET42c=)
                          22: 3135312e3135382e3138362e302f32342d3234203d3e20313338393930.roa (hash: kBt8Kp4JwweDOsaFz3GmG+No73NBqLlS83Y0K9cNVes=)
                          23: 3135312e3135382e38342e302f32332d3234203d3e20313534343737.roa (hash: nFPAkE+svtsToofPAiO76tMWQzs3OJa8mWKyMX15gsc=)
                          24: 3135312e3135382e3137362e302f32342d3234203d3e20313534353039.roa (hash: Z8QlcnGGWMb3mLI8mAjsnHX5gEeCYqOPhN++tvo/LoA=)
                          25: 3135312e3135382e3233362e302f32332d3234203d3e20313534353233.roa (hash: SiMvC9el0feR4cYI97OulC2Z+HjKvIlRUfDrhRxMhs8=)
                          26: 3135312e3135382e35362e302f32332d3234203d3e20313432323538.roa (hash: EUF8wkkH1dA0Jks3/L6nFJjsS984Dy7zYvHKOYevBQw=)
                          27: 3135312e3135382e3138372e302f32342d3234203d3e20313432353434.roa (hash: hM3eAzptPprh5ZTzzCeV9frMtEbvN9yPdu2L330+XpY=)
                          28: 3135312e3135382e3235302e302f32342d3234203d3e20313432353636.roa (hash: 2brR86KIIpUz1VkjLFOTporSbNlk9gOtAic+ZRIRT0Y=)
                          29: 3135312e3135382e3233392e302f32342d3234203d3e20313534353238.roa (hash: rsgLkVZ7ASQkDorSMSGJsm/yhf9qJ/kLL4PzZ1Ecuew=)
                          30: 3135312e3135382e3230332e302f32342d3234203d3e20313336373833.roa (hash: /kRr5xomvVX4DE0OT7ERSRijAPYCeFTAeQql/0sli2g=)
                          31: 3135312e3135382e38342e302f32332d3234203d3e203538383231.roa (hash: up9oUnYNNgnrnD8nBltWVRw6hQoOw00TwpTvFDksSiQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 14:59:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:81:a8:e2:bc:1b:42:77:85:aa:b4:23:d5:c9:de:1e:19:0d:92:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
        Validity
            Not Before: Sep 20 12:02:09 2026 GMT
            Not After : Sep 21 14:59:09 2026 GMT
        Subject: CN=CFB3871AEE729F311D525644068C61184C2371C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e1:52:66:e0:f4:3a:4c:af:5d:ee:61:fe:7b:
                    db:8d:0c:2c:19:2f:d1:9f:81:df:3c:c6:16:2e:c7:
                    45:0e:ed:f2:1e:fa:45:36:ff:67:e8:18:73:3f:ad:
                    69:b6:c4:8e:3a:3e:db:60:3c:5b:51:1e:e8:46:01:
                    37:22:f0:1e:ec:0f:39:d4:95:52:af:1c:8a:91:95:
                    eb:25:d2:5e:15:79:c1:c3:47:1d:7a:f2:4f:8b:ed:
                    dd:ee:29:9f:13:c2:e2:bd:f0:e7:6e:c0:cc:b1:81:
                    d2:4b:d2:1b:a1:f9:0e:32:a3:f5:3d:15:ba:01:43:
                    db:26:74:c4:58:ae:2e:4e:1e:11:fc:7e:06:b7:01:
                    6f:77:18:05:57:50:a7:2b:2a:93:af:4e:af:49:c0:
                    a1:8a:c4:28:7c:54:06:2e:a6:37:82:d1:ab:b8:00:
                    fe:23:76:f4:8f:ab:fd:22:d3:83:dc:69:82:22:f8:
                    fd:8f:e2:e9:73:86:1f:a5:73:c9:66:ed:fd:0e:7f:
                    71:f0:79:8e:a9:16:9f:36:60:74:ee:a7:af:b4:28:
                    13:89:45:21:e2:b1:d9:44:fc:4f:41:8b:f0:07:cb:
                    b4:6c:4a:a1:ad:d1:6e:db:30:7e:1e:ee:db:92:1b:
                    69:36:47:d4:f0:f8:cc:3b:70:a0:e9:c4:15:3a:f5:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B3:87:1A:EE:72:9F:31:1D:52:56:44:06:8C:61:18:4C:23:71:C1
            X509v3 Authority Key Identifier:
                keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c0:2b:5c:d0:f3:14:fa:58:42:f9:34:4a:2d:de:1c:c3:27:
         6d:33:73:57:f0:44:6e:c1:9d:67:69:7b:b2:f6:a6:bf:ec:db:
         ac:fd:37:82:72:2d:d5:cd:f4:2d:18:f8:c2:51:b7:d4:e0:cd:
         02:1c:b1:34:49:8a:50:06:83:eb:6f:a2:94:96:44:1d:c8:ba:
         9a:4b:2e:3c:70:85:fd:7e:3a:2a:98:c0:38:fb:b0:0b:c4:93:
         07:4d:75:ef:89:6d:cf:02:87:d2:05:7c:cf:c7:98:43:ce:ee:
         aa:61:f3:7d:fd:2c:e0:90:82:62:2d:ab:78:4b:53:c5:a8:f8:
         d8:02:78:6b:4a:5c:c9:29:57:7a:0b:c5:8b:88:75:67:fa:16:
         d9:23:50:98:3d:f0:38:fb:ed:1c:d3:0e:64:f5:06:95:93:39:
         b0:1b:98:08:c6:ab:9c:8b:b5:1f:e6:a8:e2:7f:52:79:87:31:
         83:c2:70:64:ee:27:b7:a4:17:27:ab:0a:91:e8:9b:a2:34:af:
         04:2e:e3:1c:2a:a2:55:1e:53:fa:0f:8f:83:76:d7:cc:29:7e:
         ec:c9:8a:a9:c9:1e:98:75:49:4f:14:69:23:ec:de:59:d4:06:
         8c:4f:79:fc:10:5c:93:a3:0e:a8:2c:97:eb:c2:05:39:07:fb:
         02:0f:36:33
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUZoGo4rwbQneFqrQj1cneHhkNkogwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhGOTI3REYzODQ4
QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzMB4XDTI2MDkyMDEyMDIwOVoX
DTI2MDkyMTE0NTkwOVowMzExMC8GA1UEAxMoQ0ZCMzg3MUFFRTcyOUYzMTFENTI1
NjQ0MDY4QzYxMTg0QzIzNzFDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANbhUmbg9DpMr13uYf57240MLBkv0Z+B3zzGFi7HRQ7t8h76RTb/Z+gYcz+t
abbEjjo+22A8W1Ee6EYBNyLwHuwPOdSVUq8cipGV6yXSXhV5wcNHHXryT4vt3e4p
nxPC4r3w527AzLGB0kvSG6H5DjKj9T0VugFD2yZ0xFiuLk4eEfx+BrcBb3cYBVdQ
pysqk69Or0nAoYrEKHxUBi6mN4LRq7gA/iN29I+r/SLTg9xpgiL4/Y/i6XOGH6Vz
yWbt/Q5/cfB5jqkWnzZgdO6nr7QoE4lFIeKx2UT8T0GL8AfLtGxKoa3Rbtswfh7u
25IbaTZH1PD4zDtwoOnEFTr1IKECAwEAAaOCAgUwggIBMB0GA1UdDgQWBBTPs4ca
7nKfMR1SVkQGjGEYTCNxwTAfBgNVHSMEGDAWgBT5J984SKuryoj/PZWh5bFnVMY6
UzAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzMvRjkyN0RGMzg0OEFCQUJDQTg4
RkYzRDk1QTFFNUIxNjc1NEM2M0E1My5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1
RjQxRDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIvLVNmZk9FaXJxOHFJX3oyVm9lV3ha
MVRHT2xNLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8zL0Y5MjdERjM4NDhBQkFC
Q0E4OEZGM0Q5NUExRTVCMTY3NTRDNjNBNTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzwCtc0PMU+lhC
+TRKLd4cwydtM3NX8ERuwZ1naXuy9qa/7Nus/TeCci3VzfQtGPjCUbfU4M0CHLE0
SYpQBoPrb6KUlkQdyLqaSy48cIX9fjoqmMA4+7ALxJMHTXXviW3PAofSBXzPx5hD
zu6qYfN9/SzgkIJiLat4S1PFqPjYAnhrSlzJKVd6C8WLiHVn+hbZI1CYPfA4++0c
0w5k9QaVkzmwG5gIxquci7Uf5qjif1J5hzGDwnBk7ie3pBcnqwqR6JuiNK8ELuMc
KqJVHlP6D4+DdtfMKX7syYqpyR6YdUlPFGkj7N5Z1AaMT3n8EFyTow6oLJfrwgU5
B/sCDzYz
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:23:17 2026 by rpki-client