Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
File:                     69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft (raw, json)
Hash identifier:          46jJzeiKrWVctF5genNp02RDrB6zi2cQV587SKr4rnM=
Subject key identifier:   E3:71:CB:FC:5F:DA:7A:B6:C9:EB:E3:A8:53:8D:AA:C8:17:1C:F3:AA
Authority key identifier: 69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D
Certificate issuer:       /CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
Certificate serial:       2C75681D22746991C0F955D53E8AE9F2BA457AD9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 23:30:53 +0000
Manifest this update:     Mon 21 Sep 2026 23:25:53 +0000
Manifest next update:     Wed 23 Sep 2026 01:15:53 +0000
Files and hashes:         1: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4wept2TXybZZ4wiG2lTGiLdJKO6+UiKFaeUDDPHh8cw=)
                          2: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: cjnevU0RPzXKOiUMI3NVUlG7JVEKvWFFOPDxZT7zvG0=)
                          3: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: K2rJXObunbVeGUGmNLr3mwtBf8bkZX6YYlP1we9FNao=)
                          4: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: nMOG+6n+KLcdsuMUUFRu80+hEtB8VuNBpV2dkQOcKbY=)
                          5: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: WD6WZpSz8UlJoAksSemqODUiQFTWMxl5dgMtTtpGDTY=)
                          6: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: z+PDM1yaJVso/7iy8s/DYFAcGnjvjuuUqet4qK7is+I=)
                          7: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: 3ex6+M1Mdtsc4EjQuuzwJkgMQ9mnmgEROmDyzDTwmbw=)
                          8: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: G+PtaUwDO5r5hMHQJK1W4RibPlp9/hiGTwpahVF+du8=)
                          9: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: v3ZYWa8XXb+DFvl8j2lAq20FkxITb0PL+31yaFuYI5A=)
                          10: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: GY27HpG2WJNhWravikGEHrDTrV6iGWCs3DNw3rStizU=)
                          11: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: 9or0Aovq+itDbFnRJWHEFOrI8Bwnt6OpiiswZ3Ku8uc=)
                          12: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: S3vlimdvoGzFuAyUKAon3zByGdBKiazihI8BHyvXGC8=)
                          13: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: AXYnJAEv7z2tUD33+NaHrltSBMuBOMW49EVRFoSQzz8=)
                          14: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: JaMj7Mn/vinF3SqmQ06RkAsyunCmsAh4LYSl4fBlc2I=)
                          15: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: /ARpDaobiYOepxRHR1PDX5TMsKlHHu4YXqHKwEPmRk8=)
                          16: 69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl (hash: 4LBiHofyfgocN/19uTk2U4AvIbYseaftfKDqpSuOrp0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl
                          rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 01:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:75:68:1d:22:74:69:91:c0:f9:55:d5:3e:8a:e9:f2:ba:45:7a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
        Validity
            Not Before: Sep 21 23:25:53 2026 GMT
            Not After : Sep 23 01:15:53 2026 GMT
        Subject: CN=E371CBFC5FDA7AB6C9EBE3A8538DAAC8171CF3AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:cc:25:91:25:19:66:9b:6d:28:7f:6f:fd:
                    1b:7f:d6:ff:1f:8b:d4:53:11:9e:98:18:16:da:be:
                    aa:55:f2:85:29:5c:ce:32:68:76:2d:fb:a4:95:fb:
                    c2:34:fe:21:46:81:ce:f8:a2:fc:bb:30:06:fd:cf:
                    bf:7a:43:24:75:dd:6f:bf:85:79:d2:46:52:e0:82:
                    10:1c:f4:28:0e:69:70:b5:03:c3:05:34:a6:0f:a0:
                    54:0f:c9:70:88:72:44:2a:6a:43:74:11:81:27:24:
                    a1:5c:5e:ee:c5:ce:2c:14:fc:fd:48:69:24:6a:35:
                    ca:39:fd:16:b8:b7:95:92:12:7b:5b:95:02:26:a4:
                    95:6f:3c:0f:62:1b:45:14:fb:01:3e:b2:01:ba:d5:
                    24:aa:57:6b:d7:7f:24:ff:d1:3e:fe:07:5f:a4:ab:
                    b8:b6:ba:73:6e:1c:58:14:bf:f6:95:23:fd:61:94:
                    dc:06:61:81:6f:40:b2:8d:56:7c:28:0f:43:41:94:
                    bb:69:ed:86:d5:21:90:b0:2d:54:76:be:c4:4b:42:
                    3c:12:3e:36:6c:16:d8:85:f1:7f:f0:7a:b2:fa:56:
                    da:46:56:7e:e2:cf:e9:4e:9f:ad:83:40:01:55:0d:
                    ab:26:ec:fb:86:bf:b7:c5:a9:f4:dc:3a:38:34:b6:
                    ac:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:71:CB:FC:5F:DA:7A:B6:C9:EB:E3:A8:53:8D:AA:C8:17:1C:F3:AA
            X509v3 Authority Key Identifier:
                keyid:69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:89:0f:16:e1:60:40:50:72:76:99:a2:bb:fe:57:f0:4c:07:
         09:14:c2:bb:7e:30:8b:8d:59:f5:83:84:a3:b5:96:3a:d0:dd:
         97:e4:e0:55:b2:99:b7:69:aa:fb:d5:a3:f1:c8:55:62:ee:e2:
         c2:e1:0a:46:f5:54:1e:c9:9c:e3:34:e8:d1:e3:fa:b9:c8:22:
         65:fb:ad:d4:30:4a:67:24:7b:6f:9d:c0:f8:9f:8b:f2:81:d1:
         e7:34:78:c8:3b:dc:43:a6:8b:b0:a6:b9:4d:b2:8a:71:6c:5c:
         58:f1:7c:5f:46:9d:dc:72:d8:ab:b0:2b:dd:44:d1:a9:6a:c7:
         30:b8:f6:3c:b4:f7:80:1f:97:24:50:b9:f6:d6:be:21:6c:b0:
         79:ed:0e:12:f1:17:81:7b:42:60:7e:41:44:47:11:80:73:7b:
         ff:7d:42:aa:3f:dd:6b:03:99:5c:79:ae:f8:08:60:bd:3e:79:
         cd:5e:fc:3f:cc:42:32:f2:d5:98:c9:c3:42:87:43:38:b5:30:
         57:ae:a0:6b:f9:08:19:2f:ab:38:09:91:b2:79:12:23:6d:ac:
         ae:c1:eb:fc:d7:86:84:77:13:b4:5f:f7:18:14:40:af:64:76:
         7a:cf:1a:bc:f3:0c:5d:ed:7f:62:7c:52:d7:c3:3c:70:97:a0:
         2b:88:01:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:52:41 2026 by rpki-client