Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
File:                     CB0A606FD0642E68B5212AE751953E0B9A92959F.mft (raw, json)
Hash identifier:          CBinP8lwaMaOZWHnXN2olKR1ywZsqqUcnQUwfFCKEBw=
Subject key identifier:   47:EE:05:42:B9:CA:0C:E4:CC:01:50:0C:B0:6F:45:B7:A3:78:E6:88
Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
Certificate issuer:       /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Certificate serial:       695E283F84D859D5657194D36A4616967F638B50
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 04:21:57 +0000
Manifest this update:     Mon 21 Sep 2026 04:16:57 +0000
Manifest next update:     Tue 22 Sep 2026 06:14:57 +0000
Files and hashes:         1: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: 38tHcC/t7dfxoKy3b2Q3TXm2WXDZWbTD7Vr8HTgP8Ys=)
                          2: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: SV66tcdcW0NqPU/aqR6DolEDFMy8zRwKuiBnvzj6cUg=)
                          3: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: pmR02dkQafQv6lkZHXLfGyWNIfCNGG5yyCQI8aG1kiY=)
                          4: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: J+BYXWntjVPciAkV8uAI34vToZOhTHZAVg1OfJSHksA=)
                          5: CB0A606FD0642E68B5212AE751953E0B9A92959F.crl (hash: N9QKgXU+cKP26YKP5Qa0wMFPc2YWShvRfCln0hjPJpU=)
                          6: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: ywl7AR88MYiWygarcTKtVBDK6lhCOvMO3Qakyf62g7s=)
                          7: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: W5LcKD4qmyridtk0HHxoc6aUkig5ncs0tdqV8KTXwMk=)
                          8: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: fRTHSzlS/kkerP4SjyexReRSZRyzRj6VQ2sAHATlKhQ=)
                          9: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: 2cmHQI8Ii2ZFNygrFMRrShrlpj0r3MxaKMXRFrpSYWY=)
                          10: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: YBmRyy3cm/KALp/wtAif41lJP/42XGDuyciPr2frXjE=)
                          11: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: c+MUV7F3nnYwWrux4q4qrlxJQ1ToGP6qwbUAs1FDJW0=)
                          12: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: wcqHrqI3rqZ/cg1ulVOK7tcT1pphG3X5jdB33VoSub8=)
                          13: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: /7ofNppVXJF7mFM2WeV7e0wu+6LZLrIveqoSX8uAT6s=)
                          14: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: Z9BOHD/0KrdQ2ipOJFVWwYLdiKLHdOuinxG+lCgyfSU=)
                          15: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: oXW42mmGQUgoWkxhSR0n+zgivDmIH7l+dG/1UKZo3a4=)
                          16: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: zvyBHXFbCbQNnOHxvObPOxxpHvAaypqH5xRId3rVWNo=)
                          17: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: pwtW5wr69XSa+qZr3l0EvDhYLbCZs1lpWX5AfsziilE=)
                          18: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: 2M+FnZ1ZBmMQrnhoHJr000wngHRS8OoEKdb0quE5URw=)
                          19: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: NngQ0IQfUPOCY/8TWuIA/cVIqSFiTXs2casQNFQDWbs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
                          rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5e:28:3f:84:d8:59:d5:65:71:94:d3:6a:46:16:96:7f:63:8b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
        Validity
            Not Before: Sep 21 04:16:57 2026 GMT
            Not After : Sep 22 06:14:57 2026 GMT
        Subject: CN=47EE0542B9CA0CE4CC01500CB06F45B7A378E688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e6:58:ef:e5:a0:c2:71:8e:1b:5b:b0:87:45:
                    b4:23:98:ed:20:73:e2:09:d9:de:28:29:00:27:a5:
                    04:43:f5:ca:92:8c:71:11:ee:13:3e:0f:90:a5:fa:
                    bb:a5:dc:79:ca:41:d0:8f:ca:35:dc:9a:8d:9f:73:
                    1c:f4:d5:59:2a:0d:b7:99:06:fd:a3:a2:4c:a1:5b:
                    95:ca:cb:5b:fc:99:26:6a:f7:99:0b:6c:82:d7:37:
                    65:65:14:5e:27:ea:c1:8d:be:fb:45:f0:05:1f:35:
                    c2:e9:9a:0a:0a:3b:25:68:ba:4e:b1:55:dc:44:18:
                    69:bf:60:90:82:47:58:a2:17:5d:6c:95:81:6e:d1:
                    d0:2a:08:b4:1a:56:32:13:f8:93:ed:bc:db:c8:89:
                    12:79:d1:85:54:3a:f0:23:6e:0a:94:1c:4b:7c:94:
                    8a:58:b5:9f:e3:af:8a:ba:5e:ed:cf:51:58:3d:21:
                    55:b9:ce:d1:93:10:7c:79:1d:30:80:61:6a:26:eb:
                    dd:21:f3:35:9f:43:fb:b0:84:81:07:f4:70:b1:46:
                    dc:f9:f9:58:f3:e1:e5:e3:be:e1:8a:df:a6:6c:44:
                    39:de:e4:fb:f0:ef:fa:37:ae:43:0b:4d:2e:f3:d0:
                    7a:e8:b2:04:9a:6c:87:29:62:ed:b8:18:d9:82:c3:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EE:05:42:B9:CA:0C:E4:CC:01:50:0C:B0:6F:45:B7:A3:78:E6:88
            X509v3 Authority Key Identifier:
                keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ae:a7:d3:ab:09:26:90:c0:c8:ae:5c:38:23:83:ed:a4:8b:
         db:1d:9d:3d:b7:2b:e2:0e:1c:88:17:72:92:5d:f9:b7:32:ef:
         cf:43:8f:5b:55:db:5d:6a:4d:1e:d5:36:a8:3c:f7:9a:ec:b5:
         db:2f:1a:08:a2:8b:ad:c0:11:53:2e:09:c4:8b:26:70:20:8d:
         d5:4f:05:ef:65:1d:e0:1d:4c:5a:af:4d:3a:6b:f7:b8:e4:55:
         26:96:3b:36:6e:69:1a:ba:52:40:ef:c5:25:07:11:a4:2a:f9:
         e1:88:1a:f8:12:0e:26:33:ec:7b:56:90:6e:4f:6b:ef:6a:f2:
         e0:75:0d:b3:5d:4b:ba:7b:72:2d:22:3c:90:94:a5:13:91:5e:
         f7:af:3b:8d:fc:07:06:df:de:f2:9c:b6:ff:b9:a7:0b:c6:82:
         08:49:06:c9:14:9f:41:4b:da:21:f4:0c:cd:e0:36:30:09:13:
         8b:08:09:05:7b:05:d4:8e:7b:a1:53:1c:f4:8a:89:c8:2c:91:
         ec:bf:e1:6d:14:8d:a1:ea:67:a5:0b:e7:05:c7:80:41:70:d1:
         b7:fb:5d:a9:29:e6:03:bc:75:c6:a7:75:f3:51:38:7c:83:1f:
         d4:66:11:f0:52:98:59:e2:10:06:71:9d:66:6c:77:0d:72:a9:
         2e:73:04:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:42:47 2026 by rpki-client