Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
File:                     FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft (raw, json)
Hash identifier:          9ThpWBrM1+2hnD8OMvmfx4UPAlwXBAnTsS5YTi3ROv0=
Subject key identifier:   80:FE:9B:6D:9C:07:E7:CD:2F:8F:2F:99:8E:98:D0:B8:79:5D:9A:5B
Authority key identifier: FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0
Certificate issuer:       /CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
Certificate serial:       0D4213DB02201594D564EFE05835847013931381
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
Manifest number:          0107
Signing time:             Sun 15 Nov 2026 07:43:52 +0000
Manifest this update:     Sun 15 Nov 2026 07:38:52 +0000
Manifest next update:     Mon 16 Nov 2026 08:13:52 +0000
Files and hashes:         1: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: N6pzwLsiBlR6wqRJD6D9fkvMPk3uOH5gFPON6WGlnyk=)
                          2: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: 2buPsuKzxfp1+Z0b6pwCmXQGtunH/ULHNFjkRXke1WI=)
                          3: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: vL84NHT9sBntLdBIflCRLCGX23FgkMfHfpfueFsiLrg=)
                          4: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: NVWT14ucQ7dIq22SiHPSunVZu4zoTEVcOwCIXRvC+w4=)
                          5: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: OEfd+CS8IY4J+a4u9rVfClWlOVRIWkchPzHhfbtOYRo=)
                          6: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: xrvvTuKeO8SacVcwiQahe3cKGxd7wl87Mxfi5VJfmZk=)
                          7: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: yTgPRgQVzVx38fMyxtuZ61ES4EUBA+qjN64rJdc/fj0=)
                          8: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: scVRC0xmxqQdUfIKHLUXCSR/PlHSL7MJsFmhftXQ12o=)
                          9: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: EAjmUlvem7M4oK9zM5l2C5sj8QgctjDf21f5Jtu6r6c=)
                          10: FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl (hash: iEU2YLiTkr1bKRqKIbjQCCI2+DpAHiOYOJSC14nG5QQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl
                          rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 08:13:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:42:13:db:02:20:15:94:d5:64:ef:e0:58:35:84:70:13:93:13:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
        Validity
            Not Before: Nov 15 07:38:52 2026 GMT
            Not After : Nov 16 08:13:52 2026 GMT
        Subject: CN=80FE9B6D9C07E7CD2F8F2F998E98D0B8795D9A5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:81:81:e9:0d:4a:64:df:32:c5:7b:a0:c6:41:
                    51:de:cb:b6:e9:95:8b:b6:81:4d:70:b8:e0:7b:f2:
                    8d:c0:85:71:28:f0:91:69:6a:36:31:df:eb:37:b1:
                    c4:60:6b:90:e1:33:ef:18:42:68:3c:c9:ec:a0:80:
                    f2:ed:f9:a0:c3:d1:51:6c:d9:29:0f:49:96:b7:3b:
                    8b:10:48:4c:be:28:3b:d3:d1:2a:c7:33:7d:13:1d:
                    61:21:96:f4:51:f6:d1:6e:9f:90:fa:2e:ee:ad:8e:
                    1b:bd:e6:42:1f:97:f0:8a:74:27:9d:7b:60:4d:b5:
                    80:85:4e:af:eb:e2:55:30:35:84:da:be:c0:83:8c:
                    70:e8:6f:d3:0d:db:c4:e7:0e:29:aa:f4:e0:41:5b:
                    8c:04:25:c8:7d:c1:80:52:6f:02:8d:4a:97:69:8d:
                    87:56:8f:45:bd:5f:42:32:70:f7:0b:b0:6e:b9:1d:
                    98:3d:ef:1d:9d:c9:1b:f8:f7:fe:18:a7:43:b8:e3:
                    4c:74:5e:c5:3b:7c:6c:a9:0e:98:17:97:35:b0:1a:
                    1b:24:e9:33:ce:bd:53:2b:76:53:79:6c:fa:b9:8f:
                    a2:07:2c:39:25:25:64:80:ce:0a:fc:36:d6:9e:0c:
                    21:ec:b9:37:4d:d6:3c:39:eb:85:60:2c:3f:9c:7a:
                    5b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FE:9B:6D:9C:07:E7:CD:2F:8F:2F:99:8E:98:D0:B8:79:5D:9A:5B
            X509v3 Authority Key Identifier:
                keyid:FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:47:af:c1:86:21:17:93:02:64:7e:e2:2b:b1:a3:68:b0:57:
         93:41:6d:e1:70:2c:f7:12:b3:b3:1c:1c:55:bd:52:e1:f2:fb:
         ad:1e:bc:ea:bc:52:e2:d7:e3:b3:33:7d:79:f8:31:c2:d6:29:
         11:8f:ab:65:4b:b8:9e:47:60:09:da:84:d4:c7:17:e8:fa:07:
         fe:01:38:0a:cd:48:ba:f8:bd:5f:66:c5:34:14:95:63:df:8a:
         54:e6:53:97:e9:7d:a8:09:dd:32:10:8e:75:10:25:66:6b:9b:
         14:59:c6:ac:b3:03:fd:ed:c3:a8:41:0c:5d:a9:f0:29:94:65:
         f3:b3:10:5e:d2:1f:9d:05:6b:63:62:fb:9a:f5:1d:1e:a4:da:
         98:e6:e6:23:dc:78:b4:cc:90:2c:6d:b6:39:6d:f9:80:4b:67:
         e0:cd:a2:9d:ed:66:dc:f4:a8:1e:32:06:f0:f8:97:bb:0d:d6:
         4d:4a:3e:68:3d:b6:11:ee:56:d3:7c:e6:11:e2:c6:ce:24:26:
         3f:4e:4a:12:67:5c:33:c5:31:3f:b5:b8:f0:d8:63:15:04:2a:
         c1:cb:24:da:d3:2d:21:d0:a4:1e:95:a2:7d:3b:d4:19:56:eb:
         a0:74:1e:99:7c:e2:71:bb:64:e6:d8:4b:70:78:db:49:0c:5b:
         56:af:61:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:41:57 2026 by rpki-client