Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft
File:                     4242BEFAB7FD9E772FB16847C540331384EE1024.mft (raw, json)
Hash identifier:          pnF6WZPUz6xlUHpy470cZ6namdMWiC10uoD6o/h+RD8=
Subject key identifier:   10:43:F5:4D:F0:6D:7C:F7:3C:E5:9A:6F:38:8B:8E:3A:EB:01:F8:23
Authority key identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24
Certificate issuer:       /CN=4242BEFAB7FD9E772FB16847C540331384EE1024
Certificate serial:       4118FBE94B795F6FA2D759648EB6B672CBC6F493
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft
Manifest number:          0106
Signing time:             Tue 10 Nov 2026 08:16:28 +0000
Manifest this update:     Tue 10 Nov 2026 08:11:28 +0000
Manifest next update:     Wed 11 Nov 2026 09:54:28 +0000
Files and hashes:         1: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (hash: PfMnHFIZGrnZM82g+rsBwK7aW3WScriYgqF0KRQ2e7o=)
                          2: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (hash: Cw/pDcSCd6i3ij4/wfpHGGndxOrkB5cRBItVY3wwyXY=)
                          3: 323030313a6632303a663030303a3a2f33362d3438203d3e203338313534.roa (hash: yBBw20MUl3ywel5nMkYQ+sxWLo0uKsXTdelznoPGQgw=)
                          4: 3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (hash: ZoyEeEkhjYB7kmWXbankgfqmtUA/RIwDGWmG85rq3MM=)
                          5: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (hash: C/tjvABwEX3e3XuDh6lRQ/cpU/5HYFGHpATqucNO6pQ=)
                          6: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (hash: 8HTV0U7VPfbofWQktj6RT5pn5RIkHHJ7XlxCG7/lIR4=)
                          7: 3130332e39332e3232342e302f32322d3234203d3e2039383735.roa (hash: q/L6qPVBjB/7ek7BWj/Ivr62NYwkq62QBBVazz6XTPg=)
                          8: 3130332e39342e39382e302f32332d3234203d3e203233.roa (hash: v6AIf6Ye2mNisATf8VttDEk4MQh/WBoHi4P3BEg56Hs=)
                          9: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (hash: HZhaUoMvo6PbB0DDiHNG1KzdNqQKbOCBQCGJxhRr7TU=)
                          10: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (hash: nXrFney4rm86RaxvLz8FHxrD0eDVyhHMOFWuNh0v780=)
                          11: 3130332e39332e3232382e302f32322d3234203d3e2039383735.roa (hash: plHSoDJvYamH7d5XnPc3pI86A6QX6OqcLXJ9kpcAJNk=)
                          12: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (hash: tIIyaOJKHjPPuva/q/Aqc1Qh+BSiqDBH0wmDFkgmMzY=)
                          13: 4242BEFAB7FD9E772FB16847C540331384EE1024.crl (hash: YJVuKQQ4TcSq2u2fD9l9hzwtXpcZiwUYiKGiqgJi00U=)
                          14: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (hash: df7n82FEObULXOysxP6bG6yjwPocx8D3thReHoveLMI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl
                          rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 08:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:18:fb:e9:4b:79:5f:6f:a2:d7:59:64:8e:b6:b6:72:cb:c6:f4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4242BEFAB7FD9E772FB16847C540331384EE1024
        Validity
            Not Before: Nov 10 08:11:28 2026 GMT
            Not After : Nov 11 09:54:28 2026 GMT
        Subject: CN=1043F54DF06D7CF73CE59A6F388B8E3AEB01F823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:f2:00:ff:83:f7:a5:63:42:a5:04:ea:8e:
                    0e:0d:4a:1a:20:b8:4b:9f:b0:5e:69:15:fe:9b:77:
                    61:2e:17:37:1b:a8:d2:96:67:6c:37:11:b0:4d:8a:
                    2e:0a:4d:29:64:d7:02:94:01:99:e0:a1:07:50:f1:
                    44:b9:8e:1e:b6:e1:96:74:42:19:cd:3d:28:4c:85:
                    3a:45:8c:1f:9e:07:8d:89:41:ad:c7:f7:e6:1c:93:
                    3d:5f:b9:ea:6d:f4:3b:cb:69:40:ea:9d:ab:5b:26:
                    0f:f0:60:db:df:1d:74:87:8c:9f:e5:73:7d:1a:28:
                    4b:56:e1:7c:ec:59:6a:e9:2a:de:6d:72:ea:de:5b:
                    9e:ce:b1:2c:ff:24:8a:ac:1c:67:48:be:61:d8:0a:
                    6e:ac:9b:b3:36:65:19:ce:f7:9c:a2:f7:50:1e:6c:
                    70:db:fa:d6:7d:e7:39:97:11:26:cf:e7:58:2c:c3:
                    86:0b:b1:f3:77:57:cd:dc:2e:08:85:2a:0b:16:a1:
                    c6:ec:12:33:05:56:01:0e:b0:ce:12:ff:38:53:50:
                    6c:41:e7:df:8b:65:e2:5a:04:a6:d9:1c:ad:45:fa:
                    df:c3:9f:07:5e:af:11:7f:04:66:06:3f:b4:60:d5:
                    c8:39:b0:37:f1:9c:93:36:6a:95:2f:54:9f:af:8e:
                    77:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:43:F5:4D:F0:6D:7C:F7:3C:E5:9A:6F:38:8B:8E:3A:EB:01:F8:23
            X509v3 Authority Key Identifier:
                keyid:42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:9a:7c:da:3f:13:e9:fb:08:3d:a0:8e:2e:6f:4e:85:ee:62:
         29:b3:6e:ee:41:73:48:fa:10:82:14:36:9e:d6:3c:db:94:9e:
         15:63:df:11:82:0b:10:1d:d7:f7:ad:fa:10:d8:50:3f:9c:d1:
         e6:15:f3:e3:4f:1d:39:14:bc:15:41:7f:b9:c3:c4:97:7e:a2:
         8b:33:61:57:9f:f4:bf:7e:e7:0c:86:6d:d0:2d:96:94:11:8b:
         0e:da:44:f1:90:c7:0f:43:10:d9:86:74:6e:d8:5c:2e:15:8c:
         d5:37:64:c6:9c:72:99:9f:c1:57:19:a4:11:79:19:41:63:3a:
         52:c6:bf:45:44:71:c6:bb:67:6e:20:db:7f:c7:f4:07:d4:42:
         55:7d:9d:6c:a0:f6:59:0e:80:7b:d2:54:94:aa:a5:27:c0:02:
         14:11:bf:65:12:1c:04:eb:40:7a:b7:c0:4e:aa:49:36:85:91:
         2f:44:b5:5a:5a:53:2a:30:73:a3:99:25:23:37:4e:4c:fe:30:
         9f:be:b3:c1:0b:f5:2c:38:60:36:63:9a:4a:3d:7c:d0:8e:19:
         96:5e:64:32:7d:8f:6f:f1:19:74:e0:dc:fb:62:49:01:b0:b5:
         05:ca:02:21:0f:17:b3:c9:9b:5e:50:ae:9c:a2:d8:7a:06:ab:
         e6:08:53:b0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQRj76Ut5X2+i11lkjra2csvG9JMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4
NEVFMTAyNDAeFw0yNjExMTAwODExMjhaFw0yNjExMTEwOTU0MjhaMDMxMTAvBgNV
BAMTKDEwNDNGNTRERjA2RDdDRjczQ0U1OUE2RjM4OEI4RTNBRUIwMUY4MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTr/IA/4P3pWNCpQTqjg4NShog
uEufsF5pFf6bd2EuFzcbqNKWZ2w3EbBNii4KTSlk1wKUAZngoQdQ8US5jh624ZZ0
QhnNPShMhTpFjB+eB42JQa3H9+Yckz1fuept9DvLaUDqnatbJg/wYNvfHXSHjJ/l
c30aKEtW4XzsWWrpKt5tcureW57OsSz/JIqsHGdIvmHYCm6sm7M2ZRnO95yi91Ae
bHDb+tZ95zmXESbP51gsw4YLsfN3V83cLgiFKgsWocbsEjMFVgEOsM4S/zhTUGxB
59+LZeJaBKbZHK1F+t/DnwderxF/BGYGP7Rg1cg5sDfxnJM2apUvVJ+vjnfLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEEP1TfBtfPc85ZpvOIuOOusB+CMwHwYDVR0j
BBgwFoAUQkK++rf9nncvsWhHxUAzE4TuECQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWJiZmU3NzYtMDBhMy00Nzc2LWJmM2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFC
N0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4NEVFMTAyNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MjQyQkVGQUI3RkQ5RTc3MkZCMTY4NDdDNTQwMzMxMzg0RUUx
MDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJiZmU3NzYtMDBhMy00Nzc2LWJm
M2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMz
MTM4NEVFMTAyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAeafNo/E+n7CD2gji5vToXuYimzbu5Bc0j6
EIIUNp7WPNuUnhVj3xGCCxAd1/et+hDYUD+c0eYV8+NPHTkUvBVBf7nDxJd+oosz
YVef9L9+5wyGbdAtlpQRiw7aRPGQxw9DENmGdG7YXC4VjNU3ZMaccpmfwVcZpBF5
GUFjOlLGv0VEcca7Z24g23/H9AfUQlV9nWyg9lkOgHvSVJSqpSfAAhQRv2USHATr
QHq3wE6qSTaFkS9EtVpaUyowc6OZJSM3Tkz+MJ++s8EL9Sw4YDZjmko9fNCOGZZe
ZDJ9j2/xGXTg3PtiSQGwtQXKAiEPF7PJm15Qrpyi2HoGq+YIU7A=
-----END CERTIFICATE-----
Generated at Tue Nov 10 20:32:37 2026 by rpki-client