Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
File:                     1661480FF274E46E5E74274531EDCB741CA1C734.mft (raw, json)
Hash identifier:          8x2+s5T8CnsvLo3W8vdTo0q74j4xDbYHiLKGT5My+J4=
Subject key identifier:   34:14:C5:57:0E:65:DC:49:63:5C:06:09:39:2B:4C:97:DA:50:B3:2A
Authority key identifier: 16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34
Certificate issuer:       /CN=1661480FF274E46E5E74274531EDCB741CA1C734
Certificate serial:       6F8886AD4246FCBD0C938692C1A2E6BE89317B6C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
Manifest number:          E0
Signing time:             Sun 18 Oct 2026 10:27:34 +0000
Manifest this update:     Sun 18 Oct 2026 10:22:34 +0000
Manifest next update:     Mon 19 Oct 2026 12:54:34 +0000
Files and hashes:         1: 1661480FF274E46E5E74274531EDCB741CA1C734.crl (hash: ilZ4Cl1RuOwFxsiSElLqkUf3YmDrq2LS+xeXxzrUWz0=)
                          2: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: D5DehsQ30Cg+nOY8N0HK+YwXqyoPTcKwYKHkFyOMq6Q=)
                          3: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: yeyDp2n0wd57cuHVR90zOnbkcRU0QZljusHdKuOsPt4=)
                          4: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: 8uSlgnTbxGAzWNgbE1BKBFBhMHsG7F+ZnW0oGHCnk8w=)
                          5: 3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa (hash: 5Rh6b8BHsmWIHG3vGb6jLaqPvuwWEBxRJQJuBZZsDT0=)
                          6: 3232332e3133302e32322e302f32332d3233203d3e20313338313238.roa (hash: V75gkBW5l6X/+7vnO9PPI54r4jLFDkXk/84VL8kexoA=)
                          7: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: pwGyBzBOtEK35HSrAz+AVA7aiAsnsEM4hcBWRLigb/A=)
                          8: 3232332e3133302e32322e302f32342d3234203d3e20313338313238.roa (hash: jf6b7kXVa1dhZZRDA/RPJIPiAhtoDFAim3d84aPTFo8=)
                          9: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: Y0BQZtsB87a9/5oaZfRO5KllrRmXSjrLR0zXbqGB394=)
                          10: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: 8ZVpWuFxO9temB8Ho9FZTNXvwZzEzY2CqMkIIHYcFZs=)
                          11: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: IFRJrTg8onKZh/TaH9A8yf1wtYUjMcqN4WYH9m4UY4o=)
                          12: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: 6+4UoGWRmOvV9or9CsRz3CTlMpRVAi94wKc1SslyAWU=)
                          13: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: RJW8cxc5knQFd6ZsJTxIJMJPLrpi1nPKGRB3o32Vvrg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl
                          rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 02:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:88:86:ad:42:46:fc:bd:0c:93:86:92:c1:a2:e6:be:89:31:7b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1661480FF274E46E5E74274531EDCB741CA1C734
        Validity
            Not Before: Oct 18 10:22:34 2026 GMT
            Not After : Oct 19 12:54:34 2026 GMT
        Subject: CN=3414C5570E65DC49635C0609392B4C97DA50B32A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ed:8d:d7:6f:1f:eb:ad:b1:8e:d5:dd:a5:ca:
                    5d:d8:2f:90:db:02:34:53:a8:cb:6e:5b:1e:ea:5a:
                    45:7c:29:40:d6:3f:fe:be:17:10:a8:6b:20:c6:1f:
                    7b:7b:90:cc:c6:7a:51:f0:6c:97:11:df:f7:85:63:
                    35:03:0c:64:03:27:66:3b:02:89:1c:22:78:ea:ba:
                    c6:ab:76:58:d7:e8:6c:77:aa:20:97:f8:0b:3c:7a:
                    4a:4f:69:16:16:5d:bb:0f:01:d5:3e:66:49:25:b0:
                    4a:25:2c:5a:12:80:9d:36:b9:11:ff:fb:16:3d:2f:
                    dd:52:29:d0:47:ea:d8:02:0c:9f:b2:d0:3e:06:13:
                    6f:7f:bd:99:df:91:dd:6a:d5:46:8e:b8:83:9c:1a:
                    55:c2:38:cf:3c:77:e0:4a:e1:ad:5f:bb:46:fa:fa:
                    a4:dd:33:7f:39:59:fc:4a:48:85:02:85:95:7d:4b:
                    5a:07:a4:72:83:a9:63:72:8c:f7:8c:54:26:0d:60:
                    a4:aa:a0:ff:88:21:c5:f9:d5:82:00:0d:95:07:cb:
                    91:a9:d1:9f:82:e9:12:fa:04:bf:e5:71:21:59:d8:
                    b0:4f:e8:80:1a:4b:8a:e8:67:e7:ab:08:bd:d5:4f:
                    ea:d9:90:fc:64:36:f5:09:b4:dd:7d:9f:08:4d:a6:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:14:C5:57:0E:65:DC:49:63:5C:06:09:39:2B:4C:97:DA:50:B3:2A
            X509v3 Authority Key Identifier:
                keyid:16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:13:4d:91:c6:37:97:86:bd:8a:19:6f:a3:f9:16:74:62:d4:
         58:5b:33:4b:dd:1a:37:90:72:81:b2:07:9d:f2:7d:0a:23:4a:
         64:3c:38:e7:20:b3:b6:4e:8d:fc:6a:ea:ee:90:fe:a3:2e:2c:
         8c:6d:ec:99:40:fa:de:cb:3e:86:12:1b:ac:2b:80:92:91:5d:
         a8:df:79:4a:92:39:77:8f:8c:cb:b4:2c:12:59:db:56:19:96:
         0d:7c:0e:42:75:79:53:56:0b:f4:bb:df:23:9c:e5:18:09:24:
         c5:0b:ac:34:d9:cc:1b:a9:9d:3d:e8:b1:ab:2d:e0:81:8c:71:
         26:2a:55:db:4b:a4:47:5a:5f:db:a6:2f:da:85:7b:60:30:e9:
         be:5b:73:c7:0d:90:c6:ed:b4:5b:3e:4a:c5:9a:1c:ef:88:97:
         fe:40:b9:7a:80:ad:3f:18:f4:1a:71:b0:bc:d2:f5:ff:f8:da:
         a4:44:b2:21:f4:89:4f:ad:da:9a:e4:e4:88:51:79:de:0c:a3:
         5e:be:1c:bb:a2:bf:2f:6d:30:42:73:eb:5c:85:d3:9e:33:32:
         e8:cd:e1:43:5f:f1:d7:7e:0a:ce:85:1f:97:db:91:eb:cd:55:
         26:d9:a4:bd:f0:89:18:ba:eb:55:d3:48:50:5c:20:dc:f3:4f:
         15:36:76:36
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUb4iGrUJG/L0Mk4aSwaLmvokxe2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY2MTQ4MEZGMjc0RTQ2RTVFNzQyNzQ1MzFFRENCNzQx
Q0ExQzczNDAeFw0yNjEwMTgxMDIyMzRaFw0yNjEwMTkxMjU0MzRaMDMxMTAvBgNV
BAMTKDM0MTRDNTU3MEU2NURDNDk2MzVDMDYwOTM5MkI0Qzk3REE1MEIzMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP7Y3Xbx/rrbGO1d2lyl3YL5Db
AjRTqMtuWx7qWkV8KUDWP/6+FxCoayDGH3t7kMzGelHwbJcR3/eFYzUDDGQDJ2Y7
AokcInjqusardljX6Gx3qiCX+As8ekpPaRYWXbsPAdU+ZkklsEolLFoSgJ02uRH/
+xY9L91SKdBH6tgCDJ+y0D4GE29/vZnfkd1q1UaOuIOcGlXCOM88d+BK4a1fu0b6
+qTdM385WfxKSIUChZV9S1oHpHKDqWNyjPeMVCYNYKSqoP+IIcX51YIADZUHy5Gp
0Z+C6RL6BL/lcSFZ2LBP6IAaS4roZ+erCL3VT+rZkPxkNvUJtN19nwhNpnozAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUNBTFVw5l3EljXAYJOStMl9pQsyowHwYDVR0j
BBgwFoAUFmFID/J05G5edCdFMe3LdByhxzQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTg3ZDc5YmEtZmI1NS00OWE1LTk2N2ItMWVkYzc0OWQwMTI4LzAvMTY2MTQ4MEZG
Mjc0RTQ2RTVFNzQyNzQ1MzFFRENCNzQxQ0ExQzczNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNjYxNDgwRkYyNzRFNDZFNUU3NDI3NDUzMUVEQ0I3NDFDQTFD
NzM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2
N2ItMWVkYzc0OWQwMTI4LzAvMTY2MTQ4MEZGMjc0RTQ2RTVFNzQyNzQ1MzFFRENC
NzQxQ0ExQzczNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHkTTZHGN5eGvYoZb6P5FnRi1FhbM0vdGjeQ
coGyB53yfQojSmQ8OOcgs7ZOjfxq6u6Q/qMuLIxt7JlA+t7LPoYSG6wrgJKRXajf
eUqSOXePjMu0LBJZ21YZlg18DkJ1eVNWC/S73yOc5RgJJMULrDTZzBupnT3osast
4IGMcSYqVdtLpEdaX9umL9qFe2Aw6b5bc8cNkMbttFs+SsWaHO+Il/5AuXqArT8Y
9BpxsLzS9f/42qREsiH0iU+t2prk5IhRed4Mo16+HLuivy9tMEJz61yF054zMujN
4UNf8dd+Cs6FH5fbkevNVSbZpL3wiRi661XTSFBcINzzTxU2djY=
-----END CERTIFICATE-----
Generated at Sun Oct 18 15:43:22 2026 by rpki-client