Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
File:                     7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft (raw, json)
Hash identifier:          Ydk5aq06klu1FkdEoQtIUHzVZfmuzfw3oW+TF5kdsoQ=
Subject key identifier:   DA:CF:7C:BA:D5:73:30:35:1C:CB:F1:B4:6B:18:77:18:C5:88:F4:B4
Authority key identifier: 72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
Certificate issuer:       /CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Certificate serial:       7C85AB667D9C18B6B800B1D9B83B4B2C5E9DF996
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
Manifest number:          FA
Signing time:             Tue 03 Nov 2026 12:59:23 +0000
Manifest this update:     Tue 03 Nov 2026 12:54:23 +0000
Manifest next update:     Wed 04 Nov 2026 13:03:23 +0000
Files and hashes:         1: 3131392e31352e3132382e302f32342d3234203d3e203435333036.roa (hash: LFWm0EcZVdKQjPdOneLLEFWhQfSN5g3Hf6HGlVqHaI8=)
                          2: 3131392e31352e3133322e302f32342d3234203d3e203435333036.roa (hash: 9+aWSYM5qln+RUD+mRbEe6cHjWT6vF9wbMbOOp4+klI=)
                          3: 7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl (hash: V4wnRsCohUXzza5iIDSjbViPdmDEBT+YrivrYQLEqaU=)
                          4: 3230322e39312e32342e302f32342d3234203d3e203234353238.roa (hash: gQkyLjmlcDwKcd2z2flGb/EQPjqBxcBo5tmP6HZn8gU=)
                          5: 3230322e39312e32392e302f32342d3234203d3e203234353238.roa (hash: dBMRidIHmDJpAXQnRb7chQxbiE61M8MP8MR8WVkobdk=)
                          6: 3131392e31352e3133302e302f32342d3234203d3e203435333036.roa (hash: 9qfFoBhiNHzp+LreK9FNs3OMOxGnSUcOBWmf2OnEzeE=)
                          7: 3230322e39312e33312e302f32342d3234203d3e20313532303639.roa (hash: 1B1TVPRMyjlvdSS5PDnfi+a+7Z7dzoKNS0Tsds8V9X4=)
                          8: 3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (hash: nJbUH2HeehvwuwWk5Ov+PdaciTDOUHySNuFD9i+1zG8=)
                          9: 3230322e39312e32352e302f32342d3234203d3e203234353238.roa (hash: mkTvztfJSo91nm3StwqhTN6opwgEonPpDJuRndRoQxg=)
                          10: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (hash: 45AAQ0VUPgUlngwmQc08RYng8iNJmTJSeNFh2/3cLi0=)
                          11: 3230322e39312e32362e302f32342d3234203d3e203435333036.roa (hash: lG+HzA8wMHoU2ig02QXs7ZI69uIfguD/pnzoKRQ6g1Q=)
                          12: 3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (hash: 7Txv9C0CleyV9C9DJEoBZ+ODaZPJvEcP4KfRLd5UzEc=)
                          13: 3131392e31352e3133342e302f32342d3234203d3e203435333036.roa (hash: kzOezK5pJW56638YkKVBJp7Z9zkDhQFuaxKkqL/Jq6c=)
                          14: 3230322e39312e33302e302f32342d3234203d3e20313532303639.roa (hash: tPMzPTpsoYjE3xnLVYHISDf6L6hBGhuk0Owt7ukQ+FM=)
                          15: 3230322e39312e32382e302f32342d3234203d3e203234353238.roa (hash: F6rhjUutKa29bUnm7/UxG094I13DCzG5bjD0FGBZBes=)
                          16: 3131392e31352e3133312e302f32342d3234203d3e203435333036.roa (hash: lnZUd67/u+q68sxl1PDDYAeJMb51iAPVqKyYmLq4L8A=)
                          17: 3230322e39312e32372e302f32342d3234203d3e203435333036.roa (hash: DtwOk127iWBAjH9E+urnQoMTdfBde8WniyvjqD7EDyI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
                          rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 13:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:85:ab:66:7d:9c:18:b6:b8:00:b1:d9:b8:3b:4b:2c:5e:9d:f9:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
        Validity
            Not Before: Nov  3 12:54:23 2026 GMT
            Not After : Nov  4 13:03:23 2026 GMT
        Subject: CN=DACF7CBAD57330351CCBF1B46B187718C588F4B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:15:ba:55:c5:d9:d9:b3:b9:54:2f:89:f6:18:
                    65:bc:d8:de:fb:a8:c1:e3:ad:ba:d6:75:f0:61:d9:
                    3f:de:f1:ea:d8:66:07:9d:d8:2c:c8:33:65:d1:6a:
                    a7:66:d2:40:ee:f9:a0:14:18:b4:cf:3b:71:ba:f0:
                    21:a5:b6:61:82:af:29:bc:82:46:fb:85:35:d5:09:
                    37:50:69:bc:4c:46:df:bb:31:9f:19:ca:9c:99:f5:
                    3b:f4:f6:14:8c:cb:69:1b:05:e5:8d:4a:d9:f4:87:
                    4d:bf:9e:d9:46:03:cc:22:5c:de:c9:75:5c:35:cf:
                    12:bd:9c:97:a0:87:1d:4b:b8:93:1b:07:d4:0b:dd:
                    4a:85:23:02:3e:e5:40:b8:14:cb:50:44:44:c6:f3:
                    13:59:e4:80:4c:68:f6:2d:24:60:39:47:9a:84:09:
                    78:5c:09:e7:7c:94:e4:76:ce:f3:1c:58:ac:dc:64:
                    0b:06:5b:8a:71:a2:50:6c:dd:68:19:a7:47:c7:4d:
                    75:19:22:99:7e:95:bd:0f:91:15:5f:6f:6e:4f:7f:
                    ac:3c:44:f4:0c:df:04:b7:37:9c:b2:c8:5f:81:d2:
                    5e:98:38:95:09:18:c9:01:a4:b2:ef:91:b7:d7:ce:
                    00:71:90:a4:85:05:42:26:43:ca:fc:c4:2c:3e:a9:
                    f4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CF:7C:BA:D5:73:30:35:1C:CB:F1:B4:6B:18:77:18:C5:88:F4:B4
            X509v3 Authority Key Identifier:
                keyid:72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:25:7d:fd:25:ff:e2:a4:15:14:64:26:ec:2c:a3:32:03:71:
         86:19:8a:94:4e:d7:68:0c:9b:c3:b9:19:1a:72:7e:94:1a:e4:
         45:46:93:ae:43:fa:ad:87:87:d7:cf:43:c8:3c:a6:51:5c:e5:
         bd:f1:9f:d8:00:1f:33:f6:b9:ea:9a:98:d3:77:b1:60:66:24:
         4f:04:fc:5c:04:ac:54:ae:90:ca:9e:70:4d:45:de:ea:09:cc:
         a4:e5:0f:e8:1c:ac:51:3c:18:e7:7c:ee:06:07:93:31:f2:b4:
         de:27:9e:d4:20:4e:91:d4:6c:83:11:9a:8a:b4:b9:48:44:a5:
         27:02:a4:e4:f7:13:6b:7b:d2:a7:b3:2f:7f:37:e4:08:2c:3c:
         cc:aa:51:ae:12:19:0d:44:63:92:86:47:9a:b3:0d:c7:7b:87:
         8b:14:01:a3:7d:ea:06:8d:89:f1:15:67:5c:21:a8:14:d6:44:
         8d:a2:76:2c:e5:ac:07:d2:32:cf:f4:32:60:dc:2d:36:e4:4c:
         a7:ba:db:f4:c8:38:53:62:22:35:9a:2c:1c:7a:17:7f:9a:0d:
         a7:72:ce:22:8c:fe:46:89:b8:fa:7b:eb:a8:4e:82:06:8d:26:
         80:0f:f3:58:c9:5e:a4:1a:7e:7a:d6:5c:c8:81:69:16:b3:d3:
         e8:b8:bd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:39:08 2026 by rpki-client