Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
File:                     F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft (raw, json)
Hash identifier:          rvnuk8VP3+o257+jsC4wlkruJLguVGmAR+e0XuvsFsA=
Subject key identifier:   64:BE:65:7D:D3:94:60:C3:8F:9B:F7:42:1D:82:E9:2E:A2:90:43:0D
Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
Certificate issuer:       /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Certificate serial:       04524AE92DBB2E8CDAF6424EB5FC098D056AF4F3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
Manifest number:          09
Signing time:             Fri 08 May 2026 05:56:47 +0000
Manifest this update:     Fri 08 May 2026 05:51:47 +0000
Manifest next update:     Sat 09 May 2026 08:21:47 +0000
Files and hashes:         1: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: BS5YihTbZaw+pKOipVulLJrh9jJr2QhVUAXi4IwAkiI=)
                          2: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: CnBcLvoSDxEWtZrVDvNMamVH18oi4O/jyEx1Mt/oRO8=)
                          3: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: svAi0R5XEu9X4Ys1yfCbCgtQxluGGulsPQVUUn8ta/o=)
                          4: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: v5Ut+HnAU8B++keMYhHXiHiE6JJw8p9vB3wAUzitQ/s=)
                          5: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: X24eGimplx9OKKA54SDn3PccRcDMInDYSFbqOhNXsRk=)
                          6: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: kKPyA87cBNNbll+wZXw03s3L6LbkLTPgrzdBootFsHQ=)
                          7: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: Fg6XcYLXwzdBTEEbtVqZPj3EQucOEbeogJk1AzgGxAQ=)
                          8: F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl (hash: sXg7eZHOgq9P/wBS3N7gy52B3381n03WoyFYQ1FLxe0=)
                          9: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: XYH3WtUdslBTF725L3cOP4xs8XuxcDg3daKQgahU/wE=)
                          10: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: zrBSW8GC94FsmSWPx82P8/uTVF2HgCkoo/2hN3b+4hM=)
                          11: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: TN3/E7Y5c/nedOyTgYgff8HK90H5iShgi5mk+WZX5nw=)
                          12: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: Q18y495vHxKdcsVM96pc/tUI9Fl6GfmbLs035wir/JU=)
                          13: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: OvSsEeapnu+/oiKYJIcMYudEmuSdyI2NmSImX5jHoH4=)
                          14: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: apqtipmn5kmXtB7pKv4YlNHER/Ifv3+XPDXaeex3R9k=)
                          15: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: iFasMrZpPZhCJqBPOEUsMWSE1IL6XiDkC/rJS8HVQTo=)
                          16: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: esq0SPO+hAIrG7YQPAU2RMpBG0FEhngieVqoN2H1Z00=)
                          17: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: hVG5QJJlsbYPr5L1RCfsG/I/X2H5aI8Xq7RBOYv0G3o=)
                          18: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: bcUDOpCB0dNiYwZx7hB9TNsT/6Q2Z4ktB8wuICtWZXQ=)
                          19: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: bS5P/W+hj7so9J/fGjANaNnPonvylnMwWx29PNvc6E4=)
                          20: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: ZWNoTl3f/QBfpXE45HAww//4eS88vFgydiSHbe0zdhA=)
                          21: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: /XQUhdaX/lnH/4pSzymUR8gU8PBZoGnTr2RxGh6dJJI=)
                          22: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: ZMKJ6qvXBCnIGQclOHQhPWyyMM8hgD3nw2GXMro25Y4=)
                          23: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: V8AjpSzdxp8GDyMCHA7YtvW4QSVvG85ynWbgCsAEXEs=)
                          24: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: t5lI2fSBgF1Qk+xi/wexkm174c0g31j+0DtjwN72lnc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
                          rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 05:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:52:4a:e9:2d:bb:2e:8c:da:f6:42:4e:b5:fc:09:8d:05:6a:f4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
        Validity
            Not Before: May  8 05:51:47 2026 GMT
            Not After : May  9 08:21:47 2026 GMT
        Subject: CN=64BE657DD39460C38F9BF7421D82E92EA290430D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:55:8f:89:a1:23:4a:7f:31:a2:e7:b1:01:34:
                    56:22:88:8f:fb:8d:8f:6c:59:a7:73:a6:2a:d8:dd:
                    78:8e:7e:3b:db:82:c0:c8:1b:8f:fb:75:97:31:88:
                    d4:b3:c9:59:88:14:54:4d:89:e2:92:98:3b:ab:c9:
                    e1:e4:08:3b:ec:44:87:28:7a:29:b8:0f:6d:01:84:
                    12:25:c1:cf:ef:f9:db:1c:d5:bc:b7:f6:4f:0d:ae:
                    c7:a6:bf:8e:96:4f:32:e8:57:24:2d:71:3b:3b:91:
                    c0:77:da:23:ad:d7:a3:66:fa:78:10:79:d6:b7:59:
                    51:84:55:38:84:7e:cc:1e:f4:3c:54:f5:9c:14:b5:
                    0b:04:69:2c:0b:23:de:07:96:43:0f:37:03:f1:84:
                    ab:70:ba:26:47:a5:b6:e4:81:08:96:e1:fe:44:98:
                    06:2b:5f:21:41:bf:9c:e6:65:27:ab:b7:3b:df:f5:
                    23:c3:fa:45:98:06:a3:ea:2f:2d:47:83:79:95:2e:
                    59:5e:ce:8f:35:37:42:1d:4d:87:c9:ad:28:3f:e2:
                    2f:a0:2a:19:d0:29:45:33:8f:6d:67:cf:4b:db:2e:
                    be:e3:52:48:c6:66:32:d9:a8:db:7a:38:3f:cd:90:
                    9a:ad:18:4c:6c:d0:13:4f:eb:c2:af:59:83:f0:bf:
                    e2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BE:65:7D:D3:94:60:C3:8F:9B:F7:42:1D:82:E9:2E:A2:90:43:0D
            X509v3 Authority Key Identifier:
                keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:73:e6:b9:a1:96:f6:d2:33:e7:5e:d0:8c:e5:49:e1:41:2f:
         68:88:cf:36:ba:1f:f3:86:bb:c4:ce:e9:0a:03:37:fe:97:f4:
         49:f1:1b:38:64:76:2d:78:48:1c:f0:fa:8b:a1:2a:04:24:09:
         82:b8:3c:e6:13:ef:d5:7a:fc:a2:79:ea:1a:1f:c8:22:91:ad:
         03:63:d8:d4:be:b5:90:f9:b6:29:ff:82:20:0d:63:38:a6:cf:
         87:68:90:07:56:0f:d4:d7:6f:7c:60:8b:33:a2:80:d4:b1:5a:
         fa:52:f2:9f:fb:0f:a3:c8:c5:2b:d6:79:ab:80:31:be:0d:aa:
         52:14:a7:26:c6:33:05:e8:76:36:25:af:80:39:b2:19:8f:68:
         aa:ea:35:69:b5:34:dc:ba:e0:9c:0e:a3:47:3b:ce:b3:39:f0:
         74:67:3c:b2:56:e4:57:af:3a:be:2c:37:0e:8f:e7:32:0b:33:
         51:3e:99:b4:4f:66:71:8e:ef:07:f2:48:75:40:44:35:ef:d0:
         c0:e4:f8:aa:37:78:7e:a5:89:b7:63:77:22:1e:06:c3:68:1c:
         99:14:9a:24:97:10:d1:bd:b1:ab:be:33:76:49:04:4d:17:f5:
         93:dc:40:66:e0:a4:14:2a:5d:94:41:b5:26:67:a6:a5:34:ec:
         56:7e:ae:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 07:52:46 2026 by rpki-client