Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft
File:                     955AF2D41C7C84BFE354F8648EE3271584452C79.mft (raw, json)
Hash identifier:          1cfLvOOFxdGlzzS4DrzbaS9b0CufZAPZdEuob03/wfU=
Subject key identifier:   2A:29:FA:E5:CA:CD:0C:F9:3D:1B:7B:B7:90:32:EF:A6:99:7D:CD:0F
Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79
Certificate issuer:       /CN=955AF2D41C7C84BFE354F8648EE3271584452C79
Certificate serial:       539FF922568A9F623111AE111F8B2E493D2C3085
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft
Manifest number:          F9
Signing time:             Tue 03 Nov 2026 22:25:44 +0000
Manifest this update:     Tue 03 Nov 2026 22:20:44 +0000
Manifest next update:     Wed 04 Nov 2026 22:33:44 +0000
Files and hashes:         1: 3131392e3131302e38352e302f32342d3234203d3e203338373533.roa (hash: tNLY8u6A/k+8Q7IpBt5/zBkDDVLxVjw0s0mCnDnTLQ0=)
                          2: 32372e3133312e302e302f32332d3233203d3e203338373533.roa (hash: Ig7Y8d/z0WMmUiX2C4TSUSSE7SskBjCHoUm5fDhMqMc=)
                          3: 32372e3133312e342e302f32342d3234203d3e203338373533.roa (hash: 5enVXM16FAeRB9TOwd6lPWeoTI/DTYje7oBg0vJxZHM=)
                          4: 32372e3133312e312e302f32342d3234203d3e203338373533.roa (hash: 0ujMcCdmbSHFPa+orQdB/PxCKLq7qgCAwvDBt82XgQ8=)
                          5: 323430313a616530303a3130313a3a2f34382d3438203d3e203338373533.roa (hash: vmxBRwNdmgzibUSpFXO78tLcpgGuVVRF9GhyVBoLpGs=)
                          6: 3131392e3131302e38362e302f32342d3234203d3e203338373533.roa (hash: dEcCBjd/hf/7KAnj0lD2p2pYFcHVtqE8eCbjlnZdwFc=)
                          7: 955AF2D41C7C84BFE354F8648EE3271584452C79.crl (hash: fj2u1/Sx3tXtg6qcgOBZxB90Cm2sw7YdjumRicTCutA=)
                          8: 34352e3131352e36362e302f32332d3233203d3e203338373533.roa (hash: zLsQw1FEcLnSjAXmcuRquA4wY30IBvPwX1kp1wMBj0w=)
                          9: 32372e3133312e332e302f32342d3234203d3e203338373533.roa (hash: bvIhfLTgotvNL+zfXHv7PfJdHYoUAw6+uQUpeSW7PKI=)
                          10: 3131392e3131302e38332e302f32342d3234203d3e203338373533.roa (hash: GZ7Uu5Cd3gy1df3D7E/NxnBWJ42fVnNtK0T5SRhmyoc=)
                          11: 34352e3131352e36362e302f32342d3234203d3e203338373533.roa (hash: qRwwmBsknDfOtkgT9DU89mbMerOBSmUMAPghIOd0vu4=)
                          12: 3131392e3131302e38342e302f32342d3234203d3e203338373533.roa (hash: PtWJtmRhyQ2yPeW/tjptx/9+8uOyz/tIzSW1+zYn5P8=)
                          13: 3130332e32392e352e302f32342d3234203d3e203338373533.roa (hash: 8M0+y9ZbVtGJPFkP1eoXpxiSSeAXHiaaKDfENMCVk0E=)
                          14: 3131392e3131302e38322e302f32342d3234203d3e203338373533.roa (hash: B63fkwaYfUz9tKQ4umMG4OVNdG59sSyO4xk3JON/0lE=)
                          15: 3131392e3131302e38312e302f32342d3234203d3e203338373533.roa (hash: P5gsR9Ip6eN3JpS9Gh6vSjhBTUMLL/b9godXTE25dwM=)
                          16: 323430313a616530303a3a2f33322d3438203d3e203338373533.roa (hash: DoHKNn4cb3vp5YQSHqZMksp+KViD5ZdqVczEp981xag=)
                          17: 32372e3133312e342e302f32332d3233203d3e203338373533.roa (hash: NHwGHAqnRCVzryyOErVysZqTBFNCvmT2DiyKJEQAiWs=)
                          18: 323430313a616530303a313a3a2f34382d3438203d3e203338373533.roa (hash: Yp4AlMzcVYyyGS+YY72MKg5SMHdwjMcmGiC3OjnXSZQ=)
                          19: 3131392e3131302e38302e302f32332d3233203d3e203338373533.roa (hash: +JMH80bsLIkCS5v6dDtyjKwltx2AvocnKHMKTZid7A0=)
                          20: 3130332e32392e362e302f32332d3233203d3e203338373533.roa (hash: sqwIaOfOaX1bFZfZsGIMM4uY/0vqfO+Fp9lx2PYjNcc=)
                          21: 323430313a616530303a616530303a3a2f34382d3438203d3e203338373533.roa (hash: dQ8tK3k6r/gWHgBqbXs5io1cy3kNSahbUhSfYpJudRo=)
                          22: 34352e3131352e36352e302f32342d3234203d3e203338373533.roa (hash: 0vqlBHk+tbUaLZBiq8YRfD6O3wmF77fIbLPXgx+HHxc=)
                          23: 34352e3131352e36342e302f32342d3234203d3e203338373533.roa (hash: DqzG24Vg8g2xb67c7EJxvNA8CN9DoJSM8FWnsHw+np8=)
                          24: 3131392e3131302e38302e302f32342d3234203d3e203338373533.roa (hash: mngZWmSvxtg8XkrQIx/PcuHaMVAzgmLQEy7bJgPf7l8=)
                          25: 3131392e3131302e38322e302f32332d3233203d3e203338373533.roa (hash: 8djfFrPJnnmzCe+N8ldBuVcXTxgsoV0diYsMqks41bU=)
                          26: 323430313a616530303a383a3a2f34382d3438203d3e203338373533.roa (hash: +arfhaqnvHvQCyZFxXy4+1jvqLY0KJc/vVBqN1YJZjk=)
                          27: 3130332e32392e342e302f32332d3233203d3e203338373533.roa (hash: FVSiUEDFZfDs+nDBEwOrT/i8cGsjdaNwXLqjPbA6tTA=)
                          28: 32372e3133312e352e302f32342d3234203d3e203338373533.roa (hash: jEBHuFwyUPhLyetq8AZ0j6MkcWDGQIC2Ql8z9hlScDY=)
                          29: 323430313a616530303a3a2f34382d3438203d3e203338373533.roa (hash: aStDmp310WlBA0VZRXWeth1+G9laMEVxTxGcBViXPnQ=)
                          30: 32372e3133312e322e302f32332d3233203d3e203338373533.roa (hash: ty7Vf4qg1FcZefRWuagmSuJdA+UHNoaYjSnBxf4OMW8=)
                          31: 3130332e32392e362e302f32342d3234203d3e203338373533.roa (hash: B9Lq0FKw6JB0oaVN4KMWdTKg9HTIN6KM/W4hJySHpXw=)
                          32: 323430313a616530303a3130303a3a2f34382d3438203d3e203338373533.roa (hash: oh5UARl100A3pOurULLJsgNfOZqW71w6y5q3NLG8JtU=)
                          33: 3130332e32392e372e302f32342d3234203d3e203338373533.roa (hash: T+6o3LsskU9pUcY2np2MTGtm0iO95SeTipZV3v378h8=)
                          34: 3130332e31362e3131322e302f32322d3234203d3e20313331373730.roa (hash: e/RIuX0l5WSZ+goWBIIIdVXX9DXWsnBm69sxMsOldTQ=)
                          35: 3131392e3131302e38372e302f32342d3234203d3e203338373533.roa (hash: ySHK+nWej5tqupmo6WHGptxjH/SwTNnndW9y6saEl2U=)
                          36: 32372e3133312e322e302f32342d3234203d3e203338373533.roa (hash: xfAoj7rZJvH0vMBOqYAZBDPQcNu1Ewca8iDluWuIjw8=)
                          37: 34352e3131352e36342e302f32332d3233203d3e203338373533.roa (hash: qA5izsUhsz93UcxLKKPJd1LGCBwCjh+E68bqfDzbYt4=)
                          38: 32372e3133312e362e302f32332d3234203d3e203338373533.roa (hash: jQf1kANsNHJX1nCJag+APOxLVQdFCjlHLHz5L35eSyk=)
                          39: 32372e3133312e302e302f32342d3234203d3e203338373533.roa (hash: e977YWIWm/BXV1wJwh2j4S4MW5uCFqiX6zu8rAGZQFA=)
                          40: 34352e3131352e36372e302f32342d3234203d3e203338373533.roa (hash: V3VFTjfw6JHfDwNHfBqmwL7xYBI+P1o53RpZqP/oI5k=)
                          41: 3131392e3131302e38342e302f32332d3233203d3e203338373533.roa (hash: IKby/u1RLpU+dZ8RtWXhozIHTlm5TTaBHizWUFj4J4s=)
                          42: 32372e3133312e372e302f32342d3234203d3e203338373533.roa (hash: 6lROY1Ar+V8VDfpGSML6QiI8zQ9aBGOnUU2JJVyM6Rs=)
                          43: 3131392e3131302e38362e302f32332d3233203d3e203338373533.roa (hash: VbGlDKmfsC8jdy2jwLyJDuEE3d/2hqyMHnfS47Nzs2E=)
                          44: 3130332e32392e342e302f32342d3234203d3e203338373533.roa (hash: tzKAtY8BxjnA04N/9bfLtmxGKRQm8v8NUAfl6dFIxI8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl
                          rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 22:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9f:f9:22:56:8a:9f:62:31:11:ae:11:1f:8b:2e:49:3d:2c:30:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79
        Validity
            Not Before: Nov  3 22:20:44 2026 GMT
            Not After : Nov  4 22:33:44 2026 GMT
        Subject: CN=2A29FAE5CACD0CF93D1B7BB79032EFA6997DCD0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dc:cd:fc:cd:f8:1d:39:e6:ab:88:3d:a8:a0:
                    eb:70:c8:87:6f:13:79:ec:6c:11:80:9a:32:23:f8:
                    9a:27:54:9c:7b:8a:fb:21:b0:f0:d2:f0:e5:f4:93:
                    05:fc:a5:87:00:82:fb:a4:df:96:29:ab:be:a6:f7:
                    90:41:3d:81:4b:f1:13:c8:26:6f:35:15:a0:2c:2d:
                    f2:c9:4f:ee:e3:9d:c9:54:1c:fe:d0:70:95:c9:11:
                    dc:84:5b:09:f9:5c:2f:a9:6e:7e:df:de:7c:78:31:
                    ab:b8:9d:5f:ae:95:07:3f:71:44:48:9e:30:e2:e3:
                    ed:39:b7:a3:27:79:7a:db:5d:21:7d:b1:55:71:e6:
                    c3:14:9f:46:46:c7:ab:59:39:46:cb:6d:01:25:93:
                    ef:e7:35:f2:74:af:7d:62:e0:b5:82:58:e6:ca:82:
                    39:b7:70:7b:67:77:23:4a:b4:57:89:73:f6:8e:df:
                    e9:e9:73:b0:06:02:7f:7d:20:c3:dc:41:12:b6:4b:
                    cf:f2:99:89:5d:b6:44:7d:12:61:76:a1:05:46:6f:
                    4d:7b:f9:98:3f:16:de:90:70:76:01:de:8b:e6:ab:
                    71:75:8f:8e:42:2a:79:d1:f4:76:75:14:45:fd:ee:
                    08:54:ed:ed:f2:54:19:da:ee:07:5e:45:ad:af:a9:
                    4d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:29:FA:E5:CA:CD:0C:F9:3D:1B:7B:B7:90:32:EF:A6:99:7D:CD:0F
            X509v3 Authority Key Identifier:
                keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:96:eb:e7:06:80:77:fe:66:23:6d:06:01:4b:5d:d1:a4:34:
         d3:ad:7e:29:55:66:ec:93:04:1c:2f:bb:0a:2f:f4:a9:56:97:
         3e:77:23:dd:0e:eb:b9:ea:54:29:dc:f9:d3:65:15:36:54:8c:
         d5:97:3b:d6:6c:1e:f6:58:8f:cc:ae:c2:b0:77:fc:85:d9:fd:
         4a:04:2e:dd:23:16:8f:e0:08:36:76:47:94:f4:5e:8d:eb:f6:
         94:ed:51:30:dd:a4:a5:35:e5:8e:a5:23:2b:bb:f4:06:fb:65:
         8d:10:70:54:7c:f9:e6:1c:57:5c:68:9d:99:cb:29:a3:ab:eb:
         5f:5d:7c:51:f2:cc:56:08:68:fa:da:92:96:a0:50:f0:b0:09:
         5b:50:fd:ee:fb:c8:8b:6f:dc:d6:2b:67:83:67:35:0f:05:ef:
         27:fd:72:31:b6:5f:bd:73:72:8f:26:3f:b7:09:7d:d3:08:6e:
         e3:a4:27:79:f6:66:a3:67:8a:b2:8b:2b:17:45:6a:b2:93:50:
         6b:f7:02:f5:6b:21:39:48:3a:f3:f3:f0:d3:ef:ee:48:c5:79:
         6b:58:fa:10:04:12:21:40:de:3c:79:05:43:58:0e:1b:2b:4e:
         60:be:44:22:63:6b:37:b3:27:36:c4:bb:d4:6b:92:4f:66:eb:
         94:22:b3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:31:05 2026 by rpki-client