Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
File:                     0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft (raw, json)
Hash identifier:          hvoMds02OU+rQOVA5W2LNvCapi+FB5lyaQsqjGRf834=
Subject key identifier:   84:87:99:95:37:CC:F9:58:B0:16:DD:50:62:75:4A:22:1E:9C:B3:5B
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Certificate issuer:       /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial:       4B38D6F067E9F4F737898678136B7635B3B192E3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
Manifest number:          F6
Signing time:             Tue 03 Nov 2026 22:05:26 +0000
Manifest this update:     Tue 03 Nov 2026 22:00:26 +0000
Manifest next update:     Thu 05 Nov 2026 00:32:26 +0000
Files and hashes:         1: 34332e3234392e3134332e302f32342d3234203d3e203535363533.roa (hash: qdZ5s/RPKJd1zWpn0OA8oOkj/7C1tf+45M/HrbWmTwI=)
                          2: 3130332e31312e39392e302f32342d3234203d3e203535363533.roa (hash: tgMOLRKHLk6AeegSxwagm//NkkSHrRBSK1EEwqWmlG0=)
                          3: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: aTFM/g9W9unRb/uZnofVUS9SPuRIxxAlxUviQTXpEaI=)
                          4: 3130332e31312e39372e302f32342d3234203d3e203535363533.roa (hash: QXGWZFsc9f71b86soW4vxADReeKw3WdzjpJwgfFCmCI=)
                          5: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: UIaj9X3lfb9VOoNSMQt3FPXNkkUvi5Cnj1c6MU0v1/8=)
                          6: 31342e3130322e3135352e302f32342d3234203d3e203535363533.roa (hash: t0eDmBySGGi3M6vpcaHWuK77uuciFXZsi3Bv2CvN2vw=)
                          7: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: M9ZVVTNiZw+8g7eKubBdE5bO++zVmlUills7R3bh+8E=)
                          8: 3130332e31312e39362e302f32342d3234203d3e203535363533.roa (hash: Ou8COM1+4QBZTfW7oPb8lvGJwrPW2b9YrMH3Sw2uBUo=)
                          9: 34332e3234392e3134312e302f32342d3234203d3e203535363533.roa (hash: Bc5YFcqICb+bh4tRwH4x3D73YQXCDozUg5+ESseoBXI=)
                          10: 31342e3130322e3135342e302f32342d3234203d3e203535363533.roa (hash: 2xEncKZB7XKpCLMYg2xigci5uudnJs/KRQjGyEQoyfA=)
                          11: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 7kCoo2bMrWx+NgrVIZTs8BnZTFozYrI1Yx+Eu/FeGxM=)
                          12: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: wL/pHkWZYlSpOpNVjgz7YgIvq4xTapnBHJvFGC824+g=)
                          13: 34332e3234392e3134302e302f32342d3234203d3e203535363533.roa (hash: 2k2h/lLJh4y28GreNoFDXEw9j2lKUZ4eXzUUiII60sQ=)
                          14: 3230322e35322e31342e302f32342d3234203d3e203535363533.roa (hash: +X2AKDLUi7EEV0pZEa+LT88OPryzNndvmpim+oMxEjk=)
                          15: 0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl (hash: moPJRX2bQ7i0fCtx6zbOTOsnD7owuykEuw9r5CfIgJ4=)
                          16: 3230322e35322e31332e302f32342d3234203d3e203535363533.roa (hash: RTunN5WvZPwzhuRDaOCGYBctUeKdomE1xa5xw2crzZk=)
                          17: 3230322e35322e31352e302f32342d3234203d3e203535363533.roa (hash: VHZA3TuBf4nLKV2pTnmQZgiFCXveS7LsJ0nVeKIEvQQ=)
                          18: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: HPeBWQRE7Nzk6K93OWZYdv8ZiGkz5Xm/tDmbLAYTX/8=)
                          19: 3230322e35322e31322e302f32342d3234203d3e203535363533.roa (hash: gb1IwBwgBC3bVtPwvnx/RPu7Ia6Ag29mP7Tz4sfDgHE=)
                          20: 31342e3130322e3135332e302f32342d3234203d3e203535363532.roa (hash: 4TVT+M+1OynDiPmgdYeocC5p7/VKvqBlsqaUMV+uRAs=)
                          21: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: 2FalOm0wymIUOR6b6eMABH/GePb1gQsHB2PkapVhslQ=)
                          22: 34332e3234392e3134322e302f32342d3234203d3e203535363533.roa (hash: nVmldivYscT9yIlUPfak+eYDC8xGQfjxxTwl5kvmf58=)
                          23: 3130332e31312e39382e302f32342d3234203d3e203535363533.roa (hash: 1Ar9cC6jZkLzAdlFLEVr635I57ciOymkfzzDC1PNwsE=)
                          24: 31342e3130322e3135322e302f32342d3234203d3e203535363533.roa (hash: 7m1lsj+R46fwy5EhA0AVTVR6lA5VWMrVBvJWrnKZtRo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
                          rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 00:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:38:d6:f0:67:e9:f4:f7:37:89:86:78:13:6b:76:35:b3:b1:92:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
        Validity
            Not Before: Nov  3 22:00:26 2026 GMT
            Not After : Nov  5 00:32:26 2026 GMT
        Subject: CN=8487999537CCF958B016DD5062754A221E9CB35B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:a5:82:0d:28:bf:b0:43:88:f7:02:ea:b8:
                    ae:00:be:50:84:5a:84:f8:a9:79:b1:70:c4:bb:82:
                    1a:41:79:e4:7f:b1:fa:88:b1:f0:8e:70:88:c7:29:
                    1e:f8:c1:30:77:d3:e0:1a:bf:f1:a9:f6:6a:b8:b8:
                    58:4c:6e:7b:2e:c3:4b:ea:1e:3c:3f:7a:52:bd:fe:
                    ea:7a:1e:0d:98:6c:79:61:11:43:57:a7:fc:6a:fe:
                    5a:ae:e7:49:1d:67:d0:27:46:e4:73:35:e6:2f:92:
                    20:98:e1:7f:c5:81:4d:e3:76:be:0c:84:b6:e6:4b:
                    c7:0a:ee:97:24:c7:c4:49:28:ad:40:5d:d8:81:f8:
                    fd:a6:9e:6c:c8:19:3e:eb:6a:81:a4:3a:39:59:6f:
                    39:db:62:0a:6d:20:a6:88:5e:9e:34:71:02:e5:b0:
                    3f:d2:12:8f:db:d9:c1:d9:58:a7:cd:57:c9:ca:6e:
                    e0:96:80:7d:c7:6a:f8:8b:ae:a4:c8:eb:e9:75:5c:
                    dc:1c:7f:41:31:88:04:7a:5f:2a:dd:e9:3c:0e:53:
                    a1:81:1f:25:02:13:a6:59:69:7a:84:48:0f:fb:df:
                    ef:a8:32:89:2a:ff:0e:f0:9c:25:c4:db:c3:85:7a:
                    fb:3a:8b:11:26:1c:ca:60:74:d0:52:d0:c2:eb:91:
                    9b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:87:99:95:37:CC:F9:58:B0:16:DD:50:62:75:4A:22:1E:9C:B3:5B
            X509v3 Authority Key Identifier:
                keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:89:18:ef:ab:6f:48:01:07:f9:84:bd:aa:73:96:1a:c1:ad:
         82:77:9e:5b:b8:ff:c4:ba:6a:c8:e7:a5:85:a1:28:99:b4:d6:
         55:14:47:2e:a6:a0:ae:ae:1a:5f:a5:9d:56:b3:0e:73:10:79:
         37:08:49:51:a3:15:05:bb:a3:cb:98:56:3c:90:bb:b4:8e:9b:
         8e:36:ed:69:1a:2b:ed:1c:5e:a8:5c:39:4e:ac:67:60:37:e9:
         cb:7f:95:aa:f4:75:24:26:df:bb:91:7d:71:eb:aa:24:cb:57:
         92:09:63:56:6b:60:dd:48:07:9a:4f:b1:a1:00:aa:fc:59:54:
         de:46:99:28:32:a3:56:d7:20:34:fb:c7:50:8e:82:a0:90:f2:
         47:0a:7e:55:ca:b6:e1:d8:90:88:3e:a0:7e:c8:79:3f:6d:94:
         74:d8:62:1e:3a:e4:6e:25:d9:db:b2:32:14:41:c9:fc:61:f5:
         f3:32:6d:f3:21:8e:b0:08:cf:fb:ba:ce:ff:84:12:db:4a:66:
         5f:c3:f1:34:a3:71:76:62:32:31:ab:6e:d6:9a:6d:d5:af:21:
         66:6e:3d:5d:6b:d6:03:f7:fb:5a:6f:30:22:ee:07:a3:8a:80:
         82:35:7d:dc:39:ea:f5:8d:dc:2e:3a:a9:05:f8:9a:c2:3c:ea:
         fc:9f:a9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 10:45:33 2026 by rpki-client