Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/0A81694898CE419119C35D18D0184407C5732E00.mft
File:                     0A81694898CE419119C35D18D0184407C5732E00.mft (raw, json)
Hash identifier:          RBA1OUQEpAnL/C37JviqmJU4jfx5Yxa00G99IFP+Z2s=
Subject key identifier:   39:57:7A:E5:3B:7E:4D:55:59:7B:EB:E9:3F:73:D6:37:0B:7C:A7:AE
Authority key identifier: 0A:81:69:48:98:CE:41:91:19:C3:5D:18:D0:18:44:07:C5:73:2E:00
Certificate issuer:       /CN=0A81694898CE419119C35D18D0184407C5732E00
Certificate serial:       28E2284A2CC801493AF1A8AF232B74FB4277B2B0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A81694898CE419119C35D18D0184407C5732E00.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/0A81694898CE419119C35D18D0184407C5732E00.mft
Manifest number:          F7
Signing time:             Tue 03 Nov 2026 04:07:52 +0000
Manifest this update:     Tue 03 Nov 2026 04:02:52 +0000
Manifest next update:     Wed 04 Nov 2026 05:37:52 +0000
Files and hashes:         1: 3136302e32322e33342e302f32332d3234203d3e20313532383136.roa (hash: mVg+f0GQa8yORXdjVLeija5QuuIpHHtSMRvf8xSLYBY=)
                          2: 0A81694898CE419119C35D18D0184407C5732E00.crl (hash: YFQhZpgKquho0QsD/I/im20oiOuTAWPfzqyOjuaGZJ0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/0A81694898CE419119C35D18D0184407C5732E00.crl
                          rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/0A81694898CE419119C35D18D0184407C5732E00.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A81694898CE419119C35D18D0184407C5732E00.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 05:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e2:28:4a:2c:c8:01:49:3a:f1:a8:af:23:2b:74:fb:42:77:b2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A81694898CE419119C35D18D0184407C5732E00
        Validity
            Not Before: Nov  3 04:02:52 2026 GMT
            Not After : Nov  4 05:37:52 2026 GMT
        Subject: CN=39577AE53B7E4D55597BEBE93F73D6370B7CA7AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:c2:93:ef:87:5d:85:91:1f:5f:3f:60:ce:
                    7a:b6:5b:26:16:a5:a4:89:dc:1b:0e:8c:fc:46:f6:
                    37:f1:4a:5d:c1:2b:48:b7:c5:10:fa:ed:bb:5d:26:
                    c9:49:7f:99:b3:87:d1:1a:4f:5c:cb:c0:b0:80:14:
                    ea:8a:6e:f7:7e:cd:3d:a2:37:07:e7:8e:4e:1f:aa:
                    43:4a:d3:f0:00:ae:28:40:50:6f:1a:09:1c:21:5e:
                    35:df:0b:e7:e1:34:c4:ad:20:cd:5c:f4:5b:95:cf:
                    0b:a1:1b:57:c5:56:ef:f2:f4:53:60:be:3a:38:f9:
                    44:b4:1e:ad:d2:7a:33:8a:ec:9b:3a:b6:be:7f:46:
                    85:48:03:9a:00:f5:f5:ad:c2:4d:16:d8:93:c6:ca:
                    77:c6:78:84:c8:6d:8d:af:2f:60:a7:d6:00:d3:39:
                    df:00:8e:ea:66:0f:78:13:87:b9:5c:fd:95:f1:df:
                    a0:49:40:9d:f1:a0:bd:d9:cc:22:f1:8f:d6:fb:ea:
                    76:0e:49:f7:77:af:a1:dd:f0:23:4f:0e:7c:ac:f7:
                    7b:e4:a8:1b:76:28:b6:6e:e2:fd:4f:9f:b6:40:5d:
                    c7:55:76:4a:e5:c4:71:2e:8c:92:0f:72:5a:f8:fb:
                    91:f6:71:35:b2:06:45:f4:4e:3c:ba:95:60:e7:95:
                    2e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:57:7A:E5:3B:7E:4D:55:59:7B:EB:E9:3F:73:D6:37:0B:7C:A7:AE
            X509v3 Authority Key Identifier:
                keyid:0A:81:69:48:98:CE:41:91:19:C3:5D:18:D0:18:44:07:C5:73:2E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/0A81694898CE419119C35D18D0184407C5732E00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A81694898CE419119C35D18D0184407C5732E00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/0A81694898CE419119C35D18D0184407C5732E00.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:f0:5d:aa:ee:d4:fd:ae:a2:31:76:ac:15:d4:5a:71:79:24:
         03:71:48:da:2f:6e:c2:e5:ac:d6:cc:ba:bf:92:6d:c7:64:1e:
         ca:60:f6:62:20:5b:e4:12:bb:7c:92:a5:fb:f4:f1:a5:3e:60:
         ae:28:c0:14:d0:a0:94:e8:9e:35:d1:1c:90:96:a6:c2:1a:40:
         eb:47:f1:00:28:c7:d7:23:db:99:6d:32:71:f9:d7:dd:2a:6d:
         65:48:06:63:36:f4:62:e8:69:b8:a3:6e:09:7a:68:63:92:ec:
         44:bb:80:ec:5a:ce:16:be:5f:d1:b5:3b:e5:0e:05:2c:41:c5:
         25:b3:bd:b4:26:7a:f5:54:ca:59:de:1c:8a:23:6c:e4:f8:24:
         89:93:d5:90:a2:ad:1e:c1:ff:5e:c5:7f:13:eb:9c:c4:7f:82:
         b1:68:69:5d:c1:22:24:ad:8e:df:0d:e7:07:e9:72:a7:9b:11:
         60:1a:c5:f9:79:b8:5e:fa:49:9f:12:31:4e:20:c2:b8:ff:86:
         65:d1:11:29:8b:3f:ae:33:3e:20:cf:96:ed:62:4f:b6:b9:ea:
         fc:83:0f:6c:c2:e6:c5:98:cf:24:8f:3a:e3:74:bc:00:82:b4:
         66:2b:09:55:96:c6:65:46:07:40:f2:ac:e8:89:49:cc:22:f6:
         24:f0:72:1d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKOIoSizIAUk68aivIyt0+0J3srAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE4MTY5NDg5OENFNDE5MTE5QzM1RDE4RDAxODQ0MDdD
NTczMkUwMDAeFw0yNjExMDMwNDAyNTJaFw0yNjExMDQwNTM3NTJaMDMxMTAvBgNV
BAMTKDM5NTc3QUU1M0I3RTRENTU1OTdCRUJFOTNGNzNENjM3MEI3Q0E3QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIRcKT74ddhZEfXz9gznq2WyYW
paSJ3BsOjPxG9jfxSl3BK0i3xRD67btdJslJf5mzh9EaT1zLwLCAFOqKbvd+zT2i
Nwfnjk4fqkNK0/AArihAUG8aCRwhXjXfC+fhNMStIM1c9FuVzwuhG1fFVu/y9FNg
vjo4+US0Hq3SejOK7Js6tr5/RoVIA5oA9fWtwk0W2JPGynfGeITIbY2vL2Cn1gDT
Od8AjupmD3gTh7lc/ZXx36BJQJ3xoL3ZzCLxj9b76nYOSfd3r6Hd8CNPDnys93vk
qBt2KLZu4v1Pn7ZAXcdVdkrlxHEujJIPclr4+5H2cTWyBkX0Tjy6lWDnlS4TAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUOVd65Tt+TVVZe+vpP3PWNwt8p64wHwYDVR0j
BBgwFoAUCoFpSJjOQZEZw10Y0BhEB8VzLgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2I4OGE1MTMtZGViZi00ZDVjLTk1MWItZDk3NTlhMDkyZGU3LzAvMEE4MTY5NDg5
OENFNDE5MTE5QzM1RDE4RDAxODQ0MDdDNTczMkUwMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8wQTgxNjk0ODk4Q0U0MTkxMTlDMzVEMThEMDE4NDQwN0M1NzMy
RTAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2I4OGE1MTMtZGViZi00ZDVjLTk1
MWItZDk3NTlhMDkyZGU3LzAvMEE4MTY5NDg5OENFNDE5MTE5QzM1RDE4RDAxODQ0
MDdDNTczMkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAL/wXaru1P2uojF2rBXUWnF5JANxSNovbsLl
rNbMur+SbcdkHspg9mIgW+QSu3ySpfv08aU+YK4owBTQoJTonjXRHJCWpsIaQOtH
8QAox9cj25ltMnH5190qbWVIBmM29GLoabijbgl6aGOS7ES7gOxazha+X9G1O+UO
BSxBxSWzvbQmevVUylneHIojbOT4JImT1ZCirR7B/17FfxPrnMR/grFoaV3BIiSt
jt8N5wfpcqebEWAaxfl5uF76SZ8SMU4gwrj/hmXRESmLP64zPiDPlu1iT7a56vyD
D2zC5sWYzySPOuN0vACCtGYrCVWWxmVGB0DyrOiJScwi9iTwch0=
-----END CERTIFICATE-----
Generated at Tue Nov 3 19:43:48 2026 by rpki-client