Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
File:                     0DED71031394AA16715F3D03F26571528F1A6B78.mft (raw, json)
Hash identifier:          EKRGHnWhZXxSvp01feEp1gq8aEj3QDZV87KfWWzL43A=
Subject key identifier:   2F:18:F1:9A:6F:21:C1:AA:81:E2:38:EE:3B:66:54:E8:EA:D5:B5:28
Authority key identifier: 0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
Certificate issuer:       /CN=0DED71031394AA16715F3D03F26571528F1A6B78
Certificate serial:       1BB178650D11CE36D82130B4A82F741C14D7C0D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
Manifest number:          BA
Signing time:             Thu 17 Sep 2026 06:26:31 +0000
Manifest this update:     Thu 17 Sep 2026 06:21:31 +0000
Manifest next update:     Fri 18 Sep 2026 10:08:31 +0000
Files and hashes:         1: 323430363a313363303a373a3a2f34382d3438203d3e20313430343133.roa (hash: dbjeUfofaAZBLKBCceZ22YQLnJ60T/u4G98K58+vimo=)
                          2: 323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa (hash: GK7JrFFTMtRaVSiXERiAUwR8S0jPiNQeuHLwltAd/4o=)
                          3: 323430363a313363303a383a3a2f34382d3438203d3e20313430343133.roa (hash: T2d/1dANpMVbfsrDZMQgMJnfjqw3B5RFvLZjQM+Maic=)
                          4: 323430363a313363303a333a3a2f34382d3438203d3e20313430343133.roa (hash: YUzbLQ5j/NrlJLr3BA5MdjrGyteXCKBcOA9XM5EndXY=)
                          5: 323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa (hash: WknzV8Nu8IMTlOIi8o8zGv3PuOd24Q9LnQo6SQwKlsg=)
                          6: 323430363a313363303a353a3a2f34382d3438203d3e20313430343133.roa (hash: OcytzAOerPcWTuVnLCz3It1QvJ1fzJzeOWmkkXqipNY=)
                          7: 3130332e3135312e33352e302f32342d3234203d3e20313430343133.roa (hash: 8WhM2jfK6A9eXDQHoiLc7iWdsFkOi6rmzW7WT+47mh8=)
                          8: 323430363a313363303a663a3a2f34382d3438203d3e20313430343133.roa (hash: 6MK3BTfSdOqMu7uDUlMlrcofKxmm7ND7Ppxbk9itFD8=)
                          9: 323430363a313363303a3a2f34382d3438203d3e20313430343133.roa (hash: pL+bPlRYYQGeiYZEexp0fc0F/PP7A+oMtImtipkVLIE=)
                          10: 3130332e3135312e33342e302f32342d3234203d3e20313430343133.roa (hash: +P/AMngDtPsWOGxlH3Mr6PlyfaGk41zvE2zQOV1G0jQ=)
                          11: 323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa (hash: skBT3RdnJ+CBUwElmxoesrXpDa/Pn3QhE5o4dAxByQo=)
                          12: 323430363a313363303a323a3a2f34382d3438203d3e20313430343133.roa (hash: VsyONkSurv+9TahILF/1bYqHX84Y5bFx2pjIHaiSJGI=)
                          13: 323430363a313363303a3a2f33322d3332203d3e20313430343133.roa (hash: AVqen3U0gUyXJ0Gc/rcGvSgOXqlzI++3CxMMEOAo30Q=)
                          14: 3130332e3135312e33342e302f32332d3233203d3e20313430343133.roa (hash: AsGbw0cbRJMt+AHYBFh8GsmxUOZcTvqzv4dYjEpLqWI=)
                          15: 323430363a313363303a643a3a2f34382d3438203d3e20313430343133.roa (hash: fW/MYh09AaNNODsolkt0n1TRKWiUESamqS4145FgwBo=)
                          16: 0DED71031394AA16715F3D03F26571528F1A6B78.crl (hash: UoGoN6OUB09N76ygFCEDfVLc5LwxoXCFcNdZL9HWv5Y=)
                          17: 323430363a313363303a613a3a2f34382d3438203d3e20313430343133.roa (hash: 7SOOVpEkvhM8jKS5ml9tavuy6fhlwX85TRg6uRnySPg=)
                          18: 323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa (hash: +ZnAeFJoXHPh+xq3xuSvRbcR94NVVsIzNuYlIiCcSpQ=)
                          19: 323430363a313363303a653a3a2f34382d3438203d3e20313430343133.roa (hash: 6P/gtrzHwkH3kENiz3/is/cjoDAJlGYuJTJreGDj0WI=)
                          20: 323430363a313363303a633a3a2f34382d3438203d3e20313430343133.roa (hash: OfeOZDKtwz07hp7cEfgVVGzrjch6eyioJUOXZr6UY1A=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
                          rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b1:78:65:0d:11:ce:36:d8:21:30:b4:a8:2f:74:1c:14:d7:c0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DED71031394AA16715F3D03F26571528F1A6B78
        Validity
            Not Before: Sep 17 06:21:31 2026 GMT
            Not After : Sep 18 10:08:31 2026 GMT
        Subject: CN=2F18F19A6F21C1AA81E238EE3B6654E8EAD5B528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1a:fb:3e:5c:e1:87:b5:3a:1a:7f:35:24:1f:
                    75:48:60:66:bf:5a:92:ab:01:24:1c:23:16:79:bf:
                    f6:b0:0c:3f:8a:a7:86:0c:d5:d6:ef:17:5c:8a:cb:
                    30:7d:0a:fc:a6:f0:a6:88:50:19:ec:7c:1c:6c:94:
                    61:c1:0d:dc:b3:22:14:25:18:56:73:e2:ff:b5:05:
                    0e:20:28:3a:05:62:d1:84:51:4b:1f:28:4b:58:e8:
                    0c:23:e1:96:4f:93:4c:8c:b7:0b:d4:7c:36:e4:74:
                    14:f6:42:7d:b0:db:ef:19:19:7b:1d:e7:12:d3:f9:
                    ed:d0:df:62:e5:7c:d2:da:dc:4c:9d:a6:54:86:4b:
                    4e:c1:38:43:db:7a:35:8a:91:97:85:e0:fd:8d:7e:
                    e1:96:8a:89:9c:10:86:36:54:90:ba:64:66:ef:37:
                    61:1f:ed:06:05:1a:fd:10:fb:71:41:0b:69:f6:2e:
                    14:e2:9b:58:00:42:1b:8b:9b:e0:c0:91:56:d4:b9:
                    e9:c6:64:1c:33:b2:79:66:8a:ec:ac:6d:c5:98:56:
                    43:df:44:58:be:69:a4:7b:b7:64:3d:f9:d6:34:e4:
                    29:f8:37:34:07:64:1a:87:5d:8d:09:c7:41:b5:68:
                    cb:d9:1e:8e:fe:9b:5f:86:ad:54:09:49:e7:ed:17:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:18:F1:9A:6F:21:C1:AA:81:E2:38:EE:3B:66:54:E8:EA:D5:B5:28
            X509v3 Authority Key Identifier:
                keyid:0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:dd:a5:1b:6c:19:3a:8e:47:8f:92:10:d9:2e:f8:f9:d0:0b:
         fb:a0:a7:4f:d2:ee:8c:44:03:06:65:45:a0:cc:e2:61:08:eb:
         a1:4c:67:ac:ec:32:4a:39:65:5a:72:7a:d7:95:90:7d:0a:a1:
         04:d1:93:8d:96:3b:39:fc:34:f5:55:91:82:5b:6a:07:69:d6:
         21:a5:86:e0:26:3a:25:ba:81:1f:42:78:64:70:8b:5e:4c:70:
         a9:4d:d6:5b:11:96:a3:76:89:ec:41:10:8f:a0:53:bf:f6:00:
         83:20:1e:4a:66:f2:17:67:a4:98:03:e8:d4:c1:b2:a1:93:f7:
         01:12:62:11:fd:62:00:ea:a7:90:48:43:da:a2:c0:39:26:91:
         84:54:fa:0d:df:8f:32:3f:85:f4:2f:62:6c:1c:8d:7c:98:a5:
         f6:6f:1c:97:9f:26:2c:4b:15:13:5a:a1:80:39:61:2b:fc:64:
         fd:b9:cf:c9:35:d2:9f:1e:cf:a0:38:9f:a1:f3:55:17:af:47:
         60:13:47:8f:7b:d0:c4:c9:6b:f3:07:7e:27:a5:3f:6a:d6:95:
         57:ae:7a:09:27:7b:8d:2d:1b:b2:aa:ef:63:ee:dd:6b:53:3d:
         5a:24:05:0b:09:44:89:cb:a9:92:f3:83:d5:a9:66:4c:67:5a:
         80:95:50:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:42:31 2026 by rpki-client