Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
File:                     5843958BB240779320D7F0C2B674ACF5EF6122BC.mft (raw, json)
Hash identifier:          svq9GWl7EpXBcXAEDkBWzo6wYpcxGevxQsnROdCONqk=
Subject key identifier:   98:74:39:E0:A8:55:F6:78:42:D5:E2:F9:14:F8:D0:7E:E3:B6:25:98
Authority key identifier: 58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC
Certificate issuer:       /CN=5843958BB240779320D7F0C2B674ACF5EF6122BC
Certificate serial:       1C8E4926A86D1B157F3EFFCDF8BC64F73C9FA8EE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
Manifest number:          EB
Signing time:             Sat 24 Oct 2026 07:53:40 +0000
Manifest this update:     Sat 24 Oct 2026 07:48:40 +0000
Manifest next update:     Sun 25 Oct 2026 09:35:40 +0000
Files and hashes:         1: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: yPK7GQUu85mTor59GtzCw8idVr6kmAEeffKza8nzEd8=)
                          2: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: jOCXET8yniqJ02iHiMoBI6iwGo2/5oUN4/jc3LtL0jQ=)
                          3: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: WeFmDyNsHJ6btvYfzDFQoJzW4vr0tmZoF+30o64Nsw4=)
                          4: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: zO201tAVoPKGV/ct4ikI5lfPCjZ1ksaQX5GMEkLajwg=)
                          5: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: lVR5iCrB58ZGOeyqsgP1KQLwdS0WjCcfUKPYsWN8lxI=)
                          6: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: 3HeHx0erxEkjN9PtOgU3W6tKucWeXKE5FEYLyXwycJc=)
                          7: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: t3N8/NmkXItiVJAARc4CSYWSo+yW57apDjW3aqHeSkc=)
                          8: 5843958BB240779320D7F0C2B674ACF5EF6122BC.crl (hash: lhZB+yLdG3gSU9nSuNwPO/D5qGZwNoyyptHeLpnq2JY=)
                          9: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: bNdzrUkHylX3nBoyTDryEKwja6jOzq2DQP/kaLdB4H4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl
                          rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 03:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8e:49:26:a8:6d:1b:15:7f:3e:ff:cd:f8:bc:64:f7:3c:9f:a8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5843958BB240779320D7F0C2B674ACF5EF6122BC
        Validity
            Not Before: Oct 24 07:48:40 2026 GMT
            Not After : Oct 25 09:35:40 2026 GMT
        Subject: CN=987439E0A855F67842D5E2F914F8D07EE3B62598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:26:88:65:21:4f:5e:d1:3d:da:5f:a7:fc:41:
                    bd:42:da:68:29:0f:cd:60:71:28:5d:a6:20:b8:d4:
                    47:cb:a8:e3:73:63:68:17:f7:d8:17:2b:b9:61:13:
                    19:73:0d:80:88:3e:1e:f0:a5:bb:02:a3:27:8b:b2:
                    65:38:7c:f1:05:da:70:9e:ba:1e:2b:b7:4e:30:6c:
                    ca:81:4d:bb:63:12:cd:d9:e3:51:bd:9b:4b:8d:9a:
                    d0:ba:ee:73:44:5c:17:d2:00:85:e2:32:84:1c:31:
                    d0:d5:53:97:55:a1:2e:2e:7e:35:35:f7:d6:11:08:
                    be:13:35:cf:73:bc:74:f9:19:4c:07:fa:96:57:43:
                    37:78:55:4e:09:46:c6:17:b6:5d:dd:e5:8c:ba:e5:
                    11:54:d9:90:aa:62:cc:f5:bf:eb:63:28:ac:68:48:
                    61:91:fe:18:df:9a:3e:87:a3:12:1e:e9:fd:74:95:
                    fe:ea:dd:9d:8d:d3:ba:78:13:4b:af:70:13:a0:be:
                    05:f9:d8:e5:ad:a3:75:69:56:35:48:6b:6e:4e:c4:
                    44:86:b6:a2:83:f7:a6:d7:df:c6:e8:c8:28:20:d2:
                    49:64:9c:eb:ed:ac:00:3d:7e:1b:91:14:e0:7f:58:
                    fb:36:91:c6:17:4c:d6:06:8f:2e:cb:d5:b5:08:75:
                    33:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:74:39:E0:A8:55:F6:78:42:D5:E2:F9:14:F8:D0:7E:E3:B6:25:98
            X509v3 Authority Key Identifier:
                keyid:58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a0:09:d3:94:d3:6e:ad:60:28:5d:f2:7d:da:d0:34:0a:86:
         f2:b5:4b:ec:38:88:30:ca:a6:da:20:02:0d:8b:c7:72:8a:47:
         ae:3e:53:1e:b2:2b:48:90:cc:d9:a8:56:27:4b:dd:16:0e:14:
         ab:93:50:cd:0a:6d:cf:90:bb:f5:ea:42:6c:2a:4b:f7:de:0c:
         66:1d:9c:b3:b1:bd:bf:3f:7e:b1:7d:71:ce:33:ff:c7:f6:91:
         e4:24:5a:5d:89:67:5a:d8:67:ab:0a:7a:34:f6:c3:c6:f6:47:
         a9:19:0a:5b:14:5c:ca:cd:c1:20:57:ba:b9:94:8e:54:b7:03:
         08:2b:36:37:b8:71:c3:2c:8f:ce:bb:09:82:a8:02:c8:c3:13:
         da:83:34:18:70:48:54:93:87:e2:23:00:27:c1:db:00:52:32:
         25:73:10:c3:9f:a7:9d:c2:10:78:9d:7e:a0:56:9c:9a:89:3d:
         74:07:7d:30:96:00:30:99:7a:c2:25:b9:17:6a:4d:fe:88:be:
         41:ee:3b:31:58:91:3c:bf:b1:99:37:11:c0:db:e9:75:ed:a5:
         3e:01:f1:e9:01:ab:9e:2b:ed:a4:3c:4b:41:ba:1e:0a:6a:fd:
         0e:ab:87:29:8f:f6:1c:18:ef:13:15:75:a9:fb:85:a1:81:d1:
         96:0f:f0:44
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHI5JJqhtGxV/Pv/N+Lxk9zyfqO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVF
RjYxMjJCQzAeFw0yNjEwMjQwNzQ4NDBaFw0yNjEwMjUwOTM1NDBaMDMxMTAvBgNV
BAMTKDk4NzQzOUUwQTg1NUY2Nzg0MkQ1RTJGOTE0RjhEMDdFRTNCNjI1OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdJohlIU9e0T3aX6f8Qb1C2mgp
D81gcShdpiC41EfLqONzY2gX99gXK7lhExlzDYCIPh7wpbsCoyeLsmU4fPEF2nCe
uh4rt04wbMqBTbtjEs3Z41G9m0uNmtC67nNEXBfSAIXiMoQcMdDVU5dVoS4ufjU1
99YRCL4TNc9zvHT5GUwH+pZXQzd4VU4JRsYXtl3d5Yy65RFU2ZCqYsz1v+tjKKxo
SGGR/hjfmj6HoxIe6f10lf7q3Z2N07p4E0uvcBOgvgX52OWto3VpVjVIa25OxESG
tqKD96bX38boyCgg0klknOvtrAA9fhuRFOB/WPs2kcYXTNYGjy7L1bUIdTOTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUmHQ54KhV9nhC1eL5FPjQfuO2JZgwHwYDVR0j
BBgwFoAUWEOVi7JAd5Mg1/DCtnSs9e9hIrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmQ5NWMxOWMtMzI2Mi00OGM3LWFmMDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJC
MjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVFRjYxMjJCQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81ODQzOTU4QkIyNDA3NzkzMjBEN0YwQzJCNjc0QUNGNUVGNjEy
MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ5NWMxOWMtMzI2Mi00OGM3LWFm
MDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFD
RjVFRjYxMjJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC+gCdOU026tYChd8n3a0DQKhvK1S+w4iDDK
ptogAg2Lx3KKR64+Ux6yK0iQzNmoVidL3RYOFKuTUM0Kbc+Qu/XqQmwqS/feDGYd
nLOxvb8/frF9cc4z/8f2keQkWl2JZ1rYZ6sKejT2w8b2R6kZClsUXMrNwSBXurmU
jlS3AwgrNje4ccMsj867CYKoAsjDE9qDNBhwSFSTh+IjACfB2wBSMiVzEMOfp53C
EHidfqBWnJqJPXQHfTCWADCZesIluRdqTf6IvkHuOzFYkTy/sZk3EcDb6XXtpT4B
8ekBq54r7aQ8S0G6Hgpq/Q6rhymP9hwY7xMVdan7haGB0ZYP8EQ=
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:41:48 2026 by rpki-client