Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft
File:                     5FF85953C6850E359467A581C3FE1AC78E529F2F.mft (raw, json)
Hash identifier:          diKM4ymXvj3/QGCwKqmzXXCF6bCELGNc320i8YOfUNs=
Subject key identifier:   3B:91:78:52:B9:EA:D8:66:5C:99:15:0C:56:B0:96:B2:DB:F5:A0:72
Authority key identifier: 5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F
Certificate issuer:       /CN=5FF85953C6850E359467A581C3FE1AC78E529F2F
Certificate serial:       3C8B1490276FCB77962C1BEF609BAF2F347EA436
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft
Manifest number:          D6
Signing time:             Fri 09 Oct 2026 21:34:25 +0000
Manifest this update:     Fri 09 Oct 2026 21:29:25 +0000
Manifest next update:     Sat 10 Oct 2026 22:29:25 +0000
Files and hashes:         1: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: +qKLLz9ehRuOchJ8m6wI99oYtklf5Gx9ixqGHWMAzMw=)
                          2: 3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (hash: t97u2GqJ2jtckgSGR6Sjz6Jn9nKSQHkBxpLPsPLvaYM=)
                          3: 3131352e3136362e3131312e302f32342d3234203d3e203134363138.roa (hash: kPUK2GFDFYlKn9GXNmNAqFN8ChpgIluMw/CP+FmKw0o=)
                          4: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: MmVOOc/LuqFNSXqQ5IddobFw0Ch137C+avOoyFd6ZzY=)
                          5: 5FF85953C6850E359467A581C3FE1AC78E529F2F.crl (hash: /eaxLNeKR6GnlUEDYzMwv1ow76brXfG0ZHAjhCM1Jeg=)
                          6: 3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (hash: uTaNGo7IDdsOGs73zESne28tA+ZzMyK0wMRINMuXTcQ=)
                          7: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: AwkHb7HGSUt+TaaLZZEdADtv/v78j6fMphbiNKpRchs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl
                          rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8b:14:90:27:6f:cb:77:96:2c:1b:ef:60:9b:af:2f:34:7e:a4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF85953C6850E359467A581C3FE1AC78E529F2F
        Validity
            Not Before: Oct  9 21:29:25 2026 GMT
            Not After : Oct 10 22:29:25 2026 GMT
        Subject: CN=3B917852B9EAD8665C99150C56B096B2DBF5A072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:89:72:59:f0:57:ac:15:b9:f9:63:d6:18:
                    dd:09:40:1d:2d:0a:c7:8c:07:7f:4d:17:4f:cb:20:
                    c2:e1:a4:df:09:f7:89:19:a7:a3:0e:29:98:ac:44:
                    5f:9a:20:10:33:c3:f6:41:38:14:f2:41:a3:da:02:
                    c3:70:08:e7:02:04:dc:76:fb:86:64:7e:e3:a2:f6:
                    3f:17:45:07:0f:38:f2:0b:44:c6:db:e0:81:fa:d2:
                    ad:44:ae:54:18:b9:61:32:8d:ca:8a:c3:9f:1a:5e:
                    f8:c5:df:5d:6c:12:1f:46:f1:30:a3:ea:ff:94:87:
                    2a:65:2e:00:6a:42:5d:0e:56:42:13:33:0c:46:c6:
                    54:f6:16:ae:c4:70:04:03:4b:f2:0f:75:70:2a:b3:
                    a0:4a:1b:57:97:43:ae:81:f7:65:7b:ec:ca:65:03:
                    3a:29:52:e6:8c:19:73:ba:94:55:37:a4:15:5f:b3:
                    35:5e:fa:94:d5:0d:d9:81:31:54:f6:6c:99:d4:fd:
                    6c:7e:d2:6b:fa:08:25:f5:ea:42:ee:5d:38:e9:31:
                    8e:63:3d:fe:7d:63:f7:1f:57:86:ba:8a:8f:f8:58:
                    c0:9c:0b:80:7f:ed:2d:8f:47:36:41:d4:62:c2:4f:
                    1b:e0:2d:6d:43:f2:2a:e0:ea:79:e6:a7:d6:cd:46:
                    b1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:91:78:52:B9:EA:D8:66:5C:99:15:0C:56:B0:96:B2:DB:F5:A0:72
            X509v3 Authority Key Identifier:
                keyid:5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e3:0d:b3:be:d9:c7:2d:43:1a:47:7e:86:7b:48:23:42:95:
         18:c5:ce:2b:06:73:ca:3b:66:83:13:2c:72:bd:24:2f:10:f5:
         88:41:5b:bb:19:4d:cc:fd:ae:d1:38:cf:be:72:49:12:76:e4:
         51:ca:58:d0:ff:4a:d6:4d:d2:bc:93:86:ea:0e:7b:bd:d6:33:
         47:6f:7a:88:26:b3:42:61:c1:07:a9:5a:a9:cd:9d:6e:ee:75:
         b7:6e:b8:72:69:15:6a:98:32:72:76:d2:55:b2:0f:89:2b:f1:
         cc:37:bd:28:7d:a1:91:3d:a1:d7:a5:75:f0:2b:a8:71:24:84:
         7c:89:78:17:94:d6:83:eb:e4:d9:23:40:5a:8e:19:67:e9:3b:
         89:ca:a5:43:48:7b:3c:69:36:34:26:e4:bf:4a:ac:4c:8e:3e:
         d6:90:9d:b7:d7:b8:7a:fd:a4:ee:d7:f1:6a:4a:93:55:ac:3f:
         98:d7:fe:87:3b:8a:76:be:8e:09:a0:91:b8:73:9d:38:e1:4c:
         c2:81:55:3a:d2:a7:5f:77:e4:1f:26:21:c0:3b:73:55:4b:34:
         fd:8a:0d:c8:c8:7f:01:43:45:0a:5b:f2:2c:4e:27:44:b8:4e:
         e6:6c:5f:4f:f4:14:1e:38:00:68:db:10:8f:56:e0:e1:02:6c:
         62:54:1d:a3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPIsUkCdvy3eWLBvvYJuvLzR+pDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4
RTUyOUYyRjAeFw0yNjEwMDkyMTI5MjVaFw0yNjEwMTAyMjI5MjVaMDMxMTAvBgNV
BAMTKDNCOTE3ODUyQjlFQUQ4NjY1Qzk5MTUwQzU2QjA5NkIyREJGNUEwNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZCYlyWfBXrBW5+WPWGN0JQB0t
CseMB39NF0/LIMLhpN8J94kZp6MOKZisRF+aIBAzw/ZBOBTyQaPaAsNwCOcCBNx2
+4ZkfuOi9j8XRQcPOPILRMbb4IH60q1ErlQYuWEyjcqKw58aXvjF311sEh9G8TCj
6v+UhyplLgBqQl0OVkITMwxGxlT2Fq7EcAQDS/IPdXAqs6BKG1eXQ66B92V77Mpl
AzopUuaMGXO6lFU3pBVfszVe+pTVDdmBMVT2bJnU/Wx+0mv6CCX16kLuXTjpMY5j
Pf59Y/cfV4a6io/4WMCcC4B/7S2PRzZB1GLCTxvgLW1D8irg6nnmp9bNRrEHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUO5F4Urnq2GZcmRUMVrCWstv1oHIwHwYDVR0j
BBgwFoAUX/hZU8aFDjWUZ6WBw/4ax45Sny8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmRkNDdmNTYtZWM1My00MmViLTliOGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTND
Njg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4RTUyOUYyRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81RkY4NTk1M0M2ODUwRTM1OTQ2N0E1ODFDM0ZFMUFDNzhFNTI5
RjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli
OGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFB
Qzc4RTUyOUYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFTjDbO+2cctQxpHfoZ7SCNClRjFzisGc8o7
ZoMTLHK9JC8Q9YhBW7sZTcz9rtE4z75ySRJ25FHKWND/StZN0ryThuoOe73WM0dv
eogms0JhwQepWqnNnW7udbduuHJpFWqYMnJ20lWyD4kr8cw3vSh9oZE9odeldfAr
qHEkhHyJeBeU1oPr5NkjQFqOGWfpO4nKpUNIezxpNjQm5L9KrEyOPtaQnbfXuHr9
pO7X8WpKk1WsP5jX/oc7ina+jgmgkbhznTjhTMKBVTrSp1935B8mIcA7c1VLNP2K
DcjIfwFDRQpb8ixOJ0S4TuZsX0/0FB44AGjbEI9W4OECbGJUHaM=
-----END CERTIFICATE-----
Generated at Sat Oct 10 00:37:34 2026 by rpki-client