Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
File:                     F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft (raw, json)
Hash identifier:          +e2wmGUbgfTFkoRPA56Dt+49BYK3f/Xd7K03Hm3owZY=
Subject key identifier:   BA:4F:9A:5A:04:8D:FC:55:9B:7D:3D:31:5E:C3:4B:F9:6E:7D:8F:62
Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
Certificate issuer:       /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Certificate serial:       6F2B76D62E56D67ABB2D005094137B5A85EE203A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
Manifest number:          EE
Signing time:             Mon 26 Oct 2026 02:19:45 +0000
Manifest this update:     Mon 26 Oct 2026 02:14:45 +0000
Manifest next update:     Tue 27 Oct 2026 03:18:45 +0000
Files and hashes:         1: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: kKPyA87cBNNbll+wZXw03s3L6LbkLTPgrzdBootFsHQ=)
                          2: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: TN3/E7Y5c/nedOyTgYgff8HK90H5iShgi5mk+WZX5nw=)
                          3: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: V8AjpSzdxp8GDyMCHA7YtvW4QSVvG85ynWbgCsAEXEs=)
                          4: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: Q18y495vHxKdcsVM96pc/tUI9Fl6GfmbLs035wir/JU=)
                          5: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: ZMKJ6qvXBCnIGQclOHQhPWyyMM8hgD3nw2GXMro25Y4=)
                          6: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: svAi0R5XEu9X4Ys1yfCbCgtQxluGGulsPQVUUn8ta/o=)
                          7: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: OvSsEeapnu+/oiKYJIcMYudEmuSdyI2NmSImX5jHoH4=)
                          8: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: bcUDOpCB0dNiYwZx7hB9TNsT/6Q2Z4ktB8wuICtWZXQ=)
                          9: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: CnBcLvoSDxEWtZrVDvNMamVH18oi4O/jyEx1Mt/oRO8=)
                          10: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: hVG5QJJlsbYPr5L1RCfsG/I/X2H5aI8Xq7RBOYv0G3o=)
                          11: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: v5Ut+HnAU8B++keMYhHXiHiE6JJw8p9vB3wAUzitQ/s=)
                          12: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: bS5P/W+hj7so9J/fGjANaNnPonvylnMwWx29PNvc6E4=)
                          13: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: esq0SPO+hAIrG7YQPAU2RMpBG0FEhngieVqoN2H1Z00=)
                          14: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: X24eGimplx9OKKA54SDn3PccRcDMInDYSFbqOhNXsRk=)
                          15: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: XYH3WtUdslBTF725L3cOP4xs8XuxcDg3daKQgahU/wE=)
                          16: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: ZWNoTl3f/QBfpXE45HAww//4eS88vFgydiSHbe0zdhA=)
                          17: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: t5lI2fSBgF1Qk+xi/wexkm174c0g31j+0DtjwN72lnc=)
                          18: F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl (hash: MBkPx/Iycijqh2mfBLmcOnOKK171ucDWwpmkB3Xlr+I=)
                          19: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: iFasMrZpPZhCJqBPOEUsMWSE1IL6XiDkC/rJS8HVQTo=)
                          20: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: Fg6XcYLXwzdBTEEbtVqZPj3EQucOEbeogJk1AzgGxAQ=)
                          21: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: zrBSW8GC94FsmSWPx82P8/uTVF2HgCkoo/2hN3b+4hM=)
                          22: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: BS5YihTbZaw+pKOipVulLJrh9jJr2QhVUAXi4IwAkiI=)
                          23: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: apqtipmn5kmXtB7pKv4YlNHER/Ifv3+XPDXaeex3R9k=)
                          24: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: /XQUhdaX/lnH/4pSzymUR8gU8PBZoGnTr2RxGh6dJJI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
                          rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 03:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2b:76:d6:2e:56:d6:7a:bb:2d:00:50:94:13:7b:5a:85:ee:20:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
        Validity
            Not Before: Oct 26 02:14:45 2026 GMT
            Not After : Oct 27 03:18:45 2026 GMT
        Subject: CN=BA4F9A5A048DFC559B7D3D315EC34BF96E7D8F62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a8:07:af:b7:21:e8:3a:9b:cf:fb:98:af:a4:
                    e0:51:bf:6d:c5:69:03:e1:76:94:78:67:77:9a:06:
                    7f:19:2c:13:58:3f:fa:2b:ee:52:90:b3:64:14:07:
                    ad:bb:64:f2:c1:2f:8b:af:3c:f9:2d:9b:08:64:29:
                    90:ef:c2:48:17:dd:8a:ee:6c:4d:b0:d2:7a:de:37:
                    a7:bf:42:78:60:cd:23:ab:f2:97:b8:a7:74:2a:53:
                    fe:7a:f0:f0:56:85:e5:b6:c4:6d:35:a3:65:0a:6c:
                    90:c3:3f:50:38:af:e2:13:ca:7a:5c:1a:c1:77:e9:
                    e4:6f:38:c6:2e:33:90:06:07:83:fe:c8:27:d4:e5:
                    9b:e1:19:b1:a6:57:db:2f:78:31:25:71:07:59:7d:
                    b0:c4:15:34:4f:9c:db:b9:de:cc:5b:24:33:8e:3a:
                    24:42:ab:b8:71:7e:08:42:a2:42:04:80:9c:28:f4:
                    2a:f0:ea:8a:8e:c2:cb:e6:ea:f2:2c:fa:13:bf:aa:
                    ea:3b:0d:db:4f:9e:0f:01:62:d3:ba:c6:2b:11:67:
                    97:de:bd:09:42:cf:9e:65:eb:c2:35:b7:ad:1d:f5:
                    50:19:b7:d8:37:1d:97:07:63:1a:50:25:0d:20:db:
                    25:72:74:09:cb:1c:6c:6a:9a:5a:b4:fe:c8:37:02:
                    77:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4F:9A:5A:04:8D:FC:55:9B:7D:3D:31:5E:C3:4B:F9:6E:7D:8F:62
            X509v3 Authority Key Identifier:
                keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4d:33:09:ba:9b:f7:c4:81:b7:e9:03:9e:57:0b:09:93:17:
         92:04:41:80:8a:dc:42:11:05:19:ad:77:bf:41:49:c3:fe:92:
         a6:e0:69:8a:3e:3d:2b:37:e8:4e:8c:21:f7:58:d5:b9:c4:8b:
         61:6b:60:b6:ee:78:93:1c:0c:5d:fd:e9:d1:4f:e5:15:73:7f:
         c9:3e:5b:fc:58:55:da:7e:21:9c:2c:b3:3e:12:d8:15:b9:73:
         7f:8a:8d:3e:bd:ec:8b:24:9f:00:84:8d:8c:06:37:09:55:34:
         76:4e:76:c4:dc:0c:92:eb:58:7e:21:0e:4c:96:cf:bd:e9:c2:
         b5:c8:a3:87:13:b1:76:c2:9a:a7:c6:bc:07:86:2b:27:9b:56:
         8b:9b:9c:b8:a4:ef:90:d0:ea:2f:f0:62:56:43:f3:6a:38:5b:
         d3:1a:27:4c:84:5f:4b:d5:21:19:1e:aa:dd:26:0c:12:b8:62:
         57:6e:84:04:d5:bb:a2:75:c5:0c:b2:eb:f9:5a:86:90:bb:b4:
         23:fd:8a:bb:05:7b:b7:db:25:af:2f:5f:f9:55:83:4e:5a:bd:
         c1:dd:26:58:c7:d9:de:1e:95:91:b8:ed:a4:dd:2f:77:7e:d1:
         cf:85:02:f3:24:6c:1b:2b:b0:3e:da:bc:10:b3:63:2b:a5:35:
         cd:c6:fc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:59:44 2026 by rpki-client