Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft
File:                     99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft (raw, json)
Hash identifier:          b8ki2TK4E3z3JtxxiWLa1oGa1nFuko1HV7AGiKGMrRU=
Subject key identifier:   D1:57:71:D9:1C:C2:D6:65:25:80:65:C6:49:D3:96:75:01:ED:A2:B1
Authority key identifier: 99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56
Certificate issuer:       /CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56
Certificate serial:       25CC009B00EB1076D0C71E52D3A6B158C2495F2B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft
Manifest number:          EB
Signing time:             Sun 25 Oct 2026 17:02:53 +0000
Manifest this update:     Sun 25 Oct 2026 16:57:53 +0000
Manifest next update:     Mon 26 Oct 2026 18:25:53 +0000
Files and hashes:         1: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: zPofqUyIbcND+D2D0o7JYniZDgxYX06gor3Wb3n4ltM=)
                          2: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: PSuRmEPi8uUru97FfcCOeTvVbgMQrGuLQwDV3VMgdz8=)
                          3: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: Z1Kw+kT+8xUFn3ucef081YHiJ/yp5vqEe94k0y4NufM=)
                          4: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: t9EEqIdAzyyLBFGBhm/G7abK4Gf89A/VkBJhBveYp8o=)
                          5: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: TnnimCiJNEI3YZmDLBfCPDrxGGuhDFX5yXiQDusUYTc=)
                          6: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: o0zOCwKMV8jU5a7SbQORjfO9m38/31ZTy9sJntqLIvE=)
                          7: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: SADYGPYv67q+O3OfpXqESLXHQd4oPs/38N8rfvjf/1w=)
                          8: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: 6bIg58V+S6s6w2BVuCVhFWMhoAtGZP/B+0ZE/bwD8i8=)
                          9: 99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl (hash: VRaM6kpAmoo0N3Z0MFluOdf7qdVdg9jkYOZmwAH1RZU=)
                          10: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: VQVxXRTp2UzotluVMgSddd9dhfBUX5L5ITtJ9nJBxE0=)
                          11: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: Oro/PlzrcwhR+DRRwBnJ1PRk7SRQNnxZIcnkIGvWHPE=)
                          12: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: mJNCgdN/KYV4aqOGqcU3FG9C+9F17HUrX/9pj0TLKOE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl
                          rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:cc:00:9b:00:eb:10:76:d0:c7:1e:52:d3:a6:b1:58:c2:49:5f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56
        Validity
            Not Before: Oct 25 16:57:53 2026 GMT
            Not After : Oct 26 18:25:53 2026 GMT
        Subject: CN=D15771D91CC2D665258065C649D3967501EDA2B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:c0:fa:e0:b5:cc:27:07:de:05:ff:80:dc:
                    35:63:86:1a:6b:69:4a:9e:75:54:c4:c9:5a:18:06:
                    59:0f:80:d3:37:c9:49:59:0b:0b:bc:f2:1d:db:5b:
                    b1:de:36:57:63:64:c2:ef:54:38:c9:87:6b:af:4d:
                    9a:3a:8f:03:64:6f:72:23:12:23:e5:31:ec:a2:3e:
                    a0:ff:dd:f0:df:7e:9b:33:3f:63:1e:06:93:7f:ff:
                    e2:d6:16:78:de:7d:a7:04:06:96:fa:64:95:64:21:
                    18:8d:c9:8a:eb:36:d4:39:e8:9d:cc:14:fe:0a:0b:
                    6f:22:6a:d0:a4:5a:87:8a:8d:fc:8c:15:38:41:f3:
                    d1:22:82:b7:50:cd:15:76:08:7b:10:ab:63:31:b6:
                    97:23:d0:29:eb:28:77:79:06:ad:9c:23:92:c2:5f:
                    11:96:cb:d9:09:be:4d:35:af:6c:ec:97:b7:17:2e:
                    aa:9f:c8:ae:64:5d:36:fa:4a:d1:2b:e3:44:31:21:
                    b2:0c:c8:96:71:b8:ba:bc:3e:68:95:a0:88:a4:bb:
                    d9:0c:51:b5:49:cc:3a:0b:a2:32:ec:00:4c:15:a0:
                    61:57:c3:ad:dc:8b:0a:ff:6c:0d:20:90:89:94:36:
                    3e:0d:24:3c:9f:3e:57:e2:03:c0:96:6a:3b:b6:7d:
                    bb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:57:71:D9:1C:C2:D6:65:25:80:65:C6:49:D3:96:75:01:ED:A2:B1
            X509v3 Authority Key Identifier:
                keyid:99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:15:6f:d1:7a:bf:f9:e3:0b:fe:53:2d:f6:f4:52:1a:a0:fb:
         b0:ed:90:2a:84:6d:46:88:fd:b3:15:ca:01:55:2e:f0:36:27:
         93:bf:b6:9b:28:73:0b:07:c2:b3:a5:a8:e9:be:27:73:91:f7:
         c2:30:69:ba:4f:bb:9b:0f:1e:06:6f:b1:77:ea:44:0d:8b:fa:
         1c:76:f1:c3:29:64:6a:75:31:24:a1:84:a0:2b:b0:3b:da:29:
         69:2c:44:61:a0:02:9a:ed:36:85:c8:de:46:59:44:fd:2d:70:
         d1:20:11:ed:78:f1:23:61:82:e0:fe:81:0e:14:8a:cb:e0:56:
         c3:51:e0:e8:f9:94:78:38:d4:df:c4:b5:db:62:de:33:b3:d8:
         22:fe:b9:07:3e:28:8b:0b:c7:b2:18:3b:b8:6b:ef:52:59:3d:
         17:00:73:e4:f5:8e:ba:6b:69:ad:51:79:4a:17:0e:50:12:9e:
         57:df:2a:49:76:f1:d3:b7:b8:9e:39:1f:50:e7:17:01:68:21:
         f8:b3:c7:38:af:b8:ca:37:f2:ec:53:91:d5:ac:70:d1:51:a6:
         83:f5:07:47:d0:02:b4:33:52:b5:d5:16:a4:87:89:13:bd:2d:
         d7:3b:e7:d7:b7:21:52:4a:84:af:94:0e:f3:7c:40:19:a6:cc:
         88:0c:c7:4a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJcwAmwDrEHbQxx5S06axWMJJXyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlBRDIzOUE2QzU4QkRDMzY1MERCMkJFODE3RjJFOUEz
OUFCQ0I1NjAeFw0yNjEwMjUxNjU3NTNaFw0yNjEwMjYxODI1NTNaMDMxMTAvBgNV
BAMTKEQxNTc3MUQ5MUNDMkQ2NjUyNTgwNjVDNjQ5RDM5Njc1MDFFREEyQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpt8D64LXMJwfeBf+A3DVjhhpr
aUqedVTEyVoYBlkPgNM3yUlZCwu88h3bW7HeNldjZMLvVDjJh2uvTZo6jwNkb3Ij
EiPlMeyiPqD/3fDffpszP2MeBpN//+LWFnjefacEBpb6ZJVkIRiNyYrrNtQ56J3M
FP4KC28iatCkWoeKjfyMFThB89EigrdQzRV2CHsQq2Mxtpcj0CnrKHd5Bq2cI5LC
XxGWy9kJvk01r2zsl7cXLqqfyK5kXTb6StEr40QxIbIMyJZxuLq8PmiVoIiku9kM
UbVJzDoLojLsAEwVoGFXw63ciwr/bA0gkImUNj4NJDyfPlfiA8CWaju2fbtTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0Vdx2RzC1mUlgGXGSdOWdQHtorEwHwYDVR0j
BBgwFoAUma0jmmxYvcNlDbK+gX8umjmry1YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzRlMmJmMDktNWY0Mi00YjY1LWE0MmQtNjNkMDc5NmQyMDZjLzAvOTlBRDIzOUE2
QzU4QkRDMzY1MERCMkJFODE3RjJFOUEzOUFCQ0I1Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85OUFEMjM5QTZDNThCREMzNjUwREIyQkU4MTdGMkU5QTM5QUJD
QjU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0
MmQtNjNkMDc5NmQyMDZjLzAvOTlBRDIzOUE2QzU4QkRDMzY1MERCMkJFODE3RjJF
OUEzOUFCQ0I1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHMVb9F6v/njC/5TLfb0Uhqg+7DtkCqEbUaI
/bMVygFVLvA2J5O/tpsocwsHwrOlqOm+J3OR98IwabpPu5sPHgZvsXfqRA2L+hx2
8cMpZGp1MSShhKArsDvaKWksRGGgAprtNoXI3kZZRP0tcNEgEe148SNhguD+gQ4U
isvgVsNR4Oj5lHg41N/Etdti3jOz2CL+uQc+KIsLx7IYO7hr71JZPRcAc+T1jrpr
aa1ReUoXDlASnlffKkl28dO3uJ45H1DnFwFoIfizxzivuMo38uxTkdWscNFRpoP1
B0fQArQzUrXVFqSHiRO9Ldc759e3IVJKhK+UDvN8QBmmzIgMx0o=
-----END CERTIFICATE-----
Generated at Sun Oct 25 23:08:41 2026 by rpki-client