Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
File:                     0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft (raw, json)
Hash identifier:          VuSjfSC5iPG4Nz819Zy2y8RtXxM7G2mjJPJZZU+15mM=
Subject key identifier:   25:27:10:2E:5C:3D:32:86:25:58:BF:72:CF:A1:D7:4C:53:3A:6D:77
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Certificate issuer:       /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial:       655105DD3D1651A338398DD6E1305E6267CDEDF9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
Manifest number:          AF
Signing time:             Thu 10 Sep 2026 07:56:35 +0000
Manifest this update:     Thu 10 Sep 2026 07:51:35 +0000
Manifest next update:     Fri 11 Sep 2026 10:30:35 +0000
Files and hashes:         1: 323430353a616163303a3130303a3a2f34382d3438203d3e20313339393439.roa (hash: UgtghYKKKDTuSQQA5kpJNDjN8zk6XfG5zxbAoPcP27c=)
                          2: 323430353a616163303a3232323a3a2f34382d3438203d3e20313339393439.roa (hash: +/9yqVJ5UdWAp+ldudcLbH+/pVyZ/a8Xrgf00Kkb260=)
                          3: 323430353a616163303a383a3a2f34382d3438203d3e20313339393439.roa (hash: Tqgt3drK7GXDeIa386l7SvcEvHjLdUOZAMzwjcI/FPU=)
                          4: 3130332e3134372e35332e302f32342d3234203d3e20313339393730.roa (hash: H7UZTOATPI1EY0s4RZx0dyJdXlMKNuBirKezh1tvoeM=)
                          5: 323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa (hash: prQ0STU300ws+20gWkOKVn47VB6KOKFl9q8JOYL+sAI=)
                          6: 323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa (hash: 86KYh5c/IuLAigWeCuMUAIuQFk/EhQGZhdAQOuiZKLs=)
                          7: 323430353a616163303a31303a3a2f34382d3438203d3e20313339393439.roa (hash: u0O5vTBofznHSsZnXIqEqyWifadBtav5TUAMlqeY8Jg=)
                          8: 323430353a616163303a3530303a3a2f34382d3438203d3e20313339393439.roa (hash: xoOSeDdZEmS1QirY8AKjSGZxwc+FVGRb+TmxzGEzBOI=)
                          9: 323430353a616163303a3330303a3a2f34302d3430203d3e20313339393439.roa (hash: 3LSZHo7KGcFIped77/dY/bj2hvD5BuU/fpoTjmswjh0=)
                          10: 323430353a616163303a35333a3a2f34382d3438203d3e20313339393439.roa (hash: pIBcky8PhZ8lbAaksvs2Ue/3STOwF1hzQOT3OATuGHg=)
                          11: 323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa (hash: 8VZ6yOrpPP8qj0ebl3Xe0ocJwI+ajmU1uSDgJG8H+0U=)
                          12: 323430353a616163303a31323a3a2f34382d3438203d3e20313339393439.roa (hash: wmKU9Cpua2Cm0JXd2dDsC2D66awUL0rL5rPGt0jpS0k=)
                          13: 323430353a616163303a3430303a3a2f34302d3430203d3e20313339393439.roa (hash: Nvj659+mApnonGTEGwCTBqqPqjy73hJnAHzzweAPAkA=)
                          14: 323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa (hash: XYxICLX+/f7ZO54ISlllPUXnMREujzuZEBysKGSvbEc=)
                          15: 323430353a616163303a3232323a3a2f34382d3438203d3e20313339393730.roa (hash: EednHd6/tC8rA1Q4FZEYjM/np8pZkcMMsYRhFqqrYbs=)
                          16: 323430353a616163303a3232313a3a2f34382d3438203d3e20313339393730.roa (hash: AImEpLaZlZCowmT3C3g+xQPkvrTnQt/TzobixD36XlE=)
                          17: 323430353a616163303a35323a3a2f34382d3438203d3e20313339393439.roa (hash: Kcwg+OCYa0l1c3T4L3Hw0O+SycguIuf5aVxWUqMU4IE=)
                          18: 323430353a616163303a373a3a2f34382d3438203d3e20313339393439.roa (hash: 0+GyLeKkWKJ8TVOfe9fU58eqoMjNvF8Cv7/VNlXdbh4=)
                          19: 0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl (hash: XoKHxH1gwp4l9KRQiGO3woB+zrSj2wgaXQlVBY74o9I=)
                          20: 323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa (hash: 4PKU8D4LDtx+JijJab3nhgdhfIOpu2XH2Kk8Q5hpOLI=)
                          21: 323430353a616163303a31343a3a2f34382d3438203d3e20313339393439.roa (hash: 2uItblLkmHUtUXNvF9T75S0Y41mhc0tiaoJz8UwHxqo=)
                          22: 3130332e3134372e35332e302f32342d3234203d3e20313339393439.roa (hash: LNgwgKg7/TC2FJnghlu6rZrO15KD26+bO9sGt4Bn1Os=)
                          23: 323430353a616163303a35353a3a2f34382d3438203d3e20313339393439.roa (hash: yepW4rxiv3xBZozfQ2Ef+5zX2LB7NNFuF1axwEvIjvY=)
                          24: 323430353a616163303a35363a3a2f34382d3438203d3e20313339393439.roa (hash: kvPmkHg80Y42Kmf/Fnmg9nfxSrysPpOetVrslvSXQbc=)
                          25: 323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa (hash: ByNHObLn5iawwqUssg4fznvmFNVGWZf3GbNxjGk0nAU=)
                          26: 3130332e3134372e35322e302f32342d3234203d3e20313339393439.roa (hash: QkPPeMA8Un2oI7NOUy6EySATK1nS2aw0ZjUaFx+fneU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
                          rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 10:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:51:05:dd:3d:16:51:a3:38:39:8d:d6:e1:30:5e:62:67:cd:ed:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
        Validity
            Not Before: Sep 10 07:51:35 2026 GMT
            Not After : Sep 11 10:30:35 2026 GMT
        Subject: CN=2527102E5C3D32862558BF72CFA1D74C533A6D77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:58:71:ca:48:c1:77:40:54:21:1e:11:d3:
                    20:57:20:59:6e:eb:f2:29:d7:75:e8:13:79:49:da:
                    a6:6d:9a:ba:3b:fc:4e:db:ea:1e:15:76:03:20:04:
                    07:7c:11:dd:e9:7b:ef:dd:54:80:52:ee:60:f1:5a:
                    93:75:83:e8:c4:f8:af:4c:2c:ae:fe:46:f4:5c:02:
                    cb:0a:d3:e1:ad:4b:b7:2c:64:ba:48:f4:10:d5:d6:
                    46:97:f1:e9:59:9b:76:aa:4c:03:63:87:80:65:4b:
                    8b:12:d6:74:03:36:ff:31:25:b4:fe:35:89:7e:26:
                    c6:4d:dc:3d:bc:ec:87:d2:9d:2f:67:f9:da:92:04:
                    4d:14:e4:32:2a:82:14:b7:24:5a:aa:c8:88:1b:2a:
                    15:a7:77:78:0c:5b:ab:c5:aa:ad:bd:c1:3c:df:fd:
                    10:44:67:b9:65:1b:36:e9:7e:73:0f:45:23:11:1b:
                    2b:65:d0:07:26:fc:13:7c:8c:a6:c2:42:ec:e8:ad:
                    df:8b:34:99:cb:43:95:8b:be:bb:aa:83:06:18:9d:
                    92:0c:29:f5:05:bc:c5:5d:76:85:f2:98:96:0d:c1:
                    62:8b:4e:7a:e9:9f:f6:99:b2:fb:84:59:07:38:3e:
                    30:db:4b:2c:ac:91:5e:46:cc:bb:66:81:72:f4:d6:
                    82:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:27:10:2E:5C:3D:32:86:25:58:BF:72:CF:A1:D7:4C:53:3A:6D:77
            X509v3 Authority Key Identifier:
                keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ce:ed:fc:53:e1:7f:3f:d0:0e:10:bf:2f:01:b3:a5:0b:c5:
         fe:cb:96:e8:d5:6e:4a:e9:3d:89:4f:72:ac:39:3d:50:fb:ff:
         77:25:e1:1d:af:38:3c:f4:cb:89:ae:25:c9:51:0f:fd:60:53:
         a4:c7:a8:90:32:ed:b3:8d:2d:14:51:5b:a8:ae:8e:0b:37:e2:
         a9:4d:0c:c8:6a:38:60:89:7e:07:a4:cf:9a:26:77:43:81:e0:
         86:55:63:55:ff:ed:ca:bb:30:d3:67:be:2e:47:60:ed:ed:6e:
         32:bc:75:a5:75:c9:da:ed:28:43:16:fa:92:f1:93:f2:d4:9c:
         40:c7:eb:3c:ee:65:1b:52:f9:b1:ed:bf:b2:a9:11:ab:19:b8:
         2f:1d:1c:f9:34:bd:8a:e8:77:eb:ae:e9:db:cb:fe:76:ce:89:
         6a:29:a9:98:e2:0a:10:52:bd:09:a4:d6:ca:3b:41:5b:f5:ee:
         a8:81:a5:aa:ba:18:fb:b1:a4:e3:02:83:70:78:1f:47:4b:e1:
         8b:ea:42:b3:cd:43:59:52:2a:c6:27:7c:c3:91:67:2b:33:98:
         c0:64:62:cf:19:03:0e:83:38:9c:81:a9:dc:aa:ca:cb:56:6e:
         a2:fa:95:20:10:4a:df:80:b1:f1:a4:2a:40:73:e1:64:9b:f3:
         b3:fa:57:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:02:49 2026 by rpki-client