Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
File:                     99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft (raw, json)
Hash identifier:          NEfSH8QmVEE/qPr03ki9gcmDPG7nRDTrFyLaIShtt5E=
Subject key identifier:   DF:40:F4:E1:A5:DD:BA:6A:FE:14:77:C4:01:E8:7C:BD:49:06:0B:33
Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
Certificate issuer:       /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Certificate serial:       0635BFB59890B0B6A1C086E1C4F90CD515231B55
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
Manifest number:          ED
Signing time:             Sun 25 Oct 2026 17:02:54 +0000
Manifest this update:     Sun 25 Oct 2026 16:57:54 +0000
Manifest next update:     Mon 26 Oct 2026 20:29:54 +0000
Files and hashes:         1: 3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa (hash: s0tvtnOzBx2wg+4vUHWBA8KcfOBbxN88qTxKuGgJguU=)
                          2: 323430343a3838303a31323a3a2f34382d3438203d3e203338373530.roa (hash: QNrAoCsUOKZCnY1N/fc3km7EG9A1f+dPgBphZu0nJbw=)
                          3: 3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa (hash: UKS72Ik2t69VNkZx10eznMiDop94XfhDTWq/cxqZMcs=)
                          4: 3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa (hash: JSpaszPWtP5AqDUfpY+T4zXizj7Q33fbh+pedpw+rSQ=)
                          5: 323430343a3838303a3a2f34382d3438203d3e203338373530.roa (hash: VgQXPBS32nNSzlwVl57OwsniexA2zZE5SydGF9v31zc=)
                          6: 3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa (hash: REpKs/RXrD6+kSVY+pi8I08ad5JiVlI+VsKG+qhKX6I=)
                          7: 3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa (hash: PRboNqucT4aVoRVOc4nRu3lOYaSHw3BpjErOfcflPnE=)
                          8: 3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa (hash: Aetna6+21CQMAQqjAiUJIu47yG7i7XqoQJ5+dzrZLGg=)
                          9: 3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa (hash: wtJefws1IQawoe8yb4jVgj5X5P3cewMGRSuqKr8w5/I=)
                          10: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (hash: 7tVf8gGpMSKXIGs5t/hRwc2QOWzsG/fnuruBADT3qTU=)
                          11: 99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl (hash: TiO0AZYQOF4nkVwb3sSXkO5kH0A7x8FlAvTfsq6X/u0=)
                          12: 3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa (hash: P+T4tPAca5KIeh3NpH+v8b7bFtAY7StYgksmfQ3/9cM=)
                          13: 3130332e3231332e3131382e302f32332d3233203d3e203338373530.roa (hash: 9TeQcqWDARNn53jqbj5jMqu8OaGQOBp3BzElbwHdS0o=)
                          14: 3230322e3137392e3138362e302f32342d3234203d3e203338373530.roa (hash: AzT5TPIp9fZ7Lzw08VDmHNbwLWKNghx+Y7H+VOnzBzQ=)
                          15: 3230322e3137392e3138372e302f32342d3234203d3e203338373530.roa (hash: jzsgtTn7mipYVhReFlEPzAsVetPtmxUsBitMhsGc8oI=)
                          16: 3230322e3137392e3139302e302f32332d3233203d3e203338373530.roa (hash: /g2f6okgGj8HKNPWnvqkUbF7FmFrL81D5X1Q6gvNPZk=)
                          17: 323430343a3838303a31303a3a2f34382d3438203d3e203338373530.roa (hash: YRbfvStJ8Xz50EBiTCoGlectFVsjTE1eI7CsInhJEBw=)
                          18: 3130332e3231332e3131372e302f32342d3234203d3e203338373530.roa (hash: MlpXJYuG8TKs4UXbWN+4r8Aq3XSuZvsK0qVMIYngvjU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
                          rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:35:bf:b5:98:90:b0:b6:a1:c0:86:e1:c4:f9:0c:d5:15:23:1b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
        Validity
            Not Before: Oct 25 16:57:54 2026 GMT
            Not After : Oct 26 20:29:54 2026 GMT
        Subject: CN=DF40F4E1A5DDBA6AFE1477C401E87CBD49060B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:81:90:b1:d6:2d:7f:ad:1b:56:57:34:ef:3f:
                    b6:ce:85:2d:25:4f:ce:91:7b:4a:cc:92:27:e6:c6:
                    b3:ae:5c:f7:7e:ac:10:30:e1:62:d8:77:a9:30:13:
                    4e:d7:dc:03:53:be:e8:e8:5a:78:9c:be:dc:a3:64:
                    05:b3:f3:61:5d:36:fb:27:e4:59:a4:df:86:71:bd:
                    84:1e:47:60:4e:9e:dc:7d:9c:b8:85:14:8c:90:e7:
                    87:cc:43:cf:d0:1f:e6:4f:fc:f4:da:00:37:19:d7:
                    25:d0:5a:52:7a:1f:54:c2:17:e4:44:6a:b6:f2:d0:
                    0e:fd:45:c4:fa:b7:36:f7:f0:cf:90:5d:21:f3:be:
                    ca:33:e1:3c:df:14:31:bc:dd:97:00:db:92:f1:0b:
                    fb:89:4d:3d:54:00:e2:91:89:c9:56:d7:9c:d1:8f:
                    c7:f4:76:dc:2d:b4:48:8c:18:9f:68:7a:c7:50:2f:
                    a6:04:cf:d3:d9:dd:ac:ce:ea:17:cf:b2:6f:32:68:
                    9c:0b:e9:14:d9:a8:39:e2:c3:a7:f9:89:89:1f:7c:
                    90:8f:32:2b:23:c3:6b:85:98:d3:16:57:d7:b6:5e:
                    6b:2e:0f:be:83:6a:b9:29:ea:c3:cc:36:7c:43:94:
                    c0:66:83:8f:09:a7:76:d4:35:e3:02:f9:e1:03:5c:
                    2f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:40:F4:E1:A5:DD:BA:6A:FE:14:77:C4:01:E8:7C:BD:49:06:0B:33
            X509v3 Authority Key Identifier:
                keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f6:49:22:e3:d3:e0:4b:92:ce:c3:48:6a:f6:5d:d3:06:28:
         8d:ff:1f:45:c2:91:3e:54:28:65:38:d8:a0:c3:ce:9e:97:6f:
         18:7b:5e:bb:52:7d:94:90:9c:0a:b8:17:3d:74:c7:92:1a:57:
         5f:74:7d:5d:7d:82:04:f3:c5:5c:54:1d:5d:e9:52:97:22:18:
         8a:00:0a:c3:3f:71:21:de:aa:cf:1d:ab:ed:cc:a8:a5:42:70:
         27:78:e0:16:65:5d:56:27:76:d1:d3:98:39:f4:fd:bc:c1:d8:
         07:c5:0d:c4:61:a3:2d:13:3c:2a:2d:ab:40:8f:20:40:a3:ec:
         42:f9:bf:37:69:36:fe:0d:09:ca:51:4b:cc:b3:fd:27:9b:87:
         38:d4:8c:ca:03:0b:b5:be:5f:78:fc:20:08:93:ef:4a:e9:35:
         4c:33:77:fa:53:99:34:f4:81:aa:bd:d8:95:44:1c:39:17:57:
         d4:40:ff:8a:dd:84:63:38:a8:4c:2d:2e:2f:0f:3e:ad:6c:00:
         e4:ed:cd:38:b2:df:85:83:d4:fc:29:32:0d:a3:f9:7c:be:80:
         ee:b4:cf:89:55:c2:fa:8a:b8:6f:1d:32:60:44:b1:4a:bf:8e:
         c7:36:3d:a0:ca:f5:da:04:09:d0:8e:ff:df:44:20:54:9d:cb:
         4c:b6:4c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:05:02 2026 by rpki-client