Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
File:                     9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft (raw, json)
Hash identifier:          N8h+56D8Z1R85Zd/p4r2VAviCH8d9W/PYJxkLhftsrY=
Subject key identifier:   5A:99:E2:21:8D:5E:9E:A0:9B:5C:3C:1F:D6:45:D3:3D:12:FA:B8:82
Authority key identifier: 9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD
Certificate issuer:       /CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD
Certificate serial:       719309EDB7F40F5A27579B5C8221435C4AA86A46
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
Manifest number:          42
Signing time:             Fri 19 Jun 2026 18:53:46 +0000
Manifest this update:     Fri 19 Jun 2026 18:48:46 +0000
Manifest next update:     Sat 20 Jun 2026 20:06:46 +0000
Files and hashes:         1: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: wjQlJjUfkbt1n7Rc6SHSm1K1dY+H6SCMIIZnXPYbFUQ=)
                          2: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: ueytpOIHoXmrHTRXDms0z+mkyIFFMatKweHFitzqnbY=)
                          3: 9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl (hash: 8H46aoIKQV+TIeSanwmtywCRdeb5mZjvjK8fWtsZKxI=)
                          4: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: XHc5XJ3BNfkaI/lsgwiIo3VZ/lOhS7oABSPc/TOM6ZY=)
                          5: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: bTctqXrHoddHLmiHRZEAbvepwDnyNZuBmN3yjSF/QUg=)
                          6: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: Yg7MUDs8e7RtjcON84BP67HQDd4RbJW/QQRbIefF+fk=)
                          7: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: 38Xm9PyU4xIsiex90hJwlQrnnXy77AnXzl8H3OHJdtc=)
                          8: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: evwEHBL+Efz58EUm4jU4ct9sLmawRVLDyaUcdYukI+g=)
                          9: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: eE9KfhHZMD39d40KbY7oSEFpRtTmkSjOZgjX7V3PP3E=)
                          10: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: 7UHUG49KeSvdqIfX5Q2/sjN4aSqQC/7iFrJSNv+5Ax4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl
                          rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 20:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:93:09:ed:b7:f4:0f:5a:27:57:9b:5c:82:21:43:5c:4a:a8:6a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD
        Validity
            Not Before: Jun 19 18:48:46 2026 GMT
            Not After : Jun 20 20:06:46 2026 GMT
        Subject: CN=5A99E2218D5E9EA09B5C3C1FD645D33D12FAB882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:ef:08:3a:7d:c1:ac:89:33:73:94:27:59:
                    2e:65:87:f7:71:59:58:c6:b8:2e:34:09:8a:bb:ae:
                    cc:58:98:f0:58:bf:72:db:cd:1b:82:b0:0d:6a:1d:
                    06:46:88:bd:39:4c:79:ce:c1:bb:c9:cf:52:0a:15:
                    45:21:19:03:cb:55:f1:32:77:ad:ab:32:b4:86:f5:
                    c1:bf:a5:12:f9:dc:60:17:53:0b:39:fd:9a:2e:99:
                    eb:52:80:3c:cc:df:b7:49:3d:e8:bb:66:c1:3a:30:
                    a3:12:a5:f0:b9:b8:f0:89:fd:ff:a1:1c:68:77:5d:
                    47:ce:ad:91:8a:03:a7:ad:c5:a6:ce:71:6e:d2:f0:
                    b2:8c:93:a3:02:06:3e:4f:a6:99:1e:3b:3f:69:fd:
                    d6:34:d8:2a:7f:ab:da:94:aa:4d:50:27:4e:74:39:
                    79:dc:0e:b4:1d:2b:6c:27:fc:ec:9a:e8:5e:d5:7a:
                    45:04:8f:ed:80:d1:a6:8f:72:4c:9d:08:73:2e:b9:
                    6e:12:58:11:ac:e7:9a:ac:e4:37:c1:b0:02:66:15:
                    d2:43:c2:21:4a:cf:56:aa:f8:f8:18:45:b6:85:1c:
                    d7:61:a9:03:50:66:cb:02:da:a5:ca:14:84:d1:b1:
                    04:1f:ae:75:75:ba:5a:03:ed:91:4c:dc:89:74:8c:
                    7c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:99:E2:21:8D:5E:9E:A0:9B:5C:3C:1F:D6:45:D3:3D:12:FA:B8:82
            X509v3 Authority Key Identifier:
                keyid:9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:41:22:d1:e3:2a:e7:4b:82:f3:84:d7:0f:57:2a:40:af:f7:
         81:4e:8f:9f:19:6c:9e:af:da:e8:99:9b:d3:c9:5a:76:87:af:
         cc:10:cb:4d:86:67:24:f6:64:62:ad:d5:44:08:7f:96:85:d0:
         5b:60:19:78:e9:3b:ee:7c:3a:fe:f8:a9:8a:20:a5:06:95:13:
         38:fa:31:7b:e3:f2:a7:26:24:6d:5c:56:08:f1:8e:f9:30:b2:
         44:4c:73:5c:32:4a:e3:66:55:c6:3f:40:7a:ea:e9:4d:89:a4:
         9b:83:db:95:3f:1d:3b:ec:0c:95:91:c8:73:5a:eb:7a:78:2e:
         e6:53:71:4a:3b:b2:9b:18:a7:5a:8d:ee:f1:78:24:61:d3:08:
         e1:80:ec:93:03:84:24:95:cf:04:af:54:b7:76:23:c6:19:b0:
         ec:88:ea:2b:0b:23:88:d8:06:2e:c1:29:c8:ee:0f:f1:54:ba:
         32:f8:e3:ae:57:7f:3b:f7:8e:95:46:e1:ed:60:e0:88:92:37:
         37:43:56:5e:09:63:01:22:a2:9e:7a:41:f9:2e:21:d7:79:c1:
         30:c1:3c:b7:ac:e4:42:74:1f:02:00:e9:14:aa:f5:8d:50:e4:
         c2:4b:11:54:e8:ff:56:67:c7:a1:f4:87:18:04:00:b9:63:59:
         d5:c7:b4:4c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcZMJ7bf0D1onV5tcgiFDXEqoakYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYyRDQ3QzI3QTA0NjY2NDdDOUE4RkFGMjQ2QUM4NUE5
RjJCMUZCRDAeFw0yNjA2MTkxODQ4NDZaFw0yNjA2MjAyMDA2NDZaMDMxMTAvBgNV
BAMTKDVBOTlFMjIxOEQ1RTlFQTA5QjVDM0MxRkQ2NDVEMzNEMTJGQUI4ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7cu8IOn3BrIkzc5QnWS5lh/dx
WVjGuC40CYq7rsxYmPBYv3LbzRuCsA1qHQZGiL05THnOwbvJz1IKFUUhGQPLVfEy
d62rMrSG9cG/pRL53GAXUws5/ZoumetSgDzM37dJPei7ZsE6MKMSpfC5uPCJ/f+h
HGh3XUfOrZGKA6etxabOcW7S8LKMk6MCBj5PppkeOz9p/dY02Cp/q9qUqk1QJ050
OXncDrQdK2wn/Oya6F7VekUEj+2A0aaPckydCHMuuW4SWBGs55qs5DfBsAJmFdJD
wiFKz1aq+PgYRbaFHNdhqQNQZssC2qXKFITRsQQfrnV1uloD7ZFM3Il0jHxPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWpniIY1enqCbXDwf1kXTPRL6uIIwHwYDVR0j
BBgwFoAUny1HwnoEZmR8mo+vJGrIWp8rH70wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzIyOTc4MWEtOGFjOS00NDUyLWIyNWYtNTRlN2VkZjdkNGE0LzAvOUYyRDQ3QzI3
QTA0NjY2NDdDOUE4RkFGMjQ2QUM4NUE5RjJCMUZCRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85RjJENDdDMjdBMDQ2NjY0N0M5QThGQUYyNDZBQzg1QTlGMkIx
RkJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy
NWYtNTRlN2VkZjdkNGE0LzAvOUYyRDQ3QzI3QTA0NjY2NDdDOUE4RkFGMjQ2QUM4
NUE5RjJCMUZCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJZBItHjKudLgvOE1w9XKkCv94FOj58ZbJ6v
2uiZm9PJWnaHr8wQy02GZyT2ZGKt1UQIf5aF0FtgGXjpO+58Ov74qYogpQaVEzj6
MXvj8qcmJG1cVgjxjvkwskRMc1wySuNmVcY/QHrq6U2JpJuD25U/HTvsDJWRyHNa
63p4LuZTcUo7spsYp1qN7vF4JGHTCOGA7JMDhCSVzwSvVLd2I8YZsOyI6isLI4jY
Bi7BKcjuD/FUujL4465Xfzv3jpVG4e1g4IiSNzdDVl4JYwEiop56QfkuIdd5wTDB
PLes5EJ0HwIA6RSq9Y1Q5MJLEVTo/1Znx6H0hxgEALljWdXHtEw=
-----END CERTIFICATE-----
Generated at Sat Jun 20 09:00:01 2026 by rpki-client