Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
File:                     9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft (raw, json)
Hash identifier:          h4F6whKzIOkKBxeAzFDZa/4c8n5bbjVB+6V4IuA7Z+A=
Subject key identifier:   ED:C7:FC:A9:00:FF:DB:E4:58:B2:0F:29:F0:3D:FC:84:D6:80:97:F3
Authority key identifier: 9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD
Certificate issuer:       /CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD
Certificate serial:       75B3304F8E532FDA9E9AAE775960FAFDCCDC1120
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
Manifest number:          EA
Signing time:             Sat 24 Oct 2026 02:47:35 +0000
Manifest this update:     Sat 24 Oct 2026 02:42:35 +0000
Manifest next update:     Sun 25 Oct 2026 03:52:35 +0000
Files and hashes:         1: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: wjQlJjUfkbt1n7Rc6SHSm1K1dY+H6SCMIIZnXPYbFUQ=)
                          2: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: 7UHUG49KeSvdqIfX5Q2/sjN4aSqQC/7iFrJSNv+5Ax4=)
                          3: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: bTctqXrHoddHLmiHRZEAbvepwDnyNZuBmN3yjSF/QUg=)
                          4: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: Yg7MUDs8e7RtjcON84BP67HQDd4RbJW/QQRbIefF+fk=)
                          5: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: eE9KfhHZMD39d40KbY7oSEFpRtTmkSjOZgjX7V3PP3E=)
                          6: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: evwEHBL+Efz58EUm4jU4ct9sLmawRVLDyaUcdYukI+g=)
                          7: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: XHc5XJ3BNfkaI/lsgwiIo3VZ/lOhS7oABSPc/TOM6ZY=)
                          8: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: 38Xm9PyU4xIsiex90hJwlQrnnXy77AnXzl8H3OHJdtc=)
                          9: 9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl (hash: fMG7/XZx7W2JUOq5ueYM4Sv8kvs25Pafym6Dfqma+xU=)
                          10: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: ueytpOIHoXmrHTRXDms0z+mkyIFFMatKweHFitzqnbY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl
                          rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 03:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b3:30:4f:8e:53:2f:da:9e:9a:ae:77:59:60:fa:fd:cc:dc:11:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD
        Validity
            Not Before: Oct 24 02:42:35 2026 GMT
            Not After : Oct 25 03:52:35 2026 GMT
        Subject: CN=EDC7FCA900FFDBE458B20F29F03DFC84D68097F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c3:ae:d4:73:69:9f:b8:95:5d:68:df:bc:c6:
                    3b:eb:27:a7:8e:3d:a0:c9:7d:aa:08:d8:25:59:0f:
                    da:8a:2e:94:16:e8:eb:4d:cc:d0:eb:45:b6:a1:dd:
                    ea:6c:6d:d2:c4:f2:89:78:be:c1:f0:fd:e2:78:fe:
                    5d:b6:e6:eb:2f:ac:20:4e:c5:e0:b5:5c:fc:1b:30:
                    3c:e7:2c:1b:b5:e4:6a:86:cc:29:8d:6e:e9:20:56:
                    50:93:2a:3f:79:ed:79:65:a1:51:7b:81:7c:cf:53:
                    c8:17:78:fb:a7:c9:86:8c:2b:49:db:dc:88:0d:de:
                    5d:72:f8:27:84:19:97:46:82:79:2b:1c:f5:c2:b0:
                    56:48:0a:5f:fa:4e:bc:74:f9:0d:9b:40:71:bd:39:
                    f1:5f:f1:38:49:db:40:7f:0c:7b:d1:b4:ec:d0:06:
                    51:a8:10:ab:17:1f:07:b7:c0:31:7e:2b:95:e6:fd:
                    51:2f:93:9c:02:5c:5e:7c:ad:94:ef:67:b8:ab:f8:
                    64:1a:8f:59:ff:c9:fa:1d:15:73:a8:81:00:a4:69:
                    a2:a8:a5:2e:5f:f0:8a:64:71:54:a3:10:46:69:93:
                    09:90:9b:11:82:4a:f0:d5:c9:e9:05:bb:6e:b1:57:
                    1c:ce:ab:95:69:9d:48:7e:59:f5:60:b8:81:47:31:
                    55:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C7:FC:A9:00:FF:DB:E4:58:B2:0F:29:F0:3D:FC:84:D6:80:97:F3
            X509v3 Authority Key Identifier:
                keyid:9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3f:b2:7d:21:2b:20:4e:bc:db:f4:d9:13:07:31:58:53:9e:
         77:a8:d1:fa:3c:86:18:51:fd:16:6f:cd:87:c3:40:6b:bf:f2:
         0a:61:f2:18:bd:31:b7:72:d2:e5:56:3d:24:99:0a:36:c4:e1:
         92:32:71:0d:6d:73:98:29:03:38:ee:43:60:e2:28:7b:38:68:
         87:4f:d1:25:3a:9a:3e:a7:ed:ca:b2:96:cb:0c:98:06:b5:36:
         81:c7:19:55:f1:da:f5:58:5f:47:34:77:e8:f4:70:4a:27:2a:
         56:8a:10:f4:ba:1c:ce:78:77:97:18:f9:d4:7e:13:ab:b0:d9:
         04:10:c7:c3:2f:74:2a:42:ff:80:99:04:bf:31:49:96:ab:a3:
         fe:14:0b:7b:6d:c9:5a:2d:47:10:2a:b8:8b:dc:cb:dc:d6:91:
         50:40:3f:67:36:40:8f:50:75:00:d2:84:82:4d:de:85:af:94:
         2f:2e:69:bf:32:69:ef:c4:56:cf:40:f6:30:e1:b3:7f:60:03:
         3b:98:e5:fc:5a:7d:25:e5:88:b9:6c:a4:f2:a6:61:7e:7d:68:
         76:04:4a:46:b7:2d:82:29:f4:d8:67:a6:28:65:a6:7a:30:9c:
         2d:b5:d8:8c:09:94:8d:81:68:05:01:5f:ef:3a:c9:e4:e1:70:
         e2:be:2d:21
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdbMwT45TL9qemq53WWD6/czcESAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYyRDQ3QzI3QTA0NjY2NDdDOUE4RkFGMjQ2QUM4NUE5
RjJCMUZCRDAeFw0yNjEwMjQwMjQyMzVaFw0yNjEwMjUwMzUyMzVaMDMxMTAvBgNV
BAMTKEVEQzdGQ0E5MDBGRkRCRTQ1OEIyMEYyOUYwM0RGQzg0RDY4MDk3RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaw67Uc2mfuJVdaN+8xjvrJ6eO
PaDJfaoI2CVZD9qKLpQW6OtNzNDrRbah3epsbdLE8ol4vsHw/eJ4/l225usvrCBO
xeC1XPwbMDznLBu15GqGzCmNbukgVlCTKj957XlloVF7gXzPU8gXePunyYaMK0nb
3IgN3l1y+CeEGZdGgnkrHPXCsFZICl/6Trx0+Q2bQHG9OfFf8ThJ20B/DHvRtOzQ
BlGoEKsXHwe3wDF+K5Xm/VEvk5wCXF58rZTvZ7ir+GQaj1n/yfodFXOogQCkaaKo
pS5f8IpkcVSjEEZpkwmQmxGCSvDVyekFu26xVxzOq5VpnUh+WfVguIFHMVV/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU7cf8qQD/2+RYsg8p8D38hNaAl/MwHwYDVR0j
BBgwFoAUny1HwnoEZmR8mo+vJGrIWp8rH70wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzIyOTc4MWEtOGFjOS00NDUyLWIyNWYtNTRlN2VkZjdkNGE0LzAvOUYyRDQ3QzI3
QTA0NjY2NDdDOUE4RkFGMjQ2QUM4NUE5RjJCMUZCRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85RjJENDdDMjdBMDQ2NjY0N0M5QThGQUYyNDZBQzg1QTlGMkIx
RkJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy
NWYtNTRlN2VkZjdkNGE0LzAvOUYyRDQ3QzI3QTA0NjY2NDdDOUE4RkFGMjQ2QUM4
NUE5RjJCMUZCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFo/sn0hKyBOvNv02RMHMVhTnneo0fo8hhhR
/RZvzYfDQGu/8gph8hi9Mbdy0uVWPSSZCjbE4ZIycQ1tc5gpAzjuQ2DiKHs4aIdP
0SU6mj6n7cqylssMmAa1NoHHGVXx2vVYX0c0d+j0cEonKlaKEPS6HM54d5cY+dR+
E6uw2QQQx8MvdCpC/4CZBL8xSZaro/4UC3ttyVotRxAquIvcy9zWkVBAP2c2QI9Q
dQDShIJN3oWvlC8uab8yae/EVs9A9jDhs39gAzuY5fxafSXliLlspPKmYX59aHYE
Ska3LYIp9NhnpihlpnownC212IwJlI2BaAUBX+86yeThcOK+LSE=
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:44:41 2026 by rpki-client