Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
File:                     04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft (raw, json)
Hash identifier:          f71+cKamC4TBd6Yvp5cFWkwkVuQ5GpiGqtRp5SWQ01o=
Subject key identifier:   17:50:5D:DE:E0:00:DF:44:D8:18:1C:11:F4:18:4D:4E:A7:48:16:28
Authority key identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93
Certificate issuer:       /CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993
Certificate serial:       17C21D552F53CB8256BEF6D7E4D0820CF818C443
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
Manifest number:          E9
Signing time:             Sun 25 Oct 2026 03:48:39 +0000
Manifest this update:     Sun 25 Oct 2026 03:43:39 +0000
Manifest next update:     Mon 26 Oct 2026 07:18:39 +0000
Files and hashes:         1: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: FB0gJNbI9gb2zm9vAMp0QwCkUB/Jt+h+ezAWp0ZQAY4=)
                          2: 323430313a316430303a3a2f33322d3438203d3e203338353035.roa (hash: 6BMdJfjQOk6ZMP+r3PWXA1452jn4jTz5h082fXgG9S4=)
                          3: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: U8aX+Se6czCWSw8AT++C8Q2LboeUeYibiDJAjvnWwyg=)
                          4: 04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl (hash: aVkeqc7WBv/2jqjP91ikrnnNRhQ5Mq/uy72twqVjv+c=)
                          5: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: mnaX8OyQaRRI+TIyOqMa6qm7Y6uLOjvzrF8R5k5MsjU=)
                          6: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: +N9+uIvrbV+jDpFQEoLWVMjE7Tiq4ZoJyUrk8aQRIxU=)
                          7: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: oVIkdyLyFS+O6KZi8z7bLz7e36SBDG2DA+r6DHbMRLY=)
                          8: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: X3p+VR9fHu2hyTBK0FsVrH6VXDfYDH8j4Zpx8G4MzCs=)
                          9: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: D63R0HJY3dfFSWeAvX/hnIAUP8j3QRAbibvDX3rchmw=)
                          10: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: HsxEHeytaLeXbzMYkGNZ4CxQC7x6cG09R70sugNWXM0=)
                          11: 3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa (hash: DkvTwpRqRkCZlooRpiKY2+Wy5hBTCQFkxeE1RiY6Adw=)
                          12: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: E7icouKmlM2nRKVKG7S5JwzSzIgKbeMao7gLF/MZ7HU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl
                          rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 07:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c2:1d:55:2f:53:cb:82:56:be:f6:d7:e4:d0:82:0c:f8:18:c4:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993
        Validity
            Not Before: Oct 25 03:43:39 2026 GMT
            Not After : Oct 26 07:18:39 2026 GMT
        Subject: CN=17505DDEE000DF44D8181C11F4184D4EA7481628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:70:c0:5b:cd:4b:f4:51:bd:bb:b5:4f:b2:
                    eb:d2:93:d1:39:24:c8:e0:08:97:fb:dc:e5:71:a1:
                    9f:f0:60:03:9e:8f:6a:57:31:1e:ad:74:21:ec:8c:
                    68:84:0b:7f:ba:8d:f7:63:8c:80:c4:e2:1c:39:09:
                    5c:23:94:eb:50:d9:7b:59:23:fd:02:e1:1a:dc:dc:
                    fd:33:81:9d:31:78:dd:92:2a:93:2d:88:71:9e:73:
                    61:84:dd:48:3b:45:0b:dc:d2:6b:ec:85:60:e9:dc:
                    72:f3:13:3b:bc:ac:ac:77:bb:fd:e6:dd:c0:7b:43:
                    1d:7c:74:2f:99:ed:10:e6:f4:c2:0a:df:e4:a3:fc:
                    1b:8b:c1:87:2d:a4:a9:cd:8f:16:4f:2a:13:d6:78:
                    03:08:cd:8e:59:5b:d8:37:52:8e:b0:e6:18:d2:21:
                    72:07:bc:41:72:83:ca:c5:33:3c:6c:41:c1:d5:ae:
                    9c:c6:ed:e5:67:f3:c6:4c:6d:2f:92:5c:74:ee:d0:
                    ad:92:60:e1:0c:9b:45:f4:02:fd:15:ff:f9:11:7c:
                    d0:52:fe:6c:35:c2:27:0c:2c:a7:dc:54:f2:cf:1b:
                    1d:ac:fd:3b:60:e8:50:22:d3:a3:22:51:f0:1f:47:
                    91:9e:5e:55:2d:d7:f1:f4:47:11:02:9c:79:ee:1e:
                    90:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:50:5D:DE:E0:00:DF:44:D8:18:1C:11:F4:18:4D:4E:A7:48:16:28
            X509v3 Authority Key Identifier:
                keyid:04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:de:7d:2e:1e:8e:08:91:97:5f:9d:b4:1a:c6:14:c2:67:47:
         a6:37:72:41:06:8e:3a:45:af:98:d9:fb:0f:58:4d:fa:2c:05:
         ca:f0:d3:b2:5e:c1:1d:cd:b0:ec:1e:d5:c6:a4:03:53:ba:21:
         04:17:cf:01:56:8e:ea:c6:fd:c4:a7:3f:61:c4:84:59:7f:d1:
         ea:cb:db:58:f9:ed:7b:a2:15:89:da:9e:75:08:e5:f0:93:92:
         6a:e6:71:0d:98:6a:bb:63:33:91:b0:33:f4:6b:e0:0b:f9:cc:
         82:05:a1:d0:6f:6f:dd:72:e4:c6:b5:c9:95:b2:76:1d:94:73:
         0a:e4:6e:2a:62:39:54:66:0f:a7:1e:fd:92:ab:17:29:6f:f2:
         24:35:05:48:a3:6b:5f:1b:ae:e7:d1:26:47:4c:d9:03:61:99:
         ce:25:b4:7e:b3:15:ce:0b:93:43:d2:e0:db:02:34:73:3b:73:
         b6:98:8b:84:ec:a6:4a:dd:e2:7d:b2:76:fb:ba:57:0f:12:6e:
         e8:d3:c7:d0:e5:96:eb:99:a5:9e:80:11:36:8a:88:7f:bf:a8:
         3e:5c:fb:4b:d0:96:c3:1c:3d:28:e1:2b:97:83:c3:42:f0:12:
         df:a9:11:6e:35:cb:c4:8e:09:1e:57:00:bd:97:d9:f6:a3:1d:
         10:ce:4a:27
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUF8IdVS9Ty4JWvvbX5NCCDPgYxEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRDOEVGNkY1MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4
RTdDNDk5MzAeFw0yNjEwMjUwMzQzMzlaFw0yNjEwMjYwNzE4MzlaMDMxMTAvBgNV
BAMTKDE3NTA1RERFRTAwMERGNDREODE4MUMxMUY0MTg0RDRFQTc0ODE2MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/nDAW81L9FG9u7VPsuvSk9E5
JMjgCJf73OVxoZ/wYAOej2pXMR6tdCHsjGiEC3+6jfdjjIDE4hw5CVwjlOtQ2XtZ
I/0C4Rrc3P0zgZ0xeN2SKpMtiHGec2GE3Ug7RQvc0mvshWDp3HLzEzu8rKx3u/3m
3cB7Qx18dC+Z7RDm9MIK3+Sj/BuLwYctpKnNjxZPKhPWeAMIzY5ZW9g3Uo6w5hjS
IXIHvEFyg8rFMzxsQcHVrpzG7eVn88ZMbS+SXHTu0K2SYOEMm0X0Av0V//kRfNBS
/mw1wicMLKfcVPLPGx2s/Ttg6FAi06MiUfAfR5GeXlUt1/H0RxECnHnuHpDZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUF1Bd3uAA30TYGBwR9BhNTqdIFigwHwYDVR0j
BBgwFoAUBMjvb1Jg/aBmYdnpUwRXK458SZMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODNkMDc4NmQtM2QzZS00NWI3LTk2NjUtOGQ0NzRmZDE0YWVhLzAvMDRDOEVGNkY1
MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4RTdDNDk5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wNEM4RUY2RjUyNjBGREEwNjY2MUQ5RTk1MzA0NTcyQjhFN0M0
OTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNkMDc4NmQtM2QzZS00NWI3LTk2
NjUtOGQ0NzRmZDE0YWVhLzAvMDRDOEVGNkY1MjYwRkRBMDY2NjFEOUU5NTMwNDU3
MkI4RTdDNDk5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJjefS4ejgiRl1+dtBrGFMJnR6Y3ckEGjjpF
r5jZ+w9YTfosBcrw07JewR3NsOwe1cakA1O6IQQXzwFWjurG/cSnP2HEhFl/0erL
21j57XuiFYnannUI5fCTkmrmcQ2YartjM5GwM/Rr4Av5zIIFodBvb91y5Ma1yZWy
dh2UcwrkbipiOVRmD6ce/ZKrFylv8iQ1BUija18brufRJkdM2QNhmc4ltH6zFc4L
k0PS4NsCNHM7c7aYi4Tspkrd4n2ydvu6Vw8SbujTx9DlluuZpZ6AETaKiH+/qD5c
+0vQlsMcPSjhK5eDw0LwEt+pEW41y8SOCR5XAL2X2fajHRDOSic=
-----END CERTIFICATE-----
Generated at Sun Oct 25 23:25:37 2026 by rpki-client