Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
File:                     F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft (raw, json)
Hash identifier:          XHW70HPQDiMeHVhgmFKFpGJ3LCIymFzRDVFlv5BF1MQ=
Subject key identifier:   CF:6F:F1:5A:10:3D:26:67:4A:54:97:C2:BE:75:1D:66:80:74:9F:0A
Authority key identifier: F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF
Certificate issuer:       /CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF
Certificate serial:       3761C43F869924452B625A3D5F0C0D409180F7E0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
Manifest number:          B8
Signing time:             Wed 16 Sep 2026 16:49:56 +0000
Manifest this update:     Wed 16 Sep 2026 16:44:56 +0000
Manifest next update:     Thu 17 Sep 2026 20:06:56 +0000
Files and hashes:         1: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: rEzu4P6oExwIZaANS5DV2R8BJmVkjCXI7g7sPguv5ho=)
                          2: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: RCVkQO3x+P4RF48TeYaUmpS+R/Zp+Q7sEuYMIANrgmM=)
                          3: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: 5CWw2ztPAElFuqMvrZ+eExbk4B2mKb785wpbROO/cwI=)
                          4: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: C2/pGzPkMt5Vzcyvrqnbj1Bb56h29NNTc3/kAwJYyFk=)
                          5: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: PHP1IFXfqbi+BOlMH5y7xyleYHrhQYI+Lt+NZxh64LQ=)
                          6: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: DQ6rpEJu+zPKG4c6tffclYxCxiCj2KQBdnnwehsPRoM=)
                          7: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: c0E9xb18G6dDWSOYbp1L8pfGiJXjXDV9gaUGsFzHbYc=)
                          8: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: 64HGWL2CzebN7GmYL8lPadZ2nwJ3zX055oQRPQondo0=)
                          9: F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl (hash: k3uROzjbKmypeeUScqZblal7W0tTjQCkyCAdCgxkpzI=)
                          10: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: JVzJjBAyxQLaPhKhqz1LXrJdrQUjLBthYVZyc/xVxg0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl
                          rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 20:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:61:c4:3f:86:99:24:45:2b:62:5a:3d:5f:0c:0d:40:91:80:f7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF
        Validity
            Not Before: Sep 16 16:44:56 2026 GMT
            Not After : Sep 17 20:06:56 2026 GMT
        Subject: CN=CF6FF15A103D26674A5497C2BE751D6680749F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4d:68:53:c0:f3:70:9a:0c:fa:25:fd:ec:51:
                    72:2f:e9:12:4b:17:e5:ad:6a:51:18:1b:d9:92:7a:
                    34:65:71:73:1b:df:b1:74:b2:56:ec:fc:c3:56:89:
                    b8:7e:da:66:34:de:31:b3:06:9d:58:b9:86:f8:1a:
                    8a:f7:be:4a:58:78:ba:a3:95:50:bf:fd:c1:d2:57:
                    23:18:04:ac:a8:2c:c8:ee:b9:10:8d:4c:78:51:1f:
                    8b:25:99:51:a2:55:b6:83:9b:b8:d7:76:cb:d8:e5:
                    43:e4:0b:6e:03:81:0b:90:da:19:9c:d4:77:ab:8a:
                    b7:d8:9b:a4:d8:fc:ca:8b:84:4c:e5:d7:00:ee:63:
                    92:95:17:c2:3f:92:f0:2b:4e:df:89:c8:12:11:d3:
                    b5:8e:2d:2a:d4:06:4d:ea:48:ee:d8:78:91:38:2d:
                    75:df:ae:12:24:ec:85:1d:32:0f:94:d6:7c:25:b1:
                    39:dd:f1:10:43:4c:1a:d2:fd:b2:0b:6a:94:76:1f:
                    03:3e:3d:b6:20:38:50:e5:3d:41:06:7e:a8:be:62:
                    be:df:d6:ad:d2:d5:65:94:70:e4:10:97:d2:d0:b1:
                    bf:80:f1:54:10:f9:6b:6a:c9:bd:0f:31:77:d6:b7:
                    5f:64:d9:34:98:14:fd:6f:1f:72:af:c3:0e:d1:e3:
                    c2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6F:F1:5A:10:3D:26:67:4A:54:97:C2:BE:75:1D:66:80:74:9F:0A
            X509v3 Authority Key Identifier:
                keyid:F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d1:46:19:a7:91:f3:88:ea:6e:8d:5f:47:fa:e0:f4:0f:d3:
         61:e5:ba:0d:61:de:ad:d4:2e:f7:10:24:26:64:79:b2:13:5e:
         ae:e6:53:b1:5c:4e:7c:20:86:ff:65:bf:ce:15:89:f7:a0:88:
         72:71:8d:c7:87:23:10:e3:89:c7:9e:7f:41:9c:83:98:d4:8e:
         8d:b1:73:67:ac:a4:c6:1e:ac:20:c4:d3:b5:e1:8f:d9:40:19:
         d5:fb:5a:55:c2:54:91:ec:60:ed:1a:a8:c5:d6:4a:1a:32:79:
         27:f6:b9:df:9f:79:eb:f2:37:35:59:07:43:3e:63:ab:2b:d3:
         86:b8:92:15:88:7b:39:b3:c8:64:1b:f8:d6:e9:1d:f6:b8:d1:
         78:1c:ed:ef:e6:d8:2a:1e:45:6d:b4:2a:6d:4d:03:d7:d8:9e:
         27:32:58:98:aa:99:aa:4d:29:58:83:21:ea:93:5e:e2:52:b7:
         f1:05:04:37:cb:96:9d:ab:81:63:95:39:7c:25:08:45:bb:e8:
         53:c4:45:22:b2:b9:d1:08:90:65:13:bd:fe:9b:a5:14:4b:20:
         2c:a7:78:20:66:b0:d5:97:b7:c3:ab:e0:36:0e:16:3a:b1:7a:
         5a:ed:bb:c5:02:2c:97:05:17:31:c8:f0:2f:3f:30:2b:dd:cb:
         67:b2:29:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 08:26:50 2026 by rpki-client