Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
File:                     F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft (raw, json)
Hash identifier:          MFo1QA5TtyvFptWAhiQozWYT0fGCEubP2r1PNKP8u00=
Subject key identifier:   23:23:B2:88:66:8A:2B:D0:13:FD:E0:D8:D6:BF:81:14:B7:CF:87:55
Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
Certificate issuer:       /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Certificate serial:       4708FACD276E3ADC1CC2B885231FBFBBE798119C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
Manifest number:          11DD
Signing time:             Sat 20 Jun 2026 09:16:23 +0000
Manifest this update:     Sat 20 Jun 2026 09:11:23 +0000
Manifest next update:     Sun 21 Jun 2026 11:43:23 +0000
Files and hashes:         1: 3135312e3135382e38322e302f32332d3234203d3e20313534353337.roa (hash: /EQh7qiYa71VUGjV3Zf7X0Yu8GoGKgMCvZHxTHwAUIc=)
                          2: 3135312e3135382e3138372e302f32342d3234203d3e20313432353434.roa (hash: hM3eAzptPprh5ZTzzCeV9frMtEbvN9yPdu2L330+XpY=)
                          3: 3135312e3135382e34322e302f32332d3234203d3e20313534343935.roa (hash: UsQcK7u4ovVqhPl6ugCIkTgy2rqWQpA+Gb6/heR8fMQ=)
                          4: 3135312e3135382e3233392e302f32342d3234203d3e20313534353238.roa (hash: rsgLkVZ7ASQkDorSMSGJsm/yhf9qJ/kLL4PzZ1Ecuew=)
                          5: 3135312e3135382e3234302e302f32332d3234203d3e20313534353237.roa (hash: +jxiZuVDvVJb0gZO08c6gVEhC1lfYEQPJlUGotAmVxk=)
                          6: CD846D565A6E2859697B59C438907050C12DE37D.cer (hash: 6CN90lTrLRk5hg+hADC3XlD75i0dqjeqZqyWiRET42c=)
                          7: 3135312e3135382e38342e302f32332d3234203d3e203538383231.roa (hash: up9oUnYNNgnrnD8nBltWVRw6hQoOw00TwpTvFDksSiQ=)
                          8: 3135312e3135382e31302e302f32332d3234203d3e20313331303735.roa (hash: yeV3c4+JX/2U+NVSQ5ggFfmzlSf0IlAdryc4tm9JKAU=)
                          9: 3135312e3135382e3130362e302f32332d3234203d3e20313534343934.roa (hash: K7vtTo3ZnWeNKSiRcxh0HNGX04hgeoWacm4JGy+ef5A=)
                          10: 3135312e3135382e33362e302f32332d3234203d3e20313432323330.roa (hash: 5mcrPh9MHfGIi1I+qEwVVt+3mqWDmCqBeWepTQidito=)
                          11: 3135312e3135382e3230332e302f32342d3234203d3e20313336373833.roa (hash: /kRr5xomvVX4DE0OT7ERSRijAPYCeFTAeQql/0sli2g=)
                          12: A65A7370A28DA71B1C11B89E09D51753C498246D.cer (hash: hD5ahI6OlNIrBidjDo0DQ9XivTLjzAFH4lRCuMtEAR4=)
                          13: 3135312e3135382e3230342e302f32332d3234203d3e20313534353232.roa (hash: 6Rb9zk4c8mH3/Ntw2KBKvfo60D8HuKArZgXhAaeD3xM=)
                          14: 3135312e3135382e3235302e302f32342d3234203d3e20313432353636.roa (hash: 2brR86KIIpUz1VkjLFOTporSbNlk9gOtAic+ZRIRT0Y=)
                          15: 38352e3133372e32382e302f32332d3234203d3e20313439373334.roa (hash: N0muEr2CHWOJEJspJ/kOuNqS04weyVGfm19MrpSJyWw=)
                          16: 3135312e3135382e3137362e302f32342d3234203d3e20313534353039.roa (hash: Z8QlcnGGWMb3mLI8mAjsnHX5gEeCYqOPhN++tvo/LoA=)
                          17: 3135312e3135382e3133322e302f32332d3234203d3e20313334373238.roa (hash: LPNPknC2NFYPKlKq/f2QVV/gjvYW791z3reDy4x4Tto=)
                          18: 3135312e3135382e3135302e302f32332d3234203d3e20313430333034.roa (hash: WAUQsk8BPPoFbx5MA2S1xVbqfmgAtZSVC1LK3kuO3bM=)
                          19: 3135312e3135382e3233362e302f32332d3234203d3e20313534353233.roa (hash: SiMvC9el0feR4cYI97OulC2Z+HjKvIlRUfDrhRxMhs8=)
                          20: 38322e3135382e3132382e302f31392d3234203d3e2039333431.roa (hash: D3tiG7/WB1jqD4U3AzWTuk20OEGadYU05eGOdX2UkMk=)
                          21: 3135312e3135382e3138362e302f32342d3234203d3e20313338393930.roa (hash: kBt8Kp4JwweDOsaFz3GmG+No73NBqLlS83Y0K9cNVes=)
                          22: 10B2C61A3BF002D69AD557B8392E1F340162A168.cer (hash: fyrSVzmnddMaAd+arHcofsdcWO4KTqfA8zZGEF0lCrY=)
                          23: 3135312e3135382e39322e302f32332d3234203d3e20313534343739.roa (hash: Fxu5dqOkHqf+nR+l4cQxih7nooPvZm2mFv9De2wjgqU=)
                          24: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer (hash: akz8cOkupMnRthI9XgGjwyJVDXEBd1lUSYg8gBZ8c+Y=)
                          25: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer (hash: 4chPlJCS5tv2jVHpl4IAEO/8bEck4j0VqO47ztGUA3c=)
                          26: 3135312e3135382e38342e302f32332d3234203d3e20313534343737.roa (hash: nFPAkE+svtsToofPAiO76tMWQzs3OJa8mWKyMX15gsc=)
                          27: 3135312e3135382e3233342e302f32342d3234203d3e20313534353230.roa (hash: iMci771EdbngNC3JqCB+18eXRv37Op5CXUs80U5K+Yc=)
                          28: 3135312e3135382e35362e302f32332d3234203d3e20313432323538.roa (hash: EUF8wkkH1dA0Jks3/L6nFJjsS984Dy7zYvHKOYevBQw=)
                          29: F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl (hash: a/Hf4VEoPT0vV5M0XQXDCJcRKFHLH1xUoFhDIveR3z4=)
                          30: 3135312e3135382e342e302f32332d3234203d3e20313432313938.roa (hash: Yh3luDDzif39OPZq/ydXU15pZHfs9Yd5WxJV7KII49o=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 11:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:08:fa:cd:27:6e:3a:dc:1c:c2:b8:85:23:1f:bf:bb:e7:98:11:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
        Validity
            Not Before: Jun 20 09:11:23 2026 GMT
            Not After : Jun 21 11:43:23 2026 GMT
        Subject: CN=2323B288668A2BD013FDE0D8D6BF8114B7CF8755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f0:b8:15:d0:c5:f6:58:14:97:d1:84:82:20:
                    c0:c2:07:58:81:fe:a0:58:e8:5e:60:66:99:65:b6:
                    0c:db:40:bf:f3:12:de:5f:53:7f:1f:56:d3:d8:de:
                    68:ed:ca:90:8b:d0:2e:ac:14:5b:3d:35:b8:e1:52:
                    a1:64:4e:8b:e0:a2:0e:16:de:bb:a8:ab:0a:07:00:
                    70:81:53:71:f0:bf:46:60:3d:ce:d1:6a:dd:3a:1f:
                    d7:13:6d:b6:90:5e:d6:ab:4e:0e:93:7e:f7:72:88:
                    9f:29:b8:48:20:5f:82:84:db:59:0b:72:07:b4:06:
                    cf:ed:35:9e:85:96:17:1f:42:a9:3b:8f:b8:b6:94:
                    ea:df:66:0b:f4:ee:1f:cd:38:ca:84:2d:2a:5e:4b:
                    76:1d:28:78:ef:1e:34:e9:a7:68:97:1f:43:78:ef:
                    84:86:fe:92:d5:fc:97:1f:0e:60:02:f8:0f:9c:34:
                    64:e0:de:44:56:82:f4:fd:b3:52:c5:d7:8d:e6:35:
                    1a:31:b7:32:7a:92:46:f7:80:7d:d2:25:c9:65:df:
                    05:58:98:95:c1:57:e3:e8:dc:e1:0f:52:cb:7c:9b:
                    d3:ad:55:b5:3d:e5:76:3a:1d:88:05:18:c9:18:8c:
                    7a:0b:06:f1:76:ee:a1:88:b3:36:2c:29:8a:67:74:
                    64:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:23:B2:88:66:8A:2B:D0:13:FD:E0:D8:D6:BF:81:14:B7:CF:87:55
            X509v3 Authority Key Identifier:
                keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:5f:55:79:2c:2f:fe:92:dd:2c:77:56:88:8f:b2:6b:ce:80:
         8c:10:5d:54:a1:aa:b2:3d:37:e5:95:11:66:9a:b0:32:63:3b:
         c1:1a:f8:24:9f:d8:4d:1e:3f:0b:b7:04:93:7e:bd:d8:a5:9d:
         e5:35:3f:bd:ef:6e:01:8b:4c:9b:58:44:01:77:7c:cf:fc:ba:
         98:7b:6e:4b:e4:39:80:11:77:c3:74:f3:96:30:b4:c4:56:ff:
         f7:ee:c5:94:29:ba:fa:15:1c:d3:37:46:06:b9:1f:32:c7:38:
         41:b0:af:7b:72:76:ea:6b:74:79:6d:d6:91:42:04:cb:60:31:
         cf:10:6f:d3:a1:3c:ad:e4:4e:89:8a:f1:a4:20:23:fb:f8:cb:
         aa:ea:78:90:78:f5:a2:7b:0d:64:4e:1f:05:eb:9e:7c:01:4a:
         0a:90:ac:bb:60:4f:ca:ec:bf:be:ed:7f:38:ed:6b:d2:be:50:
         11:12:f6:32:71:05:d2:56:fc:b6:eb:cf:ce:be:3b:82:f4:22:
         8e:93:13:d9:ce:35:67:7f:ca:cf:b1:17:c5:ef:8b:3e:f5:b8:
         2b:6e:e1:69:7f:94:94:87:7d:fd:2e:82:59:3c:9f:41:71:90:
         08:98:ea:b4:37:ab:5d:06:bb:67:27:72:67:7b:8b:1c:c8:36:
         35:3b:9d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 11:11:15 2026 by rpki-client