Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
File:                     F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft (raw, json)
Hash identifier:          2rR7MiFPhzlem3to9wd2JwBxe7fO/io/cEBdjzLUaXA=
Subject key identifier:   A7:BE:30:4C:55:62:3B:48:5E:EE:C0:DF:47:80:E4:60:78:10:E9:3E
Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
Certificate issuer:       /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Certificate serial:       4EDAC433F3E68AC152C9CE2610914FC1B64CD7E9
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
Manifest number:          100A
Signing time:             Tue 05 May 2026 10:05:09 +0000
Manifest this update:     Tue 05 May 2026 10:00:09 +0000
Manifest next update:     Wed 06 May 2026 12:27:09 +0000
Files and hashes:         1: A65A7370A28DA71B1C11B89E09D51753C498246D.cer (hash: hD5ahI6OlNIrBidjDo0DQ9XivTLjzAFH4lRCuMtEAR4=)
                          2: F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl (hash: aq9qLxiCjyWmwbV9nvd7j6IBOR6N9ZX/dSb0kN/Yhjg=)
                          3: 3135312e3135382e342e302f32332d3234203d3e20313432313938.roa (hash: Yh3luDDzif39OPZq/ydXU15pZHfs9Yd5WxJV7KII49o=)
                          4: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer (hash: 4chPlJCS5tv2jVHpl4IAEO/8bEck4j0VqO47ztGUA3c=)
                          5: 3135312e3135382e3138372e302f32342d3234203d3e20313432353434.roa (hash: hM3eAzptPprh5ZTzzCeV9frMtEbvN9yPdu2L330+XpY=)
                          6: 3135312e3135382e3230342e302f32332d3234203d3e20313534353232.roa (hash: 6Rb9zk4c8mH3/Ntw2KBKvfo60D8HuKArZgXhAaeD3xM=)
                          7: 3135312e3135382e3233342e302f32342d3234203d3e20313534353230.roa (hash: iMci771EdbngNC3JqCB+18eXRv37Op5CXUs80U5K+Yc=)
                          8: 3135312e3135382e35362e302f32332d3234203d3e20313432323538.roa (hash: EUF8wkkH1dA0Jks3/L6nFJjsS984Dy7zYvHKOYevBQw=)
                          9: 3135312e3135382e33362e302f32332d3234203d3e20313432323330.roa (hash: 5mcrPh9MHfGIi1I+qEwVVt+3mqWDmCqBeWepTQidito=)
                          10: 3135312e3135382e3130362e302f32332d3234203d3e20313534343934.roa (hash: K7vtTo3ZnWeNKSiRcxh0HNGX04hgeoWacm4JGy+ef5A=)
                          11: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer (hash: akz8cOkupMnRthI9XgGjwyJVDXEBd1lUSYg8gBZ8c+Y=)
                          12: 3135312e3135382e3230332e302f32342d3234203d3e20313336373833.roa (hash: /kRr5xomvVX4DE0OT7ERSRijAPYCeFTAeQql/0sli2g=)
                          13: 3135312e3135382e3138362e302f32342d3234203d3e20313338393930.roa (hash: kBt8Kp4JwweDOsaFz3GmG+No73NBqLlS83Y0K9cNVes=)
                          14: 3135312e3135382e3135302e302f32332d3234203d3e20313430333034.roa (hash: WAUQsk8BPPoFbx5MA2S1xVbqfmgAtZSVC1LK3kuO3bM=)
                          15: 3135312e3135382e3234302e302f32332d3234203d3e20313534353237.roa (hash: +jxiZuVDvVJb0gZO08c6gVEhC1lfYEQPJlUGotAmVxk=)
                          16: 3135312e3135382e38342e302f32332d3234203d3e20313534343737.roa (hash: nFPAkE+svtsToofPAiO76tMWQzs3OJa8mWKyMX15gsc=)
                          17: 3135312e3135382e31302e302f32332d3234203d3e20313331303735.roa (hash: yeV3c4+JX/2U+NVSQ5ggFfmzlSf0IlAdryc4tm9JKAU=)
                          18: 3135312e3135382e3233362e302f32332d3234203d3e20313534353233.roa (hash: SiMvC9el0feR4cYI97OulC2Z+HjKvIlRUfDrhRxMhs8=)
                          19: 3135312e3135382e39322e302f32332d3234203d3e20313534343739.roa (hash: Fxu5dqOkHqf+nR+l4cQxih7nooPvZm2mFv9De2wjgqU=)
                          20: CD846D565A6E2859697B59C438907050C12DE37D.cer (hash: 6CN90lTrLRk5hg+hADC3XlD75i0dqjeqZqyWiRET42c=)
                          21: 3135312e3135382e3235302e302f32342d3234203d3e20313432353636.roa (hash: 2brR86KIIpUz1VkjLFOTporSbNlk9gOtAic+ZRIRT0Y=)
                          22: 3135312e3135382e3133322e302f32332d3234203d3e20313334373238.roa (hash: LPNPknC2NFYPKlKq/f2QVV/gjvYW791z3reDy4x4Tto=)
                          23: 3135312e3135382e3137362e302f32342d3234203d3e20313534353039.roa (hash: Z8QlcnGGWMb3mLI8mAjsnHX5gEeCYqOPhN++tvo/LoA=)
                          24: 38322e3135382e3132382e302f31392d3234203d3e2039333431.roa (hash: D3tiG7/WB1jqD4U3AzWTuk20OEGadYU05eGOdX2UkMk=)
                          25: 10B2C61A3BF002D69AD557B8392E1F340162A168.cer (hash: fyrSVzmnddMaAd+arHcofsdcWO4KTqfA8zZGEF0lCrY=)
                          26: 3135312e3135382e34322e302f32332d3234203d3e20313534343935.roa (hash: UsQcK7u4ovVqhPl6ugCIkTgy2rqWQpA+Gb6/heR8fMQ=)
                          27: 3135312e3135382e3233392e302f32342d3234203d3e20313534353238.roa (hash: rsgLkVZ7ASQkDorSMSGJsm/yhf9qJ/kLL4PzZ1Ecuew=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 12:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:da:c4:33:f3:e6:8a:c1:52:c9:ce:26:10:91:4f:c1:b6:4c:d7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
        Validity
            Not Before: May  5 10:00:09 2026 GMT
            Not After : May  6 12:27:09 2026 GMT
        Subject: CN=A7BE304C55623B485EEEC0DF4780E4607810E93E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:78:dd:13:1e:19:2d:37:ef:94:fb:43:7f:82:
                    7e:2b:00:a5:10:18:a7:2b:74:71:7f:4e:8a:84:d7:
                    75:5a:d9:6f:45:29:89:f4:ee:d6:2f:aa:ce:c0:56:
                    55:27:db:1d:e2:40:b2:c1:a5:d1:e3:ed:67:29:cb:
                    bd:78:68:3e:0c:6d:26:f5:f8:ae:42:54:74:38:33:
                    86:6d:a4:48:a2:4c:8f:83:4a:8a:5c:53:2d:2b:c4:
                    39:eb:76:83:9b:f7:f8:54:40:51:1f:07:59:5d:66:
                    5a:09:b1:8f:23:b6:dd:cc:2c:6c:d8:c3:9b:ef:55:
                    16:a5:f6:d7:8b:c2:d2:34:7c:f7:05:b5:c6:ed:f0:
                    3f:b9:d0:15:7c:39:21:11:9a:26:68:92:01:af:85:
                    80:2a:4a:74:cf:27:4f:ff:0a:ee:5b:dc:6d:4d:b5:
                    1c:06:68:b5:b3:12:d9:01:3a:9e:54:49:4e:9d:19:
                    6b:1b:1e:5c:91:48:dc:4f:a9:23:e5:7a:12:14:a4:
                    26:08:d6:b3:f6:87:8c:31:fb:73:a9:51:28:c7:a9:
                    92:f7:ed:4f:fc:dc:7c:df:85:4a:94:1e:b5:aa:1a:
                    78:28:bd:98:8f:95:e2:44:37:ef:99:4a:12:ce:cb:
                    08:b2:e0:f5:16:83:02:f8:30:6b:c0:55:f3:5f:54:
                    09:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BE:30:4C:55:62:3B:48:5E:EE:C0:DF:47:80:E4:60:78:10:E9:3E
            X509v3 Authority Key Identifier:
                keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:16:b0:5e:e5:58:3b:b0:3b:06:d4:54:b4:46:a7:85:ab:26:
         ec:cd:5a:ea:da:5c:f2:b1:22:a0:0c:95:e4:8a:db:f7:61:73:
         49:89:83:11:df:e5:d0:b9:4b:a1:cd:43:ac:86:b5:19:68:c9:
         93:ef:6f:b6:9f:97:8b:1e:d7:01:ad:f1:b9:a5:11:98:02:08:
         22:4c:17:20:32:4b:76:8f:f0:c8:57:a7:19:92:86:f8:db:7b:
         f2:bd:70:1b:75:9d:56:fa:e7:0f:62:17:8f:d9:52:7a:df:74:
         2e:48:3f:29:6d:2b:90:e5:54:15:52:a2:91:c1:85:e8:2a:11:
         af:bb:08:27:c9:97:30:aa:35:6e:78:58:87:be:e5:27:9b:66:
         d5:20:1d:b1:9d:65:11:32:c9:0d:86:29:8a:b9:df:ea:7f:d2:
         1d:3c:bd:08:5f:30:83:26:40:49:99:4a:72:a1:0b:8a:f3:03:
         3c:a6:7b:40:03:a2:53:1a:dd:06:06:18:b2:c7:d2:14:a0:51:
         58:cc:f3:b3:c1:1b:2e:40:14:d8:8b:af:f7:5a:b5:6c:6c:b8:
         9f:5b:5b:0d:78:32:64:ec:60:03:89:6c:82:be:83:d7:96:ff:
         3d:e3:c7:5d:1c:72:cb:d7:f8:7e:db:39:ea:67:d9:58:f6:96:
         aa:71:e3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 14:10:02 2026 by rpki-client