Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
File:                     F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft (raw, json)
Hash identifier:          fNBsRHIDouEVFAkPJfuIxppO/H1JgDnoXYplAO4jpAk=
Subject key identifier:   12:5C:BE:66:5C:F3:38:5E:96:9B:BA:FE:4B:94:91:08:87:4A:89:1B
Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
Certificate issuer:       /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Certificate serial:       2D4681B8732C957570A9F0BBA2AF56754A065EBB
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
Manifest number:          14C0
Signing time:             Tue 13 Oct 2026 15:40:58 +0000
Manifest this update:     Tue 13 Oct 2026 15:35:58 +0000
Manifest next update:     Wed 14 Oct 2026 17:24:58 +0000
Files and hashes:         1: 3135312e3135382e3138362e302f32342d3234203d3e20313338393930.roa (hash: kBt8Kp4JwweDOsaFz3GmG+No73NBqLlS83Y0K9cNVes=)
                          2: 38322e3135382e3133322e302f32342d3234203d3e203436303635.roa (hash: tOxxL7zn18yWZvrkhQ7IMkV5ohEbFf926lidGzIe3nY=)
                          3: 3135312e3135382e342e302f32332d3234203d3e20313432313938.roa (hash: Yh3luDDzif39OPZq/ydXU15pZHfs9Yd5WxJV7KII49o=)
                          4: 3135312e3135382e3133322e302f32332d3234203d3e20313334373238.roa (hash: LPNPknC2NFYPKlKq/f2QVV/gjvYW791z3reDy4x4Tto=)
                          5: 3135312e3135382e3230342e302f32332d3234203d3e20313534353232.roa (hash: 6Rb9zk4c8mH3/Ntw2KBKvfo60D8HuKArZgXhAaeD3xM=)
                          6: CD846D565A6E2859697B59C438907050C12DE37D.cer (hash: 6CN90lTrLRk5hg+hADC3XlD75i0dqjeqZqyWiRET42c=)
                          7: 024B6B7407B97B7657DD52A736EB31C62B06C8F0.cer (hash: 4chPlJCS5tv2jVHpl4IAEO/8bEck4j0VqO47ztGUA3c=)
                          8: 3135312e3135382e3138372e302f32342d3234203d3e20313432353434.roa (hash: hM3eAzptPprh5ZTzzCeV9frMtEbvN9yPdu2L330+XpY=)
                          9: 3135312e3135382e3233362e302f32332d3234203d3e20313534353233.roa (hash: SiMvC9el0feR4cYI97OulC2Z+HjKvIlRUfDrhRxMhs8=)
                          10: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer (hash: akz8cOkupMnRthI9XgGjwyJVDXEBd1lUSYg8gBZ8c+Y=)
                          11: 3135312e3135382e35342e302f32332d3234203d3e20313432323336.roa (hash: mN3KgXfZRRrSmQHzBjW4eQhPmYSo4eOu6KEgvfq9JMk=)
                          12: 3135312e3135382e33362e302f32332d3234203d3e20313432323330.roa (hash: 5mcrPh9MHfGIi1I+qEwVVt+3mqWDmCqBeWepTQidito=)
                          13: 3135312e3135382e3130362e302f32332d3234203d3e20313534343934.roa (hash: K7vtTo3ZnWeNKSiRcxh0HNGX04hgeoWacm4JGy+ef5A=)
                          14: 3135312e3135382e3233392e302f32342d3234203d3e20313534353238.roa (hash: rsgLkVZ7ASQkDorSMSGJsm/yhf9qJ/kLL4PzZ1Ecuew=)
                          15: 3135312e3135382e3137362e302f32342d3234203d3e20313534353039.roa (hash: Z8QlcnGGWMb3mLI8mAjsnHX5gEeCYqOPhN++tvo/LoA=)
                          16: 10B2C61A3BF002D69AD557B8392E1F340162A168.cer (hash: fyrSVzmnddMaAd+arHcofsdcWO4KTqfA8zZGEF0lCrY=)
                          17: F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl (hash: ipFxTC4rlXHO2PIrUWjlH+tyw2jPMI18Dti6fFgMjaw=)
                          18: 3135312e3135382e3235302e302f32342d3234203d3e20313432353636.roa (hash: 2brR86KIIpUz1VkjLFOTporSbNlk9gOtAic+ZRIRT0Y=)
                          19: 38322e3135382e3132382e302f31392d3234203d3e2039333431.roa (hash: D3tiG7/WB1jqD4U3AzWTuk20OEGadYU05eGOdX2UkMk=)
                          20: 38352e3133372e32382e302f32332d3234203d3e20313439373334.roa (hash: N0muEr2CHWOJEJspJ/kOuNqS04weyVGfm19MrpSJyWw=)
                          21: 947970103FC7D5D4259EE8037681B9B77A2850FE.cer (hash: pyV7Vl/JG9m/wFfzbgViDCEhFVjh81WOjs0E0iwKHsI=)
                          22: 3135312e3135382e38342e302f32332d3234203d3e20313534343737.roa (hash: nFPAkE+svtsToofPAiO76tMWQzs3OJa8mWKyMX15gsc=)
                          23: 3135312e3135382e39322e302f32332d3234203d3e20313534343739.roa (hash: Fxu5dqOkHqf+nR+l4cQxih7nooPvZm2mFv9De2wjgqU=)
                          24: 3135312e3135382e3233342e302f32342d3234203d3e20313534353230.roa (hash: iMci771EdbngNC3JqCB+18eXRv37Op5CXUs80U5K+Yc=)
                          25: 3135312e3135382e34322e302f32332d3234203d3e20313534343935.roa (hash: UsQcK7u4ovVqhPl6ugCIkTgy2rqWQpA+Gb6/heR8fMQ=)
                          26: 3135312e3135382e31302e302f32332d3234203d3e20313331303735.roa (hash: yeV3c4+JX/2U+NVSQ5ggFfmzlSf0IlAdryc4tm9JKAU=)
                          27: A65A7370A28DA71B1C11B89E09D51753C498246D.cer (hash: hD5ahI6OlNIrBidjDo0DQ9XivTLjzAFH4lRCuMtEAR4=)
                          28: 3135312e3135382e3135302e302f32332d3234203d3e20313430333034.roa (hash: WAUQsk8BPPoFbx5MA2S1xVbqfmgAtZSVC1LK3kuO3bM=)
                          29: 3135312e3135382e38342e302f32332d3234203d3e203538383231.roa (hash: up9oUnYNNgnrnD8nBltWVRw6hQoOw00TwpTvFDksSiQ=)
                          30: 3135312e3135382e35362e302f32332d3234203d3e20313432323538.roa (hash: EUF8wkkH1dA0Jks3/L6nFJjsS984Dy7zYvHKOYevBQw=)
                          31: 3135312e3135382e38322e302f32332d3234203d3e20313534353337.roa (hash: /EQh7qiYa71VUGjV3Zf7X0Yu8GoGKgMCvZHxTHwAUIc=)
                          32: 3135312e3135382e3230332e302f32342d3234203d3e20313336373833.roa (hash: /kRr5xomvVX4DE0OT7ERSRijAPYCeFTAeQql/0sli2g=)
                          33: 3135312e3135382e3234302e302f32332d3234203d3e20313534353237.roa (hash: +jxiZuVDvVJb0gZO08c6gVEhC1lfYEQPJlUGotAmVxk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 17:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:46:81:b8:73:2c:95:75:70:a9:f0:bb:a2:af:56:75:4a:06:5e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
        Validity
            Not Before: Oct 13 15:35:58 2026 GMT
            Not After : Oct 14 17:24:58 2026 GMT
        Subject: CN=125CBE665CF3385E969BBAFE4B949108874A891B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:56:14:db:1d:b4:69:b3:88:18:0b:b8:20:
                    35:7d:a0:ef:27:2d:6c:ab:74:53:96:79:75:37:3e:
                    62:f4:81:bb:f3:10:c7:ff:71:ca:52:fa:5b:41:25:
                    7c:cd:72:9c:a9:a6:7f:3f:93:05:60:5f:6e:c3:aa:
                    d9:65:3d:8b:fc:1b:10:99:b8:bb:64:cc:9e:aa:8c:
                    f4:9b:d4:b1:c5:68:74:87:f8:08:ff:db:3e:65:75:
                    fa:22:fe:8a:26:9d:42:34:87:da:85:78:c9:50:34:
                    b6:2d:0e:a1:84:e0:6f:53:5c:4d:33:41:08:42:96:
                    01:05:6c:fd:52:f8:e2:9a:62:e1:d7:5b:01:18:d9:
                    c8:7b:86:fe:a4:87:8a:41:2e:67:c0:99:fc:20:93:
                    e5:4c:4e:0f:a4:02:c0:d9:e0:2d:be:b5:12:d1:05:
                    84:c1:b1:32:44:75:49:70:55:a6:6f:1f:28:72:59:
                    07:41:f7:7b:06:7d:c0:9b:85:ec:c5:fd:3b:0b:04:
                    95:06:e0:dc:7d:19:de:56:35:93:b6:72:88:24:07:
                    ee:04:f0:2f:86:99:e3:00:d1:ee:f6:2c:1c:f8:67:
                    9e:b5:96:19:77:9b:e8:13:c4:91:33:33:06:0b:b3:
                    68:6b:86:5c:ae:4f:8a:19:7c:49:74:48:80:9b:9c:
                    6a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5C:BE:66:5C:F3:38:5E:96:9B:BA:FE:4B:94:91:08:87:4A:89:1B
            X509v3 Authority Key Identifier:
                keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:06:25:b7:79:18:fe:c2:42:4c:c8:92:53:ff:25:ba:0e:16:
         0a:4e:77:76:aa:eb:a1:c3:08:55:0d:3e:79:c1:2c:b9:bd:0d:
         82:f7:73:c9:fe:bd:35:dc:f6:a7:5c:41:2c:9c:9b:aa:ca:7a:
         80:db:04:bb:23:53:73:9e:ad:c7:d1:c4:89:0b:14:bc:93:fc:
         68:76:2c:f8:ce:e2:d2:b7:60:ed:4a:52:fd:9c:26:f5:80:3f:
         1c:7a:d6:78:09:14:4d:b7:1e:11:9b:8e:f0:fd:7c:50:ba:8a:
         d8:77:c1:af:76:74:72:ff:e2:43:8b:21:96:a0:a5:79:b2:65:
         53:90:ac:39:ad:d7:dd:3e:6f:fa:c9:7e:22:7b:e4:7f:3a:15:
         ec:08:0f:11:b2:8d:9f:9e:d1:f7:f3:bc:b4:a7:6f:74:ce:25:
         3e:1f:4e:3d:39:ef:36:10:a2:d5:f3:d2:57:7a:cf:2a:e8:0c:
         21:58:3d:7d:be:43:17:ba:08:95:5e:69:08:f1:40:72:f9:b1:
         1b:74:4f:47:73:43:6e:81:85:bf:d4:84:73:b6:e0:4d:58:19:
         ac:5e:3f:30:1e:0b:e9:09:5c:e5:c1:3e:f3:f1:d2:31:1d:b8:
         98:6b:e2:88:3e:df:0f:a6:f6:37:99:c4:a9:9d:0d:6f:fa:93:
         4e:6a:d0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:31:40 2026 by rpki-client