Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
File:                     69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft (raw, json)
Hash identifier:          fXw/y2k8fqgPbhM/GIXf+fkmYhDn7s6sj4uDOWnLfEk=
Subject key identifier:   25:77:34:2B:1D:B8:E9:EF:D5:7E:3D:62:42:EA:07:2E:8F:DC:68:2A
Authority key identifier: 69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D
Certificate issuer:       /CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
Certificate serial:       23DF934113FEBCBC611A223BD51BEDDFB11EE995
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
Manifest number:          D6
Signing time:             Sat 10 Oct 2026 00:02:34 +0000
Manifest this update:     Fri 09 Oct 2026 23:57:34 +0000
Manifest next update:     Sun 11 Oct 2026 00:16:34 +0000
Files and hashes:         1: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: /ARpDaobiYOepxRHR1PDX5TMsKlHHu4YXqHKwEPmRk8=)
                          2: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: AXYnJAEv7z2tUD33+NaHrltSBMuBOMW49EVRFoSQzz8=)
                          3: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: K2rJXObunbVeGUGmNLr3mwtBf8bkZX6YYlP1we9FNao=)
                          4: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4wept2TXybZZ4wiG2lTGiLdJKO6+UiKFaeUDDPHh8cw=)
                          5: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: G+PtaUwDO5r5hMHQJK1W4RibPlp9/hiGTwpahVF+du8=)
                          6: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: nMOG+6n+KLcdsuMUUFRu80+hEtB8VuNBpV2dkQOcKbY=)
                          7: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: GY27HpG2WJNhWravikGEHrDTrV6iGWCs3DNw3rStizU=)
                          8: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: cjnevU0RPzXKOiUMI3NVUlG7JVEKvWFFOPDxZT7zvG0=)
                          9: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: S3vlimdvoGzFuAyUKAon3zByGdBKiazihI8BHyvXGC8=)
                          10: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: 3ex6+M1Mdtsc4EjQuuzwJkgMQ9mnmgEROmDyzDTwmbw=)
                          11: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: WD6WZpSz8UlJoAksSemqODUiQFTWMxl5dgMtTtpGDTY=)
                          12: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: v3ZYWa8XXb+DFvl8j2lAq20FkxITb0PL+31yaFuYI5A=)
                          13: 69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl (hash: 5tMx6chTTBPNfjwqUOfy7PxUz1U8jLFn8MxUtuRSlLk=)
                          14: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: 9or0Aovq+itDbFnRJWHEFOrI8Bwnt6OpiiswZ3Ku8uc=)
                          15: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: JaMj7Mn/vinF3SqmQ06RkAsyunCmsAh4LYSl4fBlc2I=)
                          16: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: z+PDM1yaJVso/7iy8s/DYFAcGnjvjuuUqet4qK7is+I=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl
                          rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 00:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:df:93:41:13:fe:bc:bc:61:1a:22:3b:d5:1b:ed:df:b1:1e:e9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
        Validity
            Not Before: Oct  9 23:57:34 2026 GMT
            Not After : Oct 11 00:16:34 2026 GMT
        Subject: CN=2577342B1DB8E9EFD57E3D6242EA072E8FDC682A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:2f:b3:d4:da:02:42:50:88:23:cc:b7:d4:f1:
                    4b:fb:99:6e:fd:35:bb:35:56:31:09:82:e2:23:a0:
                    fe:e3:b6:b7:8c:17:61:49:cd:73:2b:b6:04:d3:35:
                    6c:17:bc:c2:27:38:f3:83:1a:1c:a0:bc:e0:fe:31:
                    30:1f:7d:1e:f7:e1:3d:3e:7f:3a:9e:85:5e:cb:d4:
                    40:3d:ec:32:42:f8:98:72:57:fc:54:43:b5:45:2b:
                    87:3c:fa:a8:c2:b4:a8:96:5f:cb:e4:8f:f9:03:b8:
                    a1:5e:88:57:fb:7e:e1:73:28:6b:fb:6a:51:7b:ef:
                    d1:7e:3b:38:86:9b:2c:95:04:dc:63:56:86:ae:9e:
                    ea:1f:da:57:4c:23:ac:d0:f9:02:b5:15:27:34:58:
                    93:fe:6c:9e:ff:9f:c4:5d:b3:d4:af:92:41:64:7b:
                    d6:9e:2c:7c:fa:b6:a4:f5:24:f3:26:51:e6:ea:3d:
                    35:7c:ba:a6:86:e0:77:ab:8e:5d:c5:22:18:d3:46:
                    59:4e:c3:27:67:ec:2e:a0:8f:4d:e4:e2:86:26:52:
                    ef:1b:83:18:f3:a4:75:14:bd:ba:3c:3f:a8:a9:5a:
                    4a:e1:b0:ea:28:a8:83:8a:58:6e:17:c3:9b:68:04:
                    17:a1:6f:e5:fa:0a:0b:2e:e9:5e:75:c6:74:5b:8f:
                    73:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:77:34:2B:1D:B8:E9:EF:D5:7E:3D:62:42:EA:07:2E:8F:DC:68:2A
            X509v3 Authority Key Identifier:
                keyid:69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:7c:12:c7:e7:ee:cf:25:32:5a:bd:0b:51:a3:f8:51:64:b2:
         8b:26:c6:52:13:43:54:9f:fa:33:78:59:62:b6:b1:06:61:ec:
         6c:f1:1c:ab:79:38:05:db:85:8b:85:16:46:ef:1d:92:ee:5d:
         49:15:2d:78:eb:d7:1c:45:e2:71:56:25:8e:34:8a:e4:47:47:
         c8:13:7f:c9:6d:93:55:4f:74:bb:bd:bd:88:0c:a6:e5:d5:87:
         57:3a:ad:9e:b1:c5:4a:e2:74:19:ca:08:3a:0e:f6:80:41:1f:
         49:0d:4b:fd:d9:f3:ff:f3:bd:2c:c4:5e:03:cc:73:fe:89:25:
         cf:a9:ff:c2:24:10:cb:10:cd:b1:3f:63:5c:fd:44:b5:5b:92:
         ff:0b:2f:c5:dd:64:22:2b:f7:50:0b:59:bf:8c:48:b3:56:9a:
         00:7a:05:d5:e0:a3:54:e5:ac:da:34:c8:70:68:fe:f6:45:ac:
         29:80:fa:d4:a8:de:4d:6d:1c:09:e0:7b:9c:d1:ef:d9:75:0b:
         89:67:29:2a:1c:79:65:3a:3c:ab:f5:0c:55:1f:7a:4f:6d:c9:
         e7:1e:44:bc:96:fc:51:1b:35:a7:d9:fa:97:d5:43:20:94:8e:
         95:d7:b3:73:c7:d2:39:7d:01:1c:b2:42:06:80:2a:9e:c2:ea:
         14:86:96:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:12:05 2026 by rpki-client