Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
File:                     CB0A606FD0642E68B5212AE751953E0B9A92959F.mft (raw, json)
Hash identifier:          arjMDdNVsyT6mmZh70Dyb1GmNal/ZP1t227Kd2aeI6g=
Subject key identifier:   2D:72:65:71:AC:FB:C4:F0:E0:6D:8D:6E:97:3B:D7:AB:DD:51:F4:36
Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
Certificate issuer:       /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Certificate serial:       484E317E36F2A9DE0B3AA7F1AEA6A63E42BE5514
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
Manifest number:          0107
Signing time:             Sun 15 Nov 2026 02:42:27 +0000
Manifest this update:     Sun 15 Nov 2026 02:37:27 +0000
Manifest next update:     Mon 16 Nov 2026 03:17:27 +0000
Files and hashes:         1: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: wcqHrqI3rqZ/cg1ulVOK7tcT1pphG3X5jdB33VoSub8=)
                          2: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: c+MUV7F3nnYwWrux4q4qrlxJQ1ToGP6qwbUAs1FDJW0=)
                          3: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: YBmRyy3cm/KALp/wtAif41lJP/42XGDuyciPr2frXjE=)
                          4: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: 2M+FnZ1ZBmMQrnhoHJr000wngHRS8OoEKdb0quE5URw=)
                          5: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: /7ofNppVXJF7mFM2WeV7e0wu+6LZLrIveqoSX8uAT6s=)
                          6: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: SV66tcdcW0NqPU/aqR6DolEDFMy8zRwKuiBnvzj6cUg=)
                          7: CB0A606FD0642E68B5212AE751953E0B9A92959F.crl (hash: SM5quRfdxmSzwpvhyN38DzR/BAPWu2OHsI0D7ovQaaU=)
                          8: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: pmR02dkQafQv6lkZHXLfGyWNIfCNGG5yyCQI8aG1kiY=)
                          9: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: ywl7AR88MYiWygarcTKtVBDK6lhCOvMO3Qakyf62g7s=)
                          10: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: zvyBHXFbCbQNnOHxvObPOxxpHvAaypqH5xRId3rVWNo=)
                          11: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: 2cmHQI8Ii2ZFNygrFMRrShrlpj0r3MxaKMXRFrpSYWY=)
                          12: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: 38tHcC/t7dfxoKy3b2Q3TXm2WXDZWbTD7Vr8HTgP8Ys=)
                          13: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: oXW42mmGQUgoWkxhSR0n+zgivDmIH7l+dG/1UKZo3a4=)
                          14: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: J+BYXWntjVPciAkV8uAI34vToZOhTHZAVg1OfJSHksA=)
                          15: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: Z9BOHD/0KrdQ2ipOJFVWwYLdiKLHdOuinxG+lCgyfSU=)
                          16: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: pwtW5wr69XSa+qZr3l0EvDhYLbCZs1lpWX5AfsziilE=)
                          17: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: W5LcKD4qmyridtk0HHxoc6aUkig5ncs0tdqV8KTXwMk=)
                          18: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: NngQ0IQfUPOCY/8TWuIA/cVIqSFiTXs2casQNFQDWbs=)
                          19: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: fRTHSzlS/kkerP4SjyexReRSZRyzRj6VQ2sAHATlKhQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
                          rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 03:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:4e:31:7e:36:f2:a9:de:0b:3a:a7:f1:ae:a6:a6:3e:42:be:55:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
        Validity
            Not Before: Nov 15 02:37:27 2026 GMT
            Not After : Nov 16 03:17:27 2026 GMT
        Subject: CN=2D726571ACFBC4F0E06D8D6E973BD7ABDD51F436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:84:5b:5f:35:1e:bc:2e:98:81:d2:82:ca:
                    dc:c7:a3:45:94:db:71:ee:c5:db:5c:11:7e:87:5a:
                    02:e3:08:50:10:37:a4:ad:d7:16:45:a3:c8:b8:85:
                    0f:88:78:54:5b:59:f1:20:a7:b5:38:4b:45:8d:cd:
                    79:de:cc:e4:e9:e7:96:ea:f4:b6:9a:5e:21:61:07:
                    b4:a0:0f:fb:28:39:ce:95:7e:02:69:23:49:9e:17:
                    b4:88:7a:1f:8b:3f:44:a9:27:4d:cf:e1:65:1e:61:
                    6b:e1:f5:46:f9:a5:b8:ff:b3:99:0e:80:a0:bc:1d:
                    c0:69:04:66:41:72:cc:59:06:67:59:71:02:89:cb:
                    9b:12:be:ab:26:56:ba:fb:1c:31:f4:bd:a8:fc:6b:
                    c2:06:ff:7f:52:cb:85:de:45:5e:56:ba:85:2b:25:
                    33:9d:83:37:f2:88:15:68:c5:b5:8f:2c:98:69:b9:
                    57:48:1a:d3:a1:a0:50:62:2f:2b:f0:c5:6a:a7:69:
                    d6:8b:e6:7d:86:b0:c3:ee:14:e3:dc:95:11:3c:ab:
                    8f:f6:6e:f0:bf:52:fe:79:b1:8e:e9:6c:a7:7c:b4:
                    e8:e9:a2:b2:10:3f:5d:9a:cf:76:bb:a5:6f:4b:88:
                    91:44:da:0a:61:c0:8f:c0:6a:7c:f3:7e:fa:b9:06:
                    47:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:72:65:71:AC:FB:C4:F0:E0:6D:8D:6E:97:3B:D7:AB:DD:51:F4:36
            X509v3 Authority Key Identifier:
                keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:be:70:ec:9c:68:22:2b:74:34:29:b9:22:95:bd:09:3e:6b:
         da:e3:48:f7:35:83:47:da:91:27:a2:23:1f:41:96:44:25:58:
         d6:ef:87:0b:3f:24:40:e0:8b:2f:55:f1:10:f4:f0:a8:b9:77:
         2f:f8:83:4a:d8:04:bb:6b:e6:73:3c:e1:f6:b8:a4:1e:1d:a4:
         b5:a4:0a:99:c9:d5:72:ab:f0:d4:6e:c2:68:b8:aa:0d:59:5f:
         12:5f:8d:5f:d7:20:e4:34:49:05:d8:fd:4d:b1:9b:88:c9:87:
         a6:36:9d:05:ee:59:42:96:93:61:5d:f2:de:38:13:0c:73:67:
         4c:8d:1a:91:4c:ad:1a:e9:2d:32:1a:4f:71:f1:86:f6:8d:d8:
         87:5c:31:cb:62:78:54:3a:11:71:79:a6:c4:63:08:fa:9a:4f:
         b2:63:d9:0b:e9:54:14:e9:96:1c:65:76:57:9b:2a:5e:a9:73:
         eb:e1:a0:42:fe:d8:de:de:1b:b6:ed:21:69:03:87:72:a5:fd:
         62:e8:64:b7:f8:ea:23:9d:b5:d7:e2:46:c3:75:be:8f:a3:71:
         6a:c6:13:88:9b:6a:85:24:b7:76:f1:9b:72:21:88:fe:52:62:
         ef:b9:67:85:fc:ae:64:f8:05:29:2c:76:f0:76:9d:31:95:4f:
         a6:ee:d2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:43:28 2026 by rpki-client