Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
File:                     488A458129866D0E7DBFF7668D82664F584F8541.mft (raw, json)
Hash identifier:          AO5dmtKLFy3mDsOzMkx9zpDdDp9AXafmOc97NQXawUg=
Subject key identifier:   9C:E3:9F:AF:8E:8C:D4:5A:04:A5:00:7B:A8:9E:6D:28:E5:52:9A:01
Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41
Certificate issuer:       /CN=488A458129866D0E7DBFF7668D82664F584F8541
Certificate serial:       509E5978584EAE325C5F3DAA046EEAF1D98023A8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
Manifest number:          F0
Signing time:             Mon 26 Oct 2026 22:38:41 +0000
Manifest this update:     Mon 26 Oct 2026 22:33:41 +0000
Manifest next update:     Tue 27 Oct 2026 22:42:41 +0000
Files and hashes:         1: 3130312e35302e31362e302f32302d3234203d3e2034373837.roa (hash: +b5NqaJS6v9hXzvZigHVYiJMJdXpHZYJPG2i54V2Zkg=)
                          2: 3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa (hash: +JXr82FpG/6Wt8qvldpnb4fgmcqGxYhFwHI7evACCBg=)
                          3: 3130312e3132382e36342e302f31392d3234203d3e20313335343738.roa (hash: 5id0QnfcKsnw0+S9ulptOtQBEWbR8UG/S4Owh/B9W74=)
                          4: 3132352e3230382e3132382e302f31382d3234203d3e2034373837.roa (hash: aox2X7SgWnRXu8G+kGHpNIJb4RAjQYMcZgSqdVFmhhE=)
                          5: 3130312e3132382e36362e302f32332d3233203d3e20313335343738.roa (hash: KiBzwdkwkvBjgtXV0cM+MD3JNlJOyrjNhlEWrqegSSU=)
                          6: 3230322e3135382e302e302f31372d3234203d3e2034373837.roa (hash: WW8sIJ6AThc6GzaZsxU3S0vSQEeSjQOfDUvBVqio138=)
                          7: 3130312e3132382e36362e302f32332d3234203d3e20313335343738.roa (hash: 1H3PSuEvCc4YKCR6kgpSZidVqJxCnAhidJTquYvi5XY=)
                          8: 3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa (hash: wbehxlGBOFZ5POFNUace0mPfuERAJPSvGNjotR14fdE=)
                          9: 323430353a383138303a3a2f33322d3332203d3e2034373837.roa (hash: UAYb+1HjfSmt5R+QlsY+ZQQtQPafl+SlPKPY7/wXU0Q=)
                          10: 488A458129866D0E7DBFF7668D82664F584F8541.crl (hash: jJBknfX50cc1ddtnWUEwqTMzBrTd7w+o93VoZKMieYs=)
                          11: 3231302e3231302e3132382e302f31382d3234203d3e2034373837.roa (hash: cChkhgKm+2KNkrgQft7uIxPkb8RhfpDlI+RUTMMAntw=)
                          12: 3130312e3132382e36342e302f31382d3234203d3e20313335343738.roa (hash: 99+LHdnDZ+xXSQ4fS/K7+l08VVwSgr8ZFAwx6f4ta24=)
                          13: 323030313a6431303a393430303a3a2f33382d3438203d3e20313335343738.roa (hash: noWOl6fVub87P1/SVgYHH5T2hrSTXsrQ+oEMt1rrpNg=)
                          14: 323430353a383138303a3a2f33322d3438203d3e20313335343738.roa (hash: H13662R2JsQ6xsWPNm8piREclR+MKAOjI1IQH6H0ptk=)
                          15: 3130312e3132382e36342e302f32332d3234203d3e20313335343738.roa (hash: cNsXz0HEcLxttb5xDjo+VflY5ICv7Vrpe3SghZW7FwU=)
                          16: 3130332e36312e3234382e302f32322d3234203d3e20313335343738.roa (hash: ARl4ZAaC9Jes/owyoPp7apbT6NpWz6hu9CZFgWsDZ/w=)
                          17: 3131362e3230362e3234302e302f32322d3234203d3e2034373837.roa (hash: Yz2BU+sizR5MaKXnmTSXZbcNfxY4e6NTRVofqsdo3Mc=)
                          18: 3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa (hash: mML8Y06xC1Ba28dmIO2VE5Ln2tzvvZV3niqEU4AWOB4=)
                          19: 323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa (hash: G3pU6symkaZdSMicPc79FGi+dBVSw2ehAYC4dr25SgE=)
                          20: 3230322e3135382e35302e302f32332d3234203d3e2034373837.roa (hash: QPI+dREhzvsIigpY59BOgb1O27ZG4A0uLzoVwlmd6ns=)
                          21: 3130312e3132382e36342e302f32332d3233203d3e20313335343738.roa (hash: t2MsMuM/1YQ0d1jlVRk+UQIkBTqKfcyfuzkWNhKm+2Y=)
                          22: 323030313a6431303a3a2f33322d3438203d3e2034373837.roa (hash: 14/1HVNOXsDEYMMhgV/UFslejkV/yr/QLEVbg8K0YaE=)
                          23: 34352e3132362e38302e302f32322d3234203d3e20313335343738.roa (hash: b2lWOoaou2J1YIxknocGyrbJm7waL5thO0MNRGLl9mc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl
                          rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 12:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9e:59:78:58:4e:ae:32:5c:5f:3d:aa:04:6e:ea:f1:d9:80:23:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541
        Validity
            Not Before: Oct 26 22:33:41 2026 GMT
            Not After : Oct 27 22:42:41 2026 GMT
        Subject: CN=9CE39FAF8E8CD45A04A5007BA89E6D28E5529A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:93:e4:e0:ee:8d:7b:eb:e9:e0:06:e8:f2:75:
                    c9:bf:a6:78:a9:dc:a1:f4:5f:b6:7f:66:26:fa:27:
                    a3:7b:f9:c6:8c:4c:97:ac:70:77:ad:08:b4:fc:be:
                    2c:3f:15:bc:ee:c4:28:63:7b:3b:99:24:9d:04:4a:
                    14:08:61:95:44:e2:33:0e:05:79:54:b1:ea:8c:35:
                    bf:d5:c5:11:41:18:86:75:cb:ab:01:cd:6f:73:44:
                    55:f7:c4:40:f0:ce:e8:0f:c5:ee:b5:8b:87:ee:87:
                    27:c6:f8:c8:00:ed:d9:61:c4:c0:96:44:89:9c:16:
                    6a:64:c4:fb:69:50:b0:59:dd:41:b7:a5:86:e1:62:
                    e0:44:68:1a:de:4c:08:8a:98:61:09:5c:de:3d:08:
                    70:43:af:54:99:bf:ed:bf:c2:01:fa:7f:a2:6e:82:
                    f6:ef:eb:ae:59:60:19:e8:50:89:85:d3:2c:9a:9e:
                    37:13:1d:8b:76:0b:1a:78:d9:38:c8:c4:1c:24:c9:
                    36:c6:d7:20:14:be:68:29:98:ac:14:9f:1d:40:c1:
                    9b:04:b2:bb:64:3d:c7:63:ea:b4:6b:40:b6:df:ed:
                    dd:52:b1:29:d6:60:a9:ca:1b:73:46:c8:7b:5f:38:
                    56:4e:41:5a:0b:3d:c8:08:25:c6:62:1a:e4:f8:97:
                    6e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E3:9F:AF:8E:8C:D4:5A:04:A5:00:7B:A8:9E:6D:28:E5:52:9A:01
            X509v3 Authority Key Identifier:
                keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0f:04:0a:1a:67:fd:69:e0:7a:65:be:b1:ec:7f:89:ce:8a:
         51:2b:fa:90:78:13:7a:0c:e5:d4:5f:16:e2:61:95:87:bc:a0:
         4b:67:7f:c4:08:3d:10:27:a4:fa:83:05:5d:16:05:9e:ac:c6:
         00:f2:e1:7d:10:72:00:ce:6e:c4:70:50:9c:d8:b5:25:71:c3:
         52:b2:b2:13:7e:e6:a6:e7:e1:68:82:f2:e1:02:54:f9:82:42:
         c3:7f:d3:27:68:f5:7a:28:8f:97:d0:7e:c0:b9:60:c4:82:bf:
         67:46:c0:ae:86:07:a3:13:ed:7b:0c:ec:02:48:45:8b:af:0e:
         89:46:0f:bd:eb:9d:f4:25:85:36:9d:95:18:17:16:dd:59:26:
         03:4b:f9:4e:33:ce:99:e5:10:cf:47:91:8a:8e:9c:16:1f:9a:
         ec:9e:c6:0d:24:d1:b4:1c:76:03:67:22:81:74:5a:0b:05:2f:
         44:46:fb:a1:e3:26:d5:27:f9:f6:14:fe:ab:57:99:38:b5:40:
         0f:2a:cd:9b:b0:b2:7b:80:d4:4f:80:8c:2e:2f:1a:ee:a6:99:
         05:a2:f6:6c:a6:46:c2:f3:79:df:7b:4b:62:2c:97:4d:81:56:
         c2:c7:d6:cb:da:31:55:6b:d5:16:cb:4a:8e:f6:1d:b4:53:7a:
         e8:85:ee:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 02:39:10 2026 by rpki-client