Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft
File:                     4242BEFAB7FD9E772FB16847C540331384EE1024.mft (raw, json)
Hash identifier:          EQnuuzcP3wSwod/nPPAcxC8EpbPjw98hgyIVBZ2QuFc=
Subject key identifier:   6C:58:9B:36:82:22:07:10:14:35:0D:B1:A8:D7:F8:F8:B9:FC:7A:8A
Authority key identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24
Certificate issuer:       /CN=4242BEFAB7FD9E772FB16847C540331384EE1024
Certificate serial:       32F85387596AE3B7A08B23C8AD71CF5D78A1F7BC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft
Manifest number:          F0
Signing time:             Sat 24 Oct 2026 17:41:16 +0000
Manifest this update:     Sat 24 Oct 2026 17:36:16 +0000
Manifest next update:     Sun 25 Oct 2026 20:46:16 +0000
Files and hashes:         1: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (hash: 8HTV0U7VPfbofWQktj6RT5pn5RIkHHJ7XlxCG7/lIR4=)
                          2: 4242BEFAB7FD9E772FB16847C540331384EE1024.crl (hash: Wh8yNUJ8Bf648owE0obIWvRyjCoJcuWRTSHiwz6rkls=)
                          3: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (hash: PfMnHFIZGrnZM82g+rsBwK7aW3WScriYgqF0KRQ2e7o=)
                          4: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (hash: HZhaUoMvo6PbB0DDiHNG1KzdNqQKbOCBQCGJxhRr7TU=)
                          5: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (hash: C/tjvABwEX3e3XuDh6lRQ/cpU/5HYFGHpATqucNO6pQ=)
                          6: 323030313a6632303a663030303a3a2f33362d3438203d3e203338313534.roa (hash: yBBw20MUl3ywel5nMkYQ+sxWLo0uKsXTdelznoPGQgw=)
                          7: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (hash: nXrFney4rm86RaxvLz8FHxrD0eDVyhHMOFWuNh0v780=)
                          8: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (hash: Cw/pDcSCd6i3ij4/wfpHGGndxOrkB5cRBItVY3wwyXY=)
                          9: 3130332e39332e3232382e302f32322d3234203d3e2039383735.roa (hash: plHSoDJvYamH7d5XnPc3pI86A6QX6OqcLXJ9kpcAJNk=)
                          10: 3130332e39332e3232342e302f32322d3234203d3e2039383735.roa (hash: q/L6qPVBjB/7ek7BWj/Ivr62NYwkq62QBBVazz6XTPg=)
                          11: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (hash: tIIyaOJKHjPPuva/q/Aqc1Qh+BSiqDBH0wmDFkgmMzY=)
                          12: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (hash: df7n82FEObULXOysxP6bG6yjwPocx8D3thReHoveLMI=)
                          13: 3130332e39342e39382e302f32332d3234203d3e203233.roa (hash: v6AIf6Ye2mNisATf8VttDEk4MQh/WBoHi4P3BEg56Hs=)
                          14: 3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (hash: ZoyEeEkhjYB7kmWXbankgfqmtUA/RIwDGWmG85rq3MM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl
                          rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 19:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f8:53:87:59:6a:e3:b7:a0:8b:23:c8:ad:71:cf:5d:78:a1:f7:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4242BEFAB7FD9E772FB16847C540331384EE1024
        Validity
            Not Before: Oct 24 17:36:16 2026 GMT
            Not After : Oct 25 20:46:16 2026 GMT
        Subject: CN=6C589B368222071014350DB1A8D7F8F8B9FC7A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:b8:d1:5b:96:d6:29:98:07:69:c9:ec:0a:
                    cf:37:eb:48:d6:e7:b2:53:e3:cd:7a:03:f5:1e:00:
                    49:6a:ef:30:f8:e7:8b:48:a5:b9:29:94:d2:e8:b4:
                    cc:05:37:4c:e9:43:12:6f:f3:b1:68:db:d4:9a:e1:
                    27:a4:aa:ce:73:c5:8e:82:5d:be:5c:b2:25:ac:ad:
                    52:88:a4:56:fa:d6:70:ae:15:3a:fb:dc:0d:5a:e2:
                    be:5a:ed:45:5b:a7:1f:d7:71:2f:fa:ee:d8:41:4d:
                    ee:ef:5f:fd:70:f3:4c:98:17:3b:5f:02:4a:29:e6:
                    64:0f:11:a3:59:bf:e2:37:fd:25:6e:8d:19:db:b9:
                    37:b8:e9:0a:6a:d0:e7:df:81:5d:4b:cd:7f:b5:bd:
                    b2:45:52:bf:01:1a:01:05:3b:51:5f:14:15:63:8d:
                    6b:0e:2b:68:e5:e7:7c:3f:1e:ee:e9:27:72:80:7b:
                    d9:a4:8e:68:97:fb:15:00:61:3e:bb:4e:db:7f:a4:
                    20:a6:42:be:31:ef:43:eb:87:a3:84:f5:cd:23:7f:
                    46:4e:bd:35:01:71:25:af:a1:4d:86:9f:96:af:de:
                    0a:25:23:a2:ac:c6:1c:18:b9:d6:8a:a6:ec:da:67:
                    f2:a1:bf:7b:fd:bf:a4:53:be:cf:95:e0:d3:f5:10:
                    d0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:58:9B:36:82:22:07:10:14:35:0D:B1:A8:D7:F8:F8:B9:FC:7A:8A
            X509v3 Authority Key Identifier:
                keyid:42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:29:92:6a:05:ad:e0:76:33:ba:f6:5a:3f:e3:64:e0:7b:bc:
         f0:8a:29:ac:32:4d:23:fb:ed:c1:fe:d6:3b:ec:e8:35:c5:86:
         cd:d7:cd:56:99:a0:f7:64:2e:78:a4:f0:e2:ff:ce:c0:a0:57:
         e1:d2:41:8c:22:1d:f8:ce:5f:7e:7d:95:0e:94:6b:2d:fb:fc:
         12:15:7b:1d:83:4c:5a:e3:c1:3b:d4:dc:0f:e2:28:f7:59:98:
         5f:72:62:13:19:fe:d8:eb:72:19:7f:6f:bb:5f:13:e9:f9:36:
         d8:a7:0c:c8:7f:96:a0:2e:00:dc:1b:78:be:b9:97:8e:33:b6:
         98:f9:f1:42:d0:33:6b:3d:17:ec:8e:94:0a:3c:20:45:24:15:
         c0:17:3c:b1:3e:14:a1:5c:ce:a1:fa:f6:82:99:48:7b:70:8c:
         f0:9c:07:98:03:2e:22:b7:0d:8b:ab:12:67:04:28:52:2c:e1:
         7b:c1:f6:56:57:e0:d2:8e:13:7d:33:08:2a:83:5d:85:9e:f3:
         96:e1:ec:42:c7:98:24:52:5d:08:24:63:38:4d:18:73:94:86:
         98:25:af:bf:95:d3:c7:dc:6b:04:80:dc:4d:1a:21:44:6f:56:
         c5:1e:8e:f5:89:99:bc:94:c1:13:35:09:33:fc:60:60:19:42:
         62:87:4e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 23:30:12 2026 by rpki-client