Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.mft
File:                     BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.mft (raw, json)
Hash identifier:          Goh+rieL5gmIctyVHpVLAzAXl/4mJeURIvyyCO9luyc=
Subject key identifier:   DA:F3:F3:FC:57:75:85:ED:21:ED:8C:AF:1E:DF:F7:A0:31:C6:31:56
Authority key identifier: BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6
Certificate issuer:       /CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6
Certificate serial:       2AF38F5673C925EFBF8D074DB8E257463ADDF128
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.mft
Manifest number:          F4
Signing time:             Mon 02 Nov 2026 05:44:48 +0000
Manifest this update:     Mon 02 Nov 2026 05:39:48 +0000
Manifest next update:     Tue 03 Nov 2026 08:28:48 +0000
Files and hashes:         1: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: pgQH0i0ehGmzFb43nuct0pqH5vRJ2AnbTi4ssXBmCns=)
                          2: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: i8/9Al23162Hh9EuI4r+PROdnYjP3rvKgLEi0SE1gko=)
                          3: 323430343a393763303a333130303a3a2f34302d3430203d3e20313533303837.roa (hash: DkrBZkvkfTGYcAnb/q24MD7TOXJYh2ZRG294v85u6vc=)
                          4: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: x7DLCEw85VnPtCuNSSL0AaGObSR6a+SBIwdHJ1h1Mpw=)
                          5: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: 6GaLrBJRDeCPmVnv9HWmJ60Gaf1Noay2UqTb1qe1J6U=)
                          6: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: bon90A14TeJB2MQZ6lFwQ+xqFFD8xc2HW5MwCKJvZ4E=)
                          7: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: xb3LQP98Wnkeaa73FeAsRO67APus8QpwaxgRv7W1gB0=)
                          8: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: gbWPvSn9oGzplXTJuKiGVXfJ3QszW1p69Bh6AB3NY50=)
                          9: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: RDFItErZLgf15K2OjzSNqV9SV+BAzr6bApV7t0EXTTY=)
                          10: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: JfyDnqHJb/IufIySH4lkzSgcs9cgy3rL8v9+jaM2np0=)
                          11: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: GLCqHLZjzdNzX3TXPakzOOEqH7B+8ugxHe0qrnCfBjU=)
                          12: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: XSTLCvwBgsGiboNB4g5XCd3pqhrYQdYr6dWo2vfozoY=)
                          13: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: 4kMSIYrfvXZ+D361OtqkievXqmMkOfuLhORmwINF7Tc=)
                          14: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: LmzJWGcro3bi8Jg3lwtItH4wYWQEdh7V8747CwKqF4U=)
                          15: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: uuY3akMv8WdLlBArvbLvTc6Ot8Er35ZApMPQiyXxWHc=)
                          16: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: /Mmg3ecLSRK255XCBGJB0jTcyiyW2m4kWEh1sFSxNMc=)
                          17: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: DMTikJab0ae9O4HD2Rj+Ztu7x/UCvKq4uURdfUfpXaI=)
                          18: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: PGxee0fWO8kkb9q2Thzi1Vdd0Q2fRcNQi8ITPZial4A=)
                          19: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: xSAW0dl9FR+PBDE9FkjYd/HTPHFZDrku8OeFmsZOTOk=)
                          20: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: FCOHH3FF0Huxbp0d4hbnKZLONEdjGgytLEA2qKU8GKw=)
                          21: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: zvtMjowrV+4dPWQSw6s00W3ZigrcSHljQ+dcDb+Q1ts=)
                          22: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: XxL/w9ox3cGwqcu82UMQyHdLdwmKZ2XYnIXUs8E0QIA=)
                          23: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: r0l+CHJbGyI5CCIs3233uBO79kCFOc5uwFvHPFbfCLE=)
                          24: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: 7g9pZFhevC0vJex8GHlI9TjNm54eKRFry7baboSmK7s=)
                          25: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: lHltk0IklzhaGbNSf+3ag2asl70zSGmHg6vSWrmgMVo=)
                          26: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: +tWUVdPDeV8dmUbVn9ZR75d3dBPBsnV62IVfil8fxAY=)
                          27: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: dKLyf6w8KL4C7KRBQVvsmkG+O6JyFboVAWvLUYUit+k=)
                          28: BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl (hash: saJV+BvVtWPynwL/SgwJktAHK+8NfrC2ly+JzzOc14w=)
                          29: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: TiLVfKLlOo1Rnu2hsDvAr4lXFjpBFots9w0X5QPPLhQ=)
                          30: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: pdOHJluQlfq3TkLLSMk30Y8iYQjHQV+KHm0Xmsrswjk=)
                          31: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: 9/QoXwZi+Pyj1T7FozvY9yt2s5Z6BJHX1W+zeI9735Y=)
                          32: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: 2YjH226BreYnQdG65DzUH0FRXit9Bilp1mnr8DqxkNI=)
                          33: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: CT1lTt1XHJVWvWbdNqTchEh5e5PzUrGVMQTe6AMvVkw=)
                          34: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: AlM/3yNm2FMrlxQIQ5niRlMBd0EOosaO8y5znGqIE8Q=)
                          35: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: u+MqAUk2B5ExGfN0EJwIauHmEXqaYtpRPVvNSr0HHrA=)
                          36: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: lEE/SUDsgTw04f8LaVsCPBIjXLNcAcdIsJ4mtUovfqM=)
                          37: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 7D5LmbcAwQhQzj7d7JHDYQ+AtJDaVqhWb2RhRIlRhaU=)
                          38: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: fpSm4pDE62K2C3MwDYk0O0zYAOfSn+482jOnkiwjuHI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl
                          rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 08:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f3:8f:56:73:c9:25:ef:bf:8d:07:4d:b8:e2:57:46:3a:dd:f1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6
        Validity
            Not Before: Nov  2 05:39:48 2026 GMT
            Not After : Nov  3 08:28:48 2026 GMT
        Subject: CN=DAF3F3FC577585ED21ED8CAF1EDFF7A031C63156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:80:e3:6c:03:fd:75:68:fb:37:eb:19:bb:75:
                    ed:7f:d6:37:8e:3d:02:b8:9b:26:38:cc:c4:53:f8:
                    46:51:16:67:ab:c2:6a:bd:d6:45:97:0d:6f:83:50:
                    b3:e1:c3:6d:c6:63:c9:ea:e7:9b:9c:f2:1c:b0:59:
                    03:e8:f1:84:60:fe:cb:0c:1d:83:34:f2:e0:10:5c:
                    4a:8a:25:a1:6a:13:48:0b:cc:88:6f:70:d3:6b:19:
                    3a:2d:5f:23:fa:5c:81:8b:05:1d:69:39:40:32:45:
                    83:4b:36:37:31:a4:28:d6:fc:81:6b:8e:78:c0:df:
                    76:68:bc:e3:ea:32:bb:bc:c2:76:ae:83:a7:3d:cb:
                    5b:b4:a0:88:27:19:13:50:fa:42:2e:35:8e:5e:70:
                    79:14:34:37:49:7d:66:a8:3c:dd:97:35:15:67:7e:
                    bf:c7:8d:c4:86:a0:95:a6:6d:25:97:77:5d:43:20:
                    b7:a7:14:80:0c:60:4e:c4:91:84:69:d2:ea:c8:ec:
                    04:21:80:c8:94:62:f6:06:32:eb:f4:02:9e:5f:9c:
                    ea:76:17:4b:79:51:02:8b:a7:21:b8:8f:f8:17:96:
                    1a:99:3d:6a:62:84:6f:f4:0a:d2:98:61:a4:a7:5f:
                    fc:4c:d2:ec:b6:03:71:8e:7d:5a:51:ec:de:b1:ff:
                    ad:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F3:F3:FC:57:75:85:ED:21:ED:8C:AF:1E:DF:F7:A0:31:C6:31:56
            X509v3 Authority Key Identifier:
                keyid:BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:0c:e2:e6:7f:33:8f:92:e3:35:fd:1e:f5:b6:04:33:ad:03:
         09:f1:f8:27:46:7e:3c:df:9e:8a:d3:5c:53:30:20:e3:b9:90:
         cb:fa:37:bb:e8:ee:55:7b:b8:77:a4:92:41:c8:01:b2:ec:53:
         a4:16:7b:93:7d:03:b6:b8:2e:5c:94:3e:14:f6:f1:bc:2b:63:
         85:91:49:eb:15:3e:74:70:e4:06:54:82:8b:37:6f:50:df:0a:
         17:1d:6f:52:4f:53:ad:9a:0c:83:e3:bc:6c:f8:6f:ca:91:ce:
         47:3f:39:49:0e:43:28:a3:b0:be:73:65:0a:64:2a:02:d9:4c:
         a4:4e:e7:49:71:e8:34:f8:db:f2:80:44:8f:75:b6:5f:9d:22:
         85:16:d7:d3:ed:be:e6:85:f4:72:c7:41:bd:b9:5c:6a:07:f0:
         4b:0a:f9:85:82:b3:c0:07:4e:42:7a:26:68:b9:81:5e:de:e0:
         e7:f0:2e:64:e7:a3:1a:13:a8:36:24:7c:10:5c:63:45:b6:8f:
         64:db:34:f5:58:e2:80:72:c8:d4:22:04:72:4a:89:16:19:2f:
         f3:d8:bf:05:48:12:c4:1a:c1:b6:38:62:70:ef:56:00:39:65:
         26:cd:52:53:d9:a8:46:2d:81:87:f9:b1:a2:bd:2c:23:98:78:
         16:c6:a6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:32:19 2026 by rpki-client