Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft
File:                     408DEB7465856EE053B64340FA814B862FA5ED30.mft (raw, json)
Hash identifier:          5h+Pv6Rbfie3vrNXxWqsm0JwHq5Cj87h3T7M7Yiaa78=
Subject key identifier:   9F:B5:8C:8B:1A:AA:CD:D0:BF:B8:32:2F:B6:86:75:A7:43:76:C1:0F
Authority key identifier: 40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30
Certificate issuer:       /CN=408DEB7465856EE053B64340FA814B862FA5ED30
Certificate serial:       79E227CE2DC3FC01E74C9D0739A53686256A2A90
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 20:09:26 +0000
Manifest this update:     Tue 02 Jun 2026 20:04:26 +0000
Manifest next update:     Wed 03 Jun 2026 22:32:26 +0000
Files and hashes:         1: 323430343a653130303a343030393a3a2f34382d3438203d3e20313333383430.roa (hash: qypDEJsbz1mzm/kOIX1QhPELxPdwjqkZ2S0DHXOUXL0=)
                          2: 323430343a653130303a343030363a3a2f34382d3438203d3e20313333383430.roa (hash: N9uLhprhJ5wZr4o31KflWpO6N9TpuQoNZcpiZ8VwfNg=)
                          3: 323430343a653130303a393a3a2f34382d3438203d3e203535363835.roa (hash: eGRMhnLTnT3YYCWJW4I3KHNEEhYQTAAoRoCU9ewEbU0=)
                          4: 3230322e3134352e382e302f32312d3234203d3e203535363835.roa (hash: rvd1VzcQSj/JsAOrW50iGkXhzOAfs7R8SowdxdwmDi8=)
                          5: 3230332e3136312e32302e302f32342d3234203d3e20313333383430.roa (hash: YZ9gLc+KaWEgvMxRekGnlvZET/50LrXbNrDTpZYZ2Lc=)
                          6: 323430343a653130303a343030353a3a2f34382d3438203d3e20313333383430.roa (hash: xm6j+Wu4h+hoeaN0WgsoUOVNWLd/rLgh2h75IOTgBxg=)
                          7: 3135302e3130372e3134312e302f32342d3234203d3e203535363835.roa (hash: oU0JE13izs3AAVH3QHb02tsIObTYm/RQpyEK7pKdYyk=)
                          8: 323430343a653130303a333030333a3a2f34382d3438203d3e203535363835.roa (hash: p9GuvZpVXGOu6H5D3HvMBhou5ViROJkVlEsHLf6NCQs=)
                          9: 323430343a653130303a383a3a2f34382d3438203d3e203535363835.roa (hash: +LirAuzLcoxy5m9cq8X0tN0hUiKGAI5gI8eCsUZvwVI=)
                          10: 323430343a653130303a323030313a3a2f34382d3438203d3e203535363835.roa (hash: zzxXm+Scrt2TtHV+TAk4gRueWNwz1TnTiniujwfO9v8=)
                          11: 323430343a653130303a343030343a3a2f34382d3438203d3e20313333383430.roa (hash: 8q0q3+SCWY+Bu0G+ofJDsLu7LiqjhYqzKCA9NCa0Wng=)
                          12: 323430343a653130303a333030323a3a2f34382d3438203d3e203535363835.roa (hash: GhWk8OpqwUpIBUXAgpGGL+KSvBEekP6n3orq3IOYLy0=)
                          13: 323430343a653130303a363a3a2f34382d3438203d3e203535363835.roa (hash: Vc7FshVMDiGpbF9+Kiv6QLr/14tMNel0qOZ/fxIsVp4=)
                          14: 408DEB7465856EE053B64340FA814B862FA5ED30.crl (hash: oHM5auQnHweQ/4WUIC0mJLzjvjSLLX5hf734oV7z6Qs=)
                          15: 323430343a653130303a3a2f34372d3438203d3e203535363835.roa (hash: XPqwG5uNlGq8HabTQDxKUO4ieFteUl8/je1ShR27KLE=)
                          16: 3132342e3135382e3137362e302f32302d3234203d3e203535363835.roa (hash: rCX7dSAz0+qNZf+JX7cNepkLY8fLV6qo+N3cJ/3xyMU=)
                          17: 323430343a653130303a353030303a3a2f34382d3438203d3e203535363835.roa (hash: 6qJvADM7TnokbPeZ7qdt3vQLtnl3NVZtxOSj18q09CQ=)
                          18: 3230332e3136312e31362e302f32342d3234203d3e203535363835.roa (hash: C5oUI2h3brm87AxUbd6SUzdb5uGx5flTFnQn9c0Rsx8=)
                          19: 323430343a653130303a333030363a3a2f34382d3438203d3e20313333383430.roa (hash: zZVo01FthP3hibAPdEn6/sGHNEwpisfqDnYx/D1PKfw=)
                          20: 323430343a653130303a333030343a3a2f34382d3438203d3e20313333383430.roa (hash: l3Xe9DJNocb+9zSuPJro4YyXKCYcVdP6Ug2kux/i4oI=)
                          21: 323430343a653130303a613a3a2f34382d3438203d3e203535363835.roa (hash: dxc6OEKiJ0H3o4CsLNrGmyX3sdS4YK5f3WmrW9K9FYU=)
                          22: 323430343a653130303a333030313a3a2f34382d3438203d3e20313333383430.roa (hash: gxqVgyPUiSzwf0u2VTIvrDekpuZp70wS4sOOjZvw6YQ=)
                          23: 3135302e3130372e3134322e302f32342d3234203d3e203535363835.roa (hash: +QWtKNL1YBIIXGreXBd0hdZMntVTdOxbRl7+McB07cw=)
                          24: 323430343a653130303a343030303a3a2f34372d3438203d3e203535363835.roa (hash: chn/BLH6sXxVIJc1U2zEaLzRzrKSbG3qdCfk7lXO83s=)
                          25: 3230332e3136312e32322e302f32342d3234203d3e20313431363330.roa (hash: wxner6wl3sOvYJh0mDythJMlkNJcZGPgDz2HQg7kmDY=)
                          26: 323430343a653130303a373a3a2f34382d3438203d3e203535363835.roa (hash: pTxDsPkyo1tDRr1vmTJQTYR/ssBoeqKcFE0P3tWEh38=)
                          27: 323430343a653130303a333030373a3a2f34382d3438203d3e20313333383430.roa (hash: ZinyWF6/OyM+qIB4ybFpsxZf4hZ/U3ElqALdBB5MFdU=)
                          28: 3132342e3135382e3138342e302f32312d3234203d3e203535363835.roa (hash: F8OoTDhCJq9Bcdj1yKzjz6oWC9zK/hcpJVLKpPZ2JFE=)
                          29: 323430343a653130303a333a3a2f34382d3438203d3e203535363835.roa (hash: R4CrB5b+ue/S+9kEK4IXhRL1Ni8lQpZWKhM7ys5cBKI=)
                          30: 323430343a653130303a343a3a2f34382d3438203d3e203535363835.roa (hash: SwZ0+RN9zy7jGzeWOiHw5G8Tt8UGWdAo+QE8SFhTvTs=)
                          31: 3230332e3136312e31372e302f32342d3234203d3e20313333383430.roa (hash: PGB9+soronCLjtQLmYSIcnoiPai7hpfQKryraZPR/Yg=)
                          32: 3135302e3130372e3134332e302f32342d3234203d3e203538343838.roa (hash: nSL4B/G0XcHxGPJp9F9kqB6nsnTe5eKmLy08tlSHYSo=)
                          33: 3135302e3130372e3134302e302f32342d3234203d3e203535363835.roa (hash: iyyTicCYI3PReuzMhbLu1UKWtg/CJ9OarlydnyTRbJo=)
                          34: 3130332e32302e3139302e302f32342d3234203d3e203435373331.roa (hash: vh/OAKDmJtj9EbMMod6wkTOiMyrPRqy4DLk/7nwblHk=)
                          35: 323430343a653130303a623a3a2f34382d3438203d3e203535363835.roa (hash: pb1VqEYJr2hN6kBpjKbLxtnI+8QtZjKC3UvLZT0dfoY=)
                          36: 3130332e32302e3138382e302f32342d3234203d3e203535363835.roa (hash: AdX/SbpOmCfZ9QwC8oYtmYCJDAS+Phh41drpYlmN36s=)
                          37: 3130332e32302e3138392e302f32342d3234203d3e203535363835.roa (hash: u28Gp2P78Rkr5OmrjjB3RCUE9KIBOFm4VOHaugoOlnE=)
                          38: 323430343a653130303a323a3a2f34382d3438203d3e203535363835.roa (hash: 7PC5yUWVkxaFBFncB8YjDQwXNAyIGFxj1rN/Th2rMIE=)
                          39: 3230332e3136312e31392e302f32342d3234203d3e203535363835.roa (hash: yowhmQACxswf/Peww6LGXxyyONQN5xqLKBxpY18BN1A=)
                          40: 323430343a653130303a353a3a2f34382d3438203d3e203535363835.roa (hash: iOnEWVuE24LYVCdnoa6iFEPJSCFOuf4sXHNPg/SHFs0=)
                          41: 3130332e32302e3139312e302f32342d3234203d3e203535363835.roa (hash: oRAbrcr+/kuVQudloHVXhRXPkaF86LJCugKnZle6XyQ=)
                          42: 3230332e3136312e32312e302f32342d3234203d3e20313333383430.roa (hash: m52mPeFqa+8/0Tpk86Gx6fbXpZzKnUzkFHaj1U3ilBo=)
                          43: 323430343a653130303a333030383a3a2f34382d3438203d3e20313333383430.roa (hash: cYq1pPJ1kXz1P0V4uXTVcOLjxxMdDVaxI2QS5Rg283M=)
                          44: 3230332e3136312e31382e302f32342d3234203d3e20313333383430.roa (hash: ssBu2jXdvk42wwsEv5CkPxmyn7/LIefL5EcZ6039xsU=)
                          45: 3131392e31382e3135322e302f32312d3234203d3e203535363835.roa (hash: 5ZmddhT7GIlx82/rw7f9EHLmxelcV9emeZTvH2dyZ8I=)
                          46: 323430343a653130303a333031303a3a2f34382d3438203d3e203535363835.roa (hash: K1j1r8p8lnDILuK7N/NcJkBJvu7iEEFMc675if0S3WQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl
                          rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e2:27:ce:2d:c3:fc:01:e7:4c:9d:07:39:a5:36:86:25:6a:2a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408DEB7465856EE053B64340FA814B862FA5ED30
        Validity
            Not Before: Jun  2 20:04:26 2026 GMT
            Not After : Jun  3 22:32:26 2026 GMT
        Subject: CN=9FB58C8B1AAACDD0BFB8322FB68675A74376C10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f6:a7:06:98:da:ea:d2:1c:c9:49:fb:e0:19:
                    37:ef:c7:13:9f:e4:46:56:bc:71:f1:d6:4c:b7:2b:
                    83:e5:8d:cc:92:60:87:01:96:76:50:90:22:a9:47:
                    6e:3c:cc:63:5a:cf:1b:5d:61:41:b8:0a:0f:3a:0b:
                    22:07:c9:28:f6:f7:24:e6:e3:60:55:04:c3:cd:12:
                    6f:a3:e9:73:81:bf:a1:e8:8f:f6:76:8a:29:54:3b:
                    c9:13:29:ad:68:94:ad:b3:7e:31:5a:38:36:4b:2c:
                    9f:97:f1:31:d9:aa:be:84:6f:eb:8d:4b:e8:0a:d9:
                    5c:7e:89:49:03:c5:4c:df:20:f7:de:aa:19:1b:72:
                    e2:15:9e:79:68:49:e4:61:71:70:02:3e:46:d7:90:
                    52:b5:df:d4:62:e6:87:3b:f5:db:9b:f7:a3:af:2c:
                    6f:f7:d3:c8:f3:d5:4c:53:98:b1:d8:fa:eb:2f:88:
                    c3:6d:3e:2f:77:8a:3f:ec:dc:3a:b0:7e:a8:a3:98:
                    ba:79:62:80:1f:54:fa:15:f1:67:c3:31:c0:3b:ee:
                    0c:fd:e3:7c:0a:69:17:07:ea:6e:99:90:30:eb:40:
                    a1:90:0f:d8:7f:3a:af:f2:f1:d7:b0:89:90:cd:31:
                    99:a2:1b:4e:19:ea:0d:3c:79:73:e1:d8:fd:46:3b:
                    95:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B5:8C:8B:1A:AA:CD:D0:BF:B8:32:2F:B6:86:75:A7:43:76:C1:0F
            X509v3 Authority Key Identifier:
                keyid:40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:44:9c:2f:d1:d9:15:16:1b:ea:8d:05:d8:a3:6f:04:6d:da:
         4e:37:ec:05:a6:04:74:90:c8:a1:64:a7:d1:b4:86:a1:68:8c:
         d6:ac:05:84:bf:5e:f3:22:99:b0:cf:64:07:26:98:25:d0:d3:
         da:88:b7:68:d8:bd:7a:26:6e:b1:ad:03:18:2e:4a:c3:fa:e2:
         e0:e3:6b:40:13:c3:26:1f:97:f8:7d:92:db:4a:98:0b:da:ca:
         ab:07:0c:27:6e:e9:7f:51:97:9c:33:2d:44:b9:1d:21:74:c4:
         a0:a8:a1:67:00:28:44:1d:1a:cd:ce:33:27:fe:6c:4d:61:7c:
         01:98:42:60:e2:1d:03:74:d7:6f:73:9f:7c:92:60:08:05:bf:
         b2:4b:80:d1:83:48:83:99:24:1f:1c:e6:26:80:f5:91:1a:03:
         20:99:ae:01:38:3a:57:33:b2:99:cb:f2:7c:cc:1f:8d:45:af:
         65:c7:64:be:68:83:b0:cf:2a:85:31:ce:72:4a:62:c4:93:2c:
         9a:3a:7c:7b:b5:30:b8:83:27:8b:0a:57:54:94:4e:63:5f:a3:
         a4:df:a7:6c:8f:8a:b8:cf:7a:1d:ce:27:91:ad:79:5a:32:aa:
         1a:5a:23:c5:1b:2e:6e:dd:fd:a8:5c:4e:78:d2:79:7a:3f:18:
         79:76:a6:70
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeeInzi3D/AHnTJ0HOaU2hiVqKpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA4REVCNzQ2NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYy
RkE1RUQzMDAeFw0yNjA2MDIyMDA0MjZaFw0yNjA2MDMyMjMyMjZaMDMxMTAvBgNV
BAMTKDlGQjU4QzhCMUFBQUNERDBCRkI4MzIyRkI2ODY3NUE3NDM3NkMxMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq9qcGmNrq0hzJSfvgGTfvxxOf
5EZWvHHx1ky3K4PljcySYIcBlnZQkCKpR248zGNazxtdYUG4Cg86CyIHySj29yTm
42BVBMPNEm+j6XOBv6Hoj/Z2iilUO8kTKa1olK2zfjFaODZLLJ+X8THZqr6Eb+uN
S+gK2Vx+iUkDxUzfIPfeqhkbcuIVnnloSeRhcXACPkbXkFK139Ri5oc79dub96Ov
LG/308jz1UxTmLHY+usviMNtPi93ij/s3DqwfqijmLp5YoAfVPoV8WfDMcA77gz9
43wKaRcH6m6ZkDDrQKGQD9h/Oq/y8dewiZDNMZmiG04Z6g08eXPh2P1GO5XdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUn7WMixqqzdC/uDIvtoZ1p0N2wQ8wHwYDVR0j
BBgwFoAUQI3rdGWFbuBTtkNA+oFLhi+l7TAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODVkOGRhYjQtOGJiNi00ZWQwLThkYWItNWE0MDYxNjdiOTlkLzAvNDA4REVCNzQ2
NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYyRkE1RUQzMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MDhERUI3NDY1ODU2RUUwNTNCNjQzNDBGQTgxNEI4NjJGQTVF
RDMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVkOGRhYjQtOGJiNi00ZWQwLThk
YWItNWE0MDYxNjdiOTlkLzAvNDA4REVCNzQ2NTg1NkVFMDUzQjY0MzQwRkE4MTRC
ODYyRkE1RUQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHtEnC/R2RUWG+qNBdijbwRt2k437AWmBHSQ
yKFkp9G0hqFojNasBYS/XvMimbDPZAcmmCXQ09qIt2jYvXombrGtAxguSsP64uDj
a0ATwyYfl/h9kttKmAvayqsHDCdu6X9Rl5wzLUS5HSF0xKCooWcAKEQdGs3OMyf+
bE1hfAGYQmDiHQN0129zn3ySYAgFv7JLgNGDSIOZJB8c5iaA9ZEaAyCZrgE4Olcz
spnL8nzMH41Fr2XHZL5og7DPKoUxznJKYsSTLJo6fHu1MLiDJ4sKV1SUTmNfo6Tf
p2yPirjPeh3OJ5GteVoyqhpaI8UbLm7d/ahcTnjSeXo/GHl2pnA=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:42:48 2026 by rpki-client