Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
File:                     43E1CC61CDE59968FE0810D4937130A67D6541DC.mft (raw, json)
Hash identifier:          xqnk13GYuWnb6EIQTusl2so4vo9TMFNC8fTliFmzXvE=
Subject key identifier:   3E:03:36:60:F4:F9:DB:FA:5E:30:77:07:C9:95:86:49:8E:38:10:19
Authority key identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC
Certificate issuer:       /CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
Certificate serial:       3E2544F2EF97F6855EFAF8562C0FCB6304741D2B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
Manifest number:          A6
Signing time:             Thu 03 Sep 2026 08:43:03 +0000
Manifest this update:     Thu 03 Sep 2026 08:38:03 +0000
Manifest next update:     Fri 04 Sep 2026 11:56:03 +0000
Files and hashes:         1: 323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa (hash: FymgtPH5XRJeo2g24rTB6Zt9DBTm0EmGQZ0QaJOmZSE=)
                          2: 3230332e3139302e3131332e302f32342d3234203d3e203338313536.roa (hash: df96YWKu427U+HPJiLnno+3fbVy36Hxa342nQy+ZfoU=)
                          3: 323430353a613534303a3a2f33322d3332203d3e203338313536.roa (hash: mYAvetqJOaK+g42xXQIVuzKQ0V+8EMMx37honK4xGaY=)
                          4: 43E1CC61CDE59968FE0810D4937130A67D6541DC.crl (hash: Tm+Q+EyMaM45fXiY2ip8U/5I1QjqPXklfvQNLaiZK8I=)
                          5: 323430353a613534303a313030333a3a2f34382d3438203d3e203338313536.roa (hash: Cigucd/NI7znq4aJY8FxoWkyWnlcJwSTYzMKj0Cfavc=)
                          6: 323430353a613534303a313030383a3a2f34382d3438203d3e203338313536.roa (hash: jdESrjmJQhjG8kc6FD8N6X6iVxeMA55PP67c1tPELGM=)
                          7: 323430353a613534303a313031313a3a2f34382d3438203d3e203338313536.roa (hash: /s6NqXf3Az+33qCBWrV7/rHS8XMqrqM1zxdpU1dDV14=)
                          8: 3230332e3139302e3131352e302f32342d3234203d3e203338313536.roa (hash: 1wbNP75Z/wA6pW2UhWTpcnJU8wNdOjHZn2vOKC8mX5U=)
                          9: 323430353a613534303a313030343a3a2f34382d3438203d3e203338313536.roa (hash: SMs3l2LaIu15xotNctGRKXxr41nAKmtqdH/wDotPjcE=)
                          10: 323430353a613534303a313030643a3a2f34382d3438203d3e203338313536.roa (hash: cpyNUFqnnPw0hoOUNBzdPXv7w/EpVs/cMCjjRluZNLo=)
                          11: 3230332e3139302e3131382e302f32342d3234203d3e203338313536.roa (hash: GpjHek9a827cy//pNFDcORXn2t6JzxU+p9J93Ct0LZo=)
                          12: 323430353a613534303a313030313a3a2f34382d3438203d3e203338313536.roa (hash: ghjk9WxpBpcObQwhuyRJKOhe294PLPBofYqlraUkN+g=)
                          13: 3230332e3139302e3131322e302f32342d3234203d3e203338313536.roa (hash: akD2QIfBzuzka9CzlNwOGyLhb8S59sJqB1gcfu/lphg=)
                          14: 323430353a613534303a313031303a3a2f34382d3438203d3e203338313536.roa (hash: WgZKLMLpwFRH8Rc+mjcsJQGYvAiCBksSGlUySVC2KTU=)
                          15: 3230332e3139302e3131372e302f32342d3234203d3e203338313536.roa (hash: Yg8Yec064Brwf9x/NAfoSbhCfddxi4fn/8a7jii/RNk=)
                          16: 3230332e3139302e3131322e302f32312d3231203d3e203338313536.roa (hash: FE7yZMTislKGWcbY4qG0beL79uHJRAECT1HhYr/vMVw=)
                          17: 323430353a613534303a313030623a3a2f34382d3438203d3e203338313536.roa (hash: ArldJV59T/AN0DLLjKdryy3dXOdpQHjw8YFmTH59OUg=)
                          18: 323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa (hash: SUQFDo/3me7K6mK7WbxUn/2b9SHI+OuxemQ1myZfogM=)
                          19: 323430353a613534303a313030613a3a2f34382d3438203d3e203338313536.roa (hash: jHrKWWZukLMZ3J2401GmiEuzkAvQx3pBL2xKoO7CBis=)
                          20: 323430353a613534303a313030653a3a2f34382d3438203d3e203338313536.roa (hash: JOAtBF5+cfAqGhS9/3m1ZllG3nhy/U+cT4H4mHFtRKs=)
                          21: 323430353a613534303a313030633a3a2f34382d3438203d3e203338313536.roa (hash: q/tSBWv/7VM0Xu29FwAxjeFSDX/WD3INyENxffhPO4Q=)
                          22: 323430353a613534303a313030663a3a2f34382d3438203d3e203338313536.roa (hash: zPNtfgZ0xuIJb6mJb8ImM+3c3T3QiTY+1lYZMk1v2MU=)
                          23: 3230332e3139302e3131392e302f32342d3234203d3e203338313536.roa (hash: e7mQPN3Z6KC/Ik9Qm59+I1SvLwjeilQ2SD4cxlIQDBE=)
                          24: 3230332e3139302e3131362e302f32342d3234203d3e203338313536.roa (hash: /GkPi/+AOEhPufjKPy1+oO0pijIgfjVervEREyDjquk=)
                          25: 323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa (hash: LWtx3txnmj9FjoJjDB/lmvmHZmgHx1jmLc6PPib5at8=)
                          26: 323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa (hash: G3L597uJ/MtChNRFU4TPZTfQd8hCBfeft5oOi8ZO5Xk=)
                          27: 3230332e3139302e3131342e302f32342d3234203d3e203338313536.roa (hash: 1zxciFrgfrpypZ13HHtfhkMtV3yJILY8QtbERuPSSxQ=)
                          28: 323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa (hash: DmCqSyLAbR1GcGB2b6c28zFVw4CNHOLr1uOyNF7nwjc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl
                          rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 11:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:25:44:f2:ef:97:f6:85:5e:fa:f8:56:2c:0f:cb:63:04:74:1d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
        Validity
            Not Before: Sep  3 08:38:03 2026 GMT
            Not After : Sep  4 11:56:03 2026 GMT
        Subject: CN=3E033660F4F9DBFA5E307707C99586498E381019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:ea:8e:5f:8c:6f:d4:e3:cc:3b:5b:45:6c:
                    b8:33:06:bb:59:28:f9:a7:9d:7d:de:0a:34:5b:61:
                    eb:f5:1c:cb:67:5b:3f:83:24:61:59:a8:b4:25:a4:
                    34:1b:5b:5a:d3:f1:47:94:f7:35:ef:6c:3d:5c:95:
                    fd:ac:fb:35:d1:5a:59:93:d9:da:62:97:c4:75:11:
                    84:ed:f5:d4:e9:a7:a7:16:15:9d:14:0f:71:eb:4a:
                    e6:29:1e:9f:b8:f2:ca:00:1c:fd:5e:75:a1:6b:7d:
                    4d:95:79:9a:47:b0:b6:c7:98:d2:31:1b:9c:b8:42:
                    c8:82:25:d0:02:29:fd:44:0f:42:6e:e3:9a:dd:e5:
                    5d:6d:32:55:aa:56:d2:fa:20:29:ee:32:3f:7b:45:
                    97:8c:e3:c0:88:15:ff:ad:60:2c:fc:ea:8d:78:9a:
                    e1:e3:bd:fe:ff:26:2e:08:a8:89:d9:7f:be:2e:aa:
                    48:c1:56:8f:4a:7a:06:ee:5d:4b:62:b2:65:71:9d:
                    5f:bf:94:03:1c:c9:b3:31:13:0c:1c:f9:87:91:7b:
                    26:37:cc:ea:1e:04:de:96:12:3f:ea:db:72:ac:33:
                    9a:30:e7:c1:2c:c3:c9:f5:0e:6a:8d:06:b9:8b:30:
                    ef:70:59:0b:8c:ab:2c:46:20:19:32:d3:76:6d:f9:
                    02:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:03:36:60:F4:F9:DB:FA:5E:30:77:07:C9:95:86:49:8E:38:10:19
            X509v3 Authority Key Identifier:
                keyid:43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:07:77:b2:84:ad:b7:55:d9:5d:dc:41:9f:f7:2d:ba:08:0c:
         6e:4c:32:57:39:84:ab:94:98:dc:92:cb:d6:4c:db:3c:48:b2:
         53:20:6d:a0:71:03:ee:29:ee:7e:45:fe:d0:eb:f9:42:7f:da:
         73:05:09:a3:18:36:67:08:92:33:4b:08:94:5f:86:0c:ee:8f:
         75:b7:6b:d1:83:62:f6:86:2c:00:c0:ae:37:3c:b7:6b:a2:85:
         77:b4:64:d9:90:cd:85:0f:dd:9e:d8:dd:36:d0:b9:da:6a:82:
         05:74:d6:a9:54:d8:ec:be:89:a5:0e:3e:f1:f0:5c:b8:b9:c1:
         e9:fa:e9:cf:57:36:07:47:59:c6:a4:85:6e:d8:39:65:fe:40:
         4e:1e:e3:7e:12:9c:4e:14:99:eb:69:19:44:86:a1:51:e4:8d:
         8b:cf:84:06:a3:6b:a3:c6:27:7d:4d:6f:32:f9:99:f3:ec:ac:
         98:f6:fc:39:27:23:a9:4a:77:49:83:5e:fa:b3:da:3f:e1:d8:
         8c:23:a5:fe:d1:a1:b8:7f:60:33:52:a7:10:ea:0e:32:80:4a:
         8b:92:94:a4:bb:12:ef:21:5f:c7:45:db:ca:2a:63:4f:1f:5f:
         1b:61:e0:bb:46:42:34:23:e1:63:fa:0d:4e:62:76:6f:9a:78:
         3f:60:87:4e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPiVE8u+X9oVe+vhWLA/LYwR0HSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNFMUNDNjFDREU1OTk2OEZFMDgxMEQ0OTM3MTMwQTY3
RDY1NDFEQzAeFw0yNjA5MDMwODM4MDNaFw0yNjA5MDQxMTU2MDNaMDMxMTAvBgNV
BAMTKDNFMDMzNjYwRjRGOURCRkE1RTMwNzcwN0M5OTU4NjQ5OEUzODEwMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrw+qOX4xv1OPMO1tFbLgzBrtZ
KPmnnX3eCjRbYev1HMtnWz+DJGFZqLQlpDQbW1rT8UeU9zXvbD1clf2s+zXRWlmT
2dpil8R1EYTt9dTpp6cWFZ0UD3HrSuYpHp+48soAHP1edaFrfU2VeZpHsLbHmNIx
G5y4QsiCJdACKf1ED0Ju45rd5V1tMlWqVtL6ICnuMj97RZeM48CIFf+tYCz86o14
muHjvf7/Ji4IqInZf74uqkjBVo9KegbuXUtismVxnV+/lAMcybMxEwwc+YeReyY3
zOoeBN6WEj/q23KsM5ow58Esw8n1DmqNBrmLMO9wWQuMqyxGIBky03Zt+QJ/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPgM2YPT52/peMHcHyZWGSY44EBkwHwYDVR0j
BBgwFoAUQ+HMYc3lmWj+CBDUk3Ewpn1lQdwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzVkM2QyMmEtMzM4Yi00MzAyLTkzZjQtYzAyMWVhNmFkNTQ4LzAvNDNFMUNDNjFD
REU1OTk2OEZFMDgxMEQ0OTM3MTMwQTY3RDY1NDFEQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80M0UxQ0M2MUNERTU5OTY4RkUwODEwRDQ5MzcxMzBBNjdENjU0
MURDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzVkM2QyMmEtMzM4Yi00MzAyLTkz
ZjQtYzAyMWVhNmFkNTQ4LzAvNDNFMUNDNjFDREU1OTk2OEZFMDgxMEQ0OTM3MTMw
QTY3RDY1NDFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALsHd7KErbdV2V3cQZ/3LboIDG5MMlc5hKuU
mNySy9ZM2zxIslMgbaBxA+4p7n5F/tDr+UJ/2nMFCaMYNmcIkjNLCJRfhgzuj3W3
a9GDYvaGLADArjc8t2uihXe0ZNmQzYUP3Z7Y3TbQudpqggV01qlU2Oy+iaUOPvHw
XLi5wen66c9XNgdHWcakhW7YOWX+QE4e434SnE4UmetpGUSGoVHkjYvPhAaja6PG
J31NbzL5mfPsrJj2/DknI6lKd0mDXvqz2j/h2Iwjpf7Robh/YDNSpxDqDjKASouS
lKS7Eu8hX8dF28oqY08fXxth4LtGQjQj4WP6DU5idm+aeD9gh04=
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:42:47 2026 by rpki-client