Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
File:                     43E1CC61CDE59968FE0810D4937130A67D6541DC.mft (raw, json)
Hash identifier:          nQvvhgd4eh7G4Ol9yaRe8dIIzg2+5BFuQiKkyJjPMJs=
Subject key identifier:   FF:13:A1:DF:D9:AC:12:1F:C0:B2:E5:FE:11:F0:71:73:F8:65:FA:CB
Authority key identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC
Certificate issuer:       /CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
Certificate serial:       685F5199C1AFABA04A98BE45A5086F13A01E2605
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
Manifest number:          A5
Signing time:             Wed 02 Sep 2026 13:04:24 +0000
Manifest this update:     Wed 02 Sep 2026 12:59:24 +0000
Manifest next update:     Thu 03 Sep 2026 16:42:24 +0000
Files and hashes:         1: 323430353a613534303a313031313a3a2f34382d3438203d3e203338313536.roa (hash: /s6NqXf3Az+33qCBWrV7/rHS8XMqrqM1zxdpU1dDV14=)
                          2: 323430353a613534303a313030313a3a2f34382d3438203d3e203338313536.roa (hash: ghjk9WxpBpcObQwhuyRJKOhe294PLPBofYqlraUkN+g=)
                          3: 323430353a613534303a313030623a3a2f34382d3438203d3e203338313536.roa (hash: ArldJV59T/AN0DLLjKdryy3dXOdpQHjw8YFmTH59OUg=)
                          4: 323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa (hash: G3L597uJ/MtChNRFU4TPZTfQd8hCBfeft5oOi8ZO5Xk=)
                          5: 323430353a613534303a313030643a3a2f34382d3438203d3e203338313536.roa (hash: cpyNUFqnnPw0hoOUNBzdPXv7w/EpVs/cMCjjRluZNLo=)
                          6: 323430353a613534303a313031303a3a2f34382d3438203d3e203338313536.roa (hash: WgZKLMLpwFRH8Rc+mjcsJQGYvAiCBksSGlUySVC2KTU=)
                          7: 323430353a613534303a313030383a3a2f34382d3438203d3e203338313536.roa (hash: jdESrjmJQhjG8kc6FD8N6X6iVxeMA55PP67c1tPELGM=)
                          8: 323430353a613534303a313030633a3a2f34382d3438203d3e203338313536.roa (hash: q/tSBWv/7VM0Xu29FwAxjeFSDX/WD3INyENxffhPO4Q=)
                          9: 323430353a613534303a313030663a3a2f34382d3438203d3e203338313536.roa (hash: zPNtfgZ0xuIJb6mJb8ImM+3c3T3QiTY+1lYZMk1v2MU=)
                          10: 3230332e3139302e3131382e302f32342d3234203d3e203338313536.roa (hash: GpjHek9a827cy//pNFDcORXn2t6JzxU+p9J93Ct0LZo=)
                          11: 323430353a613534303a313030613a3a2f34382d3438203d3e203338313536.roa (hash: jHrKWWZukLMZ3J2401GmiEuzkAvQx3pBL2xKoO7CBis=)
                          12: 323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa (hash: SUQFDo/3me7K6mK7WbxUn/2b9SHI+OuxemQ1myZfogM=)
                          13: 323430353a613534303a313030653a3a2f34382d3438203d3e203338313536.roa (hash: JOAtBF5+cfAqGhS9/3m1ZllG3nhy/U+cT4H4mHFtRKs=)
                          14: 323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa (hash: LWtx3txnmj9FjoJjDB/lmvmHZmgHx1jmLc6PPib5at8=)
                          15: 3230332e3139302e3131322e302f32342d3234203d3e203338313536.roa (hash: akD2QIfBzuzka9CzlNwOGyLhb8S59sJqB1gcfu/lphg=)
                          16: 3230332e3139302e3131362e302f32342d3234203d3e203338313536.roa (hash: /GkPi/+AOEhPufjKPy1+oO0pijIgfjVervEREyDjquk=)
                          17: 323430353a613534303a313030343a3a2f34382d3438203d3e203338313536.roa (hash: SMs3l2LaIu15xotNctGRKXxr41nAKmtqdH/wDotPjcE=)
                          18: 323430353a613534303a3a2f33322d3332203d3e203338313536.roa (hash: mYAvetqJOaK+g42xXQIVuzKQ0V+8EMMx37honK4xGaY=)
                          19: 3230332e3139302e3131322e302f32312d3231203d3e203338313536.roa (hash: FE7yZMTislKGWcbY4qG0beL79uHJRAECT1HhYr/vMVw=)
                          20: 3230332e3139302e3131342e302f32342d3234203d3e203338313536.roa (hash: 1zxciFrgfrpypZ13HHtfhkMtV3yJILY8QtbERuPSSxQ=)
                          21: 43E1CC61CDE59968FE0810D4937130A67D6541DC.crl (hash: nk/0VQckm2uVboSF7VwDRJZNWhuAd/27MTJuvmGFGlU=)
                          22: 3230332e3139302e3131352e302f32342d3234203d3e203338313536.roa (hash: 1wbNP75Z/wA6pW2UhWTpcnJU8wNdOjHZn2vOKC8mX5U=)
                          23: 3230332e3139302e3131392e302f32342d3234203d3e203338313536.roa (hash: e7mQPN3Z6KC/Ik9Qm59+I1SvLwjeilQ2SD4cxlIQDBE=)
                          24: 323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa (hash: FymgtPH5XRJeo2g24rTB6Zt9DBTm0EmGQZ0QaJOmZSE=)
                          25: 3230332e3139302e3131372e302f32342d3234203d3e203338313536.roa (hash: Yg8Yec064Brwf9x/NAfoSbhCfddxi4fn/8a7jii/RNk=)
                          26: 323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa (hash: DmCqSyLAbR1GcGB2b6c28zFVw4CNHOLr1uOyNF7nwjc=)
                          27: 323430353a613534303a313030333a3a2f34382d3438203d3e203338313536.roa (hash: Cigucd/NI7znq4aJY8FxoWkyWnlcJwSTYzMKj0Cfavc=)
                          28: 3230332e3139302e3131332e302f32342d3234203d3e203338313536.roa (hash: df96YWKu427U+HPJiLnno+3fbVy36Hxa342nQy+ZfoU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl
                          rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 16:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5f:51:99:c1:af:ab:a0:4a:98:be:45:a5:08:6f:13:a0:1e:26:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
        Validity
            Not Before: Sep  2 12:59:24 2026 GMT
            Not After : Sep  3 16:42:24 2026 GMT
        Subject: CN=FF13A1DFD9AC121FC0B2E5FE11F07173F865FACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6a:bb:d7:6c:ea:4c:c2:db:30:21:97:88:44:
                    ee:87:b6:2d:10:4e:c7:97:61:8c:c2:ec:21:a0:5e:
                    d5:29:2d:6b:db:d3:dd:0f:b8:33:02:7f:84:31:14:
                    09:32:ec:cb:3d:ed:4b:56:a8:46:5e:59:f5:d2:85:
                    70:7e:7a:b7:e8:ae:af:69:b5:0d:37:0e:27:6b:92:
                    bb:c8:89:85:b2:a8:f1:b5:ab:9d:f5:b2:f2:66:f8:
                    61:f2:df:e2:c5:c2:4c:ce:e8:56:9e:c3:ac:a1:bf:
                    50:c5:dd:04:3d:0e:6e:fb:81:24:60:3e:1d:93:52:
                    57:7b:41:ec:b8:0e:de:91:76:2f:d4:31:89:f8:0f:
                    f6:0f:3f:91:b4:fa:1e:94:73:50:4c:b8:97:39:96:
                    b5:38:3d:37:2b:0a:6e:0a:27:a3:a9:a6:8c:51:18:
                    e1:b8:b6:69:1f:82:cd:c3:4e:01:b5:2f:77:b4:52:
                    0b:6d:55:60:0e:c8:ad:6f:4f:98:36:a2:68:c4:c2:
                    32:8b:85:7d:e7:b0:57:44:8a:72:c2:c4:8b:d5:d9:
                    ea:8b:8e:44:e2:9c:29:54:49:03:aa:89:5e:90:58:
                    c0:4b:f8:c5:cd:d0:dd:c9:87:64:04:96:a9:93:e7:
                    34:25:91:f3:d7:28:90:83:27:65:dd:a8:03:18:67:
                    4c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:13:A1:DF:D9:AC:12:1F:C0:B2:E5:FE:11:F0:71:73:F8:65:FA:CB
            X509v3 Authority Key Identifier:
                keyid:43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:21:d1:ff:ee:a4:7b:19:f1:cc:89:09:df:31:cc:d2:c5:0f:
         f0:c5:38:12:92:cb:ff:ad:db:59:4f:5b:95:8e:c9:93:d3:44:
         71:39:16:13:e4:59:ea:89:08:ff:f9:09:76:5e:9c:1d:d1:48:
         20:88:d1:17:0d:92:6e:df:ac:5a:46:5b:f3:06:45:1a:87:0d:
         f8:6a:cd:e3:f4:ef:5e:bf:89:61:5b:76:37:73:22:6b:73:9d:
         ea:fc:53:66:8c:12:2f:b8:75:84:4d:b3:f1:6a:56:7b:32:7c:
         84:7b:56:ae:80:12:24:51:19:1f:dc:a4:08:d0:d5:ca:42:21:
         97:8b:8c:08:40:9d:bd:e9:20:57:f5:1f:31:ee:df:80:38:ec:
         41:e2:66:fc:af:6c:6e:45:aa:92:81:03:61:d8:e7:76:6c:5e:
         7a:bf:68:84:6f:64:ea:17:2f:4b:fe:e5:10:ef:4e:12:f9:dc:
         d4:02:5f:be:19:ea:93:85:a0:1b:a8:ec:2e:e3:5f:b5:60:6f:
         72:80:86:b3:51:f7:8f:17:42:c4:eb:c1:c4:f7:33:06:fe:93:
         59:0c:ca:08:60:e0:96:f2:91:48:96:7f:3d:58:1e:d2:0e:3f:
         9e:d2:06:b9:9f:ff:9f:99:14:ce:aa:e6:68:ba:15:42:0e:ca:
         43:cf:c8:b5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaF9RmcGvq6BKmL5FpQhvE6AeJgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNFMUNDNjFDREU1OTk2OEZFMDgxMEQ0OTM3MTMwQTY3
RDY1NDFEQzAeFw0yNjA5MDIxMjU5MjRaFw0yNjA5MDMxNjQyMjRaMDMxMTAvBgNV
BAMTKEZGMTNBMURGRDlBQzEyMUZDMEIyRTVGRTExRjA3MTczRjg2NUZBQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6arvXbOpMwtswIZeIRO6Hti0Q
TseXYYzC7CGgXtUpLWvb090PuDMCf4QxFAky7Ms97UtWqEZeWfXShXB+erforq9p
tQ03DidrkrvIiYWyqPG1q531svJm+GHy3+LFwkzO6Faew6yhv1DF3QQ9Dm77gSRg
Ph2TUld7Qey4Dt6Rdi/UMYn4D/YPP5G0+h6Uc1BMuJc5lrU4PTcrCm4KJ6OppoxR
GOG4tmkfgs3DTgG1L3e0UgttVWAOyK1vT5g2omjEwjKLhX3nsFdEinLCxIvV2eqL
jkTinClUSQOqiV6QWMBL+MXN0N3Jh2QElqmT5zQlkfPXKJCDJ2XdqAMYZ0wrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/xOh39msEh/AsuX+EfBxc/hl+sswHwYDVR0j
BBgwFoAUQ+HMYc3lmWj+CBDUk3Ewpn1lQdwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzVkM2QyMmEtMzM4Yi00MzAyLTkzZjQtYzAyMWVhNmFkNTQ4LzAvNDNFMUNDNjFD
REU1OTk2OEZFMDgxMEQ0OTM3MTMwQTY3RDY1NDFEQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80M0UxQ0M2MUNERTU5OTY4RkUwODEwRDQ5MzcxMzBBNjdENjU0
MURDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzVkM2QyMmEtMzM4Yi00MzAyLTkz
ZjQtYzAyMWVhNmFkNTQ4LzAvNDNFMUNDNjFDREU1OTk2OEZFMDgxMEQ0OTM3MTMw
QTY3RDY1NDFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADMh0f/upHsZ8cyJCd8xzNLFD/DFOBKSy/+t
21lPW5WOyZPTRHE5FhPkWeqJCP/5CXZenB3RSCCI0RcNkm7frFpGW/MGRRqHDfhq
zeP0716/iWFbdjdzImtzner8U2aMEi+4dYRNs/FqVnsyfIR7Vq6AEiRRGR/cpAjQ
1cpCIZeLjAhAnb3pIFf1HzHu34A47EHiZvyvbG5FqpKBA2HY53ZsXnq/aIRvZOoX
L0v+5RDvThL53NQCX74Z6pOFoBuo7C7jX7Vgb3KAhrNR948XQsTrwcT3Mwb+k1kM
yghg4JbykUiWfz1YHtIOP57SBrmf/5+ZFM6q5mi6FUIOykPPyLU=
-----END CERTIFICATE-----
Generated at Thu Sep 3 05:20:01 2026 by rpki-client