Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft
File:                     9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft (raw, json)
Hash identifier:          aAhikXqk21FBx6dcZ48nGpw8Vd9dQR+Kih8U88GBLiE=
Subject key identifier:   4F:54:EE:7C:A8:0B:FD:F9:92:39:0E:F6:86:24:16:83:3C:D7:B3:E1
Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4
Certificate issuer:       /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
Certificate serial:       63F17D4129BEF3EDEE60CD6F1C71415D326446D5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft
Manifest number:          10
Signing time:             Wed 13 May 2026 19:16:16 +0000
Manifest this update:     Wed 13 May 2026 19:11:16 +0000
Manifest next update:     Thu 14 May 2026 22:38:16 +0000
Files and hashes:         1: 3230322e3135322e3230342e302f32342d3234203d3e203633383539.roa (hash: K/9h13JeRi4nBdzHJKHwIX/OSCZT4xPejmG3KMLGGPE=)
                          2: 3230322e3135322e3139382e302f32342d3234203d3e203633383539.roa (hash: 9ukbLf5qQb1rXyNwLc+GXHdfVwvyPUN+V3xFvkC1PU8=)
                          3: 3130332e332e3231322e302f32322d3232203d3e203338313439.roa (hash: L+jEfJ+TYr8U2lsRIwq0B2JrZizijZUOAoo1oHmW+1s=)
                          4: 3130332e332e3231352e302f32342d3234203d3e20313331373435.roa (hash: XaXM0IZAp2Bc9rsMp3qaCo1vpdeZ4S8GCWtFW/rI5A0=)
                          5: 3135302e3132392e3139312e302f32342d3234203d3e203338313439.roa (hash: 45CN9yoUG6RuKCQ3eV8UKAqFsZNc0HLFA8m6Fw2raWM=)
                          6: 3230322e3135322e3139352e302f32342d3234203d3e203633383539.roa (hash: 85ocWH/CGllr8ECiudr/CN5VLg2ydbZ+Y4D2UVzB/yE=)
                          7: 3230322e3135322e3139362e302f32342d3234203d3e203633383539.roa (hash: IiX5vZYV34MLgOX/GRxuakpCz+OmnJUby0rObSh/dR0=)
                          8: 3230322e3135322e3139332e302f32342d3234203d3e203633383539.roa (hash: 8xUt88GWo5Lh7HpcZIOQiiNvwVYn6c3qls4txEwd5Aw=)
                          9: 3230322e3135322e3230322e302f32342d3234203d3e203633383539.roa (hash: ZN11kMbpQEiQxZkCv4YoKpVbtM+I8QNVgn3BqfSzPFM=)
                          10: 3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa (hash: I54kfkk6hYbr7mBDfS6anco7Wej9QeAnBCITEhtkyWw=)
                          11: 3135302e3132392e3138382e302f32342d3234203d3e203338313439.roa (hash: w/PsVCApcUAa6104ArDi8nWFzKFMWrenwPIw7wDcwKQ=)
                          12: 3230322e3135322e3139342e302f32342d3234203d3e203633383539.roa (hash: poZZqr8m1p0SwLGi1vxWI2MfuVBlouoArnZ43zLWj7A=)
                          13: 3230322e3135322e3139322e302f32342d3234203d3e203633383539.roa (hash: XTetGunxO/9Wc2TDz5SU0JnFYRa4/o3IkFSSAxHr8JI=)
                          14: 3130332e332e3231342e302f32342d3234203d3e20313431313436.roa (hash: tuXz1WBHQLGtpa6jqBSO+zM+s1veNX1L+r9GJ7yl5zg=)
                          15: 3130332e332e3231332e302f32342d3234203d3e203338313439.roa (hash: 4HkIjmLq+65ZiJXFH/gsCmpX9OJtzZO2CDLQtviREzo=)
                          16: 3230322e3135322e3139392e302f32342d3234203d3e203633383539.roa (hash: Dl92bN4KroHhoU6iZvn5AO9/ktEfnB98FdoOajolvAY=)
                          17: 9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl (hash: J0Ty9jDXXBJJo4417VTWFpwb4aj+Ilq/l18cBekP/wU=)
                          18: 3230322e3135322e3230352e302f32342d3234203d3e203633383539.roa (hash: 3F7kj8HCI8p6ltHGhgDwoLn+Flb6Nk9tbs0IPGWDTJ8=)
                          19: 3230322e3135322e3230302e302f32342d3234203d3e203633383539.roa (hash: 9UdGVYlr2BpuU278InwTpLs2aULPcIQvnjKIhkcrwaU=)
                          20: 3230322e3135322e3139322e302f32302d3230203d3e203633383539.roa (hash: OA3ZBLGnXRs5yEnHCOfQPyg4orZ7KQmbwDe09LqHOqQ=)
                          21: 3130332e332e3231322e302f32342d3234203d3e203338313439.roa (hash: kD6oNGgLKqH7iqk+24uVETlxN5nYgl4ztpk81F99Ka8=)
                          22: 3230322e3135322e3230312e302f32342d3234203d3e203633383539.roa (hash: Kr9n+dToJ4+otMGr8yT+9Vb2SsgZx8Pi5NiSfTBJmck=)
                          23: 3230322e3135322e3230332e302f32342d3234203d3e203633383539.roa (hash: C04D24vDTd3hbDV5iXxREwC6uGNthkwKxlbfLdfXE1E=)
                          24: 3230322e3135322e3230372e302f32342d3234203d3e203633383539.roa (hash: nS2kYK0reE2AsGKi7EPWuF7aJpnOGuNLNpN/XmzL+PQ=)
                          25: 3230322e3135322e3139372e302f32342d3234203d3e203633383539.roa (hash: NlqJ6u6BebCxJ7bsse0gRH5h6BQukMf2w3tldo1PwRQ=)
                          26: 3135302e3132392e3139302e302f32342d3234203d3e203338313439.roa (hash: gMQgWusyiUC65OlKKV0eHqi5N3ooCMrLBVB02a5Ibb8=)
                          27: 3135302e3132392e3138382e302f32322d3232203d3e203338313439.roa (hash: 8kSvXezcYEeTv4auRNNy4r2sFerV1LWNU23uvmXlnSM=)
                          28: 3230322e3135322e3230362e302f32342d3234203d3e203633383539.roa (hash: xIMJNAAfJUu4Zk7eKaIYdIfnGIAy47WR2He8EYWfO1w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl
                          rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f1:7d:41:29:be:f3:ed:ee:60:cd:6f:1c:71:41:5d:32:64:46:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
        Validity
            Not Before: May 13 19:11:16 2026 GMT
            Not After : May 14 22:38:16 2026 GMT
        Subject: CN=4F54EE7CA80BFDF992390EF6862416833CD7B3E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:69:fb:01:93:1e:ea:67:85:d3:f8:71:cd:fd:
                    2f:63:b4:86:15:d2:10:f9:79:a3:48:7c:eb:a0:8c:
                    95:3b:d6:42:01:35:b6:c3:d1:24:3f:80:06:d9:c1:
                    ef:81:8f:87:73:eb:a8:d0:74:b4:b9:b3:48:d5:45:
                    70:d3:e2:d6:ca:92:0e:9f:1c:6e:26:36:2e:dc:97:
                    a1:6a:1a:77:72:51:24:70:9a:a3:74:7b:77:e6:b1:
                    c9:2b:61:10:67:7b:1c:11:bb:cd:47:da:87:6d:51:
                    cc:16:a7:5e:59:00:8a:3e:91:aa:a2:e2:2b:ba:3a:
                    5a:d0:21:1a:64:4a:6c:ed:44:1f:68:d8:c3:57:b9:
                    51:25:d1:23:51:fb:74:c0:b2:e4:37:87:24:d3:94:
                    8e:8f:ab:d8:c0:bd:77:bf:4e:ca:d1:a3:f4:40:9f:
                    73:3e:2c:89:71:b6:41:06:0b:be:ec:af:a6:0a:1b:
                    8d:01:5b:3d:b1:67:80:df:d4:d9:f2:c7:5b:fb:bc:
                    f8:80:7d:30:ce:6d:8f:f8:1f:50:04:9b:69:43:1c:
                    b7:c8:01:c6:8c:a8:55:a8:b3:9f:e3:81:66:6f:84:
                    68:24:fd:35:0d:9b:d8:47:ae:f6:0c:ca:14:55:f4:
                    4c:4b:b7:2d:f1:29:96:d5:7f:75:ba:d7:8e:2b:4a:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:54:EE:7C:A8:0B:FD:F9:92:39:0E:F6:86:24:16:83:3C:D7:B3:E1
            X509v3 Authority Key Identifier:
                keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:0e:cd:b0:ea:3b:9d:0a:cc:a1:eb:fe:c5:71:6e:8f:5a:41:
         4d:f5:ef:55:ad:2a:ad:2a:95:7e:0a:1d:78:1f:be:eb:f3:2b:
         55:36:9a:b7:3d:46:a0:a6:ff:c7:b6:8c:14:a8:05:c2:9f:8e:
         9a:c5:86:61:6c:bc:c3:6d:94:b2:98:34:f3:c4:ab:13:75:8a:
         9b:60:9d:0a:94:ff:8f:83:e6:37:9d:43:d2:15:1e:33:c5:ba:
         b3:ed:9c:fb:dd:11:01:33:83:8c:e3:cf:a0:50:33:be:7e:cc:
         40:9c:64:83:91:e9:52:e6:66:ce:4e:2b:cd:a4:a9:e0:c0:7a:
         ed:fb:76:f3:c1:ac:8a:14:84:e9:67:c5:3f:13:0b:33:db:48:
         3d:8f:7c:ce:92:a2:c0:f5:4d:a7:6b:fb:a0:49:60:79:2c:5e:
         55:3f:65:83:2d:f7:03:87:4a:5d:17:7a:7e:d8:29:61:c5:84:
         db:54:a9:5a:1e:2d:bd:22:9c:4c:87:68:a2:d8:20:70:61:47:
         b8:ed:21:71:94:a0:43:cf:13:ea:35:9b:76:55:f4:a4:a5:ac:
         13:c5:34:76:3d:d0:10:be:39:ae:c1:23:81:78:70:b2:81:6e:
         00:42:78:9c:0b:5b:98:c5:18:49:71:c9:5b:aa:f6:c1:18:9b:
         ae:af:15:06
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUY/F9QSm+8+3uYM1vHHFBXTJkRtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJFMUYxQkE4MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3
NEY0QUFDNDAeFw0yNjA1MTMxOTExMTZaFw0yNjA1MTQyMjM4MTZaMDMxMTAvBgNV
BAMTKDRGNTRFRTdDQTgwQkZERjk5MjM5MEVGNjg2MjQxNjgzM0NEN0IzRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfafsBkx7qZ4XT+HHN/S9jtIYV
0hD5eaNIfOugjJU71kIBNbbD0SQ/gAbZwe+Bj4dz66jQdLS5s0jVRXDT4tbKkg6f
HG4mNi7cl6FqGndyUSRwmqN0e3fmsckrYRBnexwRu81H2odtUcwWp15ZAIo+kaqi
4iu6OlrQIRpkSmztRB9o2MNXuVEl0SNR+3TAsuQ3hyTTlI6Pq9jAvXe/TsrRo/RA
n3M+LIlxtkEGC77sr6YKG40BWz2xZ4Df1Nnyx1v7vPiAfTDObY/4H1AEm2lDHLfI
AcaMqFWos5/jgWZvhGgk/TUNm9hHrvYMyhRV9ExLty3xKZbVf3W6144rStFFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUT1TufKgL/fmSOQ72hiQWgzzXs+EwHwYDVR0j
BBgwFoAUm+HxuoCRYxpAm+k5vbBzMnT0qsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDhlM2IzOWMtZGExMS00NWVlLWFhYjMtNWNiMTRlYzQ0NzBjLzAvOUJFMUYxQkE4
MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3NEY0QUFDNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85QkUxRjFCQTgwOTE2MzFBNDA5QkU5MzlCREIwNzMzMjc0RjRB
QUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhlM2IzOWMtZGExMS00NWVlLWFh
YjMtNWNiMTRlYzQ0NzBjLzAvOUJFMUYxQkE4MDkxNjMxQTQwOUJFOTM5QkRCMDcz
MzI3NEY0QUFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIAOzbDqO50KzKHr/sVxbo9aQU3171WtKq0q
lX4KHXgfvuvzK1U2mrc9RqCm/8e2jBSoBcKfjprFhmFsvMNtlLKYNPPEqxN1iptg
nQqU/4+D5jedQ9IVHjPFurPtnPvdEQEzg4zjz6BQM75+zECcZIOR6VLmZs5OK82k
qeDAeu37dvPBrIoUhOlnxT8TCzPbSD2PfM6SosD1Tadr+6BJYHksXlU/ZYMt9wOH
Sl0Xen7YKWHFhNtUqVoeLb0inEyHaKLYIHBhR7jtIXGUoEPPE+o1m3ZV9KSlrBPF
NHY90BC+Oa7BI4F4cLKBbgBCeJwLW5jFGElxyVuq9sEYm66vFQY=
-----END CERTIFICATE-----
Generated at Wed May 13 23:54:48 2026 by rpki-client