Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
File:                     3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft (raw, json)
Hash identifier:          E5igqtbjIph8Tc1/6vrCHcC2RXxynIDWlheUZUO9eNE=
Subject key identifier:   83:63:AF:6E:FC:7B:FA:C4:23:75:65:0F:33:D5:4C:DE:03:B2:19:E4
Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5
Certificate issuer:       /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
Certificate serial:       37AD005BC099201CDEEE3327C4A5ABA0972BA624
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
Manifest number:          CF
Signing time:             Sun 04 Oct 2026 02:18:05 +0000
Manifest this update:     Sun 04 Oct 2026 02:13:05 +0000
Manifest next update:     Mon 05 Oct 2026 02:28:05 +0000
Files and hashes:         1: 323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa (hash: BTtVqrQ3GrSqxbnSLNvAGyR9geHV66mQRLtc+yOJ48k=)
                          2: 34332e3233302e3132392e302f32342d3234203d3e203233363739.roa (hash: UGlFvxlrSD3eWOHFR+RqkvAQb3F8Wtbfd776kf/FNfc=)
                          3: 3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa (hash: LghNes9jQ+3fERFGIYDHSXbbc4nSMYy8cw//lu9REdQ=)
                          4: 3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa (hash: VUDQpItd+3mQ5FEfCwJZEx6NgUwPRML1HHBOxBoEKaQ=)
                          5: 323430363a626534303a626162653a3a2f34382d3438203d3e20313338383138.roa (hash: Tjj+OKDjiFtagqUQK1BdjUoLQb0lOV71psKcaxKiSjc=)
                          6: 3130332e3233382e3230302e302f32342d3234203d3e203233363739.roa (hash: s1aR5khIH0XJ6oiD7CdhPXEq4FMhwYeqfSj1qAtdtp8=)
                          7: 3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl (hash: wN1nXj7R71A8zBXmFDDT/zZED/0HVkhwFjwc2aWwqJQ=)
                          8: 34332e3233302e3133312e302f32342d3234203d3e203233363739.roa (hash: KTTzfIOZDP+sCVCw8zzqOhb2CjIcT0YOn1P5NcQm3jI=)
                          9: 3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa (hash: v0zolYiVBPX0V+L+LtqJkU2q6rbdcBpLF4u+nGbvKcY=)
                          10: 34332e3233302e3132382e302f32342d3234203d3e203233363739.roa (hash: doOzsTzSE36mgoSIEk74sHNoCKgIA+A/ijb08tABwGQ=)
                          11: 3130332e3130332e3133372e302f32342d3234203d3e20313338383138.roa (hash: 4glWDbg2cthHWl40jAdpTpvdVV83NH6qF/yYaREdwKA=)
                          12: 323430363a626534303a666163653a3a2f34382d3438203d3e203233363739.roa (hash: PbuDJSAQXqe+YbQYZ8YEK8+HHcBku/MMl/4ow2T+fZM=)
                          13: 3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa (hash: ZmGgo3jaHXdx58TAmRSTnCCto4KpyY5aAzsNgTuNtrg=)
                          14: 3130332e3233382e3230312e302f32342d3234203d3e203233363739.roa (hash: S1uWt6Gd7lDlIkiaquvYF6It5VJtoeKCsNPdN2cYPYo=)
                          15: 34332e3233302e3133302e302f32342d3234203d3e203233363739.roa (hash: qy2wfZHRdLfbkgw90ebnyPI4997KQ+iwXU8qrVLm8HY=)
                          16: 3130332e3130332e3133392e302f32342d3234203d3e203233363739.roa (hash: xOmSeDJ7iA+Tnkm5H4X22K/meaXh6wCiDIBdj1esOYs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl
                          rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 02:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ad:00:5b:c0:99:20:1c:de:ee:33:27:c4:a5:ab:a0:97:2b:a6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
        Validity
            Not Before: Oct  4 02:13:05 2026 GMT
            Not After : Oct  5 02:28:05 2026 GMT
        Subject: CN=8363AF6EFC7BFAC42375650F33D54CDE03B219E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:e0:58:e1:b0:5b:42:ad:15:2e:de:f3:99:
                    9c:57:86:88:7d:58:d0:c9:4e:c9:8d:ca:84:e3:81:
                    ce:2c:b4:0e:f2:a7:8b:fe:f0:43:63:38:a0:2f:9d:
                    51:6f:69:d7:f3:40:37:74:71:63:27:eb:f6:34:97:
                    6f:ec:50:5d:11:fb:ef:ff:23:53:dc:9d:ab:dc:22:
                    f0:39:54:cb:5e:cb:b3:da:d3:98:38:d6:0a:36:da:
                    7a:04:de:5c:d5:56:69:99:7c:2d:48:85:8a:15:12:
                    84:1f:42:2d:0a:9b:cd:c3:ec:f2:34:dd:36:a3:45:
                    50:56:a0:73:0d:11:a5:28:f8:92:d1:29:6a:d5:94:
                    79:90:13:f5:da:31:5f:4e:6e:65:67:51:25:35:85:
                    bd:65:10:0d:df:21:27:9b:26:bb:7b:51:4c:11:7f:
                    11:61:98:eb:dc:aa:7c:9d:84:45:b3:77:a5:6f:dc:
                    3e:44:48:fd:b2:f9:f0:6b:7d:fc:63:4f:f5:5a:ee:
                    65:21:fb:4b:e5:de:74:5a:3d:87:c3:a9:2b:ea:e7:
                    3d:76:16:5c:20:50:f7:22:5d:24:2d:79:20:53:3e:
                    07:b9:62:0a:96:d3:61:00:f4:ac:ea:32:b0:f3:c6:
                    10:e4:11:fd:eb:f2:04:e9:3b:6d:4e:16:c7:d3:06:
                    ce:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:63:AF:6E:FC:7B:FA:C4:23:75:65:0F:33:D5:4C:DE:03:B2:19:E4
            X509v3 Authority Key Identifier:
                keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:5d:ad:74:5a:6a:8c:e9:62:50:d3:a2:37:22:db:20:07:da:
         c3:1e:b3:2b:76:56:34:52:1b:42:21:9e:03:01:0c:17:52:f2:
         6c:73:4f:46:c3:6d:0d:22:ce:b3:23:70:72:d2:4f:08:ae:99:
         d2:16:13:1c:80:5c:8c:97:27:53:e8:b7:40:ab:82:98:4c:e3:
         8c:8a:0e:ad:8c:e3:3d:83:2c:16:fa:d4:58:cc:e6:e3:64:10:
         5b:72:3a:78:2f:5e:be:75:6b:cc:05:2d:8c:f2:f1:90:ad:24:
         4c:f2:5b:0c:66:39:5c:02:b6:52:e9:28:34:a1:bc:bc:57:e7:
         fd:e7:80:d9:97:5d:e4:ba:05:4a:c8:2b:14:8a:54:48:77:7b:
         d6:f2:02:13:1b:fe:7d:94:0d:fc:80:b9:90:89:4d:be:50:4c:
         2b:62:e1:67:37:0f:4a:0b:e3:f4:e5:06:43:c1:ee:02:e3:da:
         99:76:25:f8:26:c4:ac:91:55:e3:e8:35:aa:44:34:52:10:2a:
         d9:cd:f2:09:57:70:92:22:3d:5f:40:e1:82:01:fe:60:60:93:
         71:cc:5a:c1:f8:3f:5b:cc:51:ad:cf:27:0b:87:d1:13:10:36:
         d1:d5:62:68:f2:f4:70:a1:36:7b:22:48:c4:5d:fc:62:69:2a:
         13:be:00:fa
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUN60AW8CZIBze7jMnxKWroJcrpiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzgwM0FGREE3QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVG
MzUxNTFFNTAeFw0yNjEwMDQwMjEzMDVaFw0yNjEwMDUwMjI4MDVaMDMxMTAvBgNV
BAMTKDgzNjNBRjZFRkM3QkZBQzQyMzc1NjUwRjMzRDU0Q0RFMDNCMjE5RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/sOBY4bBbQq0VLt7zmZxXhoh9
WNDJTsmNyoTjgc4stA7yp4v+8ENjOKAvnVFvadfzQDd0cWMn6/Y0l2/sUF0R++//
I1PcnavcIvA5VMtey7Pa05g41go22noE3lzVVmmZfC1IhYoVEoQfQi0Km83D7PI0
3TajRVBWoHMNEaUo+JLRKWrVlHmQE/XaMV9ObmVnUSU1hb1lEA3fISebJrt7UUwR
fxFhmOvcqnydhEWzd6Vv3D5ESP2y+fBrffxjT/Va7mUh+0vl3nRaPYfDqSvq5z12
FlwgUPciXSQteSBTPge5YgqW02EA9KzqMrDzxhDkEf3r8gTpO21OFsfTBs5lAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUg2Ovbvx7+sQjdWUPM9VM3gOyGeQwHwYDVR0j
BBgwFoAUOAOv2nvM19vlzp6QGisXjvNRUeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTExNDE3YzAtMzdiYi00NDZkLTg3ZjItZDgxODQxNzhjMTQ5LzAvMzgwM0FGREE3
QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVGMzUxNTFFNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zODAzQUZEQTdCQ0NEN0RCRTVDRTlFOTAxQTJCMTc4RUYzNTE1
MUU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTExNDE3YzAtMzdiYi00NDZkLTg3
ZjItZDgxODQxNzhjMTQ5LzAvMzgwM0FGREE3QkNDRDdEQkU1Q0U5RTkwMUEyQjE3
OEVGMzUxNTFFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALZdrXRaaozpYlDTojci2yAH2sMesyt2VjRS
G0IhngMBDBdS8mxzT0bDbQ0izrMjcHLSTwiumdIWExyAXIyXJ1Pot0CrgphM44yK
Dq2M4z2DLBb61FjM5uNkEFtyOngvXr51a8wFLYzy8ZCtJEzyWwxmOVwCtlLpKDSh
vLxX5/3ngNmXXeS6BUrIKxSKVEh3e9byAhMb/n2UDfyAuZCJTb5QTCti4Wc3D0oL
4/TlBkPB7gLj2pl2JfgmxKyRVePoNapENFIQKtnN8glXcJIiPV9A4YIB/mBgk3HM
WsH4P1vMUa3PJwuH0RMQNtHVYmjy9HChNnsiSMRd/GJpKhO+APo=
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:30:15 2026 by rpki-client