Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft
File:                     3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft (raw, json)
Hash identifier:          JXlV44SwNVROKhZEBmRfDVa2NRvOOsWgT75PET0Msb8=
Subject key identifier:   AA:04:35:07:7B:74:5D:28:24:29:18:08:1F:6A:FC:12:47:DF:C8:11
Authority key identifier: 3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B
Certificate issuer:       /CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B
Certificate serial:       087064F94361A7888BBF720F5E22C453AECBB831
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft
Manifest number:          DE
Signing time:             Wed 14 Oct 2026 22:38:05 +0000
Manifest this update:     Wed 14 Oct 2026 22:33:05 +0000
Manifest next update:     Thu 15 Oct 2026 23:56:05 +0000
Files and hashes:         1: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (hash: 0DaR6EQXz9qNKopRfjWSu/bXijoSdhpj5fJcKyJycxw=)
                          2: 323430343a356434303a333a3a2f34382d3438203d3e20313338353938.roa (hash: D8aPDTHmr90xwp8tUHm7tBo97fD9LXY+RgJPgopJ/xY=)
                          3: 323430343a356434303a3a2f34382d3438203d3e20313338353938.roa (hash: o69GAoupi19SYQFx9GbnxeXAPra1yIHc+y9tXTKqEaE=)
                          4: 323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa (hash: v19HYsz9f+5DNC0VpCdeprRmAwKbW3lgoiMiceEJJ/0=)
                          5: 3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (hash: 52eRJUyMS1D/Y10YGDL++7a6ITlSLlhK23TWGAji77M=)
                          6: 323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa (hash: G3Odq6+liao9rSrnW9IxF+85mnGUPLT2G3zXCo+assU=)
                          7: 323430343a356434303a363a3a2f34382d3438203d3e20313338353938.roa (hash: 0w5VxrrMxUpj7nlb1kifAvbDqcvyahk3VtyIEEVnjds=)
                          8: 3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa (hash: 0MhXXslaEXPjPEoKctkP/woYNX7tt+w1I2c/UK/MryM=)
                          9: 323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa (hash: pqOcy+Dvk6BhoIQ43O+Qcsi/T4kyh+JKJwaWCHlsOWU=)
                          10: 3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa (hash: SXi0Pi35nmPr0lYSvyAAC2Fa3aJUqN8WDDIdiAg171E=)
                          11: 323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa (hash: SG6oycmDQaFj2X36BO+BneGvBQJbufv06OPHQVVxHX8=)
                          12: 323430343a356434303a323a3a2f34382d3438203d3e20313338353938.roa (hash: 1BvT4+B6DoXD7bSTfJFF0kIFzIyR+ygmXkzol5Y0Vog=)
                          13: 3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl (hash: LgsuZ3K+w5UvqrRyLiCRPfuFWE+sDe9thRvKQcIbXVk=)
                          14: 323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa (hash: CVM/cm+yAs6+jKMZ4MDt+luLWNfS5mv/4e/CjfklE7M=)
                          15: 323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa (hash: uPYSHt9IvmbbJXRTSxGX775ZI1E4R11s2tal61YWhUA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl
                          rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 16:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:70:64:f9:43:61:a7:88:8b:bf:72:0f:5e:22:c4:53:ae:cb:b8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B
        Validity
            Not Before: Oct 14 22:33:05 2026 GMT
            Not After : Oct 15 23:56:05 2026 GMT
        Subject: CN=AA0435077B745D28242918081F6AFC1247DFC811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:ac:c9:14:32:88:38:06:89:3b:32:1a:5b:
                    0f:37:08:bc:06:74:8e:d8:de:98:b8:de:96:5c:14:
                    42:bb:49:56:e8:eb:84:ed:e5:ad:8e:b7:76:ee:73:
                    f7:8a:f5:a5:30:83:27:57:d8:df:21:25:19:a1:2d:
                    b8:c8:cc:28:84:13:05:e2:c6:b9:32:c7:f2:0c:6d:
                    9f:ed:01:3a:6f:f2:77:2a:2d:7d:aa:46:59:a3:8f:
                    ca:35:59:0e:0a:e9:c9:2d:f6:89:b5:16:f3:d8:05:
                    44:f5:fb:97:98:8c:13:91:86:b3:d7:6d:07:d1:6d:
                    9f:27:67:a4:74:08:99:68:af:18:3d:0f:4d:64:a4:
                    50:72:bb:b6:14:77:5d:1b:31:af:60:72:0a:07:cb:
                    8c:dc:8c:01:4b:92:29:fa:4b:e5:db:c3:0b:90:ae:
                    e9:88:6c:ef:f3:18:07:bb:64:37:6e:02:ea:2d:26:
                    e6:6b:c3:78:71:a2:4e:c3:75:62:47:e1:4f:29:e5:
                    13:64:49:59:fe:36:c9:92:92:3e:db:b1:cf:cd:51:
                    f1:66:a8:e2:e9:92:e3:58:fd:41:d9:37:3a:da:6a:
                    00:c0:2c:e3:3d:e6:ee:2d:8b:69:a3:07:c9:af:af:
                    fb:ce:38:63:69:e8:59:5f:ae:ef:fb:cc:17:1b:f2:
                    9f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:04:35:07:7B:74:5D:28:24:29:18:08:1F:6A:FC:12:47:DF:C8:11
            X509v3 Authority Key Identifier:
                keyid:3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f8:21:cf:f7:31:cd:6f:4a:dd:2b:36:de:06:33:de:44:b4:
         db:30:ce:51:8c:dc:e0:45:44:f5:ff:b0:56:d8:67:b5:d1:ec:
         51:66:a3:74:e7:63:86:60:04:65:42:22:59:1b:15:2d:42:bb:
         2c:f0:a0:52:35:01:e8:5d:60:b4:71:e6:c4:27:4c:e8:ba:74:
         f5:e2:58:a1:db:b1:56:23:98:4e:e0:17:ed:b6:6a:15:3d:a8:
         02:36:a2:39:01:d8:5c:13:a8:a5:1f:85:3b:37:cb:58:47:56:
         ac:29:6a:12:51:71:04:bb:12:58:04:27:ec:86:af:06:ca:a5:
         f5:5e:fa:40:d0:d5:ab:a4:b3:e0:40:2e:17:79:c0:20:0a:4b:
         aa:40:fd:bb:9e:bc:69:70:c5:fe:4c:96:e2:99:ec:1d:0a:02:
         d5:6d:38:7a:79:29:78:eb:5a:82:9a:c7:b4:14:4a:c6:03:9d:
         50:db:22:47:c6:73:f3:58:23:94:82:63:cf:55:ab:df:24:b2:
         75:4f:17:6b:c5:ee:bc:47:50:da:85:e9:05:09:8f:ee:73:95:
         b0:c4:55:55:c7:69:c2:39:4e:76:f3:38:56:98:70:ed:bc:40:
         92:37:3f:80:ff:38:5c:56:95:10:63:24:57:4a:14:5c:76:4e:
         02:76:ec:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:01:00 2026 by rpki-client