Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft
File:                     3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft (raw, json)
Hash identifier:          sUYjPYFrW9LG5Ja5X2n/9ENU4gEHFCPwvl6WZm2ubSQ=
Subject key identifier:   3B:ED:42:2C:A6:C8:BD:C2:F3:0B:1F:5C:50:42:29:3D:DE:7D:09:DA
Authority key identifier: 3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B
Certificate issuer:       /CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B
Certificate serial:       5BC5B824AA1A35B8E1B28AB2858B52D1F38626E2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft
Manifest number:          9D
Signing time:             Thu 27 Aug 2026 00:56:52 +0000
Manifest this update:     Thu 27 Aug 2026 00:51:52 +0000
Manifest next update:     Fri 28 Aug 2026 01:03:52 +0000
Files and hashes:         1: 323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa (hash: G3Odq6+liao9rSrnW9IxF+85mnGUPLT2G3zXCo+assU=)
                          2: 323430343a356434303a3a2f34382d3438203d3e20313338353938.roa (hash: o69GAoupi19SYQFx9GbnxeXAPra1yIHc+y9tXTKqEaE=)
                          3: 323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa (hash: SG6oycmDQaFj2X36BO+BneGvBQJbufv06OPHQVVxHX8=)
                          4: 323430343a356434303a333a3a2f34382d3438203d3e20313338353938.roa (hash: D8aPDTHmr90xwp8tUHm7tBo97fD9LXY+RgJPgopJ/xY=)
                          5: 323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa (hash: v19HYsz9f+5DNC0VpCdeprRmAwKbW3lgoiMiceEJJ/0=)
                          6: 323430343a356434303a363a3a2f34382d3438203d3e20313338353938.roa (hash: 0w5VxrrMxUpj7nlb1kifAvbDqcvyahk3VtyIEEVnjds=)
                          7: 323430343a356434303a323a3a2f34382d3438203d3e20313338353938.roa (hash: 1BvT4+B6DoXD7bSTfJFF0kIFzIyR+ygmXkzol5Y0Vog=)
                          8: 323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa (hash: uPYSHt9IvmbbJXRTSxGX775ZI1E4R11s2tal61YWhUA=)
                          9: 323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa (hash: pqOcy+Dvk6BhoIQ43O+Qcsi/T4kyh+JKJwaWCHlsOWU=)
                          10: 3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa (hash: SXi0Pi35nmPr0lYSvyAAC2Fa3aJUqN8WDDIdiAg171E=)
                          11: 3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (hash: 52eRJUyMS1D/Y10YGDL++7a6ITlSLlhK23TWGAji77M=)
                          12: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (hash: 0DaR6EQXz9qNKopRfjWSu/bXijoSdhpj5fJcKyJycxw=)
                          13: 3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa (hash: 0MhXXslaEXPjPEoKctkP/woYNX7tt+w1I2c/UK/MryM=)
                          14: 3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl (hash: f+st8DSa9cFYSM5HgOKhxfCy+xD5iPNkHZPkNI7a6cQ=)
                          15: 323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa (hash: CVM/cm+yAs6+jKMZ4MDt+luLWNfS5mv/4e/CjfklE7M=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl
                          rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 28 Aug 2026 01:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c5:b8:24:aa:1a:35:b8:e1:b2:8a:b2:85:8b:52:d1:f3:86:26:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B
        Validity
            Not Before: Aug 27 00:51:52 2026 GMT
            Not After : Aug 28 01:03:52 2026 GMT
        Subject: CN=3BED422CA6C8BDC2F30B1F5C5042293DDE7D09DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:bb:86:30:d1:2f:f8:08:c3:93:f8:3b:fb:
                    10:8a:42:ce:11:ef:3c:25:27:ca:37:d0:e2:86:f5:
                    26:a7:46:6b:e1:30:bc:07:a4:32:46:00:74:78:57:
                    41:44:38:ee:0b:8f:02:8c:6a:2b:7d:ad:f9:2b:a4:
                    44:b2:8f:25:0e:71:3d:3d:d3:45:91:a8:19:96:0b:
                    14:27:70:f6:68:a9:e7:36:4e:8c:eb:e6:db:45:4e:
                    ee:02:23:37:c8:87:6b:69:e0:6c:dd:ff:c5:e3:a8:
                    d0:e4:1f:6a:51:72:d6:9c:8a:9a:ad:63:7e:09:ec:
                    71:bc:38:1d:82:7b:28:dd:eb:ae:86:6e:7f:15:40:
                    b4:77:c0:f0:8e:2d:06:eb:6d:fd:82:ed:01:1d:28:
                    bf:9d:8e:e7:f1:24:9a:ad:40:21:03:01:00:a6:a2:
                    72:5b:4c:a5:2b:0f:60:ef:f1:d6:3a:f1:66:ec:a5:
                    5d:31:9e:f9:46:27:93:ff:cb:4e:f6:f5:ea:12:16:
                    21:4f:7d:58:27:f3:fe:da:08:f0:18:be:78:6b:35:
                    12:45:80:a1:8d:77:fa:f6:62:9f:ce:c5:c5:10:76:
                    d6:7e:d1:0f:10:be:1c:35:20:52:84:45:3e:9d:ab:
                    05:7b:45:f3:4c:18:38:85:bd:03:f0:99:ff:84:a7:
                    c3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:ED:42:2C:A6:C8:BD:C2:F3:0B:1F:5C:50:42:29:3D:DE:7D:09:DA
            X509v3 Authority Key Identifier:
                keyid:3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:32:fe:fc:67:a1:4b:6e:00:7b:2f:74:03:d4:68:90:a0:42:
         56:9c:46:9d:de:ae:cd:f5:73:a4:57:e1:86:81:bb:26:1f:bd:
         75:de:d0:90:90:fe:fa:51:a0:41:29:e7:7f:1b:e5:8d:70:cb:
         31:d3:bd:2a:c9:40:99:d6:20:cc:c6:1e:6d:5d:fb:c9:0b:ff:
         e3:ff:2c:7d:9e:3a:a1:90:6c:5a:68:e6:90:4b:2b:68:83:1d:
         b4:e9:72:6f:ab:b6:a4:f2:69:c5:7f:42:fc:9e:4f:aa:8c:a4:
         dd:74:cc:f3:b0:4d:f3:4b:3b:91:ab:6a:59:89:15:63:74:e6:
         a9:57:04:67:70:9f:68:28:a1:ad:e6:c8:4a:6e:47:3d:09:de:
         2e:4f:07:99:b3:e6:0a:0d:a7:81:3a:42:6f:1d:29:9f:d4:af:
         30:b2:c7:cc:a1:17:9f:9e:34:f8:66:29:90:73:c9:f6:76:a4:
         f3:94:c1:d2:87:51:f2:b1:79:a1:cd:26:e0:09:40:1a:46:b6:
         e0:f4:b3:37:28:2c:36:7e:ca:c3:d8:b0:e8:7f:ba:ef:05:61:
         25:38:14:75:c1:66:f6:d0:24:89:9d:6d:0b:ee:17:3e:77:85:
         a4:08:80:f6:db:0c:8b:2a:c7:79:f4:53:a2:8b:86:00:34:31:
         26:aa:b4:6c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUW8W4JKoaNbjhsoqyhYtS0fOGJuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y2MjgxNDA0NEVERjhCNUU3N0QyQjgyMDk1QkY2NjI3
RTEzNkY0QjAeFw0yNjA4MjcwMDUxNTJaFw0yNjA4MjgwMTAzNTJaMDMxMTAvBgNV
BAMTKDNCRUQ0MjJDQTZDOEJEQzJGMzBCMUY1QzUwNDIyOTNEREU3RDA5REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4truGMNEv+AjDk/g7+xCKQs4R
7zwlJ8o30OKG9SanRmvhMLwHpDJGAHR4V0FEOO4LjwKMait9rfkrpESyjyUOcT09
00WRqBmWCxQncPZoqec2Tozr5ttFTu4CIzfIh2tp4Gzd/8XjqNDkH2pRctacipqt
Y34J7HG8OB2Ceyjd666Gbn8VQLR3wPCOLQbrbf2C7QEdKL+djufxJJqtQCEDAQCm
onJbTKUrD2Dv8dY68WbspV0xnvlGJ5P/y0729eoSFiFPfVgn8/7aCPAYvnhrNRJF
gKGNd/r2Yp/OxcUQdtZ+0Q8Qvhw1IFKERT6dqwV7RfNMGDiFvQPwmf+Ep8MBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUO+1CLKbIvcLzCx9cUEIpPd59CdowHwYDVR0j
BBgwFoAUP2KBQETt+LXnfSuCCVv2Yn4Tb0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWM4NWM2YjktMzRmOS00YTg1LTljZWEtYzE2ZTk4YThiNWUwLzAvM0Y2MjgxNDA0
NEVERjhCNUU3N0QyQjgyMDk1QkY2NjI3RTEzNkY0Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zRjYyODE0MDQ0RURGOEI1RTc3RDJCODIwOTVCRjY2MjdFMTM2
RjRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWM4NWM2YjktMzRmOS00YTg1LTlj
ZWEtYzE2ZTk4YThiNWUwLzAvM0Y2MjgxNDA0NEVERjhCNUU3N0QyQjgyMDk1QkY2
NjI3RTEzNkY0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEcy/vxnoUtuAHsvdAPUaJCgQlacRp3ers31
c6RX4YaBuyYfvXXe0JCQ/vpRoEEp538b5Y1wyzHTvSrJQJnWIMzGHm1d+8kL/+P/
LH2eOqGQbFpo5pBLK2iDHbTpcm+rtqTyacV/QvyeT6qMpN10zPOwTfNLO5GralmJ
FWN05qlXBGdwn2gooa3myEpuRz0J3i5PB5mz5goNp4E6Qm8dKZ/UrzCyx8yhF5+e
NPhmKZBzyfZ2pPOUwdKHUfKxeaHNJuAJQBpGtuD0szcoLDZ+ysPYsOh/uu8FYSU4
FHXBZvbQJImdbQvuFz53haQIgPbbDIsqx3n0U6KLhgA0MSaqtGw=
-----END CERTIFICATE-----
Generated at Thu Aug 27 08:00:05 2026 by rpki-client