Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft
File:                     3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft (raw, json)
Hash identifier:          xyCtIDOuPzoi9sV1c8r+mNGN/r5vvIZ1qquV7cGOc00=
Subject key identifier:   12:17:67:CC:85:C4:63:A9:B5:4A:A6:8F:33:59:18:23:F7:61:53:FE
Authority key identifier: 3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B
Certificate issuer:       /CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B
Certificate serial:       4110B4C66495B373E35999356C9F9D054D445F77
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft
Manifest number:          1A
Signing time:             Thu 21 May 2026 02:07:23 +0000
Manifest this update:     Thu 21 May 2026 02:02:23 +0000
Manifest next update:     Fri 22 May 2026 05:24:23 +0000
Files and hashes:         1: 323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa (hash: uPYSHt9IvmbbJXRTSxGX775ZI1E4R11s2tal61YWhUA=)
                          2: 323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa (hash: SG6oycmDQaFj2X36BO+BneGvBQJbufv06OPHQVVxHX8=)
                          3: 3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa (hash: SXi0Pi35nmPr0lYSvyAAC2Fa3aJUqN8WDDIdiAg171E=)
                          4: 323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa (hash: pqOcy+Dvk6BhoIQ43O+Qcsi/T4kyh+JKJwaWCHlsOWU=)
                          5: 323430343a356434303a363a3a2f34382d3438203d3e20313338353938.roa (hash: 0w5VxrrMxUpj7nlb1kifAvbDqcvyahk3VtyIEEVnjds=)
                          6: 323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa (hash: CVM/cm+yAs6+jKMZ4MDt+luLWNfS5mv/4e/CjfklE7M=)
                          7: 323430343a356434303a333a3a2f34382d3438203d3e20313338353938.roa (hash: D8aPDTHmr90xwp8tUHm7tBo97fD9LXY+RgJPgopJ/xY=)
                          8: 323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa (hash: v19HYsz9f+5DNC0VpCdeprRmAwKbW3lgoiMiceEJJ/0=)
                          9: 3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (hash: 52eRJUyMS1D/Y10YGDL++7a6ITlSLlhK23TWGAji77M=)
                          10: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (hash: 0DaR6EQXz9qNKopRfjWSu/bXijoSdhpj5fJcKyJycxw=)
                          11: 3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl (hash: pYNMEB6ppuUHKtpMAz0Ef9wy8HIeQbHwonOwt8aFciU=)
                          12: 323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa (hash: G3Odq6+liao9rSrnW9IxF+85mnGUPLT2G3zXCo+assU=)
                          13: 323430343a356434303a3a2f34382d3438203d3e20313338353938.roa (hash: o69GAoupi19SYQFx9GbnxeXAPra1yIHc+y9tXTKqEaE=)
                          14: 323430343a356434303a323a3a2f34382d3438203d3e20313338353938.roa (hash: 1BvT4+B6DoXD7bSTfJFF0kIFzIyR+ygmXkzol5Y0Vog=)
                          15: 3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa (hash: 0MhXXslaEXPjPEoKctkP/woYNX7tt+w1I2c/UK/MryM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl
                          rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 05:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:10:b4:c6:64:95:b3:73:e3:59:99:35:6c:9f:9d:05:4d:44:5f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B
        Validity
            Not Before: May 21 02:02:23 2026 GMT
            Not After : May 22 05:24:23 2026 GMT
        Subject: CN=121767CC85C463A9B54AA68F33591823F76153FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:42:49:00:3d:06:02:70:89:79:dd:6f:0a:af:
                    3c:0b:d0:c4:29:f9:39:bd:b3:18:b9:fb:f5:e5:1b:
                    21:ab:53:7c:8e:3e:d8:e4:63:83:8d:5a:10:87:a7:
                    f7:4e:38:5c:44:2c:bd:2c:0f:39:2d:21:c9:da:5f:
                    9e:78:f1:02:56:c5:ec:f0:4a:ba:01:24:6e:b8:aa:
                    c4:f0:a3:5a:d2:04:21:f9:c2:3b:a8:90:c5:51:10:
                    00:29:3f:91:1b:a1:1f:6b:c9:0e:2a:f6:83:33:9b:
                    d8:96:f3:fc:1d:71:33:a7:01:93:e9:9e:d0:a6:fe:
                    f6:43:a3:69:d7:78:86:ce:e3:f8:98:4b:28:7f:62:
                    7e:81:60:8c:83:df:e7:f3:63:23:ee:d0:ae:cc:ef:
                    f0:99:d3:61:59:e2:03:99:e5:cc:8b:72:0a:c2:94:
                    26:48:a9:51:d7:d1:e1:7d:f0:10:cb:26:05:b1:ee:
                    49:33:16:05:44:57:8e:f4:b0:6e:c3:1d:a0:6d:ae:
                    bc:40:2b:f6:c0:08:5a:e0:f2:0b:c7:a1:61:76:a9:
                    b8:4d:b5:b2:4c:fd:05:43:db:7e:8a:c8:33:21:08:
                    e6:41:2f:c9:1d:c5:e9:f4:76:69:35:fd:41:52:fe:
                    6f:e1:01:84:cc:12:93:8f:4c:1f:8e:f9:17:41:06:
                    d4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:17:67:CC:85:C4:63:A9:B5:4A:A6:8F:33:59:18:23:F7:61:53:FE
            X509v3 Authority Key Identifier:
                keyid:3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5d:66:69:be:8b:9d:3e:bd:04:7d:62:3c:06:1d:2f:69:99:
         f7:31:e1:31:c6:db:26:fb:0d:58:ef:43:9a:1c:63:14:7c:da:
         ea:d2:1b:80:7a:4f:98:b5:11:7d:49:19:6a:cc:26:ff:9f:a2:
         28:15:a5:04:be:87:f4:e3:be:e3:92:e4:dd:2a:46:98:7f:df:
         9d:23:d0:9c:eb:1d:9a:9b:b7:f3:93:83:fd:0c:b8:08:47:dc:
         21:c4:76:a7:de:a8:ba:c7:b5:ea:8f:81:c6:5c:18:12:ca:ac:
         b1:a6:d9:3b:1c:2a:37:45:28:3e:2f:54:05:a3:db:c4:9a:33:
         c7:da:4f:84:7d:b2:31:36:4f:03:03:0a:5f:2e:85:11:a4:89:
         5b:45:f6:1c:dd:23:33:77:e9:f2:9b:a9:bd:71:9e:62:8d:fc:
         25:56:88:2c:6c:1f:c2:de:24:12:34:16:bd:7a:82:ef:79:fc:
         62:e8:9d:db:74:db:db:55:5c:9e:4e:e6:6e:6c:a0:39:89:d1:
         56:d1:c5:c0:ab:f3:35:88:2d:d6:36:ed:0e:0f:84:19:e6:21:
         25:db:31:57:c6:85:ea:18:e5:17:33:39:79:86:e6:b0:71:cb:
         4f:ae:9a:6e:b1:90:df:02:cb:8e:01:ac:a8:30:82:ee:c1:2c:
         dd:a9:5e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:23:29 2026 by rpki-client