Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
File:                     43E1CC61CDE59968FE0810D4937130A67D6541DC.mft (raw, json)
Hash identifier:          7bHvyGqK4ekDFdAomwWGj3SSKnd+HF8PcqGNorCO+zc=
Subject key identifier:   B3:AA:8E:67:20:4B:F2:F4:71:30:94:84:CF:3C:CD:8C:04:FE:D8:55
Authority key identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC
Certificate issuer:       /CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
Certificate serial:       2D532A83DDB5CE53A1FCF1C6CB0C61F57EE8B66B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
Manifest number:          EB
Signing time:             Sun 25 Oct 2026 07:25:38 +0000
Manifest this update:     Sun 25 Oct 2026 07:20:38 +0000
Manifest next update:     Mon 26 Oct 2026 08:31:38 +0000
Files and hashes:         1: 323430353a613534303a313030343a3a2f34382d3438203d3e203338313536.roa (hash: SMs3l2LaIu15xotNctGRKXxr41nAKmtqdH/wDotPjcE=)
                          2: 323430353a613534303a313030623a3a2f34382d3438203d3e203338313536.roa (hash: ArldJV59T/AN0DLLjKdryy3dXOdpQHjw8YFmTH59OUg=)
                          3: 3230332e3139302e3131342e302f32342d3234203d3e203338313536.roa (hash: 1zxciFrgfrpypZ13HHtfhkMtV3yJILY8QtbERuPSSxQ=)
                          4: 323430353a613534303a313031313a3a2f34382d3438203d3e203338313536.roa (hash: /s6NqXf3Az+33qCBWrV7/rHS8XMqrqM1zxdpU1dDV14=)
                          5: 323430353a613534303a313030663a3a2f34382d3438203d3e203338313536.roa (hash: zPNtfgZ0xuIJb6mJb8ImM+3c3T3QiTY+1lYZMk1v2MU=)
                          6: 3230332e3139302e3131382e302f32342d3234203d3e203338313536.roa (hash: GpjHek9a827cy//pNFDcORXn2t6JzxU+p9J93Ct0LZo=)
                          7: 43E1CC61CDE59968FE0810D4937130A67D6541DC.crl (hash: L0XmKh/UMK31jrHIQjV9Kzvuwlo1/vt8Kikwma6gqps=)
                          8: 323430353a613534303a313030653a3a2f34382d3438203d3e203338313536.roa (hash: JOAtBF5+cfAqGhS9/3m1ZllG3nhy/U+cT4H4mHFtRKs=)
                          9: 323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa (hash: SUQFDo/3me7K6mK7WbxUn/2b9SHI+OuxemQ1myZfogM=)
                          10: 323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa (hash: G3L597uJ/MtChNRFU4TPZTfQd8hCBfeft5oOi8ZO5Xk=)
                          11: 3230332e3139302e3131352e302f32342d3234203d3e203338313536.roa (hash: 1wbNP75Z/wA6pW2UhWTpcnJU8wNdOjHZn2vOKC8mX5U=)
                          12: 323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa (hash: FymgtPH5XRJeo2g24rTB6Zt9DBTm0EmGQZ0QaJOmZSE=)
                          13: 323430353a613534303a313030313a3a2f34382d3438203d3e203338313536.roa (hash: ghjk9WxpBpcObQwhuyRJKOhe294PLPBofYqlraUkN+g=)
                          14: 3230332e3139302e3131392e302f32342d3234203d3e203338313536.roa (hash: e7mQPN3Z6KC/Ik9Qm59+I1SvLwjeilQ2SD4cxlIQDBE=)
                          15: 323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa (hash: DmCqSyLAbR1GcGB2b6c28zFVw4CNHOLr1uOyNF7nwjc=)
                          16: 323430353a613534303a313031303a3a2f34382d3438203d3e203338313536.roa (hash: WgZKLMLpwFRH8Rc+mjcsJQGYvAiCBksSGlUySVC2KTU=)
                          17: 323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa (hash: LWtx3txnmj9FjoJjDB/lmvmHZmgHx1jmLc6PPib5at8=)
                          18: 3230332e3139302e3131322e302f32312d3231203d3e203338313536.roa (hash: FE7yZMTislKGWcbY4qG0beL79uHJRAECT1HhYr/vMVw=)
                          19: 3230332e3139302e3131362e302f32342d3234203d3e203338313536.roa (hash: /GkPi/+AOEhPufjKPy1+oO0pijIgfjVervEREyDjquk=)
                          20: 323430353a613534303a313030333a3a2f34382d3438203d3e203338313536.roa (hash: Cigucd/NI7znq4aJY8FxoWkyWnlcJwSTYzMKj0Cfavc=)
                          21: 3230332e3139302e3131332e302f32342d3234203d3e203338313536.roa (hash: df96YWKu427U+HPJiLnno+3fbVy36Hxa342nQy+ZfoU=)
                          22: 3230332e3139302e3131372e302f32342d3234203d3e203338313536.roa (hash: Yg8Yec064Brwf9x/NAfoSbhCfddxi4fn/8a7jii/RNk=)
                          23: 3230332e3139302e3131322e302f32342d3234203d3e203338313536.roa (hash: akD2QIfBzuzka9CzlNwOGyLhb8S59sJqB1gcfu/lphg=)
                          24: 323430353a613534303a313030643a3a2f34382d3438203d3e203338313536.roa (hash: cpyNUFqnnPw0hoOUNBzdPXv7w/EpVs/cMCjjRluZNLo=)
                          25: 323430353a613534303a313030613a3a2f34382d3438203d3e203338313536.roa (hash: jHrKWWZukLMZ3J2401GmiEuzkAvQx3pBL2xKoO7CBis=)
                          26: 323430353a613534303a3a2f33322d3332203d3e203338313536.roa (hash: mYAvetqJOaK+g42xXQIVuzKQ0V+8EMMx37honK4xGaY=)
                          27: 323430353a613534303a313030633a3a2f34382d3438203d3e203338313536.roa (hash: q/tSBWv/7VM0Xu29FwAxjeFSDX/WD3INyENxffhPO4Q=)
                          28: 323430353a613534303a313030383a3a2f34382d3438203d3e203338313536.roa (hash: jdESrjmJQhjG8kc6FD8N6X6iVxeMA55PP67c1tPELGM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl
                          rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 19:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:53:2a:83:dd:b5:ce:53:a1:fc:f1:c6:cb:0c:61:f5:7e:e8:b6:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
        Validity
            Not Before: Oct 25 07:20:38 2026 GMT
            Not After : Oct 26 08:31:38 2026 GMT
        Subject: CN=B3AA8E67204BF2F471309484CF3CCD8C04FED855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:22:ab:32:54:cf:ef:7f:88:bd:b1:c3:b6:
                    14:d1:74:d3:6d:cc:02:d7:e3:1b:ef:e4:bb:19:5c:
                    3f:a6:cc:d7:9e:37:7d:ad:5c:37:97:91:10:49:8a:
                    52:92:20:4c:3a:76:3f:7a:b3:65:29:bf:06:38:80:
                    89:9a:76:b6:fe:e7:ea:13:64:b3:fe:0b:80:d9:1f:
                    37:9c:30:5e:6a:7f:5d:25:1d:e1:38:5d:b3:fc:ad:
                    42:4c:36:2d:6f:2e:9f:f1:a1:59:f0:7c:37:60:18:
                    a4:16:7a:b6:8e:03:db:d7:08:4c:a3:28:6d:b3:2e:
                    21:e3:18:2d:57:b0:53:7d:27:8a:e5:4c:20:09:93:
                    c9:77:83:14:a7:33:0a:25:d2:21:23:fa:1b:fe:b7:
                    3f:f5:03:62:b4:37:7e:0b:0b:4c:da:bc:fb:d3:1b:
                    3d:a3:e8:9d:5d:2c:ac:17:ff:77:77:39:c1:6f:e9:
                    c9:d0:70:2c:31:28:9d:f4:61:7e:68:cf:13:59:68:
                    4a:da:ee:c3:32:69:ca:0d:21:44:6e:e1:23:ec:7b:
                    b8:30:0a:cd:fc:85:57:92:0a:c1:49:cd:3c:f3:32:
                    47:73:c1:39:fd:d4:c9:d5:44:e0:85:8a:49:50:e5:
                    15:ed:c4:d4:dc:a6:c9:00:53:78:64:7e:c4:d3:84:
                    19:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AA:8E:67:20:4B:F2:F4:71:30:94:84:CF:3C:CD:8C:04:FE:D8:55
            X509v3 Authority Key Identifier:
                keyid:43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e4:21:6c:0c:68:53:3a:99:6a:0c:de:3d:7a:3b:c2:57:23:
         f5:04:c9:9c:90:cb:12:49:af:20:a1:11:c1:df:79:91:aa:1e:
         83:03:99:8f:4e:7a:81:01:81:a8:81:53:63:a6:1c:10:b7:02:
         41:99:ff:75:da:04:c2:18:b9:d6:c4:cd:5e:9b:59:93:d6:ae:
         0f:e8:c8:0a:d3:2f:7d:4b:37:3f:6d:c7:3f:06:2b:e0:59:6a:
         4a:b1:42:66:40:54:2c:a9:ec:7a:0f:9f:37:00:f3:82:50:65:
         7d:73:38:b6:3e:2e:ce:73:04:71:0b:51:48:2f:ca:5b:db:a6:
         f1:8a:ad:0f:a6:da:77:a0:e6:e3:df:ba:50:05:f0:b2:2f:ab:
         2e:c0:7f:5f:af:e2:73:7a:b4:d4:07:f2:8d:c5:10:aa:b6:27:
         f0:a6:41:f0:b0:f2:62:55:c1:e5:ff:da:bf:90:d4:51:5b:24:
         9a:50:70:95:b7:d4:0c:f6:bd:80:96:a7:84:7e:91:26:83:17:
         b3:4b:de:8a:cf:91:80:66:ea:c9:36:3b:ed:77:14:64:5c:f6:
         20:60:94:fc:28:11:df:17:aa:7d:dc:41:c4:1d:ad:84:a2:31:
         67:18:80:95:65:fb:29:f9:88:ee:63:49:32:a3:1f:bc:8e:19:
         88:22:80:42
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULVMqg921zlOh/PHGywxh9X7otmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNFMUNDNjFDREU1OTk2OEZFMDgxMEQ0OTM3MTMwQTY3
RDY1NDFEQzAeFw0yNjEwMjUwNzIwMzhaFw0yNjEwMjYwODMxMzhaMDMxMTAvBgNV
BAMTKEIzQUE4RTY3MjA0QkYyRjQ3MTMwOTQ4NENGM0NDRDhDMDRGRUQ4NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPSiKrMlTP73+IvbHDthTRdNNt
zALX4xvv5LsZXD+mzNeeN32tXDeXkRBJilKSIEw6dj96s2UpvwY4gImadrb+5+oT
ZLP+C4DZHzecMF5qf10lHeE4XbP8rUJMNi1vLp/xoVnwfDdgGKQWeraOA9vXCEyj
KG2zLiHjGC1XsFN9J4rlTCAJk8l3gxSnMwol0iEj+hv+tz/1A2K0N34LC0zavPvT
Gz2j6J1dLKwX/3d3OcFv6cnQcCwxKJ30YX5ozxNZaEra7sMyacoNIURu4SPse7gw
Cs38hVeSCsFJzTzzMkdzwTn91MnVROCFiklQ5RXtxNTcpskAU3hkfsTThBnXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUs6qOZyBL8vRxMJSEzzzNjAT+2FUwHwYDVR0j
BBgwFoAUQ+HMYc3lmWj+CBDUk3Ewpn1lQdwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzVkM2QyMmEtMzM4Yi00MzAyLTkzZjQtYzAyMWVhNmFkNTQ4LzAvNDNFMUNDNjFD
REU1OTk2OEZFMDgxMEQ0OTM3MTMwQTY3RDY1NDFEQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80M0UxQ0M2MUNERTU5OTY4RkUwODEwRDQ5MzcxMzBBNjdENjU0
MURDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzVkM2QyMmEtMzM4Yi00MzAyLTkz
ZjQtYzAyMWVhNmFkNTQ4LzAvNDNFMUNDNjFDREU1OTk2OEZFMDgxMEQ0OTM3MTMw
QTY3RDY1NDFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFjkIWwMaFM6mWoM3j16O8JXI/UEyZyQyxJJ
ryChEcHfeZGqHoMDmY9OeoEBgaiBU2OmHBC3AkGZ/3XaBMIYudbEzV6bWZPWrg/o
yArTL31LNz9txz8GK+BZakqxQmZAVCyp7HoPnzcA84JQZX1zOLY+Ls5zBHELUUgv
ylvbpvGKrQ+m2neg5uPfulAF8LIvqy7Af1+v4nN6tNQH8o3FEKq2J/CmQfCw8mJV
weX/2r+Q1FFbJJpQcJW31Az2vYCWp4R+kSaDF7NL3orPkYBm6sk2O+13FGRc9iBg
lPwoEd8Xqn3cQcQdrYSiMWcYgJVl+yn5iO5jSTKjH7yOGYgigEI=
-----END CERTIFICATE-----
Generated at Sun Oct 25 10:44:25 2026 by rpki-client