Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
File:                     43E1CC61CDE59968FE0810D4937130A67D6541DC.mft (raw, json)
Hash identifier:          FBoG8KgtIKko9vPTP8odbcmSqaiWR54uBwwf4tIelzk=
Subject key identifier:   85:10:DA:2A:26:7A:46:04:37:B3:DB:41:84:7D:B4:68:91:3A:FA:0E
Authority key identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC
Certificate issuer:       /CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
Certificate serial:       6DACA20DB1E57E2A143E16C72A69D52F04789435
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
Manifest number:          41
Signing time:             Fri 19 Jun 2026 13:52:37 +0000
Manifest this update:     Fri 19 Jun 2026 13:47:37 +0000
Manifest next update:     Sat 20 Jun 2026 16:08:37 +0000
Files and hashes:         1: 323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa (hash: G3L597uJ/MtChNRFU4TPZTfQd8hCBfeft5oOi8ZO5Xk=)
                          2: 323430353a613534303a313030343a3a2f34382d3438203d3e203338313536.roa (hash: SMs3l2LaIu15xotNctGRKXxr41nAKmtqdH/wDotPjcE=)
                          3: 323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa (hash: LWtx3txnmj9FjoJjDB/lmvmHZmgHx1jmLc6PPib5at8=)
                          4: 323430353a613534303a313030633a3a2f34382d3438203d3e203338313536.roa (hash: q/tSBWv/7VM0Xu29FwAxjeFSDX/WD3INyENxffhPO4Q=)
                          5: 323430353a613534303a313031303a3a2f34382d3438203d3e203338313536.roa (hash: WgZKLMLpwFRH8Rc+mjcsJQGYvAiCBksSGlUySVC2KTU=)
                          6: 3230332e3139302e3131352e302f32342d3234203d3e203338313536.roa (hash: 1wbNP75Z/wA6pW2UhWTpcnJU8wNdOjHZn2vOKC8mX5U=)
                          7: 3230332e3139302e3131382e302f32342d3234203d3e203338313536.roa (hash: GpjHek9a827cy//pNFDcORXn2t6JzxU+p9J93Ct0LZo=)
                          8: 3230332e3139302e3131392e302f32342d3234203d3e203338313536.roa (hash: e7mQPN3Z6KC/Ik9Qm59+I1SvLwjeilQ2SD4cxlIQDBE=)
                          9: 3230332e3139302e3131362e302f32342d3234203d3e203338313536.roa (hash: /GkPi/+AOEhPufjKPy1+oO0pijIgfjVervEREyDjquk=)
                          10: 323430353a613534303a313031313a3a2f34382d3438203d3e203338313536.roa (hash: /s6NqXf3Az+33qCBWrV7/rHS8XMqrqM1zxdpU1dDV14=)
                          11: 3230332e3139302e3131322e302f32342d3234203d3e203338313536.roa (hash: akD2QIfBzuzka9CzlNwOGyLhb8S59sJqB1gcfu/lphg=)
                          12: 323430353a613534303a3a2f33322d3332203d3e203338313536.roa (hash: mYAvetqJOaK+g42xXQIVuzKQ0V+8EMMx37honK4xGaY=)
                          13: 323430353a613534303a313030383a3a2f34382d3438203d3e203338313536.roa (hash: jdESrjmJQhjG8kc6FD8N6X6iVxeMA55PP67c1tPELGM=)
                          14: 3230332e3139302e3131372e302f32342d3234203d3e203338313536.roa (hash: Yg8Yec064Brwf9x/NAfoSbhCfddxi4fn/8a7jii/RNk=)
                          15: 3230332e3139302e3131342e302f32342d3234203d3e203338313536.roa (hash: 1zxciFrgfrpypZ13HHtfhkMtV3yJILY8QtbERuPSSxQ=)
                          16: 323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa (hash: DmCqSyLAbR1GcGB2b6c28zFVw4CNHOLr1uOyNF7nwjc=)
                          17: 3230332e3139302e3131322e302f32312d3231203d3e203338313536.roa (hash: FE7yZMTislKGWcbY4qG0beL79uHJRAECT1HhYr/vMVw=)
                          18: 323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa (hash: FymgtPH5XRJeo2g24rTB6Zt9DBTm0EmGQZ0QaJOmZSE=)
                          19: 323430353a613534303a313030333a3a2f34382d3438203d3e203338313536.roa (hash: Cigucd/NI7znq4aJY8FxoWkyWnlcJwSTYzMKj0Cfavc=)
                          20: 323430353a613534303a313030623a3a2f34382d3438203d3e203338313536.roa (hash: ArldJV59T/AN0DLLjKdryy3dXOdpQHjw8YFmTH59OUg=)
                          21: 323430353a613534303a313030313a3a2f34382d3438203d3e203338313536.roa (hash: ghjk9WxpBpcObQwhuyRJKOhe294PLPBofYqlraUkN+g=)
                          22: 323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa (hash: SUQFDo/3me7K6mK7WbxUn/2b9SHI+OuxemQ1myZfogM=)
                          23: 43E1CC61CDE59968FE0810D4937130A67D6541DC.crl (hash: hSvMgmu+6SqsJH4yNA23IB+7Gx76fHTGAL71k2/FITc=)
                          24: 323430353a613534303a313030643a3a2f34382d3438203d3e203338313536.roa (hash: cpyNUFqnnPw0hoOUNBzdPXv7w/EpVs/cMCjjRluZNLo=)
                          25: 323430353a613534303a313030613a3a2f34382d3438203d3e203338313536.roa (hash: jHrKWWZukLMZ3J2401GmiEuzkAvQx3pBL2xKoO7CBis=)
                          26: 323430353a613534303a313030653a3a2f34382d3438203d3e203338313536.roa (hash: JOAtBF5+cfAqGhS9/3m1ZllG3nhy/U+cT4H4mHFtRKs=)
                          27: 3230332e3139302e3131332e302f32342d3234203d3e203338313536.roa (hash: df96YWKu427U+HPJiLnno+3fbVy36Hxa342nQy+ZfoU=)
                          28: 323430353a613534303a313030663a3a2f34382d3438203d3e203338313536.roa (hash: zPNtfgZ0xuIJb6mJb8ImM+3c3T3QiTY+1lYZMk1v2MU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl
                          rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 16:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ac:a2:0d:b1:e5:7e:2a:14:3e:16:c7:2a:69:d5:2f:04:78:94:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
        Validity
            Not Before: Jun 19 13:47:37 2026 GMT
            Not After : Jun 20 16:08:37 2026 GMT
        Subject: CN=8510DA2A267A460437B3DB41847DB468913AFA0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:21:36:e1:ff:75:9d:b1:81:a9:d5:28:c2:e3:
                    ba:7e:b0:04:0d:96:bf:02:92:71:f2:ed:78:e9:02:
                    41:6e:8e:36:40:58:82:1d:ed:90:2a:c5:6b:b8:5d:
                    c2:b1:c9:0a:85:60:a2:e6:cc:bc:c6:2e:59:09:8d:
                    f6:b6:28:3f:48:98:8f:a2:5b:2a:15:3d:b8:97:8b:
                    67:f5:5b:83:40:4d:33:6f:51:93:cf:f4:5e:26:e7:
                    15:7a:a7:1e:a6:66:7b:11:80:5a:63:22:de:80:06:
                    db:23:a2:d0:0c:61:07:db:0f:2a:e2:ee:c0:fb:c5:
                    e9:2a:6f:96:7b:e0:03:e9:71:88:4d:e0:3b:6a:23:
                    01:85:f3:6f:f8:40:1d:75:9f:33:44:57:02:75:06:
                    b1:3a:84:44:de:d6:e3:d9:90:0a:91:58:ef:62:79:
                    1c:68:55:41:77:ec:69:d2:d1:6d:78:76:cb:71:73:
                    f3:32:33:44:73:66:10:33:e9:da:25:78:19:b8:77:
                    15:29:fc:ee:56:28:f9:6e:4d:41:aa:ce:a2:37:cc:
                    1d:cf:f0:1a:2a:c5:ce:1b:69:73:06:60:01:23:0e:
                    7b:e2:ed:b8:7d:8d:f0:ce:38:12:6b:cb:bb:ff:55:
                    10:53:22:50:f8:58:89:6c:aa:86:ee:0b:29:da:c2:
                    00:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:10:DA:2A:26:7A:46:04:37:B3:DB:41:84:7D:B4:68:91:3A:FA:0E
            X509v3 Authority Key Identifier:
                keyid:43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b5:11:87:15:b6:70:86:11:1a:06:bf:85:5a:69:fc:31:d3:
         f4:e2:df:7f:ac:74:d6:d8:86:64:34:a1:9b:89:10:a2:21:a9:
         2d:54:69:c4:ed:0e:bc:52:32:19:7e:98:b2:f6:2a:e6:cb:2a:
         cf:aa:b5:c4:12:e7:5a:87:29:ed:46:a3:13:85:d6:6f:49:9a:
         7a:ea:d0:82:77:59:7e:23:2e:be:c8:cb:80:61:49:f1:ee:21:
         18:88:e2:9d:e9:58:e3:f7:a8:85:96:05:20:2e:6d:53:9f:ac:
         ab:5e:a6:8d:95:79:7f:79:20:b3:db:60:6a:65:0f:bc:a0:60:
         3f:94:89:df:73:e5:a0:81:a0:93:bc:c3:51:66:04:92:a5:66:
         00:6f:c1:5f:cf:f3:30:1a:05:f3:55:d8:ba:37:1c:e1:b0:1d:
         d5:2c:12:50:b8:e9:34:69:27:38:e3:d4:e1:7b:ed:a6:f5:2c:
         31:5d:45:1c:86:3e:43:c0:b8:09:65:10:0f:b9:c6:b5:87:0e:
         d7:a7:f9:fb:58:f6:81:9d:b3:17:07:9f:e7:f1:0c:e0:da:51:
         44:57:4c:e4:8c:eb:8c:1a:f4:2b:27:dd:43:fa:6b:e9:e8:5a:
         47:de:8f:68:70:5e:98:10:40:68:63:ea:a0:b4:d0:c0:ef:7b:
         b6:bc:7b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:59:22 2026 by rpki-client