Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
File:                     63C42504F704E536ADDF4D41DF027965A62F7B11.mft (raw, json)
Hash identifier:          UMGbPlweqfnnlCPO/8EyYbXLkaaFtOxPdNQMDs4ofSM=
Subject key identifier:   89:A7:32:EC:A1:C6:66:32:FD:40:51:ED:DC:F6:AF:C6:8D:71:2A:D7
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Certificate issuer:       /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial:       4D072104C0E8C3A7444268B087E0C146508A6A3A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 09:38:25 +0000
Manifest this update:     Mon 21 Sep 2026 09:33:25 +0000
Manifest next update:     Tue 22 Sep 2026 11:20:25 +0000
Files and hashes:         1: 323430323a383738303a313034383a3a2f34382d3438203d3e203633383539.roa (hash: gavXjP1843btT/INQ5H4TJbB2kVozgzR0wx4AZmGfs4=)
                          2: 3130332e34372e3133332e302f32342d3234203d3e203633383539.roa (hash: HnFnN/gwcfh/Pmdxl8AW6aaxwuqBWxhzBe0aqoQ5fWA=)
                          3: 323430323a383738303a313031323a3a2f34382d3438203d3e203633383539.roa (hash: gcK+pqJGEc+f4D2WBOCc7GUa0VaQrxTAkfx+JnB9KGI=)
                          4: 323430323a383738303a313031343a3a2f34382d3438203d3e203633383539.roa (hash: QEvplEmBTKzvLNJjG+BuTZvEQ5RxcrPMpi8Wq9iAPuY=)
                          5: 323430323a383738303a313030353a3a2f34382d3438203d3e203633383539.roa (hash: G3mpZmD64zWPzoaI+PEWGj9N85YGqwYb2GjVMXfv318=)
                          6: 323430323a383738303a313037383a3a2f34382d3438203d3e203633383539.roa (hash: HHhXOt4Y3AtwU0dvY9ZMDvp4/FDXY2pF7raH1bssvBQ=)
                          7: 323430323a383738303a313036313a3a2f34382d3438203d3e203633383539.roa (hash: UMElmVxVGeAJIKPTmGSXx95CBCTsQ3LOa1MQYwRIjcw=)
                          8: 323430323a383738303a313033313a3a2f34382d3438203d3e203633383539.roa (hash: QV29NHQ6gKTUnh8gl26mnAbhFcTrX7cqcb4Z8q99Km0=)
                          9: 323430323a383738303a313037373a3a2f34382d3438203d3e203633383539.roa (hash: BHe0m+lPcGp48MevadQczbSKo8lgsMBfVDuyo6gH4Z8=)
                          10: 323430323a383738303a313035373a3a2f34382d3438203d3e203633383539.roa (hash: 1ASrzbPmwcd/DHS8urHeUWc9E+d1UpvPQYSfQKHBx4w=)
                          11: 3130332e34372e3133342e302f32342d3234203d3e203633383539.roa (hash: kDMH4liiT4ctFaAjxOkI+G3H0xW1ccalXWrAA+Sk+Tw=)
                          12: 323430323a383738303a313035363a3a2f34382d3438203d3e203633383539.roa (hash: I4hXtaqkriV2QirRqH9cwQ/d2faPVKnfLsriv/RsIUs=)
                          13: 323430323a383738303a313030303a3a2f34382d3438203d3e203633383539.roa (hash: P/CRBCwgpqum8FYFDzwyHXHMI8YL0EQQHVLJv9xYjmQ=)
                          14: 3130332e34372e3133352e302f32342d3234203d3e203633383539.roa (hash: kzxAv68uNPEKfG1HQVRXBBVOkPQgcn/faHJQz7/53H0=)
                          15: 63C42504F704E536ADDF4D41DF027965A62F7B11.crl (hash: Ywk0CClN0/u8+JdA7GfwYlsponTHImXh8zZH9ZYWNmU=)
                          16: 323430323a383738303a313031623a3a2f34382d3438203d3e203633383639.roa (hash: vYET56HFYpChL6bGq11j5RB2Wr1FAT/zt+FKBjbdqwQ=)
                          17: 323430323a383738303a313030333a3a2f34382d3438203d3e203633383539.roa (hash: 2QQzbibx13e9OznQwDFFooXULfjO91bpIYzgasoVnLs=)
                          18: 323430323a383738303a313035613a3a2f34382d3438203d3e203633383539.roa (hash: dnzOeOUcbijY19xCxBtYtQBVd5nl1yqrwv2rQGxHNeM=)
                          19: 323430323a383738303a313034303a3a2f34382d3438203d3e203633383539.roa (hash: mKDRLLuItZdGKqg74M0ldsqeCk9UewXSi/RAFWP012I=)
                          20: 3130332e34372e3133322e302f32342d3234203d3e203633383539.roa (hash: mS1r5MFJ4uAuaLA8mGOTn1ZK/uISEXGX1CXLizmvMz4=)
                          21: 323430323a383738303a313037393a3a2f34382d3438203d3e203633383539.roa (hash: LPbZZDjsgtFNtJ3osMn5sdN6+owdYw48/PzxXoM+D8Y=)
                          22: 323430323a383738303a313036633a3a2f34382d3438203d3e203633383539.roa (hash: MlWAkCDNZTZEl14oCloyLy5YDRvWhR8KK3xXXVx2zXs=)
                          23: 323430323a383738303a313032393a3a2f34382d3438203d3e203633383539.roa (hash: E7tRyXIBozKmAWDPU94JKnpIjpmZW93mBbGB/vhSTfw=)
                          24: 323430323a383738303a313030393a3a2f34382d3438203d3e203633383539.roa (hash: 5hgqs02RXm1ZntrYSk4tQ5/RQyJ8uqBgUr+Y2soYwvI=)
                          25: 323430323a383738303a313031363a3a2f34382d3438203d3e203633383539.roa (hash: 41vzNeJSTKVYMid2VrmfKQGDFALw1Z1aA0Bk6HWTfDA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:07:21:04:c0:e8:c3:a7:44:42:68:b0:87:e0:c1:46:50:8a:6a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
        Validity
            Not Before: Sep 21 09:33:25 2026 GMT
            Not After : Sep 22 11:20:25 2026 GMT
        Subject: CN=89A732ECA1C66632FD4051EDDCF6AFC68D712AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:44:62:fe:49:c6:22:67:bd:56:1a:eb:26:fb:
                    ea:5d:cf:20:cf:ca:f1:ae:2b:9f:fd:0d:e0:7f:32:
                    5f:11:79:7f:4c:e6:0e:5e:b4:9c:5d:b4:f1:11:68:
                    97:0c:46:88:15:80:c5:a2:c6:06:91:49:e4:df:3b:
                    e4:03:46:b9:a2:25:40:90:bb:cc:ea:9d:83:eb:8b:
                    52:70:65:80:87:c3:9c:67:a2:68:73:5d:37:fe:60:
                    80:f8:56:e2:7b:6c:65:8a:84:0f:f7:97:4b:5b:b9:
                    3f:8b:57:46:b1:43:34:ff:de:9e:4c:50:01:4e:9f:
                    73:44:e8:19:e7:46:6f:da:76:e6:be:0f:58:50:65:
                    2d:74:32:96:b9:65:78:3f:4e:0a:95:46:e9:ca:00:
                    01:b4:68:3c:45:88:16:ce:71:15:5b:92:ee:e2:9c:
                    9d:18:89:27:c6:1c:a8:20:c6:7c:1b:4c:9f:8f:70:
                    d7:8f:7f:ce:20:2a:a1:f2:95:0f:86:36:53:58:83:
                    fc:a1:c6:bf:bf:b6:1d:4f:c4:84:7b:cb:cf:bc:60:
                    3f:fa:89:70:04:39:ae:b1:9b:ff:d7:67:f6:0c:3d:
                    e8:16:45:f2:6b:2b:8c:ec:38:44:88:59:8e:2b:e5:
                    51:37:37:da:3c:f6:1c:8d:21:f6:80:2c:d3:a5:80:
                    d5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A7:32:EC:A1:C6:66:32:FD:40:51:ED:DC:F6:AF:C6:8D:71:2A:D7
            X509v3 Authority Key Identifier:
                keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e7:7e:50:52:b3:0c:e6:87:8c:f3:29:6f:a1:3a:50:46:fa:
         54:db:0b:c0:c2:e2:82:79:20:a8:5b:90:ac:0f:96:43:4c:7f:
         ed:2f:79:94:cf:fc:3c:50:c4:b3:7b:77:25:05:74:59:32:f1:
         77:27:ec:d8:3f:17:67:1a:ab:fb:d6:7a:cc:cd:5f:6b:97:bf:
         09:ef:36:59:01:d6:3b:bb:98:8f:26:da:fc:ea:35:96:d9:ee:
         99:0d:2d:05:95:83:54:95:97:60:70:ac:fd:d1:04:83:d5:e7:
         66:db:9c:f1:6d:d7:21:83:4f:b6:99:b8:1f:c1:bf:4a:0c:e2:
         8f:77:ae:0b:c6:e1:a6:71:90:74:56:68:82:dc:eb:73:68:96:
         2a:cb:46:dc:02:d3:b1:03:2c:9e:16:25:53:c8:5a:86:11:42:
         07:34:50:06:25:d3:5f:5c:4a:1a:69:0b:c5:04:5f:47:b7:de:
         4b:96:45:80:87:90:e4:8c:b4:1d:c0:06:e8:9b:61:7e:12:08:
         a7:07:c6:b1:a0:04:99:19:ab:43:1f:4b:14:6b:45:d4:0b:2e:
         8e:ad:ef:72:e8:6a:d9:bb:5e:23:1e:9e:ea:87:59:e0:d4:03:
         d8:1e:67:29:32:0d:74:c4:e1:07:76:57:0e:20:f0:3e:6c:05:
         10:a8:27:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:20:53 2026 by rpki-client