Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft
File:                     7377350E3E3A151F4CC7127822802AD47B86A5CF.mft (raw, json)
Hash identifier:          35dsmCuDgM/BHvBjVMzc95jYkdwLk/FKKbNpvBfL1u8=
Subject key identifier:   D0:C9:79:20:30:43:1A:88:A0:07:2E:C9:35:8E:4C:FA:5B:7D:8D:37
Authority key identifier: 73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF
Certificate issuer:       /CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
Certificate serial:       5C596118FDF6E492DC75EC6596B9668A5974FBDC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft
Manifest number:          BD
Signing time:             Sun 20 Sep 2026 22:50:11 +0000
Manifest this update:     Sun 20 Sep 2026 22:45:11 +0000
Manifest next update:     Tue 22 Sep 2026 02:37:11 +0000
Files and hashes:         1: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: Vvaj0i3/+/Ad91udWk53Oqtn0qejlYZw543f3Ty/YWA=)
                          2: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: d1NKSb9zCDz65Zahjy0PaWXg282C7xqtAafmjhthBLo=)
                          3: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: OU8A/JqlWEHiLMQOXTcJaLj05li9iqcqdLDEsrie8gk=)
                          4: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: OPxPj77Y9Rv3nPwPPsMOHUQMVs3WuJ+hOwcspHs2qG8=)
                          5: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: CJsi4P7cF17zeVXlJxUuGuNmwdU6F6/z2QybZclUgaI=)
                          6: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: Hao2KVKZ/SYX9wVFj9FYi2+tYJ4CgtxYRSmxcGvPEds=)
                          7: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: B1+lVC5q4sIsDS/x8/d5eAraCNrj0NOZBU8+Bv2wtx0=)
                          8: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: e4jbQz3u5a8FYwAIij+O/hjopDRAVXihtcltRGdiV+E=)
                          9: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: 4T0MkaYeQXnt+7nt+tGVXlJwCuwG3xBT42XqaRTpKC8=)
                          10: 7377350E3E3A151F4CC7127822802AD47B86A5CF.crl (hash: pmxJUhKwnPID7HDhNyjMo+odQ+ODSGAJeM6fh23+E9w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl
                          rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 02:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:59:61:18:fd:f6:e4:92:dc:75:ec:65:96:b9:66:8a:59:74:fb:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
        Validity
            Not Before: Sep 20 22:45:11 2026 GMT
            Not After : Sep 22 02:37:11 2026 GMT
        Subject: CN=D0C9792030431A88A0072EC9358E4CFA5B7D8D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ea:4a:da:a4:de:c1:c8:ab:a1:28:18:88:86:
                    56:8d:ee:66:75:46:11:94:28:02:eb:4c:7b:3b:7c:
                    77:73:c8:77:32:de:8e:34:ad:f1:74:f0:63:71:24:
                    03:2a:0f:18:a6:14:e4:28:59:a7:39:d2:9c:42:cc:
                    f7:76:0c:2c:f5:e7:3a:32:bc:52:34:02:6b:e6:f5:
                    7c:a8:d3:83:d0:91:73:7e:8d:73:c8:7c:3a:a5:2b:
                    59:86:ee:f0:2a:c3:b6:c9:84:15:35:ed:a6:d5:07:
                    ce:d0:c8:a2:6a:72:78:bb:03:2e:40:9f:fe:21:22:
                    69:f2:c8:08:75:16:03:c3:76:27:c0:43:5e:d8:1f:
                    75:01:f7:ac:af:7e:a4:9f:92:c6:39:cd:bb:7d:84:
                    55:c4:d7:a0:f8:46:d6:09:69:ed:5c:1d:48:cd:9a:
                    0f:00:a7:fc:35:5c:bf:b8:c1:a1:81:e2:43:ea:2d:
                    bf:fe:64:ab:a3:8b:59:8d:12:8d:8f:90:76:7e:7a:
                    79:63:94:e5:94:f1:e9:1f:99:57:78:83:5c:5b:c1:
                    5a:9e:62:b5:c6:33:29:3e:c7:6b:cf:9f:8b:e2:5e:
                    5f:a2:84:7d:35:7b:3e:80:1b:14:2d:50:bc:bc:a9:
                    15:67:ed:6d:1a:d7:40:12:9b:17:69:33:4a:a2:4a:
                    70:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C9:79:20:30:43:1A:88:A0:07:2E:C9:35:8E:4C:FA:5B:7D:8D:37
            X509v3 Authority Key Identifier:
                keyid:73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:78:40:1c:94:32:2d:44:e0:fd:62:29:64:51:0c:15:0a:8a:
         56:14:fa:fe:0c:4a:6f:78:92:5c:04:c6:ed:14:cd:7e:9b:56:
         81:38:47:e6:fc:ac:b2:43:e1:54:7b:11:ae:1a:df:6e:a1:55:
         5e:9f:43:a8:8a:18:6f:dd:b7:9f:f0:2f:d1:14:fa:cb:9c:5b:
         85:37:4d:5b:9f:a6:f5:83:20:e8:1f:a7:c8:a2:9b:d4:48:0c:
         81:f6:e2:8c:98:59:49:ca:4b:fe:4a:ad:6d:67:d6:73:a2:9e:
         81:89:00:44:68:61:22:bd:52:b6:12:c5:63:89:dd:05:dd:05:
         8a:06:66:41:ed:66:7d:7e:8e:d5:42:9c:9b:92:f0:e5:72:cc:
         d8:ed:19:b9:48:6f:fb:82:d2:76:78:b2:e3:9d:37:5f:bf:a0:
         60:41:d0:b7:17:52:3c:db:59:bc:9e:fe:d5:aa:73:76:8c:c2:
         b7:14:c3:4e:e9:8b:59:15:93:55:1b:c3:b3:27:6c:8a:f0:32:
         d9:2a:b7:bf:0a:ed:5b:11:ac:10:d3:f8:b4:7d:53:f5:c9:1e:
         b7:8f:1a:60:73:cd:0c:26:46:78:a5:a0:6a:da:e2:df:e1:fd:
         f3:9c:3b:0c:46:c9:62:5f:b7:89:e9:2a:bf:8d:89:2f:40:55:
         df:44:ce:ef
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXFlhGP325JLcdexllrlmill0+9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM3NzM1MEUzRTNBMTUxRjRDQzcxMjc4MjI4MDJBRDQ3
Qjg2QTVDRjAeFw0yNjA5MjAyMjQ1MTFaFw0yNjA5MjIwMjM3MTFaMDMxMTAvBgNV
BAMTKEQwQzk3OTIwMzA0MzFBODhBMDA3MkVDOTM1OEU0Q0ZBNUI3RDhEMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV6krapN7ByKuhKBiIhlaN7mZ1
RhGUKALrTHs7fHdzyHcy3o40rfF08GNxJAMqDximFOQoWac50pxCzPd2DCz15zoy
vFI0Amvm9Xyo04PQkXN+jXPIfDqlK1mG7vAqw7bJhBU17abVB87QyKJqcni7Ay5A
n/4hImnyyAh1FgPDdifAQ17YH3UB96yvfqSfksY5zbt9hFXE16D4RtYJae1cHUjN
mg8Ap/w1XL+4waGB4kPqLb/+ZKuji1mNEo2PkHZ+enljlOWU8ekfmVd4g1xbwVqe
YrXGMyk+x2vPn4viXl+ihH01ez6AGxQtULy8qRVn7W0a10ASmxdpM0qiSnAFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0Ml5IDBDGoigBy7JNY5M+lt9jTcwHwYDVR0j
BBgwFoAUc3c1Dj46FR9MxxJ4IoAq1HuGpc8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2NmMzA5MzYtYzc1MC00MzNiLTljMmEtOGZmNWYzOGU2M2Q0LzAvNzM3NzM1MEUz
RTNBMTUxRjRDQzcxMjc4MjI4MDJBRDQ3Qjg2QTVDRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83Mzc3MzUwRTNFM0ExNTFGNENDNzEyNzgyMjgwMkFENDdCODZB
NUNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NmMzA5MzYtYzc1MC00MzNiLTlj
MmEtOGZmNWYzOGU2M2Q0LzAvNzM3NzM1MEUzRTNBMTUxRjRDQzcxMjc4MjI4MDJB
RDQ3Qjg2QTVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFh4QByUMi1E4P1iKWRRDBUKilYU+v4MSm94
klwExu0UzX6bVoE4R+b8rLJD4VR7Ea4a326hVV6fQ6iKGG/dt5/wL9EU+sucW4U3
TVufpvWDIOgfp8iim9RIDIH24oyYWUnKS/5KrW1n1nOinoGJAERoYSK9UrYSxWOJ
3QXdBYoGZkHtZn1+jtVCnJuS8OVyzNjtGblIb/uC0nZ4suOdN1+/oGBB0LcXUjzb
Wbye/tWqc3aMwrcUw07pi1kVk1Ubw7MnbIrwMtkqt78K7VsRrBDT+LR9U/XJHreP
GmBzzQwmRniloGra4t/h/fOcOwxGyWJft4npKr+NiS9AVd9Ezu8=
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:02:20 2026 by rpki-client