Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
File:                     38A016716413D0128BA473D046A93A222EF258E1.mft (raw, json)
Hash identifier:          Y6zY15ZR9uyUwwA2Sl5+rTN57iOigO5ETpHMNygNRYs=
Subject key identifier:   9E:FF:C9:A6:FD:C5:58:23:7B:34:E9:13:E2:CE:7A:B1:EA:F9:52:66
Authority key identifier: 38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
Certificate issuer:       /CN=38A016716413D0128BA473D046A93A222EF258E1
Certificate serial:       514BC61240D984FE153B42F4713204CD8752C757
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
Manifest number:          BD
Signing time:             Mon 21 Sep 2026 20:16:34 +0000
Manifest this update:     Mon 21 Sep 2026 20:11:34 +0000
Manifest next update:     Tue 22 Sep 2026 22:45:34 +0000
Files and hashes:         1: 3230322e3133372e302e302f32322d3232203d3e2039393035.roa (hash: WaWYp+Csy1XmWlHWyydNjABqy7+/ynRv2N7rdeu9lvs=)
                          2: 38A016716413D0128BA473D046A93A222EF258E1.crl (hash: WoEtlvmsXj7tA5uKqGHyEcWuRvk0h5Lrt22pizb3osE=)
                          3: 3230322e37372e3130342e302f32322d3234203d3e2039393035.roa (hash: gq8WgCP+l227lLiu3sQbxwyDdcnnRxrBsxiqFgd4NLE=)
                          4: 323430353a3130303a3a2f33322d3438203d3e2039393035.roa (hash: Kthx67gHVNGYI0fzwSZ0fi+hJEWpAyGO/ZNZDQ2LEig=)
                          5: 3230322e37372e3131322e302f32322d3234203d3e2039393035.roa (hash: 5c33gF+5gjmmb741IUEGGHDDYpayMnh6r8j5Ow51OXo=)
                          6: 3230322e3133372e342e302f32322d3234203d3e2039393035.roa (hash: n/wLv+DrvS6hM2yX7W1+FhqdbDsoaxYa82u0zyTWRIg=)
                          7: 3230322e37372e3130302e302f32322d3234203d3e2039393035.roa (hash: 4zcs3dsKUpw1QSrJt91B69SmnZX4YnkFdN0jKF+1k7E=)
                          8: 3230322e37372e39362e302f32322d3234203d3e2039393035.roa (hash: 9UNjPzeTlgKKqUtFeYaNHw++yvRCKf3VTOaGIaohaGU=)
                          9: 3230322e3133372e31362e302f32322d3234203d3e2039393035.roa (hash: dSBZailoQQTSiyKxA2l6AI3PspujPG35rpgdMX5KHK0=)
                          10: 3230322e3133372e32302e302f32322d3234203d3e2039393035.roa (hash: j3p3wEKo5eKcusMRNWAz6h27m/X8ftQFUkaePF+oebQ=)
                          11: 3230322e37372e3132302e302f32322d3234203d3e2039393035.roa (hash: dijnvbrxw14fcU7sTr4Hi9+AvVCISHBw/XOBUUSQn0M=)
                          12: 3230322e37372e3131362e302f32322d3234203d3e2039393035.roa (hash: Vv/Gc1aZqIRGDihUWMWmB/KFIBvi6zpuuDKDQW27nxM=)
                          13: 3230322e3133372e382e302f32322d3234203d3e2039393035.roa (hash: 9boLwOGJqN+e9hHgChxBfpOSFK4xK+tkaOhwgxnywSg=)
                          14: 3130332e32312e3231362e302f32322d3234203d3e2039393035.roa (hash: 69DRa4aTIpAEdb51xzvQioJYr3teJfUAi2k8d2rlqC4=)
                          15: 3230322e37372e3130382e302f32322d3234203d3e2039393035.roa (hash: hpgIbmaFVFbmnwLERjvmTE4R0RTrKMtLvdV36aAo84w=)
                          16: 3230322e3133372e302e302f32322d3234203d3e2039393035.roa (hash: sDTmD3GU6Ft8EEEqtjLcBYRRth1n9ZFmkA27qiDqHu0=)
                          17: 3230322e37372e3132342e302f32322d3234203d3e2039393035.roa (hash: hAYha3B7RJg5b0yJ9V9pM3cxMRjU9QmMJwDUZnJa1Qc=)
                          18: 3230322e3133372e31322e302f32322d3234203d3e2039393035.roa (hash: DsSxJ+60lvbsX4hG81MSfAY6DjOKwAPqkr7jR3rXmbA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
                          rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 22:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4b:c6:12:40:d9:84:fe:15:3b:42:f4:71:32:04:cd:87:52:c7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A016716413D0128BA473D046A93A222EF258E1
        Validity
            Not Before: Sep 21 20:11:34 2026 GMT
            Not After : Sep 22 22:45:34 2026 GMT
        Subject: CN=9EFFC9A6FDC558237B34E913E2CE7AB1EAF95266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:63:46:6d:a2:7e:5a:5d:4a:6a:03:fe:1d:64:
                    9e:0f:f1:58:a7:4b:60:2c:55:58:9a:b5:7e:4a:50:
                    2e:f2:cf:47:45:ea:13:cb:b5:be:9e:30:0c:de:01:
                    19:bd:f5:4d:c4:90:06:89:d7:72:8c:c5:c5:b5:ab:
                    dc:a3:7e:a3:95:82:82:85:f2:3d:33:c6:26:42:6b:
                    27:11:94:93:c3:0e:ba:1b:b1:6a:74:2e:2a:fd:54:
                    5a:3b:d8:cc:7f:13:78:f2:b3:25:b6:39:e3:b8:df:
                    ca:fb:05:e5:b6:11:7d:af:88:5b:d1:24:b7:c6:e3:
                    b3:8c:12:ad:e9:50:6d:cf:79:04:67:5e:ec:cd:3b:
                    38:2a:8d:c7:7e:f7:a6:6d:7a:02:5e:f4:29:80:18:
                    a3:7a:06:a3:32:3b:c8:6b:e8:ac:c8:71:45:c1:a6:
                    9e:51:8e:a0:2e:64:cd:56:2a:33:2d:24:70:6c:bf:
                    e5:4e:57:60:38:ce:c0:1d:dd:21:8a:9f:89:06:2c:
                    1a:4a:eb:f2:27:07:f4:07:41:7a:bb:2b:d8:e5:b5:
                    93:21:08:fe:45:0a:17:b2:54:41:a2:44:b8:85:d3:
                    f8:df:29:80:5f:df:3c:25:7a:cd:7f:a3:c6:98:b1:
                    fd:fd:1f:f0:e1:d6:d9:8e:94:03:27:50:33:20:0c:
                    87:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FF:C9:A6:FD:C5:58:23:7B:34:E9:13:E2:CE:7A:B1:EA:F9:52:66
            X509v3 Authority Key Identifier:
                keyid:38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d0:82:8d:9b:29:14:92:05:e6:4e:31:f7:a1:2a:ba:d5:f3:
         ae:a9:2a:e4:04:ba:54:ee:d4:fb:5a:d6:af:04:6a:8d:dc:28:
         fb:67:b0:94:8f:ae:33:7b:40:4b:43:80:e5:94:91:18:94:b3:
         13:e7:b7:c7:f4:1d:dd:95:ee:fb:57:f8:e7:8c:5e:74:f6:63:
         7b:64:27:56:be:0e:eb:29:a9:95:e0:dd:c3:fc:62:8a:f9:b6:
         2d:ef:ea:a2:b2:b8:a8:e8:8e:a0:51:33:42:14:7e:38:5f:d5:
         25:fd:c2:17:b6:80:20:f3:34:a5:9a:1b:cf:c0:34:4c:d6:6a:
         92:df:ff:2f:54:90:c3:80:91:03:d5:47:5e:07:d0:04:2d:39:
         c6:c4:3f:32:62:27:54:20:ab:4e:d3:2d:14:50:3f:99:2e:6b:
         65:92:c5:c4:bc:1a:2a:40:ec:0f:52:e2:0f:02:5d:fa:80:3a:
         a9:ef:fd:03:33:0c:3a:d1:f2:ba:9e:08:f4:fe:28:0d:58:ac:
         54:23:81:a4:7a:d4:fc:2c:fc:8d:ec:af:76:87:09:5a:bd:bf:
         42:4f:32:e5:5a:de:1c:56:c9:ba:8b:0c:f4:0c:fd:43:bd:c3:
         64:1d:15:da:0b:b1:4c:86:b1:bb:d6:ae:c1:d2:89:9c:1e:98:
         ce:5d:b7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:09:49 2026 by rpki-client