Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft
File:                     9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft (raw, json)
Hash identifier:          G2X6sB8BUAyZTCdhG2Cs4E8PkqfsgdV6EOdq94pjr3E=
Subject key identifier:   4A:08:9A:A9:9D:2C:50:1A:F4:05:FA:83:AB:0B:EA:D0:EF:D6:D0:6B
Authority key identifier: 94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86
Certificate issuer:       /CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86
Certificate serial:       17D18A1D5E6A0115A43EFF0342473724B6AA4D28
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft
Manifest number:          BC
Signing time:             Mon 21 Sep 2026 00:32:14 +0000
Manifest this update:     Mon 21 Sep 2026 00:27:14 +0000
Manifest next update:     Tue 22 Sep 2026 00:39:14 +0000
Files and hashes:         1: 9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl (hash: 96U0jLKXzKl7ITQIGx3iHEDZPA6f/9jV32n+mq92YDw=)
                          2: 3130332e33382e3130312e302f32342d3234203d3e203338353234.roa (hash: IeWybDSLka/jtbd1vvQvASTaO52Y1ulex+R9Z/pSTh4=)
                          3: 323430313a646538303a3a2f33322d3332203d3e203338353234.roa (hash: /+AV32qPV8MACDHJgW77LAGGVS4Uow1Wk7ehK668SIk=)
                          4: 323430313a646538303a313a3a2f34382d3438203d3e203338353234.roa (hash: otpz3GHCJXAl+zsX4V9JKumoq38+QopMzF9DBnvuyeQ=)
                          5: 3131392e322e34352e302f32342d3234203d3e203338353234.roa (hash: yQDveOELN3yZw+Fes3OqGg+UdH+S7wzClogTm0QtAzY=)
                          6: 323430313a646538303a393a3a2f34382d3438203d3e203338353234.roa (hash: AuYO5TccYbau3mi1SX/oBPb+qAUEFY3wZ2MqtqnmRSE=)
                          7: 323430313a646538303a653a3a2f34382d3438203d3e203338353234.roa (hash: OZiZCy1PB4zgNgpvUETUPQWiEL4oR12IkHG7OShumDk=)
                          8: 323430313a646538303a353a3a2f34382d3438203d3e203338353234.roa (hash: BK8Ng6gUHrAMozhlvR37Fy2f7Svgeis+ZV1Co+t553Q=)
                          9: 3131392e322e34312e302f32342d3234203d3e203338353234.roa (hash: J0sTJL7uuAFdCia8CnpmbOZj9Zo8ZeTbA6//7jjDPEE=)
                          10: 323430313a646538303a663a3a2f34382d3438203d3e203338353234.roa (hash: w1AQoTbeDmCZPGQ3DUH/6LDmBvexeMA79Uk2pDtKKaQ=)
                          11: 323430313a646538303a333a3a2f34382d3438203d3e203338353234.roa (hash: OgwYZEHribBE1oejo4FvhXMQKPLEby7yPYV0k9KQupY=)
                          12: 3131392e322e34302e302f32312d3231203d3e203338353234.roa (hash: 6e8bRKT2+z98DFP1RitvTz2muVOM0oiWxo+oa9c/A7s=)
                          13: 3130332e33382e3130332e302f32342d3234203d3e203338353234.roa (hash: B2vw/AfmcZ8F1gnKj13GYr8zILcXXSb57t0GLRagVN4=)
                          14: 3131392e322e34332e302f32342d3234203d3e203338353234.roa (hash: Gxg0pAPp9+nczDwnWsVr2c+wZcacl3BxAU+knsTJXRA=)
                          15: 3130332e33382e3130302e302f32342d3234203d3e203338353234.roa (hash: cIqt8an55Boi6QzS9htBN9Y4EwGnUF5GkY+Hn0B2NYM=)
                          16: 323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa (hash: sYjWWpBo8FUIMvmXrTogyK3NkMmGkAEm9E3UOLrb8Ws=)
                          17: 323430313a646538303a343a3a2f34382d3438203d3e203338353234.roa (hash: lOr0KvRpq7sUd34ZHkqcMtIkUhbQbtVGKWRoycjiWv4=)
                          18: 323430313a646538303a623a3a2f34382d3438203d3e203338353234.roa (hash: DI41zECW620FOKsJ0FqMvCY0itCp873yKiXLwmLThnY=)
                          19: 3131392e322e34372e302f32342d3234203d3e203338353234.roa (hash: /uCR0ldyLWtQwldeWX1wR8IL8mdOypv1FRb1qPBB8ZQ=)
                          20: 323430313a646538303a373a3a2f34382d3438203d3e203338353234.roa (hash: KkxEXZhjp/oGWHBiD1U4ajaYXvkfO2+59RNFB3d9ZrE=)
                          21: 323430313a646538303a613a3a2f34382d3438203d3e203338353234.roa (hash: ioY0LmXXJMAeiAjxElD65sYyXfr33iNMFqhQa04nfug=)
                          22: 3131392e322e34322e302f32342d3234203d3e203338353234.roa (hash: YegpUFzs5Bo+cor6xkFHxhxoHHFGCrxekO9AohUoA5U=)
                          23: 3130332e33382e3130322e302f32342d3234203d3e203338353234.roa (hash: pKnAKuwXavTUGHChjl7idzKzC03/FzlTPf5idecnBIM=)
                          24: 323430313a646538303a643a3a2f34382d3438203d3e203338353234.roa (hash: uJDtuiTEl95i1PxJ+VWIJf3d1dDO4VlSe65wkL8NmQY=)
                          25: 323430313a646538303a363a3a2f34382d3438203d3e203338353234.roa (hash: 8DPaH0y8CKvkufTwHCRzwNdpjyC0/Ps/ZdZAJaYk9Oo=)
                          26: 3131392e322e34302e302f32342d3234203d3e203338353234.roa (hash: eNtNsQFNigr1W6MKvJrKc3aElg7FuIec3I6GyQ0USN0=)
                          27: 3131392e322e34342e302f32342d3234203d3e203338353234.roa (hash: 6nmjpDUCW73mzpavFLZk1xxl3ntC7CHrr4nvfcRb/EA=)
                          28: 323430313a646538303a383a3a2f34382d3438203d3e203338353234.roa (hash: p875TAmU2A43GrzwVwl+OYcf7wyLUiIuUR2yXxkExDc=)
                          29: 3130332e33382e3130302e302f32322d3232203d3e203338353234.roa (hash: MiyKMCf36IQsfZ+v97Z0C+pNB4tqCrzvw15xDY76lpI=)
                          30: 3131392e322e34362e302f32342d3234203d3e203338353234.roa (hash: eg33xn4TSyFY2G/shK0oMfIfKBVDTtztPgCQ5iaYRbU=)
                          31: 323430313a646538303a323a3a2f34382d3438203d3e203338353234.roa (hash: rO7GcjaU0q6kVUxx8e/e2ALJnWe/BEvCij1MwjgN8JM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl
                          rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 00:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d1:8a:1d:5e:6a:01:15:a4:3e:ff:03:42:47:37:24:b6:aa:4d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86
        Validity
            Not Before: Sep 21 00:27:14 2026 GMT
            Not After : Sep 22 00:39:14 2026 GMT
        Subject: CN=4A089AA99D2C501AF405FA83AB0BEAD0EFD6D06B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:19:8a:6e:f3:3a:b7:f4:66:6e:c7:e7:cd:b5:
                    44:92:c9:63:be:4e:5f:84:d7:15:1a:cd:eb:f1:4e:
                    2f:e7:af:06:5f:05:03:eb:d3:a6:8b:5b:69:cd:e8:
                    dc:55:92:6d:13:c5:b0:c9:e2:79:0d:ff:00:1a:35:
                    dc:cd:c1:20:2b:3f:c1:5f:f2:2f:6f:40:8f:0c:3f:
                    03:9c:9c:87:b3:d7:3a:ff:81:36:41:31:b8:b8:56:
                    83:79:c7:91:2f:da:09:27:97:0d:3b:2b:34:89:74:
                    65:d6:9f:53:32:e4:01:8e:2c:6b:ca:6a:f8:69:3a:
                    93:64:c4:88:28:cf:5d:48:42:0e:54:03:01:4b:90:
                    5f:60:ac:43:5a:d3:bf:4f:09:84:22:d6:8b:f5:f5:
                    84:d2:c5:5f:65:53:27:33:e4:a3:9a:66:5f:49:22:
                    68:2f:11:15:5d:6b:64:16:78:91:70:7d:3f:a1:86:
                    28:d1:39:7e:84:fe:49:92:9d:56:ba:93:5c:e1:18:
                    8e:ab:b8:d4:5c:a7:7a:6e:49:5f:ca:88:c0:68:8b:
                    c3:52:3b:20:b8:75:29:ce:67:57:e2:f0:46:43:ed:
                    33:73:7c:92:6d:7b:73:ea:6b:fc:62:76:9d:12:49:
                    63:b7:f0:b9:4a:38:89:bf:72:b3:86:ff:8e:e3:18:
                    d8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:08:9A:A9:9D:2C:50:1A:F4:05:FA:83:AB:0B:EA:D0:EF:D6:D0:6B
            X509v3 Authority Key Identifier:
                keyid:94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:8d:9d:f6:fc:43:77:73:40:f4:08:10:1d:d3:4a:0c:08:fd:
         b7:c7:c4:52:8f:95:05:de:4f:74:ee:ba:f4:7c:b2:64:a2:8f:
         1f:06:c5:2f:d7:4f:0b:44:29:a5:9a:a6:8c:ff:4d:8a:ed:43:
         73:ab:c3:51:93:77:1e:01:aa:2e:25:ba:5f:59:fb:4d:d5:9f:
         90:90:b8:74:40:e5:14:8a:7f:f8:5f:76:ba:c8:b2:7b:bc:43:
         48:88:8f:ed:e9:05:f2:f9:45:fb:3d:b2:27:d8:71:a7:1c:ed:
         e1:7c:7a:2f:e3:d3:73:b8:55:14:30:00:b3:b3:e9:32:9a:e2:
         3a:60:28:28:f0:3b:c9:a4:96:c0:c2:b4:96:84:eb:29:70:9c:
         d9:54:02:12:a7:90:3d:aa:59:c9:e0:ec:6b:79:86:3a:b6:53:
         1f:f4:7b:f7:8d:f5:bb:e3:91:98:26:92:ef:6c:cf:62:47:86:
         ed:37:66:4f:00:1f:50:50:70:ec:f8:51:92:3c:95:74:83:57:
         3c:f0:99:a4:e5:a8:81:e7:1a:c0:75:1b:c1:b9:8f:f7:33:ad:
         f4:13:09:83:85:43:30:de:33:ff:47:ad:3a:df:4c:f0:cf:45:
         7d:3e:98:51:2e:7a:a9:72:d8:5a:3a:20:be:c2:49:97:f2:40:
         4e:fb:a6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:13:46 2026 by rpki-client