Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft
File:                     408DEB7465856EE053B64340FA814B862FA5ED30.mft (raw, json)
Hash identifier:          bQFKfT7sPsxfNMVwrM+aPkru3AuxstH5VbLTKqAi4+Q=
Subject key identifier:   08:2A:50:7F:D9:9D:BB:42:5D:07:88:73:54:C6:D9:74:05:4B:BC:BE
Authority key identifier: 40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30
Certificate issuer:       /CN=408DEB7465856EE053B64340FA814B862FA5ED30
Certificate serial:       2892E55C9F1FF48BCBD919FA4E7B330045F309BC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft
Manifest number:          3B
Signing time:             Mon 15 Jun 2026 02:44:45 +0000
Manifest this update:     Mon 15 Jun 2026 02:39:45 +0000
Manifest next update:     Tue 16 Jun 2026 04:15:45 +0000
Files and hashes:         1: 323430343a653130303a353030303a3a2f34382d3438203d3e203535363835.roa (hash: 6qJvADM7TnokbPeZ7qdt3vQLtnl3NVZtxOSj18q09CQ=)
                          2: 323430343a653130303a333031303a3a2f34382d3438203d3e203535363835.roa (hash: K1j1r8p8lnDILuK7N/NcJkBJvu7iEEFMc675if0S3WQ=)
                          3: 323430343a653130303a343a3a2f34382d3438203d3e203535363835.roa (hash: SwZ0+RN9zy7jGzeWOiHw5G8Tt8UGWdAo+QE8SFhTvTs=)
                          4: 323430343a653130303a333030383a3a2f34382d3438203d3e20313333383430.roa (hash: cYq1pPJ1kXz1P0V4uXTVcOLjxxMdDVaxI2QS5Rg283M=)
                          5: 323430343a653130303a323a3a2f34382d3438203d3e203535363835.roa (hash: 7PC5yUWVkxaFBFncB8YjDQwXNAyIGFxj1rN/Th2rMIE=)
                          6: 323430343a653130303a333030373a3a2f34382d3438203d3e20313333383430.roa (hash: ZinyWF6/OyM+qIB4ybFpsxZf4hZ/U3ElqALdBB5MFdU=)
                          7: 323430343a653130303a333030333a3a2f34382d3438203d3e203535363835.roa (hash: p9GuvZpVXGOu6H5D3HvMBhou5ViROJkVlEsHLf6NCQs=)
                          8: 408DEB7465856EE053B64340FA814B862FA5ED30.crl (hash: zpK0IySk5/qZZFJIsrOCmtCC774SNEBiwesgvtqT08Q=)
                          9: 323430343a653130303a383a3a2f34382d3438203d3e203535363835.roa (hash: +LirAuzLcoxy5m9cq8X0tN0hUiKGAI5gI8eCsUZvwVI=)
                          10: 3130332e32302e3138392e302f32342d3234203d3e203535363835.roa (hash: u28Gp2P78Rkr5OmrjjB3RCUE9KIBOFm4VOHaugoOlnE=)
                          11: 323430343a653130303a333030363a3a2f34382d3438203d3e20313333383430.roa (hash: zZVo01FthP3hibAPdEn6/sGHNEwpisfqDnYx/D1PKfw=)
                          12: 3230332e3136312e31392e302f32342d3234203d3e203535363835.roa (hash: yowhmQACxswf/Peww6LGXxyyONQN5xqLKBxpY18BN1A=)
                          13: 323430343a653130303a333030323a3a2f34382d3438203d3e203535363835.roa (hash: GhWk8OpqwUpIBUXAgpGGL+KSvBEekP6n3orq3IOYLy0=)
                          14: 3131392e31382e3135322e302f32312d3234203d3e203535363835.roa (hash: 5ZmddhT7GIlx82/rw7f9EHLmxelcV9emeZTvH2dyZ8I=)
                          15: 323430343a653130303a343030353a3a2f34382d3438203d3e20313333383430.roa (hash: xm6j+Wu4h+hoeaN0WgsoUOVNWLd/rLgh2h75IOTgBxg=)
                          16: 3135302e3130372e3134312e302f32342d3234203d3e203535363835.roa (hash: oU0JE13izs3AAVH3QHb02tsIObTYm/RQpyEK7pKdYyk=)
                          17: 3230332e3136312e31372e302f32342d3234203d3e20313333383430.roa (hash: PGB9+soronCLjtQLmYSIcnoiPai7hpfQKryraZPR/Yg=)
                          18: 323430343a653130303a343030393a3a2f34382d3438203d3e20313333383430.roa (hash: qypDEJsbz1mzm/kOIX1QhPELxPdwjqkZ2S0DHXOUXL0=)
                          19: 323430343a653130303a363a3a2f34382d3438203d3e203535363835.roa (hash: Vc7FshVMDiGpbF9+Kiv6QLr/14tMNel0qOZ/fxIsVp4=)
                          20: 323430343a653130303a343030303a3a2f34372d3438203d3e203535363835.roa (hash: chn/BLH6sXxVIJc1U2zEaLzRzrKSbG3qdCfk7lXO83s=)
                          21: 3230332e3136312e31382e302f32342d3234203d3e20313333383430.roa (hash: ssBu2jXdvk42wwsEv5CkPxmyn7/LIefL5EcZ6039xsU=)
                          22: 323430343a653130303a623a3a2f34382d3438203d3e203535363835.roa (hash: pb1VqEYJr2hN6kBpjKbLxtnI+8QtZjKC3UvLZT0dfoY=)
                          23: 323430343a653130303a613a3a2f34382d3438203d3e203535363835.roa (hash: dxc6OEKiJ0H3o4CsLNrGmyX3sdS4YK5f3WmrW9K9FYU=)
                          24: 3135302e3130372e3134332e302f32342d3234203d3e203538343838.roa (hash: nSL4B/G0XcHxGPJp9F9kqB6nsnTe5eKmLy08tlSHYSo=)
                          25: 323430343a653130303a333030313a3a2f34382d3438203d3e20313333383430.roa (hash: gxqVgyPUiSzwf0u2VTIvrDekpuZp70wS4sOOjZvw6YQ=)
                          26: 323430343a653130303a353a3a2f34382d3438203d3e203535363835.roa (hash: iOnEWVuE24LYVCdnoa6iFEPJSCFOuf4sXHNPg/SHFs0=)
                          27: 323430343a653130303a373a3a2f34382d3438203d3e203535363835.roa (hash: pTxDsPkyo1tDRr1vmTJQTYR/ssBoeqKcFE0P3tWEh38=)
                          28: 3230332e3136312e32312e302f32342d3234203d3e20313333383430.roa (hash: m52mPeFqa+8/0Tpk86Gx6fbXpZzKnUzkFHaj1U3ilBo=)
                          29: 323430343a653130303a333a3a2f34382d3438203d3e203535363835.roa (hash: R4CrB5b+ue/S+9kEK4IXhRL1Ni8lQpZWKhM7ys5cBKI=)
                          30: 323430343a653130303a343030343a3a2f34382d3438203d3e20313333383430.roa (hash: 8q0q3+SCWY+Bu0G+ofJDsLu7LiqjhYqzKCA9NCa0Wng=)
                          31: 323430343a653130303a333030343a3a2f34382d3438203d3e20313333383430.roa (hash: l3Xe9DJNocb+9zSuPJro4YyXKCYcVdP6Ug2kux/i4oI=)
                          32: 3230332e3136312e32302e302f32342d3234203d3e20313333383430.roa (hash: YZ9gLc+KaWEgvMxRekGnlvZET/50LrXbNrDTpZYZ2Lc=)
                          33: 3130332e32302e3139312e302f32342d3234203d3e203535363835.roa (hash: oRAbrcr+/kuVQudloHVXhRXPkaF86LJCugKnZle6XyQ=)
                          34: 3230332e3136312e32322e302f32342d3234203d3e20313431363330.roa (hash: wxner6wl3sOvYJh0mDythJMlkNJcZGPgDz2HQg7kmDY=)
                          35: 3230322e3134352e382e302f32312d3234203d3e203535363835.roa (hash: rvd1VzcQSj/JsAOrW50iGkXhzOAfs7R8SowdxdwmDi8=)
                          36: 323430343a653130303a3a2f34372d3438203d3e203535363835.roa (hash: XPqwG5uNlGq8HabTQDxKUO4ieFteUl8/je1ShR27KLE=)
                          37: 3132342e3135382e3137362e302f32302d3234203d3e203535363835.roa (hash: rCX7dSAz0+qNZf+JX7cNepkLY8fLV6qo+N3cJ/3xyMU=)
                          38: 323430343a653130303a343030363a3a2f34382d3438203d3e20313333383430.roa (hash: N9uLhprhJ5wZr4o31KflWpO6N9TpuQoNZcpiZ8VwfNg=)
                          39: 3135302e3130372e3134302e302f32342d3234203d3e203535363835.roa (hash: iyyTicCYI3PReuzMhbLu1UKWtg/CJ9OarlydnyTRbJo=)
                          40: 323430343a653130303a393a3a2f34382d3438203d3e203535363835.roa (hash: eGRMhnLTnT3YYCWJW4I3KHNEEhYQTAAoRoCU9ewEbU0=)
                          41: 3130332e32302e3138382e302f32342d3234203d3e203535363835.roa (hash: AdX/SbpOmCfZ9QwC8oYtmYCJDAS+Phh41drpYlmN36s=)
                          42: 3230332e3136312e31362e302f32342d3234203d3e203535363835.roa (hash: C5oUI2h3brm87AxUbd6SUzdb5uGx5flTFnQn9c0Rsx8=)
                          43: 323430343a653130303a323030313a3a2f34382d3438203d3e203535363835.roa (hash: zzxXm+Scrt2TtHV+TAk4gRueWNwz1TnTiniujwfO9v8=)
                          44: 3135302e3130372e3134322e302f32342d3234203d3e203535363835.roa (hash: +QWtKNL1YBIIXGreXBd0hdZMntVTdOxbRl7+McB07cw=)
                          45: 3130332e32302e3139302e302f32342d3234203d3e203435373331.roa (hash: vh/OAKDmJtj9EbMMod6wkTOiMyrPRqy4DLk/7nwblHk=)
                          46: 3132342e3135382e3138342e302f32312d3234203d3e203535363835.roa (hash: F8OoTDhCJq9Bcdj1yKzjz6oWC9zK/hcpJVLKpPZ2JFE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl
                          rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Jun 2026 03:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:92:e5:5c:9f:1f:f4:8b:cb:d9:19:fa:4e:7b:33:00:45:f3:09:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408DEB7465856EE053B64340FA814B862FA5ED30
        Validity
            Not Before: Jun 15 02:39:45 2026 GMT
            Not After : Jun 16 04:15:45 2026 GMT
        Subject: CN=082A507FD99DBB425D07887354C6D974054BBCBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:86:78:84:f7:ea:30:3a:ac:84:74:76:89:de:
                    94:c5:50:dc:88:11:e1:62:75:14:0c:60:6e:74:3a:
                    c3:8e:2f:ad:c3:ec:48:07:69:f8:5d:f2:9b:95:51:
                    07:18:40:33:a5:8c:bb:74:2a:40:92:59:15:65:ab:
                    95:70:99:c2:3f:e4:d2:27:90:9d:ce:f9:3e:d7:d1:
                    19:91:be:91:86:a0:6b:53:4f:28:b2:7a:fd:8a:fe:
                    51:4e:00:65:d6:88:d2:92:ad:bf:e8:24:97:8a:6b:
                    df:4f:a0:a3:61:db:8f:78:7f:6c:52:80:66:5d:03:
                    56:67:13:c1:71:98:8c:88:e7:8d:0a:fd:0c:0b:59:
                    db:8a:8f:0a:03:d8:6f:ba:34:fb:b3:1e:8c:89:21:
                    3f:c8:1c:ce:d5:da:38:ae:14:d0:30:d5:90:0b:d9:
                    a4:28:d3:e9:af:40:0b:0a:9f:a2:ca:48:cc:c0:ef:
                    09:d4:d0:4b:0e:48:ce:c1:b6:b7:1f:db:11:1f:be:
                    72:da:7c:03:04:36:67:b8:6b:2f:3e:4c:c8:d2:fe:
                    93:b0:86:7d:d0:6f:d5:ca:eb:86:d5:e9:f6:19:02:
                    07:c3:cb:55:e9:a2:06:85:a3:8f:95:ad:7d:6f:f4:
                    90:9e:d5:09:e5:a8:69:32:a9:38:e8:bb:60:0f:02:
                    ec:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2A:50:7F:D9:9D:BB:42:5D:07:88:73:54:C6:D9:74:05:4B:BC:BE
            X509v3 Authority Key Identifier:
                keyid:40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c9:4d:ee:81:c3:cf:ab:db:88:a9:0e:e5:99:5b:7c:88:3b:
         03:1c:02:30:39:4b:07:95:aa:2f:02:98:56:cc:df:d0:a7:78:
         47:0d:0d:fc:0e:72:e0:74:83:7a:58:80:11:cc:72:b3:44:44:
         02:b5:1e:f6:3e:b3:c7:d7:d2:28:ba:eb:67:f6:af:6f:fe:d4:
         19:25:92:75:a2:18:58:92:ac:d9:9d:d7:24:bf:d5:72:e1:04:
         8b:51:aa:a0:94:88:07:08:42:43:7b:bf:5f:47:e0:b4:a6:7c:
         05:a6:14:6c:b4:61:02:0d:a5:21:53:73:6b:ec:3f:f6:9f:a9:
         e7:41:91:b0:58:ec:3d:7a:b0:73:dd:a5:ea:3a:34:42:fe:5d:
         da:47:4f:b4:27:bc:46:fb:2e:31:ca:da:d9:aa:8d:bb:04:c6:
         fd:16:99:ea:d2:57:5b:8b:a9:c6:ec:6c:5e:48:8a:57:d9:9b:
         1a:91:34:31:90:b3:a7:e7:8c:2e:3e:e2:da:c7:7d:e3:18:84:
         5d:6c:c4:5e:a7:8a:bd:cc:74:8c:eb:ea:9d:48:0a:86:ba:4a:
         2a:56:46:b2:12:1f:fb:6f:1a:5e:87:1b:7e:ae:d4:53:78:ce:
         96:bd:71:f0:26:51:c7:8e:43:24:ab:d8:21:bf:b9:4b:81:99:
         a8:7b:74:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 19:05:20 2026 by rpki-client