Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
File:                     906CD1832E095FD864326D9340C3360CE2E04D88.mft (raw, json)
Hash identifier:          hNgzuD5Dn1ttjC+4Vvy4YhW682mC5yT4OlzWeWQn5SI=
Subject key identifier:   FF:0F:ED:90:71:DA:B0:50:05:0C:B1:27:62:B0:BF:4D:F1:D5:58:36
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       326826B708FA1D0206C7575130D7855E447D53CA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 03:05:18 +0000
Manifest this update:     Mon 21 Sep 2026 03:00:18 +0000
Manifest next update:     Tue 22 Sep 2026 04:25:18 +0000
Files and hashes:         1: 3138322e34382e3138342e302f32342d3234203d3e203436303330.roa (hash: DZQzCrIgtUXS6Vb+eF76haovEcz46KiCQaKT5Azbp5Y=)
                          2: 3138322e34382e3136372e302f32342d3234203d3e203436303330.roa (hash: d6Y5uYZP91y+eB3UDXZIOMOBcAWU0tFndBdXQKLT93k=)
                          3: 3138322e34382e3137302e302f32342d3234203d3e203436303330.roa (hash: NjGWi/sX/azA4LSsxWgygXlT2qGazE96SDmeU5APEvg=)
                          4: 3138322e34382e3136392e302f32342d3234203d3e203436303330.roa (hash: 4YrgDfVD0BXsVITQ1qM6LdwihWuqC7JjlQdVH1myE2c=)
                          5: 3138322e34382e3138392e302f32342d3234203d3e203436303330.roa (hash: JelzHvBp0OxgIxm8Nd0pErRqQIE2QVfU6EWcp42vk6c=)
                          6: 3138322e34382e3136362e302f32342d3234203d3e203436303330.roa (hash: 2D0T0jFXIOTwpKsYTX89X6+Gi1/+sOAN5iJ3Wcaskhg=)
                          7: 3131362e3231322e37322e302f32342d3234203d3e203436303330.roa (hash: 1gQP1KipyggAd+ZWxNv0xkFTvLsvr+/k6WShmO+e4Iw=)
                          8: 3138322e34382e3137332e302f32342d3234203d3e203436303330.roa (hash: Ng7waYdDe1Dfj8ZChcOrErxA2un9U810Hwr4zNlkzaw=)
                          9: 3138322e34382e3137342e302f32342d3234203d3e203436303330.roa (hash: 9EIhETWWjW1dZSmzJuION9agY2xrl3P3+FsQS+Eeaz0=)
                          10: 3138322e34382e3136302e302f31392d3234203d3e203436303330.roa (hash: o9EKVmFR1SvOj9uTbB2OlxRWlCxTxBe1nFco2QLJ8gE=)
                          11: 3138322e34382e3137362e302f32342d3234203d3e203436303330.roa (hash: 4anjPKb7dXOuM/Ubgl9czTBsQlokGVQ9YcUxyhwp+mc=)
                          12: 906CD1832E095FD864326D9340C3360CE2E04D88.crl (hash: 46CqxtmSzp5JTBo93aq1Qn325AN5tkQ69kZN/xbm/2E=)
                          13: 3138322e34382e3138372e302f32342d3234203d3e203436303330.roa (hash: 2snhbL2/LyEOsVO40C/SJRnBQy8yVpoiYYd3VX7I0Dk=)
                          14: 3138322e34382e3137312e302f32342d3234203d3e203436303330.roa (hash: nIA/3S+EQWlw4ZuLmZhS5zgcudA5d4PuWSKtEk22u0A=)
                          15: 3138322e34382e3139302e302f32342d3234203d3e203436303330.roa (hash: wwLLX5QwOXj8WIt4dR7Y6UuHuuR7pT2z8l/3xL/x9i0=)
                          16: 3138322e34382e3137382e302f32342d3234203d3e203436303330.roa (hash: 18ON4ArCTP+lfrAOcIUbJ7NgSJlxjIjAeKAx8615vRA=)
                          17: 3138322e34382e3136342e302f32342d3234203d3e203436303330.roa (hash: ZoVbl1Ej5vOkXGYFcM3GgFWF5vBfmm2YepIHJBqDbQM=)
                          18: 3131362e3231322e37372e302f32342d3234203d3e203436303330.roa (hash: F6CH1xWOW04b9AWH9hOzpC9sPtP3FUKuSlUMhrOcMFU=)
                          19: 3138322e34382e3137372e302f32342d3234203d3e203436303330.roa (hash: AB/+vqxGjG+WUGNrWInFpg+QqvDIp89T4SFZCCScCf4=)
                          20: 3131362e3231322e37362e302f32342d3234203d3e203436303330.roa (hash: J+EGvFPD67LFXGQZEHfVWDkOrWmqXhH9UPZC8CcEyic=)
                          21: 3131362e3231322e37332e302f32342d3234203d3e203436303330.roa (hash: IJ1gl0sL1RWrdcu45xJfEOPZ3S24w9hNHw27+5W3EfU=)
                          22: 3138322e34382e3136382e302f32342d3234203d3e203436303330.roa (hash: zas81XYAzKm/epSWBwoKOUmYW9ltga5JFRl4SlgFNYQ=)
                          23: 3138322e34382e3138352e302f32342d3234203d3e203436303330.roa (hash: B/kblNkQ3ms1SzQMO/SpWc7KjkRSnbXvWp8KTyp1kwA=)
                          24: 3138322e34382e3137352e302f32342d3234203d3e203436303330.roa (hash: 5T8Tor9uEyt7xupZTf9YjNdQa3WiJhFlyyfkYzVReeM=)
                          25: 3131362e3231322e37322e302f32312d3234203d3e203436303330.roa (hash: 58v6IS1MSPKg2yYeVDyyuTvIzqpTnW0JbX79eRAkar4=)
                          26: 3138322e34382e3138322e302f32342d3234203d3e203436303330.roa (hash: /3/1RjKyrZlHVoTiW/tcRKdAaD1qr1a2KPJUdaqHdzc=)
                          27: 3138322e34382e3139312e302f32342d3234203d3e203436303330.roa (hash: PCggWZ4S0cmAIvlQ9OKIUJbBVOoSGkwzhD1/wRPVPCQ=)
                          28: 3138322e34382e3138362e302f32342d3234203d3e203436303330.roa (hash: 0jFA4bTcIReYiFePWq4UpaLmoZT+NXzEuKJPz4tjPhs=)
                          29: 3138322e34382e3137392e302f32342d3234203d3e203436303330.roa (hash: tPLdls9+EYZXd6ZrhIRMSY3IobhJMxdyCJJTVoTUXQ8=)
                          30: 3138322e34382e3138332e302f32342d3234203d3e203436303330.roa (hash: UGbDMfBesxO5/EEF+JrapKZzclHkwuQF79qZ/AxYM8I=)
                          31: 3138322e34382e3136332e302f32342d3234203d3e203436303330.roa (hash: ewmkkTzxhOGyo6MzFFyyoH5/Y+VapDFv9s96w13qA+g=)
                          32: 3131362e3231322e37382e302f32342d3234203d3e203436303330.roa (hash: df8xcJtq0OjCMROhoKXLPGgNOi+tmSvnEinNpF80Ac0=)
                          33: 3138322e34382e3136322e302f32342d3234203d3e203436303330.roa (hash: ZqAYiu/koAeNsoyjhjEI/IMs3ALOlSSQoYQ1BRd+P1g=)
                          34: 3138322e34382e3136302e302f32342d3234203d3e203436303330.roa (hash: hDks4xSZEu4ylfv9eeFQE9ITujGlv6mJTmcyl6KcPEA=)
                          35: 3138322e34382e3136312e302f32342d3234203d3e203436303330.roa (hash: aA2PRrfzpM7G6vMr09KAyWMRPmTA4TQcAHLLZIN3rO4=)
                          36: 3138322e34382e3138312e302f32342d3234203d3e203436303330.roa (hash: 2Ix9NBX4ryTwqueIaz6deDkrg5ibNpli+8/f+eL7h/o=)
                          37: 3138322e34382e3138302e302f32342d3234203d3e203436303330.roa (hash: hj8RfWuHMvR3IOUvRxyV2D2ELgKW3xEoS/ad7SVLqpU=)
                          38: 3138322e34382e3138382e302f32342d3234203d3e203436303330.roa (hash: CTAc5TKDYG8jWJrPFMAEsp+Pffmom314/f31IgCyWSY=)
                          39: 3138322e34382e3137322e302f32342d3234203d3e203436303330.roa (hash: Yai10k7mfc36oSbam/+tt3MhIgvsdyGdsbNufFy+++s=)
                          40: 3138322e34382e3136352e302f32342d3234203d3e203436303330.roa (hash: Ztfsn5PM55Asy7cf5oKAtrKPTWkPp+IkS2IEf6RTR1I=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 04:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:68:26:b7:08:fa:1d:02:06:c7:57:51:30:d7:85:5e:44:7d:53:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: Sep 21 03:00:18 2026 GMT
            Not After : Sep 22 04:25:18 2026 GMT
        Subject: CN=FF0FED9071DAB050050CB12762B0BF4DF1D55836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:55:55:00:b1:a4:4f:ff:eb:08:95:22:51:83:
                    c5:95:64:2a:3d:2c:92:e9:16:19:95:c4:1b:77:96:
                    6d:a8:bb:ff:7a:ba:78:41:89:ed:43:05:2b:5d:33:
                    a4:53:8e:b5:19:6e:d6:ab:da:13:f2:df:af:eb:38:
                    ea:5a:dd:9d:05:d1:56:15:7f:a1:06:17:4a:56:3b:
                    25:49:5a:3e:f1:9a:ae:95:ce:e5:1c:29:e1:60:e4:
                    c0:f3:d6:70:6b:a0:32:0d:9e:14:82:b1:f4:01:7b:
                    dc:20:19:78:2a:0b:3d:35:57:85:38:d2:fb:1b:b9:
                    db:72:fa:0d:37:70:87:51:12:f4:e6:ec:1b:9d:dc:
                    22:de:46:f6:6d:98:c0:c3:1c:a5:4e:ee:5a:d7:bd:
                    2c:f4:dc:cd:b9:9b:d8:f1:aa:5b:fc:06:ec:cf:32:
                    0e:56:cb:c6:cf:8b:a5:55:d8:ad:f5:a3:fb:2a:95:
                    59:8e:d6:53:e6:30:dd:90:20:56:eb:ba:47:2f:a5:
                    51:02:f7:62:66:32:7d:cb:67:64:9e:e9:f0:38:b4:
                    3f:d8:a7:02:14:5c:db:0b:50:51:fa:ae:c4:38:25:
                    6f:26:d1:dd:ba:f3:35:a9:07:08:35:78:0a:ab:7d:
                    bc:d4:b1:f4:b9:b7:c4:ae:eb:07:ab:51:e9:f9:4a:
                    ff:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0F:ED:90:71:DA:B0:50:05:0C:B1:27:62:B0:BF:4D:F1:D5:58:36
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:57:e1:78:cd:1e:ae:4d:3e:23:1b:45:cb:a3:8b:1f:58:dd:
         63:6b:54:8b:0e:51:7f:bf:73:5f:b2:1c:19:60:22:1e:f8:68:
         90:2b:1c:c9:70:45:8a:41:4c:88:2f:78:dd:2f:6a:65:c2:a9:
         f0:bd:11:83:60:ec:90:e3:22:51:62:2e:b8:eb:54:f8:a8:7a:
         78:67:dd:55:e6:cc:23:c6:24:72:63:ce:ee:69:d8:23:d4:06:
         b7:00:37:a7:ef:d2:cc:75:68:be:80:4d:ab:99:6c:4d:2a:af:
         cd:8e:22:93:a0:91:9d:22:b7:65:3a:48:7e:be:83:0f:49:32:
         b9:26:8c:2a:e9:36:15:9a:84:e5:e7:70:1b:82:75:4c:75:77:
         48:11:fa:b5:db:49:1c:db:e1:90:a7:ff:ee:83:90:84:6f:c8:
         ab:93:b8:fd:cd:f3:2e:b8:3f:38:40:36:fc:5e:45:33:20:35:
         20:e3:8a:df:dd:99:f6:39:1f:05:fc:79:53:6d:fe:35:00:80:
         16:f0:5d:2a:8c:d7:d3:0f:4f:38:43:f1:c6:84:33:ed:ad:76:
         03:f1:2c:82:10:29:36:f5:cf:2f:25:50:f8:36:3a:43:cb:51:
         3e:43:42:7c:78:87:69:19:88:f2:5b:27:6a:0b:25:5f:0b:1a:
         7e:57:57:48
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMmgmtwj6HQIGx1dRMNeFXkR9U8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA2Q0QxODMyRTA5NUZEODY0MzI2RDkzNDBDMzM2MENF
MkUwNEQ4ODAeFw0yNjA5MjEwMzAwMThaFw0yNjA5MjIwNDI1MThaMDMxMTAvBgNV
BAMTKEZGMEZFRDkwNzFEQUIwNTAwNTBDQjEyNzYyQjBCRjRERjFENTU4MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRVVUAsaRP/+sIlSJRg8WVZCo9
LJLpFhmVxBt3lm2ou/96unhBie1DBStdM6RTjrUZbtar2hPy36/rOOpa3Z0F0VYV
f6EGF0pWOyVJWj7xmq6VzuUcKeFg5MDz1nBroDINnhSCsfQBe9wgGXgqCz01V4U4
0vsbudty+g03cIdREvTm7Bud3CLeRvZtmMDDHKVO7lrXvSz03M25m9jxqlv8BuzP
Mg5Wy8bPi6VV2K31o/sqlVmO1lPmMN2QIFbrukcvpVEC92JmMn3LZ2Se6fA4tD/Y
pwIUXNsLUFH6rsQ4JW8m0d268zWpBwg1eAqrfbzUsfS5t8Su6werUen5Sv9XAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/w/tkHHasFAFDLEnYrC/TfHVWDYwHwYDVR0j
BBgwFoAUkGzRgy4JX9hkMm2TQMM2DOLgTYgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGQxZDU5NmMtMDllMy00NjIxLWE2M2ItMjBhNTEzY2Q0OGI5LzAvOTA2Q0QxODMy
RTA5NUZEODY0MzI2RDkzNDBDMzM2MENFMkUwNEQ4OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MDZDRDE4MzJFMDk1RkQ4NjQzMjZEOTM0MEMzMzYwQ0UyRTA0
RDg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQxZDU5NmMtMDllMy00NjIxLWE2
M2ItMjBhNTEzY2Q0OGI5LzAvOTA2Q0QxODMyRTA5NUZEODY0MzI2RDkzNDBDMzM2
MENFMkUwNEQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJBX4XjNHq5NPiMbRcujix9Y3WNrVIsOUX+/
c1+yHBlgIh74aJArHMlwRYpBTIgveN0vamXCqfC9EYNg7JDjIlFiLrjrVPioenhn
3VXmzCPGJHJjzu5p2CPUBrcAN6fv0sx1aL6ATauZbE0qr82OIpOgkZ0it2U6SH6+
gw9JMrkmjCrpNhWahOXncBuCdUx1d0gR+rXbSRzb4ZCn/+6DkIRvyKuTuP3N8y64
PzhANvxeRTMgNSDjit/dmfY5HwX8eVNt/jUAgBbwXSqM19MPTzhD8caEM+2tdgPx
LIIQKTb1zy8lUPg2OkPLUT5DQnx4h2kZiPJbJ2oLJV8LGn5XV0g=
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:59:11 2026 by rpki-client