Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft
File:                     3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft (raw, json)
Hash identifier:          zlVzttkRp3l7Og1fylyXnTYNov0ggpgO7wl6k8uZFLU=
Subject key identifier:   6F:3C:6B:31:10:35:90:EC:8F:F9:60:BD:55:7C:EB:C5:2C:ED:AE:09
Authority key identifier: 3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B
Certificate issuer:       /CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B
Certificate serial:       27D927AB0BA4F61A5736E41AC4F369A4ED239476
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft
Manifest number:          BE
Signing time:             Sun 20 Sep 2026 20:27:13 +0000
Manifest this update:     Sun 20 Sep 2026 20:22:13 +0000
Manifest next update:     Mon 21 Sep 2026 23:58:13 +0000
Files and hashes:         1: 323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa (hash: CVM/cm+yAs6+jKMZ4MDt+luLWNfS5mv/4e/CjfklE7M=)
                          2: 3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa (hash: 0MhXXslaEXPjPEoKctkP/woYNX7tt+w1I2c/UK/MryM=)
                          3: 3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (hash: 52eRJUyMS1D/Y10YGDL++7a6ITlSLlhK23TWGAji77M=)
                          4: 323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa (hash: uPYSHt9IvmbbJXRTSxGX775ZI1E4R11s2tal61YWhUA=)
                          5: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (hash: 0DaR6EQXz9qNKopRfjWSu/bXijoSdhpj5fJcKyJycxw=)
                          6: 323430343a356434303a3a2f34382d3438203d3e20313338353938.roa (hash: o69GAoupi19SYQFx9GbnxeXAPra1yIHc+y9tXTKqEaE=)
                          7: 323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa (hash: SG6oycmDQaFj2X36BO+BneGvBQJbufv06OPHQVVxHX8=)
                          8: 323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa (hash: pqOcy+Dvk6BhoIQ43O+Qcsi/T4kyh+JKJwaWCHlsOWU=)
                          9: 323430343a356434303a323a3a2f34382d3438203d3e20313338353938.roa (hash: 1BvT4+B6DoXD7bSTfJFF0kIFzIyR+ygmXkzol5Y0Vog=)
                          10: 323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa (hash: G3Odq6+liao9rSrnW9IxF+85mnGUPLT2G3zXCo+assU=)
                          11: 3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl (hash: o1k56iD+xB622cAZM9y/ETXmjAA8/TC1r9alMIYaKRo=)
                          12: 323430343a356434303a333a3a2f34382d3438203d3e20313338353938.roa (hash: D8aPDTHmr90xwp8tUHm7tBo97fD9LXY+RgJPgopJ/xY=)
                          13: 3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa (hash: SXi0Pi35nmPr0lYSvyAAC2Fa3aJUqN8WDDIdiAg171E=)
                          14: 323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa (hash: v19HYsz9f+5DNC0VpCdeprRmAwKbW3lgoiMiceEJJ/0=)
                          15: 323430343a356434303a363a3a2f34382d3438203d3e20313338353938.roa (hash: 0w5VxrrMxUpj7nlb1kifAvbDqcvyahk3VtyIEEVnjds=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl
                          rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 23:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d9:27:ab:0b:a4:f6:1a:57:36:e4:1a:c4:f3:69:a4:ed:23:94:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B
        Validity
            Not Before: Sep 20 20:22:13 2026 GMT
            Not After : Sep 21 23:58:13 2026 GMT
        Subject: CN=6F3C6B31103590EC8FF960BD557CEBC52CEDAE09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fa:c0:c6:0b:b6:99:af:ef:f0:25:7e:e1:09:
                    a1:9b:c7:56:10:5d:37:be:28:b5:e2:c3:17:d3:b4:
                    e3:05:2b:04:1c:13:7c:c3:be:93:d7:6d:09:3d:7b:
                    39:dd:9f:39:c3:83:57:c6:37:ad:c8:9b:55:be:26:
                    3c:f8:fc:07:85:ab:da:b5:dc:7e:16:bd:97:bf:97:
                    e4:b6:03:1c:b8:1c:53:39:69:ce:a9:29:f7:fa:7f:
                    6b:4e:15:c2:3b:91:be:86:a1:17:6b:d7:77:bf:55:
                    f1:86:65:11:44:7b:73:ea:77:42:08:fe:bc:1d:a5:
                    3d:3e:4c:cb:9a:29:85:8d:18:22:7f:41:be:ea:5d:
                    3b:8c:e8:57:1c:8d:d4:07:ab:95:04:b7:64:8a:ee:
                    81:ae:33:c0:e1:e3:19:bc:52:25:24:c7:ba:ca:36:
                    51:eb:a8:5f:74:44:d7:19:40:fa:5a:b2:c3:bb:e0:
                    0b:43:d3:3b:1a:d7:81:10:e1:e4:34:90:0d:77:d4:
                    d9:42:c6:b9:d7:ff:29:2d:ae:d3:5d:7e:aa:74:f5:
                    cd:2d:d3:6e:82:64:ec:26:ac:82:cb:4f:98:bc:11:
                    b7:db:b3:c1:96:d2:35:97:c0:a4:c0:fb:28:98:ed:
                    a0:88:fd:75:17:6b:68:b3:10:38:24:f4:41:cb:04:
                    a6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3C:6B:31:10:35:90:EC:8F:F9:60:BD:55:7C:EB:C5:2C:ED:AE:09
            X509v3 Authority Key Identifier:
                keyid:3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:71:a7:fb:64:4b:47:b7:db:45:c6:ee:6c:33:61:0f:01:5a:
         a0:03:55:36:9b:48:84:28:a4:38:3a:5f:f6:d9:e3:73:92:a7:
         d9:55:c0:97:21:cb:f1:75:2b:0a:4b:08:a9:14:37:49:2a:27:
         a5:23:a2:23:38:ae:b6:9e:44:78:0d:f2:c2:29:fc:78:9b:f8:
         24:17:fc:d3:00:2a:10:fe:54:2b:07:ab:63:da:18:70:fe:4c:
         7e:69:a2:10:ab:64:40:75:f0:f0:e6:d8:94:ec:46:c2:e4:c1:
         a0:43:ee:77:3e:f6:f3:5d:36:11:06:05:69:15:ec:f9:c9:f9:
         31:6b:6c:97:05:0f:f5:50:81:b9:bf:0d:41:b8:fc:6f:bb:b8:
         64:5a:b7:b7:b3:35:28:5d:4b:1b:b3:66:02:41:be:ee:bf:79:
         42:bc:6d:06:59:38:eb:9e:f0:64:81:cd:cd:6b:8f:02:63:99:
         b9:ca:77:37:22:d3:8f:23:5c:be:c6:98:c2:34:42:cc:a9:ba:
         d0:9a:18:8e:04:6b:3b:c5:ea:9a:a7:41:83:68:d2:82:6e:e1:
         0a:97:30:2a:61:9e:11:13:bb:81:01:2c:c7:5b:e0:8b:7d:39:
         07:d6:46:0d:72:65:cc:b8:bb:f9:ee:aa:85:76:63:1b:5b:6b:
         47:70:1d:00
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJ9knqwuk9hpXNuQaxPNppO0jlHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y2MjgxNDA0NEVERjhCNUU3N0QyQjgyMDk1QkY2NjI3
RTEzNkY0QjAeFw0yNjA5MjAyMDIyMTNaFw0yNjA5MjEyMzU4MTNaMDMxMTAvBgNV
BAMTKDZGM0M2QjMxMTAzNTkwRUM4RkY5NjBCRDU1N0NFQkM1MkNFREFFMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV+sDGC7aZr+/wJX7hCaGbx1YQ
XTe+KLXiwxfTtOMFKwQcE3zDvpPXbQk9ezndnznDg1fGN63Im1W+Jjz4/AeFq9q1
3H4WvZe/l+S2Axy4HFM5ac6pKff6f2tOFcI7kb6GoRdr13e/VfGGZRFEe3Pqd0II
/rwdpT0+TMuaKYWNGCJ/Qb7qXTuM6FccjdQHq5UEt2SK7oGuM8Dh4xm8UiUkx7rK
NlHrqF90RNcZQPpassO74AtD0zsa14EQ4eQ0kA131NlCxrnX/yktrtNdfqp09c0t
026CZOwmrILLT5i8Ebfbs8GW0jWXwKTA+yiY7aCI/XUXa2izEDgk9EHLBKZjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbzxrMRA1kOyP+WC9VXzrxSztrgkwHwYDVR0j
BBgwFoAUP2KBQETt+LXnfSuCCVv2Yn4Tb0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWM4NWM2YjktMzRmOS00YTg1LTljZWEtYzE2ZTk4YThiNWUwLzAvM0Y2MjgxNDA0
NEVERjhCNUU3N0QyQjgyMDk1QkY2NjI3RTEzNkY0Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zRjYyODE0MDQ0RURGOEI1RTc3RDJCODIwOTVCRjY2MjdFMTM2
RjRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWM4NWM2YjktMzRmOS00YTg1LTlj
ZWEtYzE2ZTk4YThiNWUwLzAvM0Y2MjgxNDA0NEVERjhCNUU3N0QyQjgyMDk1QkY2
NjI3RTEzNkY0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIVxp/tkS0e320XG7mwzYQ8BWqADVTabSIQo
pDg6X/bZ43OSp9lVwJchy/F1KwpLCKkUN0kqJ6UjoiM4rraeRHgN8sIp/Hib+CQX
/NMAKhD+VCsHq2PaGHD+TH5pohCrZEB18PDm2JTsRsLkwaBD7nc+9vNdNhEGBWkV
7PnJ+TFrbJcFD/VQgbm/DUG4/G+7uGRat7ezNShdSxuzZgJBvu6/eUK8bQZZOOue
8GSBzc1rjwJjmbnKdzci048jXL7GmMI0QsyputCaGI4EazvF6pqnQYNo0oJu4QqX
MCphnhETu4EBLMdb4It9OQfWRg1yZcy4u/nuqoV2Yxtba0dwHQA=
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:21:34 2026 by rpki-client