Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
File:                     43E1CC61CDE59968FE0810D4937130A67D6541DC.mft (raw, json)
Hash identifier:          U7UoZXjlUmO50FgTNGaJD4hLsCJYkdGUF60LXtdAPoY=
Subject key identifier:   0A:79:64:40:05:DF:F3:65:F8:CD:48:BD:CF:73:F8:4E:AC:95:29:A4
Authority key identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC
Certificate issuer:       /CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
Certificate serial:       3FBF5B4352088090104DD47FEADF8F3E9FBDC934
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 04:43:33 +0000
Manifest this update:     Wed 17 Jun 2026 04:38:33 +0000
Manifest next update:     Thu 18 Jun 2026 06:34:33 +0000
Files and hashes:         1: 323430353a613534303a313030613a3a2f34382d3438203d3e203338313536.roa (hash: jHrKWWZukLMZ3J2401GmiEuzkAvQx3pBL2xKoO7CBis=)
                          2: 323430353a613534303a313030663a3a2f34382d3438203d3e203338313536.roa (hash: zPNtfgZ0xuIJb6mJb8ImM+3c3T3QiTY+1lYZMk1v2MU=)
                          3: 323430353a613534303a313030643a3a2f34382d3438203d3e203338313536.roa (hash: cpyNUFqnnPw0hoOUNBzdPXv7w/EpVs/cMCjjRluZNLo=)
                          4: 323430353a613534303a3a2f33322d3332203d3e203338313536.roa (hash: mYAvetqJOaK+g42xXQIVuzKQ0V+8EMMx37honK4xGaY=)
                          5: 3230332e3139302e3131342e302f32342d3234203d3e203338313536.roa (hash: 1zxciFrgfrpypZ13HHtfhkMtV3yJILY8QtbERuPSSxQ=)
                          6: 3230332e3139302e3131372e302f32342d3234203d3e203338313536.roa (hash: Yg8Yec064Brwf9x/NAfoSbhCfddxi4fn/8a7jii/RNk=)
                          7: 323430353a613534303a313030623a3a2f34382d3438203d3e203338313536.roa (hash: ArldJV59T/AN0DLLjKdryy3dXOdpQHjw8YFmTH59OUg=)
                          8: 43E1CC61CDE59968FE0810D4937130A67D6541DC.crl (hash: lQhfPPYOkyO12DzFkIBu88cqTq+RDAe4rxzDKJIwOjE=)
                          9: 323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa (hash: DmCqSyLAbR1GcGB2b6c28zFVw4CNHOLr1uOyNF7nwjc=)
                          10: 323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa (hash: LWtx3txnmj9FjoJjDB/lmvmHZmgHx1jmLc6PPib5at8=)
                          11: 323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa (hash: SUQFDo/3me7K6mK7WbxUn/2b9SHI+OuxemQ1myZfogM=)
                          12: 3230332e3139302e3131352e302f32342d3234203d3e203338313536.roa (hash: 1wbNP75Z/wA6pW2UhWTpcnJU8wNdOjHZn2vOKC8mX5U=)
                          13: 323430353a613534303a313030633a3a2f34382d3438203d3e203338313536.roa (hash: q/tSBWv/7VM0Xu29FwAxjeFSDX/WD3INyENxffhPO4Q=)
                          14: 323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa (hash: G3L597uJ/MtChNRFU4TPZTfQd8hCBfeft5oOi8ZO5Xk=)
                          15: 3230332e3139302e3131332e302f32342d3234203d3e203338313536.roa (hash: df96YWKu427U+HPJiLnno+3fbVy36Hxa342nQy+ZfoU=)
                          16: 3230332e3139302e3131322e302f32312d3231203d3e203338313536.roa (hash: FE7yZMTislKGWcbY4qG0beL79uHJRAECT1HhYr/vMVw=)
                          17: 3230332e3139302e3131392e302f32342d3234203d3e203338313536.roa (hash: e7mQPN3Z6KC/Ik9Qm59+I1SvLwjeilQ2SD4cxlIQDBE=)
                          18: 323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa (hash: FymgtPH5XRJeo2g24rTB6Zt9DBTm0EmGQZ0QaJOmZSE=)
                          19: 323430353a613534303a313031313a3a2f34382d3438203d3e203338313536.roa (hash: /s6NqXf3Az+33qCBWrV7/rHS8XMqrqM1zxdpU1dDV14=)
                          20: 3230332e3139302e3131362e302f32342d3234203d3e203338313536.roa (hash: /GkPi/+AOEhPufjKPy1+oO0pijIgfjVervEREyDjquk=)
                          21: 3230332e3139302e3131382e302f32342d3234203d3e203338313536.roa (hash: GpjHek9a827cy//pNFDcORXn2t6JzxU+p9J93Ct0LZo=)
                          22: 323430353a613534303a313030383a3a2f34382d3438203d3e203338313536.roa (hash: jdESrjmJQhjG8kc6FD8N6X6iVxeMA55PP67c1tPELGM=)
                          23: 323430353a613534303a313031303a3a2f34382d3438203d3e203338313536.roa (hash: WgZKLMLpwFRH8Rc+mjcsJQGYvAiCBksSGlUySVC2KTU=)
                          24: 323430353a613534303a313030333a3a2f34382d3438203d3e203338313536.roa (hash: Cigucd/NI7znq4aJY8FxoWkyWnlcJwSTYzMKj0Cfavc=)
                          25: 323430353a613534303a313030653a3a2f34382d3438203d3e203338313536.roa (hash: JOAtBF5+cfAqGhS9/3m1ZllG3nhy/U+cT4H4mHFtRKs=)
                          26: 323430353a613534303a313030343a3a2f34382d3438203d3e203338313536.roa (hash: SMs3l2LaIu15xotNctGRKXxr41nAKmtqdH/wDotPjcE=)
                          27: 323430353a613534303a313030313a3a2f34382d3438203d3e203338313536.roa (hash: ghjk9WxpBpcObQwhuyRJKOhe294PLPBofYqlraUkN+g=)
                          28: 3230332e3139302e3131322e302f32342d3234203d3e203338313536.roa (hash: akD2QIfBzuzka9CzlNwOGyLhb8S59sJqB1gcfu/lphg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl
                          rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bf:5b:43:52:08:80:90:10:4d:d4:7f:ea:df:8f:3e:9f:bd:c9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
        Validity
            Not Before: Jun 17 04:38:33 2026 GMT
            Not After : Jun 18 06:34:33 2026 GMT
        Subject: CN=0A79644005DFF365F8CD48BDCF73F84EAC9529A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:10:e2:56:50:fc:00:e4:8a:a0:98:cb:63:44:
                    7b:ff:b3:c3:fa:d2:32:db:e8:5c:a5:05:eb:9b:6c:
                    6c:d8:45:57:54:20:a6:be:79:24:3d:48:07:5d:f8:
                    5b:85:8b:7e:d8:c7:2b:3b:b3:3e:9c:83:e0:68:2f:
                    86:50:12:84:fd:aa:56:8f:8c:19:d9:a6:4f:b6:37:
                    fd:b8:11:01:13:bb:72:21:57:17:eb:30:29:74:2d:
                    38:b0:6b:3c:8f:7e:64:a9:ea:37:74:e4:6f:46:a4:
                    09:c8:a0:ae:59:2c:98:80:ac:ca:9d:8f:88:17:31:
                    5a:ea:9a:04:69:45:b0:7b:89:e1:ca:ac:66:4c:32:
                    53:6f:24:54:19:01:81:9b:ab:a2:03:82:23:7c:ae:
                    b1:53:20:4f:bb:5b:da:3b:5c:ff:3b:ab:9f:0d:58:
                    9c:57:dc:46:88:c0:01:14:76:75:a0:12:14:64:1b:
                    2d:62:91:35:d1:31:cf:ff:51:4b:e4:49:60:65:fd:
                    c2:41:75:d7:88:2f:7d:bb:15:89:05:b4:f9:ce:5e:
                    f4:92:b3:a0:88:11:7b:e4:65:37:7a:4e:b3:1d:18:
                    f7:c2:7c:a7:07:b9:eb:1b:0a:9e:b5:32:b2:94:c1:
                    2a:73:ae:49:83:2c:23:e4:f5:c7:c5:98:8a:db:75:
                    c0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:79:64:40:05:DF:F3:65:F8:CD:48:BD:CF:73:F8:4E:AC:95:29:A4
            X509v3 Authority Key Identifier:
                keyid:43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:1f:69:a7:48:e3:81:0c:8e:12:70:db:97:77:68:a2:41:56:
         6a:56:58:35:2d:ba:b0:01:5b:92:38:cd:6c:fa:32:02:37:90:
         83:09:dc:26:bd:5f:1d:b0:64:dc:90:59:0d:6a:41:65:90:92:
         6e:e4:b9:9a:4b:ce:96:ab:d3:16:03:7c:c0:9c:79:14:c4:c9:
         06:78:58:f0:35:09:1b:f3:54:3b:55:69:2e:37:90:14:75:3c:
         92:0f:47:dd:80:20:00:14:af:93:b0:a7:04:8c:9b:32:ee:6e:
         33:07:0a:3f:5f:cd:03:c1:22:9b:4d:bd:a7:8e:a1:9e:0e:6e:
         a1:22:d0:4e:57:df:90:f1:b2:80:da:05:d6:17:99:c7:57:ef:
         9b:28:b5:a9:e6:12:c0:ac:73:87:4d:d7:f2:4b:c7:5c:1c:e7:
         e3:e5:86:5d:4e:83:38:e3:10:d7:76:4c:26:67:df:73:f8:f1:
         67:b0:91:d3:49:2d:7b:cc:fe:9d:06:0c:fb:1e:02:00:c9:a3:
         fb:83:a2:1f:85:58:b3:a7:03:bc:7d:91:eb:a8:64:64:69:c3:
         c1:21:28:73:5c:d1:1d:5b:51:76:8a:97:ad:60:e7:77:e7:89:
         29:a9:c7:4b:d8:f2:7f:68:5f:06:f1:91:45:06:03:5b:a4:91:
         07:35:55:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:31:55 2026 by rpki-client