Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
File:                     38A016716413D0128BA473D046A93A222EF258E1.mft (raw, json)
Hash identifier:          alSG2gNeuDw32bwS3S4AjD1KGdagFdf0d6zmKAl7VoM=
Subject key identifier:   05:23:63:6B:EA:08:4F:32:4C:C3:50:B1:93:7F:B0:B1:76:16:55:67
Authority key identifier: 38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
Certificate issuer:       /CN=38A016716413D0128BA473D046A93A222EF258E1
Certificate serial:       4F050E1C42355A3749E329C4B03B2F72BAFA3DAE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
Manifest number:          C0
Signing time:             Thu 24 Sep 2026 01:58:13 +0000
Manifest this update:     Thu 24 Sep 2026 01:53:13 +0000
Manifest next update:     Fri 25 Sep 2026 04:05:13 +0000
Files and hashes:         1: 38A016716413D0128BA473D046A93A222EF258E1.crl (hash: iLsbTY/c+NLc+I03t7Xw2dIXj2Bopks5bjAxh5RH0Is=)
                          2: 323430353a3130303a3a2f33322d3438203d3e2039393035.roa (hash: Kthx67gHVNGYI0fzwSZ0fi+hJEWpAyGO/ZNZDQ2LEig=)
                          3: 3230322e3133372e342e302f32322d3234203d3e2039393035.roa (hash: n/wLv+DrvS6hM2yX7W1+FhqdbDsoaxYa82u0zyTWRIg=)
                          4: 3230322e37372e3130342e302f32322d3234203d3e2039393035.roa (hash: gq8WgCP+l227lLiu3sQbxwyDdcnnRxrBsxiqFgd4NLE=)
                          5: 3230322e37372e3132302e302f32322d3234203d3e2039393035.roa (hash: dijnvbrxw14fcU7sTr4Hi9+AvVCISHBw/XOBUUSQn0M=)
                          6: 3130332e32312e3231362e302f32322d3234203d3e2039393035.roa (hash: 69DRa4aTIpAEdb51xzvQioJYr3teJfUAi2k8d2rlqC4=)
                          7: 3230322e37372e3131322e302f32322d3234203d3e2039393035.roa (hash: 5c33gF+5gjmmb741IUEGGHDDYpayMnh6r8j5Ow51OXo=)
                          8: 3230322e37372e3130382e302f32322d3234203d3e2039393035.roa (hash: hpgIbmaFVFbmnwLERjvmTE4R0RTrKMtLvdV36aAo84w=)
                          9: 3230322e37372e3131362e302f32322d3234203d3e2039393035.roa (hash: Vv/Gc1aZqIRGDihUWMWmB/KFIBvi6zpuuDKDQW27nxM=)
                          10: 3230322e3133372e382e302f32322d3234203d3e2039393035.roa (hash: 9boLwOGJqN+e9hHgChxBfpOSFK4xK+tkaOhwgxnywSg=)
                          11: 3230322e37372e3132342e302f32322d3234203d3e2039393035.roa (hash: hAYha3B7RJg5b0yJ9V9pM3cxMRjU9QmMJwDUZnJa1Qc=)
                          12: 3230322e3133372e31322e302f32322d3234203d3e2039393035.roa (hash: DsSxJ+60lvbsX4hG81MSfAY6DjOKwAPqkr7jR3rXmbA=)
                          13: 3230322e3133372e302e302f32322d3232203d3e2039393035.roa (hash: WaWYp+Csy1XmWlHWyydNjABqy7+/ynRv2N7rdeu9lvs=)
                          14: 3230322e37372e39362e302f32322d3234203d3e2039393035.roa (hash: 9UNjPzeTlgKKqUtFeYaNHw++yvRCKf3VTOaGIaohaGU=)
                          15: 3230322e3133372e302e302f32322d3234203d3e2039393035.roa (hash: sDTmD3GU6Ft8EEEqtjLcBYRRth1n9ZFmkA27qiDqHu0=)
                          16: 3230322e3133372e32302e302f32322d3234203d3e2039393035.roa (hash: j3p3wEKo5eKcusMRNWAz6h27m/X8ftQFUkaePF+oebQ=)
                          17: 3230322e3133372e31362e302f32322d3234203d3e2039393035.roa (hash: dSBZailoQQTSiyKxA2l6AI3PspujPG35rpgdMX5KHK0=)
                          18: 3230322e37372e3130302e302f32322d3234203d3e2039393035.roa (hash: 4zcs3dsKUpw1QSrJt91B69SmnZX4YnkFdN0jKF+1k7E=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
                          rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 04:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:05:0e:1c:42:35:5a:37:49:e3:29:c4:b0:3b:2f:72:ba:fa:3d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A016716413D0128BA473D046A93A222EF258E1
        Validity
            Not Before: Sep 24 01:53:13 2026 GMT
            Not After : Sep 25 04:05:13 2026 GMT
        Subject: CN=0523636BEA084F324CC350B1937FB0B176165567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:04:83:22:ae:e0:d7:4d:bf:30:e8:27:89:9e:
                    dd:4e:d1:b2:c8:63:d2:7a:de:db:a6:09:12:ba:91:
                    52:57:43:73:35:39:fb:f3:d9:37:39:e9:86:ee:3f:
                    01:ef:ed:35:85:bf:e8:5b:0c:02:49:2f:9c:d2:18:
                    d2:ad:84:73:b3:34:c5:58:e5:09:f7:f8:48:17:22:
                    0e:59:57:26:6f:84:2a:0b:c4:a0:7e:2b:b1:59:f6:
                    4d:c1:36:61:98:d8:97:bc:fb:a9:6b:cc:01:e8:07:
                    89:12:e6:76:6a:b0:d2:7f:fd:e1:fe:b3:23:c0:a9:
                    c7:4f:16:6a:e2:0f:b1:de:47:73:79:cb:3c:4d:6c:
                    0f:d7:0c:b2:c3:94:15:73:a6:6b:6e:71:e9:04:6f:
                    53:9e:e2:ff:4e:27:44:d5:ad:81:37:d1:51:4b:f1:
                    41:58:12:59:da:c7:e1:a8:95:b3:fe:7c:67:41:97:
                    66:8e:2e:c6:d3:ad:4e:1f:4e:5a:0e:89:70:ec:de:
                    75:da:ee:ab:e5:79:bd:f7:90:6a:80:d0:8e:3e:f5:
                    aa:c8:8f:6e:4e:91:8e:80:0a:c5:45:30:b6:64:cb:
                    26:5d:5d:d6:af:54:ff:1b:c7:c6:4a:99:31:86:6d:
                    8a:ec:fa:78:5e:ca:74:7d:75:45:57:c9:26:65:26:
                    64:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:23:63:6B:EA:08:4F:32:4C:C3:50:B1:93:7F:B0:B1:76:16:55:67
            X509v3 Authority Key Identifier:
                keyid:38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:14:44:e7:45:fe:fd:dc:f2:71:72:20:54:8f:9c:fa:3a:8b:
         8f:ff:db:46:dd:d3:c4:00:cf:af:f9:04:9c:49:08:d2:c2:61:
         88:6a:fb:79:5e:af:c4:6f:de:58:6e:ac:97:77:35:18:72:d0:
         aa:01:2f:a6:47:8e:c1:26:dd:dd:a5:10:8d:e7:3d:84:24:19:
         25:af:ac:a7:33:ba:3a:50:e4:61:dd:b6:7d:d0:99:5f:8a:44:
         2b:2a:c0:94:d3:e5:96:65:8c:eb:80:25:91:8d:e4:4a:13:e4:
         ac:bd:4d:ed:6c:df:53:7a:8e:75:b5:65:b5:12:9d:c3:cf:fd:
         b8:fe:53:2b:23:0f:12:de:ec:63:7b:a7:5a:47:09:43:6b:1c:
         2f:19:94:10:0b:6e:e4:91:ce:98:f7:14:cf:40:81:c2:37:f7:
         b9:a0:f2:0f:fb:ed:28:f0:b3:a9:c8:7c:37:80:b8:a8:9f:25:
         4c:95:a4:9e:65:f1:79:ba:4d:db:01:08:19:28:b4:47:1b:1b:
         62:fe:b2:ae:52:1b:17:97:d3:83:52:68:78:cf:6e:67:d7:bc:
         02:2a:65:99:ad:ef:f1:8f:ec:50:ca:74:ab:3a:23:33:2a:3b:
         bc:9c:3f:e6:f3:11:ef:35:2d:22:a0:f5:26:d0:c4:67:45:67:
         cc:f0:3b:19
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTwUOHEI1WjdJ4ynEsDsvcrr6Pa4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhBMDE2NzE2NDEzRDAxMjhCQTQ3M0QwNDZBOTNBMjIy
RUYyNThFMTAeFw0yNjA5MjQwMTUzMTNaFw0yNjA5MjUwNDA1MTNaMDMxMTAvBgNV
BAMTKDA1MjM2MzZCRUEwODRGMzI0Q0MzNTBCMTkzN0ZCMEIxNzYxNjU1NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmBIMiruDXTb8w6CeJnt1O0bLI
Y9J63tumCRK6kVJXQ3M1Ofvz2Tc56YbuPwHv7TWFv+hbDAJJL5zSGNKthHOzNMVY
5Qn3+EgXIg5ZVyZvhCoLxKB+K7FZ9k3BNmGY2Je8+6lrzAHoB4kS5nZqsNJ//eH+
syPAqcdPFmriD7HeR3N5yzxNbA/XDLLDlBVzpmtucekEb1Oe4v9OJ0TVrYE30VFL
8UFYElnax+GolbP+fGdBl2aOLsbTrU4fTloOiXDs3nXa7qvleb33kGqA0I4+9arI
j25OkY6ACsVFMLZkyyZdXdavVP8bx8ZKmTGGbYrs+nheynR9dUVXySZlJmRRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBSNja+oITzJMw1Cxk3+wsXYWVWcwHwYDVR0j
BBgwFoAUOKAWcWQT0BKLpHPQRqk6Ii7yWOEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzljMDVlZTMtN2ZjOC00NDA3LWIyYzAtY2I0MGJmY2ZiODY2LzAvMzhBMDE2NzE2
NDEzRDAxMjhCQTQ3M0QwNDZBOTNBMjIyRUYyNThFMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zOEEwMTY3MTY0MTNEMDEyOEJBNDczRDA0NkE5M0EyMjJFRjI1
OEUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzljMDVlZTMtN2ZjOC00NDA3LWIy
YzAtY2I0MGJmY2ZiODY2LzAvMzhBMDE2NzE2NDEzRDAxMjhCQTQ3M0QwNDZBOTNB
MjIyRUYyNThFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHAUROdF/v3c8nFyIFSPnPo6i4//20bd08QA
z6/5BJxJCNLCYYhq+3ler8Rv3lhurJd3NRhy0KoBL6ZHjsEm3d2lEI3nPYQkGSWv
rKczujpQ5GHdtn3QmV+KRCsqwJTT5ZZljOuAJZGN5EoT5Ky9Te1s31N6jnW1ZbUS
ncPP/bj+UysjDxLe7GN7p1pHCUNrHC8ZlBALbuSRzpj3FM9AgcI397mg8g/77Sjw
s6nIfDeAuKifJUyVpJ5l8Xm6TdsBCBkotEcbG2L+sq5SGxeX04NSaHjPbmfXvAIq
ZZmt7/GP7FDKdKs6IzMqO7ycP+bzEe81LSKg9SbQxGdFZ8zwOxk=
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:12:08 2026 by rpki-client