Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
File:                     43E1CC61CDE59968FE0810D4937130A67D6541DC.mft (raw, json)
Hash identifier:          AboahFc7xptJ4/X+t5jBk3v78t+O66sv8i6Mzt1z0rs=
Subject key identifier:   63:B4:4F:53:E8:95:43:FC:F2:B8:0C:15:29:A3:A1:E5:C9:84:71:84
Authority key identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC
Certificate issuer:       /CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
Certificate serial:       17A69BD15C5D6E9BE67BE3BA634A98A2284DE6BB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 06:32:26 +0000
Manifest this update:     Tue 12 May 2026 06:27:26 +0000
Manifest next update:     Wed 13 May 2026 10:03:26 +0000
Files and hashes:         1: 323430353a613534303a3a2f33322d3332203d3e203338313536.roa (hash: mYAvetqJOaK+g42xXQIVuzKQ0V+8EMMx37honK4xGaY=)
                          2: 323430353a613534303a313030313a3a2f34382d3438203d3e203338313536.roa (hash: ghjk9WxpBpcObQwhuyRJKOhe294PLPBofYqlraUkN+g=)
                          3: 323430353a613534303a313030623a3a2f34382d3438203d3e203338313536.roa (hash: ArldJV59T/AN0DLLjKdryy3dXOdpQHjw8YFmTH59OUg=)
                          4: 323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa (hash: FymgtPH5XRJeo2g24rTB6Zt9DBTm0EmGQZ0QaJOmZSE=)
                          5: 323430353a613534303a313031313a3a2f34382d3438203d3e203338313536.roa (hash: /s6NqXf3Az+33qCBWrV7/rHS8XMqrqM1zxdpU1dDV14=)
                          6: 323430353a613534303a313030653a3a2f34382d3438203d3e203338313536.roa (hash: JOAtBF5+cfAqGhS9/3m1ZllG3nhy/U+cT4H4mHFtRKs=)
                          7: 323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa (hash: DmCqSyLAbR1GcGB2b6c28zFVw4CNHOLr1uOyNF7nwjc=)
                          8: 323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa (hash: LWtx3txnmj9FjoJjDB/lmvmHZmgHx1jmLc6PPib5at8=)
                          9: 3230332e3139302e3131392e302f32342d3234203d3e203338313536.roa (hash: e7mQPN3Z6KC/Ik9Qm59+I1SvLwjeilQ2SD4cxlIQDBE=)
                          10: 3230332e3139302e3131322e302f32312d3231203d3e203338313536.roa (hash: FE7yZMTislKGWcbY4qG0beL79uHJRAECT1HhYr/vMVw=)
                          11: 323430353a613534303a313030613a3a2f34382d3438203d3e203338313536.roa (hash: jHrKWWZukLMZ3J2401GmiEuzkAvQx3pBL2xKoO7CBis=)
                          12: 3230332e3139302e3131342e302f32342d3234203d3e203338313536.roa (hash: 1zxciFrgfrpypZ13HHtfhkMtV3yJILY8QtbERuPSSxQ=)
                          13: 3230332e3139302e3131382e302f32342d3234203d3e203338313536.roa (hash: GpjHek9a827cy//pNFDcORXn2t6JzxU+p9J93Ct0LZo=)
                          14: 3230332e3139302e3131322e302f32342d3234203d3e203338313536.roa (hash: akD2QIfBzuzka9CzlNwOGyLhb8S59sJqB1gcfu/lphg=)
                          15: 323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa (hash: G3L597uJ/MtChNRFU4TPZTfQd8hCBfeft5oOi8ZO5Xk=)
                          16: 3230332e3139302e3131332e302f32342d3234203d3e203338313536.roa (hash: df96YWKu427U+HPJiLnno+3fbVy36Hxa342nQy+ZfoU=)
                          17: 323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa (hash: SUQFDo/3me7K6mK7WbxUn/2b9SHI+OuxemQ1myZfogM=)
                          18: 323430353a613534303a313030643a3a2f34382d3438203d3e203338313536.roa (hash: cpyNUFqnnPw0hoOUNBzdPXv7w/EpVs/cMCjjRluZNLo=)
                          19: 323430353a613534303a313030333a3a2f34382d3438203d3e203338313536.roa (hash: Cigucd/NI7znq4aJY8FxoWkyWnlcJwSTYzMKj0Cfavc=)
                          20: 323430353a613534303a313030383a3a2f34382d3438203d3e203338313536.roa (hash: jdESrjmJQhjG8kc6FD8N6X6iVxeMA55PP67c1tPELGM=)
                          21: 3230332e3139302e3131372e302f32342d3234203d3e203338313536.roa (hash: Yg8Yec064Brwf9x/NAfoSbhCfddxi4fn/8a7jii/RNk=)
                          22: 323430353a613534303a313030343a3a2f34382d3438203d3e203338313536.roa (hash: SMs3l2LaIu15xotNctGRKXxr41nAKmtqdH/wDotPjcE=)
                          23: 323430353a613534303a313031303a3a2f34382d3438203d3e203338313536.roa (hash: WgZKLMLpwFRH8Rc+mjcsJQGYvAiCBksSGlUySVC2KTU=)
                          24: 3230332e3139302e3131362e302f32342d3234203d3e203338313536.roa (hash: /GkPi/+AOEhPufjKPy1+oO0pijIgfjVervEREyDjquk=)
                          25: 3230332e3139302e3131352e302f32342d3234203d3e203338313536.roa (hash: 1wbNP75Z/wA6pW2UhWTpcnJU8wNdOjHZn2vOKC8mX5U=)
                          26: 323430353a613534303a313030663a3a2f34382d3438203d3e203338313536.roa (hash: zPNtfgZ0xuIJb6mJb8ImM+3c3T3QiTY+1lYZMk1v2MU=)
                          27: 323430353a613534303a313030633a3a2f34382d3438203d3e203338313536.roa (hash: q/tSBWv/7VM0Xu29FwAxjeFSDX/WD3INyENxffhPO4Q=)
                          28: 43E1CC61CDE59968FE0810D4937130A67D6541DC.crl (hash: ss1BM1pKNiO/LUQ0za456DkDhdF1B7kDoM0x/gC5EYI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl
                          rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a6:9b:d1:5c:5d:6e:9b:e6:7b:e3:ba:63:4a:98:a2:28:4d:e6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
        Validity
            Not Before: May 12 06:27:26 2026 GMT
            Not After : May 13 10:03:26 2026 GMT
        Subject: CN=63B44F53E89543FCF2B80C1529A3A1E5C9847184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cc:b8:9a:6a:2a:e2:3e:34:f8:e7:aa:71:e9:
                    30:41:12:50:82:dc:2e:ae:ea:3e:5c:a3:1f:44:f0:
                    e6:f4:3e:7d:41:d1:60:e3:a5:1d:78:ca:b5:20:00:
                    59:78:91:f9:fe:c9:ae:5e:14:87:48:cd:80:21:52:
                    ff:1b:88:6f:71:f7:7c:d6:4f:2f:ed:54:57:0e:12:
                    43:e2:d6:dc:d5:fd:14:8e:16:e0:54:4f:52:43:a4:
                    f7:67:3d:a1:ba:4a:33:96:93:0a:57:84:72:92:37:
                    95:02:92:79:5a:25:ca:6d:c6:df:7c:57:e3:a7:7b:
                    f0:93:8c:c7:0b:31:74:10:33:72:cd:3e:e3:1f:da:
                    d7:95:e7:6d:86:83:ba:2a:bd:fe:1e:a0:6f:0c:9d:
                    40:4e:31:f1:a2:4e:fe:dc:d9:3b:42:56:24:be:75:
                    58:7f:27:87:97:8e:57:bb:82:53:47:66:e2:26:16:
                    06:54:5f:5b:60:94:fd:b2:75:9f:45:e1:d4:e5:ab:
                    9f:15:7d:8f:ca:d1:2c:40:25:93:0d:77:6f:57:ea:
                    57:5b:4e:47:f4:3a:97:7b:7c:6b:87:f0:d6:8a:7b:
                    79:12:c6:69:6f:a0:a0:dd:d8:d8:49:05:98:ee:ba:
                    d8:ff:03:40:7a:ca:23:af:97:8c:e6:b9:18:9b:46:
                    4d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B4:4F:53:E8:95:43:FC:F2:B8:0C:15:29:A3:A1:E5:C9:84:71:84
            X509v3 Authority Key Identifier:
                keyid:43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:0f:6c:91:d8:80:a4:7c:7c:14:7a:82:37:ab:57:b1:52:b6:
         f2:c4:fc:c0:c7:ff:2e:21:11:55:eb:49:18:27:a6:d0:5f:6a:
         f6:5d:5d:25:1a:68:71:e9:0c:6f:8b:6c:77:08:3b:6b:dd:d3:
         88:8b:92:ce:da:0f:d3:6f:31:f6:96:17:be:ea:55:d6:a7:64:
         72:96:3e:b8:ab:a1:02:27:24:60:2f:4d:a5:b1:9f:34:67:85:
         86:49:3e:ea:bb:1c:3a:1f:96:26:11:ba:40:2b:ff:b1:6c:50:
         48:30:fa:f7:41:85:4b:85:3d:63:e2:29:69:81:cf:d1:17:40:
         25:ea:3d:74:0d:d5:d8:58:52:6d:a0:44:81:c9:09:35:38:8d:
         b2:a5:82:b3:5c:68:94:0c:02:4e:e5:1c:e4:66:7e:4b:57:41:
         33:67:25:89:2c:74:63:c2:47:76:3e:79:10:23:d1:6e:8b:0e:
         34:57:c0:7b:5a:e9:2a:f6:14:a0:4f:c4:2e:3b:78:21:80:c9:
         62:46:d4:16:36:cb:c0:c4:81:8e:e2:d1:b7:cf:61:99:e4:3f:
         26:69:0a:29:c6:c5:65:41:a7:81:03:50:13:93:dd:db:35:6c:
         95:96:ed:62:b8:30:96:0c:0b:5a:d4:ae:11:fa:f0:16:a0:35:
         fc:05:4a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:14 2026 by rpki-client