Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
File:                     108BD2ED0D3114613C2725256398C38B9DBAD520.mft (raw, json)
Hash identifier:          rit9u1MOSG9OGhRN+gNLHBSe0MUZHHv/UBeYwo3mVno=
Subject key identifier:   47:98:FD:0B:EA:10:83:D1:78:1F:6C:5B:6F:B3:90:39:0B:BE:C5:3A
Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20
Certificate issuer:       /CN=108BD2ED0D3114613C2725256398C38B9DBAD520
Certificate serial:       74417BAC163D1C950354B19AC8FA174E3D55DB75
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 20:23:52 +0000
Manifest this update:     Tue 16 Jun 2026 20:18:52 +0000
Manifest next update:     Wed 17 Jun 2026 20:32:52 +0000
Files and hashes:         1: 3131392e31302e3137362e302f32342d3234203d3e203234353330.roa (hash: jhVYi1rtAR5MxAuCXQ51AbZzQNRaKl8p9WMw+ffrY1g=)
                          2: 3131392e31302e3137382e302f32332d3233203d3e203234353330.roa (hash: PwM3oQKmuXyEeAOnaDonlOle/IcF5DW+Zh/RIO3hM04=)
                          3: 3131392e31302e3137362e302f32312d3231203d3e203234353330.roa (hash: M2e4yYR/RlmXdndzlSbI4SF0SK1f8bM5s0bETw7ewlU=)
                          4: 3131392e31302e3137372e302f32342d3234203d3e203234353330.roa (hash: HA8oysbBANlVY/UvbExuOyGu423Ies7m420JK3DCo1o=)
                          5: 323430313a643934303a3a2f33322d3332203d3e203234353330.roa (hash: GNdi5uU7mmpbww293clFlNy9lTQ5KrlF2tYcTj15jTw=)
                          6: 3131392e31302e3138332e302f32342d3234203d3e203234353330.roa (hash: DRkP4Rbo/CCQujXep36UcLsFucXNff21TtbLk7RG9SM=)
                          7: 3131392e31302e3137382e302f32342d3234203d3e203234353330.roa (hash: GxTOWueUzacQJLW8/Lw/u7dSqU8jy6t+nHDrIvlJlj4=)
                          8: 3131392e31302e3138322e302f32342d3234203d3e203234353330.roa (hash: QDeYOiv+3vHs+MEBjUuMwoTIYLRTIqwHuQD6t1530Iw=)
                          9: 3131392e31302e3138322e302f32332d3233203d3e203234353330.roa (hash: P1NOd8bnXDoe1Us3SAeiUo7ByuV/RRZY5l/EMzT/C1k=)
                          10: 3131392e31302e3138312e302f32342d3234203d3e203234353330.roa (hash: ybxkb0B+hs5pt/EvlpkTwH/9ZJ1gNWd/AVaEY/3TjMw=)
                          11: 3131392e31302e3137392e302f32342d3234203d3e203234353330.roa (hash: 4xOrTa7LOQthmjAbRy6Dje8YDXSs3QUpwJ2MSJFD6BE=)
                          12: 3131392e31302e3138302e302f32332d3233203d3e203234353330.roa (hash: J3mFc+blOdqx9rOGug3IYw5ONv5fbpx/wInrtP6ubZ8=)
                          13: 3131392e31302e3137362e302f32332d3233203d3e203234353330.roa (hash: 0NwKpcPERLvBE69Wt/igLsf2q1CoJnvxAbw3+CiCst8=)
                          14: 3131392e31302e3138302e302f32342d3234203d3e203234353330.roa (hash: 0ou1MA6qNBtVm99WbTegwqF+NpmPqc1Ktrk0OHI11U4=)
                          15: 3131392e31302e3138302e302f32322d3232203d3e203234353330.roa (hash: QQz19AU/3ag6WIvOpz+6vMYYG0ifu3LuEG3RYnhZW1o=)
                          16: 108BD2ED0D3114613C2725256398C38B9DBAD520.crl (hash: al6ZXBt8G45VKKb5F01ZpoTcl35TWynzpXXAF0MAao0=)
                          17: 3131392e31302e3137362e302f32312d3234203d3e203234353330.roa (hash: CprlVpIAhuZZ+TvberfWR+fBEc8FklJHg5e3Yj9s2YM=)
                          18: 323430313a643934303a653066663a3a2f34382d3438203d3e203234353330.roa (hash: 3AOdmgKzkbZxwPp2bCxMQYnSsnvXDmSvwUIaP+cc8u8=)
                          19: 3131392e31302e3137362e302f32322d3232203d3e203234353330.roa (hash: lhKQdAX20mlvRL5BGbA0faxy+2IyoM1d90NTGWc0wAA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl
                          rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 20:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:41:7b:ac:16:3d:1c:95:03:54:b1:9a:c8:fa:17:4e:3d:55:db:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520
        Validity
            Not Before: Jun 16 20:18:52 2026 GMT
            Not After : Jun 17 20:32:52 2026 GMT
        Subject: CN=4798FD0BEA1083D1781F6C5B6FB390390BBEC53A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6e:1d:0b:ea:de:83:37:2c:d9:62:ab:9b:32:
                    a0:87:46:a2:9f:e1:6d:59:0a:14:9e:72:bc:32:01:
                    85:2d:9e:50:97:7a:55:e9:73:3a:8c:c6:a6:e3:bb:
                    87:02:e2:2f:d8:b1:8c:6b:ab:e3:4f:55:3a:2c:20:
                    69:d2:60:bd:90:fa:de:ec:27:3b:ef:be:32:29:38:
                    08:a2:f2:7c:dd:96:ff:47:1d:70:64:d7:f9:3e:01:
                    9b:cd:44:c8:cd:9d:ec:8d:2a:64:9e:76:52:1a:ac:
                    01:0e:57:46:09:e2:02:ea:67:d7:72:94:fb:62:50:
                    2b:1a:22:a8:35:78:52:34:08:75:21:5a:00:9c:25:
                    2b:3e:13:80:a1:e5:4e:0c:54:90:72:ce:08:f0:2f:
                    24:37:0e:e4:a8:e3:8d:b9:92:af:ae:59:d0:74:21:
                    b8:14:ea:c0:43:c7:7a:b4:7c:dd:28:a0:3d:7f:4f:
                    5d:52:bd:b1:c4:a5:0e:60:ab:3d:85:da:60:c2:88:
                    58:3a:ed:52:0c:dc:54:b5:95:cd:c1:44:90:64:1d:
                    8d:fe:15:73:74:f7:47:a5:00:48:92:ed:1e:5a:d7:
                    91:09:c5:1b:85:2e:2d:ce:cf:fd:b2:20:3e:53:c4:
                    06:57:4e:37:ab:e4:f2:df:2a:6e:80:5a:14:62:d6:
                    80:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:98:FD:0B:EA:10:83:D1:78:1F:6C:5B:6F:B3:90:39:0B:BE:C5:3A
            X509v3 Authority Key Identifier:
                keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5e:14:26:7d:73:d2:0b:c6:71:e7:e1:7d:ef:12:99:40:3f:
         27:91:3f:28:5a:a2:fe:e0:36:48:34:7e:b9:b4:8f:67:c5:d0:
         d5:47:3e:fb:c1:40:e1:ec:2f:9e:ec:90:23:3e:17:5d:71:28:
         02:de:86:97:d9:0e:a7:b1:b4:8b:ae:43:db:75:f5:d4:d1:fd:
         1d:b8:a7:ad:39:c2:0a:5e:75:35:69:22:3a:1d:d2:8d:3b:fd:
         b0:10:12:b6:e6:2f:16:c3:da:4b:fe:47:f8:47:7b:cc:59:4f:
         9b:a6:51:ed:67:c4:1b:f7:0c:8a:07:32:68:f0:a3:7e:16:62:
         7f:8c:9b:b2:0a:0a:1f:1d:18:28:22:6c:c4:36:47:95:43:e9:
         15:bd:16:3a:2a:00:df:a1:20:7a:ec:02:00:79:f2:b6:f6:55:
         fa:a4:dc:4c:e5:21:f5:14:ba:fe:cd:bd:c7:46:b6:45:51:0b:
         a2:76:4d:48:04:bf:7f:f9:02:71:97:c9:73:13:db:12:6b:8d:
         fe:32:37:f5:10:e9:9a:47:f3:d2:3e:24:58:87:1e:d8:9b:a0:
         d1:d5:6d:88:08:0b:a6:50:c6:62:80:9c:97:33:e3:c2:f3:ea:
         2e:00:5e:c3:b4:56:0b:91:8c:7b:76:f6:20:56:89:b4:8d:b6:
         55:b9:09:2f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdEF7rBY9HJUDVLGayPoXTj1V23UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA4QkQyRUQwRDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5
REJBRDUyMDAeFw0yNjA2MTYyMDE4NTJaFw0yNjA2MTcyMDMyNTJaMDMxMTAvBgNV
BAMTKDQ3OThGRDBCRUExMDgzRDE3ODFGNkM1QjZGQjM5MDM5MEJCRUM1M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwbh0L6t6DNyzZYqubMqCHRqKf
4W1ZChSecrwyAYUtnlCXelXpczqMxqbju4cC4i/YsYxrq+NPVTosIGnSYL2Q+t7s
JzvvvjIpOAii8nzdlv9HHXBk1/k+AZvNRMjNneyNKmSedlIarAEOV0YJ4gLqZ9dy
lPtiUCsaIqg1eFI0CHUhWgCcJSs+E4Ch5U4MVJByzgjwLyQ3DuSo4425kq+uWdB0
IbgU6sBDx3q0fN0ooD1/T11SvbHEpQ5gqz2F2mDCiFg67VIM3FS1lc3BRJBkHY3+
FXN090elAEiS7R5a15EJxRuFLi3Oz/2yID5TxAZXTjer5PLfKm6AWhRi1oAZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUR5j9C+oQg9F4H2xbb7OQOQu+xTowHwYDVR0j
BBgwFoAUEIvS7Q0xFGE8JyUlY5jDi5261SAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDQyMzQ0YmUtZjlmYi00NjM0LTkyZDYtODk0ZGQ1MzhjYWRmLzAvMTA4QkQyRUQw
RDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5REJBRDUyMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMDhCRDJFRDBEMzExNDYxM0MyNzI1MjU2Mzk4QzM4QjlEQkFE
NTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQyMzQ0YmUtZjlmYi00NjM0LTky
ZDYtODk0ZGQ1MzhjYWRmLzAvMTA4QkQyRUQwRDMxMTQ2MTNDMjcyNTI1NjM5OEMz
OEI5REJBRDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADZeFCZ9c9ILxnHn4X3vEplAPyeRPyhaov7g
Nkg0frm0j2fF0NVHPvvBQOHsL57skCM+F11xKALehpfZDqextIuuQ9t19dTR/R24
p605wgpedTVpIjod0o07/bAQErbmLxbD2kv+R/hHe8xZT5umUe1nxBv3DIoHMmjw
o34WYn+Mm7IKCh8dGCgibMQ2R5VD6RW9FjoqAN+hIHrsAgB58rb2Vfqk3EzlIfUU
uv7NvcdGtkVRC6J2TUgEv3/5AnGXyXMT2xJrjf4yN/UQ6ZpH89I+JFiHHtiboNHV
bYgIC6ZQxmKAnJcz48Lz6i4AXsO0VguRjHt29iBWibSNtlW5CS8=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:23 2026 by rpki-client