Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft
File:                     EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft (raw, json)
Hash identifier:          o2BoMs3XbOB/k2WLp4B62o0YoTmCXc4hEgKoL7sZIzQ=
Subject key identifier:   0D:D7:55:EB:6B:27:47:D6:C6:34:B8:52:04:E1:83:74:22:14:0B:7C
Authority key identifier: EF:FE:71:94:4C:D7:DF:CA:7F:BD:C6:EF:06:3C:9A:6D:28:BB:47:E7
Certificate issuer:       /CN=EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7
Certificate serial:       1D7792B3775715A6C5F892DC91F214042CD7E672
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 10:35:52 +0000
Manifest this update:     Wed 17 Jun 2026 10:30:52 +0000
Manifest next update:     Thu 18 Jun 2026 11:21:52 +0000
Files and hashes:         1: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: iAkXuDNDYQX7aJrJUqwReqIZ7fKNDXS9mw/520ZULDA=)
                          2: EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl (hash: W1dHASIORFaemkn/JX20paOAwhBAT/ikEYTA7xVCt0g=)
                          3: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: Z33O96f3Xi269FHR6g3ynqUeqpUoR3vjVRTvXK+PrwU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl
                          rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:77:92:b3:77:57:15:a6:c5:f8:92:dc:91:f2:14:04:2c:d7:e6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7
        Validity
            Not Before: Jun 17 10:30:52 2026 GMT
            Not After : Jun 18 11:21:52 2026 GMT
        Subject: CN=0DD755EB6B2747D6C634B85204E1837422140B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:55:c0:3c:f6:eb:ce:a6:80:29:28:83:13:dd:
                    24:e9:0c:d3:21:ba:9e:5a:75:28:f7:52:f0:b3:61:
                    61:4e:2d:f9:c9:c7:4d:2b:c1:ce:e3:a9:1f:09:c2:
                    d3:5a:0f:2c:81:e8:98:7c:df:2d:05:5d:74:a2:e7:
                    50:3b:cc:73:a3:93:51:4d:9a:d2:85:74:a4:ac:c7:
                    42:d5:f5:f7:50:db:2b:52:a8:90:be:48:ee:41:89:
                    c4:a2:ad:4c:c7:1d:93:41:79:3b:13:5c:71:78:a9:
                    ec:49:6f:b6:3f:a5:d1:2f:a8:99:bf:5d:a9:8a:90:
                    94:a8:88:e9:4e:02:3a:58:50:ec:07:23:08:3f:3d:
                    48:50:09:bb:a1:a1:c8:95:a7:3c:66:c4:6b:c4:da:
                    eb:e9:c3:af:d8:9d:42:f6:12:ea:cf:d5:70:d9:82:
                    36:75:ad:6f:16:a0:a8:e4:f9:bc:23:e5:ea:2f:19:
                    fd:e4:6d:b6:65:69:0f:89:67:93:79:25:4e:bc:c1:
                    e8:85:b1:6d:0f:42:7d:bc:11:72:2d:46:d5:40:4f:
                    79:85:7c:bd:dd:b9:46:45:64:e7:52:06:e2:ee:79:
                    8b:00:3d:b9:d9:ec:02:f0:e1:aa:a8:bb:cf:e1:10:
                    c9:05:8a:30:6c:e2:cd:cf:46:7e:d7:de:c1:40:1e:
                    26:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D7:55:EB:6B:27:47:D6:C6:34:B8:52:04:E1:83:74:22:14:0B:7C
            X509v3 Authority Key Identifier:
                keyid:EF:FE:71:94:4C:D7:DF:CA:7F:BD:C6:EF:06:3C:9A:6D:28:BB:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1e:f0:81:30:59:c6:0e:59:12:b8:10:01:03:83:6d:f8:fd:
         fd:30:13:97:63:5c:07:54:18:81:9e:7a:a5:c0:45:9e:d6:7f:
         b1:b8:06:55:ea:b7:e7:1f:ca:0e:8e:0e:d2:9d:57:05:b1:f0:
         84:eb:84:16:8b:60:20:d3:6b:15:6d:ca:0a:1f:a5:05:84:4b:
         68:45:31:0c:05:50:69:ca:79:93:6b:01:f3:af:f8:f1:35:7e:
         42:31:1b:50:37:64:89:ea:98:00:8e:c4:d2:d7:63:ae:54:db:
         d5:34:89:a1:01:e3:a6:08:ae:92:f6:bc:50:87:8e:62:08:8c:
         64:fd:7c:d7:29:05:f5:7f:02:d6:4e:f7:45:5e:59:e2:e3:17:
         cd:b5:7c:90:01:45:f0:10:df:4c:69:c9:27:55:30:2d:25:92:
         25:d4:16:48:c9:69:b6:41:5a:ae:5c:22:56:48:5a:cd:24:69:
         d9:de:d4:f4:8c:88:5a:30:4b:34:d8:9e:65:6f:9d:fd:74:9b:
         f1:ca:6a:b8:91:6b:15:df:dc:34:9f:94:50:b0:bb:e5:bc:33:
         d7:4a:01:d2:0f:16:21:8d:ce:8f:72:70:a1:31:23:04:b4:76:
         49:94:66:56:13:80:fe:23:89:a8:90:47:c5:91:c8:2e:4e:24:
         89:fa:04:f3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHXeSs3dXFabF+JLckfIUBCzX5nIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZGRTcxOTQ0Q0Q3REZDQTdGQkRDNkVGMDYzQzlBNkQy
OEJCNDdFNzAeFw0yNjA2MTcxMDMwNTJaFw0yNjA2MTgxMTIxNTJaMDMxMTAvBgNV
BAMTKDBERDc1NUVCNkIyNzQ3RDZDNjM0Qjg1MjA0RTE4Mzc0MjIxNDBCN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1VcA89uvOpoApKIMT3STpDNMh
up5adSj3UvCzYWFOLfnJx00rwc7jqR8JwtNaDyyB6Jh83y0FXXSi51A7zHOjk1FN
mtKFdKSsx0LV9fdQ2ytSqJC+SO5BicSirUzHHZNBeTsTXHF4qexJb7Y/pdEvqJm/
XamKkJSoiOlOAjpYUOwHIwg/PUhQCbuhociVpzxmxGvE2uvpw6/YnUL2EurP1XDZ
gjZ1rW8WoKjk+bwj5eovGf3kbbZlaQ+JZ5N5JU68weiFsW0PQn28EXItRtVAT3mF
fL3duUZFZOdSBuLueYsAPbnZ7ALw4aqou8/hEMkFijBs4s3PRn7X3sFAHiYbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDddV62snR9bGNLhSBOGDdCIUC3wwHwYDVR0j
BBgwFoAU7/5xlEzX38p/vcbvBjyabSi7R+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDU3ZDRkODEtM2JlOC00MjMwLTg5NTktMmRjMmFmOWQwODVlLzAvRUZGRTcxOTQ0
Q0Q3REZDQTdGQkRDNkVGMDYzQzlBNkQyOEJCNDdFNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRkZFNzE5NDRDRDdERkNBN0ZCREM2RUYwNjNDOUE2RDI4QkI0
N0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5
NTktMmRjMmFmOWQwODVlLzAvRUZGRTcxOTQ0Q0Q3REZDQTdGQkRDNkVGMDYzQzlB
NkQyOEJCNDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHoe8IEwWcYOWRK4EAEDg234/f0wE5djXAdU
GIGeeqXARZ7Wf7G4BlXqt+cfyg6ODtKdVwWx8ITrhBaLYCDTaxVtygofpQWES2hF
MQwFUGnKeZNrAfOv+PE1fkIxG1A3ZInqmACOxNLXY65U29U0iaEB46YIrpL2vFCH
jmIIjGT9fNcpBfV/AtZO90VeWeLjF821fJABRfAQ30xpySdVMC0lkiXUFkjJabZB
Wq5cIlZIWs0kadne1PSMiFowSzTYnmVvnf10m/HKariRaxXf3DSflFCwu+W8M9dK
AdIPFiGNzo9ycKExIwS0dkmUZlYTgP4jiaiQR8WRyC5OJIn6BPM=
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:03:04 2026 by rpki-client