Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft
File:                     14D784D8F19F00DFBA4C08757485032BE04603A3.mft (raw, json)
Hash identifier:          DXEdbz8VI1yGqp1TvMT9DTWiHFtgRkFa7aL9c66hFBA=
Subject key identifier:   DF:8E:77:FB:7C:F6:11:EC:B4:30:E9:16:99:F3:56:E2:80:C1:18:48
Authority key identifier: 14:D7:84:D8:F1:9F:00:DF:BA:4C:08:75:74:85:03:2B:E0:46:03:A3
Certificate issuer:       /CN=14D784D8F19F00DFBA4C08757485032BE04603A3
Certificate serial:       65DA2484C87E12C172CEDCEA28ABACC15083D677
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 02:00:12 +0000
Manifest this update:     Wed 17 Jun 2026 01:55:12 +0000
Manifest next update:     Thu 18 Jun 2026 03:12:12 +0000
Files and hashes:         1: 323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa (hash: 4CcWucwvFiUbV7yGD9jF0QOdXA3+eK3AiJ4whM9p04M=)
                          2: 14D784D8F19F00DFBA4C08757485032BE04603A3.crl (hash: dKHygFHpEd7h9zzkxnbV1zVdrEpv9Kv8sxmAGV6Quv0=)
                          3: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: rA6w7AOgQeO/23WQ9WTNvbNDGzSTa/seU2ViAzbcvrs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.crl
                          rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:da:24:84:c8:7e:12:c1:72:ce:dc:ea:28:ab:ac:c1:50:83:d6:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14D784D8F19F00DFBA4C08757485032BE04603A3
        Validity
            Not Before: Jun 17 01:55:12 2026 GMT
            Not After : Jun 18 03:12:12 2026 GMT
        Subject: CN=DF8E77FB7CF611ECB430E91699F356E280C11848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:1e:d1:7b:05:ba:38:af:a9:f6:0c:f4:17:
                    7c:0d:51:77:df:31:29:0f:5f:76:e5:35:e0:bd:f2:
                    17:70:a2:c7:74:a5:f0:4b:fa:4e:32:97:bc:b4:44:
                    d0:fc:f7:e3:80:a0:b7:d4:59:1b:73:96:d7:fb:89:
                    30:55:3b:de:5a:7b:8a:0c:6f:50:b3:7d:6e:60:e8:
                    d4:af:9b:d7:46:6a:94:9f:dd:9d:06:b3:35:e8:da:
                    4c:ac:05:e3:bb:08:47:f5:03:75:c8:22:33:d3:aa:
                    02:88:15:e5:ed:0e:27:eb:0d:cd:55:f9:b0:e4:7a:
                    7b:54:c0:09:86:a0:a6:15:91:75:a7:e0:60:46:fc:
                    0d:54:6d:e5:e5:ae:c8:9b:99:ed:e1:5a:0f:c4:e8:
                    b9:47:2d:78:5d:ac:bc:4c:48:de:8a:0b:d5:62:13:
                    ca:77:98:c1:c3:45:b7:1b:31:53:4d:99:1d:8c:16:
                    9a:d7:b6:f4:d9:0e:56:a3:e8:65:2d:a5:c0:ba:64:
                    c9:d5:dc:6c:8e:a5:8f:5f:ae:cb:87:68:7a:15:1a:
                    c3:98:1f:ca:24:82:89:2a:dd:4d:5d:a0:1d:32:89:
                    f3:4c:31:c7:1b:7d:7c:56:72:ea:b5:df:9e:6a:95:
                    5f:a2:09:83:64:e2:7d:2f:7b:e9:af:b5:ac:4d:e4:
                    4d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8E:77:FB:7C:F6:11:EC:B4:30:E9:16:99:F3:56:E2:80:C1:18:48
            X509v3 Authority Key Identifier:
                keyid:14:D7:84:D8:F1:9F:00:DF:BA:4C:08:75:74:85:03:2B:E0:46:03:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c1:85:6c:34:bd:04:c4:0d:cf:15:55:0d:cd:12:4f:02:6d:
         1e:63:95:a1:02:9a:fa:7b:75:f8:27:09:80:3f:66:3d:86:ec:
         e1:3d:ea:a2:49:a9:7c:ec:f3:38:7b:40:2b:e9:9e:bf:2f:ae:
         b8:a5:e3:09:5f:de:dc:23:83:54:fb:fc:3a:d2:93:21:a8:83:
         7f:d9:58:17:f7:4c:53:76:b0:c0:9c:d4:01:75:81:e0:6d:e5:
         59:6b:7c:35:79:ca:98:20:75:c7:85:93:79:ea:25:ad:5e:52:
         9a:d7:45:a0:97:d6:81:de:6d:2b:7e:13:ec:dd:6a:a4:63:36:
         53:5c:8c:7c:f8:b7:09:b8:39:96:61:63:58:8e:e5:36:0d:f2:
         3e:35:33:07:c4:4e:09:93:7a:bf:93:2d:64:bb:ad:80:5f:cf:
         30:19:88:b9:bd:79:4c:9b:95:47:56:8a:ce:7f:0f:d7:88:31:
         8d:62:b4:4f:45:82:db:52:7b:b8:26:76:df:ca:3a:65:22:00:
         c3:fb:77:0b:40:02:9e:25:aa:4c:34:f1:16:df:a9:e8:36:fb:
         87:8b:01:6e:e4:cb:5d:76:62:b1:ec:7e:9d:52:49:ef:e0:c0:
         a9:c5:c6:a4:08:15:5e:71:27:9e:6b:ff:50:b4:8e:06:eb:66:
         66:6e:5a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:42:02 2026 by rpki-client