Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft
File:                     70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft (raw, json)
Hash identifier:          TqpczJKqNuF0SQOb6FZDi3EcKlCVWRXSal01QVuHDFI=
Subject key identifier:   90:2B:F4:80:41:B3:15:83:60:0E:71:20:79:AF:BD:51:D6:B6:B4:3A
Authority key identifier: 70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8
Certificate issuer:       /CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8
Certificate serial:       4448CB0A36E5373E27E9D22310AC57C85229573E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 05:14:13 +0000
Manifest this update:     Wed 17 Jun 2026 05:09:13 +0000
Manifest next update:     Thu 18 Jun 2026 07:20:13 +0000
Files and hashes:         1: 70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl (hash: tkNyHvUHnRy5yMiMlCdWcMaNO1deyUugG1KyIPkJwzc=)
                          2: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: hpiL6+O2y1i6nQTaaXJTYqIKZW0DPxyBBggb24eEX0o=)
                          3: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: keOPkaU9xFvf9rbttWbatnRuZitbsiWuBrO+qREpte8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl
                          rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:48:cb:0a:36:e5:37:3e:27:e9:d2:23:10:ac:57:c8:52:29:57:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8
        Validity
            Not Before: Jun 17 05:09:13 2026 GMT
            Not After : Jun 18 07:20:13 2026 GMT
        Subject: CN=902BF48041B31583600E712079AFBD51D6B6B43A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5c:3e:e2:bd:92:a1:31:ab:b9:7e:e5:a3:c1:
                    80:a5:ff:3f:16:f4:01:ef:d8:2a:bd:0e:61:2f:18:
                    ee:25:a6:11:96:f3:c5:ca:37:6b:9f:9a:66:39:b9:
                    c2:53:2e:bb:15:26:1e:03:36:2e:5c:fb:94:30:a7:
                    d0:de:fe:50:9e:b3:b9:81:ab:76:09:da:ca:2c:e5:
                    a5:7d:ee:9e:63:28:2d:e7:1a:31:a2:80:16:64:74:
                    45:0c:ac:17:24:ad:bd:35:00:8d:49:b7:5a:13:da:
                    1f:1f:6f:09:07:02:9e:7f:95:34:aa:92:59:28:bd:
                    91:91:90:91:b3:4e:d8:e8:5f:57:af:a5:af:59:e1:
                    0c:82:18:96:05:b1:c8:a9:f7:a5:ba:b7:47:23:35:
                    3d:4d:10:48:03:cd:18:6c:8e:23:db:40:0b:eb:da:
                    1d:44:7d:f0:9e:e9:b6:f1:5f:f3:53:cf:e1:7d:07:
                    83:97:2f:e3:8f:1c:aa:f5:a6:fd:56:86:bf:09:fb:
                    fc:4e:6d:a9:97:69:61:07:2b:2b:cb:8a:ed:cf:d8:
                    c9:bf:87:65:a6:3f:7b:84:ad:eb:d1:4b:19:08:43:
                    ea:74:ec:fe:5c:81:aa:78:12:b1:30:0c:07:4d:02:
                    93:56:87:8a:21:bc:4c:81:70:67:5e:e2:16:c1:e1:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2B:F4:80:41:B3:15:83:60:0E:71:20:79:AF:BD:51:D6:B6:B4:3A
            X509v3 Authority Key Identifier:
                keyid:70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:96:d2:e3:77:76:2a:3c:c7:a7:94:6b:e0:93:97:05:29:78:
         08:c5:89:55:9a:64:7d:b5:9d:d4:f4:18:dc:a8:fa:79:89:17:
         29:17:14:ba:54:18:97:47:bf:54:69:65:fb:9b:42:5a:40:ee:
         33:7d:c6:81:68:e1:d6:d9:19:75:01:3a:59:9b:c6:42:02:6e:
         72:9e:79:19:60:88:04:85:9e:12:24:64:05:c5:52:00:8d:9e:
         0c:88:53:dc:63:26:91:63:de:37:30:99:d3:f9:2d:ad:bb:f3:
         21:93:64:ae:81:92:4b:1d:cd:94:3b:34:31:f9:91:43:39:ec:
         51:fe:49:ee:3c:08:28:5a:c4:b3:b8:18:fb:f5:74:bf:fe:a3:
         53:0d:e4:56:f5:cc:fb:a8:50:70:1d:89:be:aa:be:c4:25:7b:
         07:a6:ff:56:e3:42:ab:ee:79:e8:dd:89:22:44:da:50:4c:ee:
         06:01:81:ba:f2:a8:70:5a:63:2f:29:ba:36:26:c4:cd:72:20:
         7c:4c:66:9c:ed:35:5b:82:26:6e:08:da:92:7e:4c:d5:76:24:
         e4:05:b5:d8:42:6e:40:50:04:f0:3a:77:90:43:e6:ae:f6:6c:
         b6:86:ca:f9:cc:37:92:1a:ca:3a:9d:c2:08:66:fe:ea:d4:c8:
         2f:11:78:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:38:47 2026 by rpki-client