Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft
File:                     C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft (raw, json)
Hash identifier:          zGfd8U64lq6y0BIJZsvO3WyZVlg6o7CNmQVkialwH2Y=
Subject key identifier:   CF:40:76:AB:B1:84:83:0B:8F:C8:BF:4C:EE:32:59:25:0D:AF:4F:92
Authority key identifier: C2:4B:A8:D7:AB:A9:A0:AE:B8:1D:20:E6:B5:51:21:5E:76:98:28:CA
Certificate issuer:       /CN=C24BA8D7ABA9A0AEB81D20E6B551215E769828CA
Certificate serial:       06372715AB8FBAC5A2FD1F87A9BE74A826DAE804
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 06:20:34 +0000
Manifest this update:     Wed 17 Jun 2026 06:15:34 +0000
Manifest next update:     Thu 18 Jun 2026 07:37:34 +0000
Files and hashes:         1: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: RpKB88H1EeRDg7tfcTBSl+Zo5Y84iIg06W/eVC4GSFw=)
                          2: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: f5TuDn3JjBtU4GdimjLsODFHOZ5ohDlcPjaFqwt/1vs=)
                          3: C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl (hash: Bq1OigfsWHutdskxSZMwkGD65xuhFhy0qyZdBN/rEBY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl
                          rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:37:27:15:ab:8f:ba:c5:a2:fd:1f:87:a9:be:74:a8:26:da:e8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C24BA8D7ABA9A0AEB81D20E6B551215E769828CA
        Validity
            Not Before: Jun 17 06:15:34 2026 GMT
            Not After : Jun 18 07:37:34 2026 GMT
        Subject: CN=CF4076ABB184830B8FC8BF4CEE3259250DAF4F92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4f:a6:ef:66:ac:82:3a:3f:ba:fe:05:bb:3d:
                    d3:1f:e5:47:36:99:96:40:d5:36:3c:d2:ab:90:07:
                    18:09:31:48:37:39:c1:c4:c1:79:0c:94:14:22:6c:
                    44:63:f3:88:0f:a0:69:a7:6b:fd:14:77:2e:40:15:
                    1f:49:a7:7d:5a:aa:e5:fa:50:8f:9d:13:49:c6:ee:
                    13:51:dd:71:10:76:8a:02:a4:46:04:79:b8:75:62:
                    16:bf:e8:ac:c3:9e:6d:b5:22:fe:46:5f:14:17:34:
                    44:40:4b:9f:2f:a3:27:bd:32:d5:0a:ee:e2:61:48:
                    4b:57:be:d2:9d:df:ee:3a:0a:ff:6d:24:45:92:c7:
                    3a:db:3b:7c:53:a3:86:bd:15:4b:f9:7f:8c:d5:fa:
                    a3:91:b2:ed:14:dd:b1:11:4f:83:8e:29:b1:59:d2:
                    8e:ee:23:d8:af:d8:bd:7a:9f:da:40:4a:f6:89:f1:
                    8c:78:49:60:f4:f7:27:80:ea:38:04:3a:84:32:47:
                    14:c0:29:42:a8:f6:85:a1:99:bb:83:1c:f5:1d:8d:
                    1d:93:67:0c:3e:01:66:d6:17:58:58:e6:6a:0a:66:
                    c8:a1:fe:9b:6e:44:88:e4:3a:c6:7f:e7:09:00:cf:
                    e3:a6:fb:56:1a:d1:f9:22:ab:f0:38:a2:94:70:d8:
                    74:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:40:76:AB:B1:84:83:0B:8F:C8:BF:4C:EE:32:59:25:0D:AF:4F:92
            X509v3 Authority Key Identifier:
                keyid:C2:4B:A8:D7:AB:A9:A0:AE:B8:1D:20:E6:B5:51:21:5E:76:98:28:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c9:c1:cd:13:cf:5d:7a:c2:21:fd:92:d8:b2:fa:e3:10:b2:
         29:e5:55:d5:7c:2f:5e:18:23:62:fe:64:bb:48:07:ab:54:a1:
         ff:cc:03:24:ac:d3:bc:99:8a:da:73:64:d9:b6:6b:23:7a:60:
         72:6c:ae:b3:e9:a4:72:35:c3:29:6a:16:ac:c1:48:ef:cd:fe:
         c9:84:b6:3b:79:15:79:cf:28:0d:f6:93:8e:0e:3c:a6:e6:6d:
         72:ae:fe:45:0c:19:22:1e:13:07:4d:ea:96:fb:9d:77:99:49:
         41:0c:6b:6d:6c:30:e0:fc:1a:e1:fa:a2:76:32:37:df:bc:71:
         6b:68:3a:b3:58:e0:10:a9:d2:4d:ed:9b:3c:db:43:88:6a:98:
         a5:12:2f:3a:44:7e:76:34:84:13:09:42:83:36:3a:83:d1:6a:
         c6:1c:48:63:b0:8c:8c:15:39:a0:fb:1d:44:cb:a9:19:fb:e8:
         44:32:fc:89:4f:49:bf:a4:27:b8:5a:85:9b:76:bb:e2:36:d6:
         d2:ea:19:e0:70:e0:cc:0a:e9:04:73:6c:84:4c:3d:16:01:b5:
         47:c7:90:37:c5:05:aa:a4:30:42:47:3a:7a:69:d6:f9:54:f4:
         94:e6:85:1a:94:69:90:e7:80:32:17:3c:5d:f0:4b:8a:cc:61:
         2a:0d:8e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:34 2026 by rpki-client