Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft
File:                     E3D6C125B35E67510271310D928E4578404A3A46.mft (raw, json)
Hash identifier:          A6Z4SsXX1SFkqwjV3kKsduZYwaysgofEe/uC0hxGfzU=
Subject key identifier:   F6:77:CC:F6:7C:CD:0F:64:A5:86:CA:41:7E:B3:47:E1:DD:DB:85:A9
Authority key identifier: E3:D6:C1:25:B3:5E:67:51:02:71:31:0D:92:8E:45:78:40:4A:3A:46
Certificate issuer:       /CN=E3D6C125B35E67510271310D928E4578404A3A46
Certificate serial:       503344C1F9F4E9DC56F8EAA844DC13967455616B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 21:09:49 +0000
Manifest this update:     Tue 16 Jun 2026 21:04:49 +0000
Manifest next update:     Wed 17 Jun 2026 21:16:49 +0000
Files and hashes:         1: E3D6C125B35E67510271310D928E4578404A3A46.crl (hash: 3x6voowMDOUW4d3DzDEsniwtpiAMvzcBUrwJRdtXnbg=)
                          2: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: T5uRj9PC/T10VKks3wi10c2uBNec4FkHRnP0vvfYiOk=)
                          3: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: 8qQMC3EFOK3yCgkVj+C7FEr6qF+CfYoBtbfTyKhcjE4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.crl
                          rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 21:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:33:44:c1:f9:f4:e9:dc:56:f8:ea:a8:44:dc:13:96:74:55:61:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3D6C125B35E67510271310D928E4578404A3A46
        Validity
            Not Before: Jun 16 21:04:49 2026 GMT
            Not After : Jun 17 21:16:49 2026 GMT
        Subject: CN=F677CCF67CCD0F64A586CA417EB347E1DDDB85A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c0:80:2d:c7:a1:98:9f:20:85:14:53:f0:69:
                    4b:b4:b5:76:44:36:d3:04:20:b2:98:a8:d4:1d:a4:
                    e4:e2:de:ea:bf:84:35:94:83:c4:b0:62:4f:85:0e:
                    7e:89:3f:a9:1e:d4:7d:24:ee:97:c6:76:7d:e4:2c:
                    90:f4:10:8c:ea:2a:fc:d9:bb:33:44:2c:21:eb:70:
                    33:eb:99:8b:26:5d:bd:c6:27:a3:1f:94:2d:9f:c1:
                    4d:bf:9d:38:ea:d4:fd:52:32:8b:c3:a0:da:62:cb:
                    6a:bd:df:eb:83:2a:43:63:6c:32:26:05:97:5e:71:
                    42:45:83:4d:ca:4d:9b:5c:7c:d0:8c:74:9f:e4:51:
                    25:06:fb:34:9b:3f:aa:4d:b9:4c:a6:ab:c3:e4:da:
                    1a:70:59:76:10:42:da:81:8e:ff:73:a8:c9:8e:90:
                    54:a4:18:df:1b:67:14:59:a5:a9:5e:ee:77:d8:c2:
                    79:3f:33:82:cc:48:b7:09:90:1a:58:15:86:da:96:
                    87:fa:dd:9d:4e:14:97:06:d1:28:c5:2c:50:53:8b:
                    bf:47:87:ec:96:6e:60:2a:34:80:e8:5b:62:66:80:
                    fa:65:aa:a6:4f:0b:de:1c:4b:f6:7a:fa:b6:5d:2d:
                    c6:b7:e9:db:10:23:af:7f:16:d4:28:20:51:dd:6e:
                    3c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:77:CC:F6:7C:CD:0F:64:A5:86:CA:41:7E:B3:47:E1:DD:DB:85:A9
            X509v3 Authority Key Identifier:
                keyid:E3:D6:C1:25:B3:5E:67:51:02:71:31:0D:92:8E:45:78:40:4A:3A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4f:d1:67:ac:33:7a:bf:5e:02:2f:a3:a7:ce:24:4e:9c:f9:
         c3:98:b3:53:c1:59:14:31:5e:96:79:09:a8:ae:bd:68:1b:42:
         28:c7:81:8f:0f:c2:c9:70:17:be:e6:f5:f4:18:65:b9:c5:a6:
         9d:a7:d9:80:e1:18:a9:78:84:37:58:6d:58:f0:ee:53:26:52:
         03:cf:5b:58:36:98:45:ba:da:cc:32:6c:46:2c:be:d7:b4:90:
         1c:62:61:d2:2a:04:5d:85:e0:a7:95:0b:8a:54:01:41:cb:08:
         43:bf:b7:a5:90:a8:72:54:74:f2:e5:45:2e:25:d0:6b:d2:9e:
         9f:ab:67:54:7a:9f:68:4f:83:8d:e3:cc:23:84:b6:1f:48:76:
         dc:a8:83:23:aa:de:09:38:b9:38:0f:79:ce:77:9e:d4:ca:25:
         11:b1:51:ff:c5:33:a1:cc:4e:78:0c:40:15:04:49:e8:e2:b6:
         e4:84:9b:c8:69:02:67:8e:c6:c2:b8:fe:76:e9:22:8a:f9:ef:
         c7:25:c9:52:84:1b:6d:7b:bd:8f:8f:a4:12:19:1a:9d:12:47:
         54:05:e4:c3:09:30:ee:74:06:66:54:f7:07:52:71:c4:3e:59:
         a5:df:39:42:53:79:44:c9:4b:1f:35:35:a5:db:90:4c:43:92:
         82:63:e8:45
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUDNEwfn06dxW+OqoRNwTlnRVYWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNENkMxMjVCMzVFNjc1MTAyNzEzMTBEOTI4RTQ1Nzg0
MDRBM0E0NjAeFw0yNjA2MTYyMTA0NDlaFw0yNjA2MTcyMTE2NDlaMDMxMTAvBgNV
BAMTKEY2NzdDQ0Y2N0NDRDBGNjRBNTg2Q0E0MTdFQjM0N0UxREREQjg1QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcwIAtx6GYnyCFFFPwaUu0tXZE
NtMEILKYqNQdpOTi3uq/hDWUg8SwYk+FDn6JP6ke1H0k7pfGdn3kLJD0EIzqKvzZ
uzNELCHrcDPrmYsmXb3GJ6MflC2fwU2/nTjq1P1SMovDoNpiy2q93+uDKkNjbDIm
BZdecUJFg03KTZtcfNCMdJ/kUSUG+zSbP6pNuUymq8Pk2hpwWXYQQtqBjv9zqMmO
kFSkGN8bZxRZpale7nfYwnk/M4LMSLcJkBpYFYbalof63Z1OFJcG0SjFLFBTi79H
h+yWbmAqNIDoW2JmgPplqqZPC94cS/Z6+rZdLca36dsQI69/FtQoIFHdbjw3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU9nfM9nzND2SlhspBfrNH4d3bhakwHwYDVR0j
BBgwFoAU49bBJbNeZ1ECcTENko5FeEBKOkYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGI5ZTZkYTQtZGM0Ni00NzBmLWIwZTktMTZlNmU1N2Q0NzlhLzAvRTNENkMxMjVC
MzVFNjc1MTAyNzEzMTBEOTI4RTQ1Nzg0MDRBM0E0Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FM0Q2QzEyNUIzNUU2NzUxMDI3MTMxMEQ5MjhFNDU3ODQwNEEz
QTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGI5ZTZkYTQtZGM0Ni00NzBmLWIw
ZTktMTZlNmU1N2Q0NzlhLzAvRTNENkMxMjVCMzVFNjc1MTAyNzEzMTBEOTI4RTQ1
Nzg0MDRBM0E0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG9P0WesM3q/XgIvo6fOJE6c+cOYs1PBWRQx
XpZ5CaiuvWgbQijHgY8PwslwF77m9fQYZbnFpp2n2YDhGKl4hDdYbVjw7lMmUgPP
W1g2mEW62swybEYsvte0kBxiYdIqBF2F4KeVC4pUAUHLCEO/t6WQqHJUdPLlRS4l
0GvSnp+rZ1R6n2hPg43jzCOEth9IdtyogyOq3gk4uTgPec53ntTKJRGxUf/FM6HM
TngMQBUESejituSEm8hpAmeOxsK4/nbpIor578clyVKEG217vY+PpBIZGp0SR1QF
5MMJMO50BmZU9wdSccQ+WaXfOUJTeUTJSx81NaXbkExDkoJj6EU=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:47 2026 by rpki-client