Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft
File:                     8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft (raw, json)
Hash identifier:          u3PnN8kILObYMKAM/rNd7yr8aHbLNo3bj0gg5m5w938=
Subject key identifier:   7F:0E:23:6F:19:6C:3B:2F:68:59:3E:E0:F3:FE:D6:E8:2E:01:A9:5E
Authority key identifier: 8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B
Certificate issuer:       /CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B
Certificate serial:       32A35F0FC18DA7C319BBBFE10514A8D7A333D570
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft
Manifest number:          38
Signing time:             Fri 12 Jun 2026 23:54:21 +0000
Manifest this update:     Fri 12 Jun 2026 23:49:21 +0000
Manifest next update:     Sun 14 Jun 2026 00:16:21 +0000
Files and hashes:         1: 3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (hash: Lndmx8VAy2DFBCTOeRbYATrs2gBsgQhEdnrs3xfeT3Y=)
                          2: 8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl (hash: 5Yf1kDeLPUHu8pAad9FZIkEQO6u1Stw6BS0JikiPPFk=)
                          3: 3130332e3137352e33382e302f32332d3234203d3e20313534343130.roa (hash: OeG/PNeipoOhOvGu8q4WBcsQGgNJ6UhKACe8udTmev0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl
                          rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 20:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a3:5f:0f:c1:8d:a7:c3:19:bb:bf:e1:05:14:a8:d7:a3:33:d5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B
        Validity
            Not Before: Jun 12 23:49:21 2026 GMT
            Not After : Jun 14 00:16:21 2026 GMT
        Subject: CN=7F0E236F196C3B2F68593EE0F3FED6E82E01A95E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:e3:84:2b:26:1b:0f:4f:3f:20:9d:82:bc:
                    a8:41:1a:de:4c:31:1f:fa:42:7c:07:94:40:a1:81:
                    3a:ec:55:30:22:0a:ea:2c:ee:34:0c:fb:6f:d6:e5:
                    48:28:76:d3:4e:7d:3e:ef:5b:88:4d:b4:3d:04:c6:
                    3f:c2:d2:5a:ed:05:79:76:11:d8:9b:a4:39:02:5a:
                    b2:5a:bd:8c:59:9f:1c:31:41:08:d0:53:cb:8c:46:
                    0e:6b:74:f5:55:fe:42:56:5f:01:93:45:fb:66:12:
                    92:a7:1d:65:c9:cd:43:57:9c:2e:2e:43:60:5d:29:
                    d2:2a:15:39:1f:03:74:1a:27:be:8d:01:8f:4a:33:
                    f5:97:de:84:dd:e3:48:a4:fd:42:24:ad:c3:79:71:
                    0d:9d:4d:be:5a:99:5a:35:a1:39:2c:fb:fc:94:02:
                    e4:a2:4a:b9:49:39:7f:5b:b8:97:81:4e:13:b3:a2:
                    97:4e:7d:aa:a0:db:0a:3c:aa:cb:76:d4:5e:87:9b:
                    21:01:64:31:bb:d4:61:45:c3:b4:0c:fb:5f:1e:d7:
                    a9:96:a3:ec:fd:93:92:2a:14:25:ed:89:0a:28:08:
                    46:4a:bb:45:b8:fc:b9:9c:88:78:83:13:f4:f7:b2:
                    82:a6:9d:05:83:0e:6a:08:20:d1:3d:89:c9:71:e5:
                    0f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0E:23:6F:19:6C:3B:2F:68:59:3E:E0:F3:FE:D6:E8:2E:01:A9:5E
            X509v3 Authority Key Identifier:
                keyid:8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ae:e7:c0:86:f5:82:3f:eb:67:3d:f6:59:4a:72:b0:da:9e:
         5f:89:db:82:d7:2f:34:1b:58:ba:fe:61:14:b1:37:e6:d6:0c:
         40:21:fa:90:d7:9c:56:be:a1:e8:26:7a:74:82:c8:8c:a5:2f:
         c0:00:d3:44:89:cd:1b:a6:30:32:52:7e:7c:e1:c8:41:57:15:
         fe:9d:cb:ff:4d:59:f4:fe:4a:a0:d9:8b:88:a0:0c:fe:52:1d:
         67:b5:6f:8d:13:0c:e8:f1:98:84:68:d4:9c:89:7d:5e:0f:0f:
         28:e4:f9:c1:2c:67:e7:10:da:1b:09:9b:67:a4:0a:78:5d:99:
         44:e0:4c:c1:73:94:bd:45:49:6b:aa:ff:5e:a8:b7:87:91:53:
         58:ad:be:f2:de:7a:aa:46:cd:20:0f:49:db:e3:98:4f:ee:28:
         50:1c:e2:4d:64:ec:5c:5b:33:92:4b:cc:85:56:d3:ad:a6:3d:
         f8:f5:61:22:29:c1:f3:23:2e:eb:34:4c:90:af:c0:a4:4a:d8:
         08:07:08:33:42:3d:83:f6:87:5c:1b:bb:10:68:eb:19:25:51:
         eb:3a:72:a7:d7:48:58:13:f7:83:4e:43:58:bc:27:18:1a:7a:
         a5:c7:36:ab:18:fb:8d:f2:ae:68:da:58:c4:91:4e:6d:10:c5:
         db:7c:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:07:29 2026 by rpki-client