Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft
File:                     6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft (raw, json)
Hash identifier:          BgGBLmXhfcsgitb+mp9QxH1afHHNbqHHn1nNPeUpq5g=
Subject key identifier:   C1:73:A8:50:47:C2:D8:1E:A9:B9:D2:4E:15:E3:D2:9C:0E:FE:ED:F9
Authority key identifier: 6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09
Certificate issuer:       /CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109
Certificate serial:       13C91ADAA0F186F2330A89526E627396D3327447
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 08:43:33 +0000
Manifest this update:     Wed 17 Jun 2026 08:38:33 +0000
Manifest next update:     Thu 18 Jun 2026 08:55:33 +0000
Files and hashes:         1: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: UjvbqeEp3AIhQDYH/4nUvz4iV5UIpUT6LqffHIa8KeM=)
                          2: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: 0iLcK2GmKo9TlWspNBxfVBn2mZhpVjYhpHKKgY4CDoA=)
                          3: 6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl (hash: qApqlx0u8MC/BNKAnCyRlGsGlKfSarVaoWo3HgAfeHA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl
                          rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 04:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c9:1a:da:a0:f1:86:f2:33:0a:89:52:6e:62:73:96:d3:32:74:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109
        Validity
            Not Before: Jun 17 08:38:33 2026 GMT
            Not After : Jun 18 08:55:33 2026 GMT
        Subject: CN=C173A85047C2D81EA9B9D24E15E3D29C0EFEEDF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:54:82:fe:2a:3a:e7:fb:3d:85:6e:38:44:
                    15:b8:db:24:78:0b:70:59:fb:68:cb:e4:b0:f2:01:
                    1a:4a:e4:c3:6e:0c:45:54:6a:9f:bb:2a:aa:18:f9:
                    72:0f:f4:89:6e:3c:c4:e3:d7:8f:59:e1:aa:ae:e0:
                    7e:5d:d9:4d:1a:b3:e7:78:00:83:2e:53:e7:ec:3a:
                    9c:e9:30:27:9c:ba:1a:f4:9b:7c:cd:4d:30:24:e9:
                    b8:e6:cd:44:04:45:32:f6:fe:3f:10:02:cf:ea:75:
                    d7:80:dd:42:8b:79:1c:99:55:61:d0:95:9d:5b:0e:
                    fe:83:0d:15:be:8b:b3:7e:47:37:eb:e3:2a:21:b5:
                    9c:d2:4b:42:61:b0:ab:52:b1:21:24:12:16:20:e9:
                    6d:8e:87:78:3f:41:29:b5:d3:1d:8b:4e:91:96:b5:
                    fd:48:44:fc:33:3c:3f:91:4d:e2:87:ee:2a:20:70:
                    74:46:05:67:e8:b2:97:cf:51:03:d9:58:ef:72:7c:
                    b9:44:46:ed:72:d9:31:a3:4c:58:98:89:ea:a0:81:
                    5b:2e:ff:de:bc:10:4d:05:2e:e9:da:f3:ab:bc:eb:
                    e7:25:ad:4a:4b:25:3a:9d:36:b2:a6:74:d7:34:63:
                    11:00:e2:2f:fa:2f:2e:11:1f:3c:38:46:92:47:0c:
                    e3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:73:A8:50:47:C2:D8:1E:A9:B9:D2:4E:15:E3:D2:9C:0E:FE:ED:F9
            X509v3 Authority Key Identifier:
                keyid:6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:02:0b:c8:5e:50:80:27:41:27:4c:3a:d3:6d:57:b7:0c:35:
         19:b7:d6:50:ef:e2:5e:d4:05:dd:9a:c9:27:e6:5b:0c:47:9b:
         f1:28:e2:1a:d4:4d:4d:f0:c9:90:26:26:01:df:34:9a:4e:19:
         e9:18:a7:99:42:89:ba:a1:b5:54:15:18:75:d0:51:0a:ce:d7:
         5e:00:94:29:6c:3f:f4:34:5f:2c:2b:2f:41:82:09:0f:c3:46:
         31:4b:2e:69:a0:01:0f:4e:f1:cb:d6:52:33:c6:b9:2a:2b:ea:
         fb:d4:38:73:04:cc:c4:15:77:6c:3d:f3:05:b6:70:3d:8f:be:
         ee:ea:f7:64:35:1e:b4:ca:aa:07:7f:bb:2f:bc:15:a8:88:fa:
         af:7e:b6:8e:2c:34:af:6e:e1:bb:ef:14:5a:cb:55:b2:0a:dd:
         5e:65:41:81:01:d7:90:93:20:f0:7f:ee:71:92:ed:84:6a:05:
         6b:c7:b5:69:2a:5a:68:81:fc:5c:3a:89:cf:40:7b:70:fb:9c:
         67:72:b0:f1:34:6e:98:18:dd:77:0e:43:13:90:56:07:f5:bc:
         ea:e2:94:6e:ed:5e:6c:be:d0:3a:9c:05:19:3e:17:4a:a4:90:
         96:e6:db:8c:c1:a4:f4:e1:b1:2b:de:85:cd:a3:23:d6:81:a6:
         98:6c:14:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:36:59 2026 by rpki-client