Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft
File:                     9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft (raw, json)
Hash identifier:          UvqdB7VaeDCyyb9V9m9N+H2D7BehBSNjYZuKnsc1UA8=
Subject key identifier:   88:22:91:CB:84:58:1E:2A:B9:F1:CE:DE:50:12:F3:28:6A:26:3B:D1
Authority key identifier: 9E:5A:74:B4:E1:E6:2D:25:BA:36:E3:E7:A4:40:2D:90:6E:F7:0E:2A
Certificate issuer:       /CN=9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A
Certificate serial:       389850274578C8330C428EDAA457F5B3173BC97A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft
Manifest number:          3B
Signing time:             Sun 14 Jun 2026 19:51:15 +0000
Manifest this update:     Sun 14 Jun 2026 19:46:15 +0000
Manifest next update:     Mon 15 Jun 2026 22:14:15 +0000
Files and hashes:         1: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (hash: lw3Ph+05xOCfBGre0101Mumi0SBmIeVe3yfjhxly5RI=)
                          2: 9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl (hash: kjonmrphaJiQ5U8uWEqLl8eHxFUkGMFc1Tu3eEmglJw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl
                          rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Jun 2026 22:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:98:50:27:45:78:c8:33:0c:42:8e:da:a4:57:f5:b3:17:3b:c9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A
        Validity
            Not Before: Jun 14 19:46:15 2026 GMT
            Not After : Jun 15 22:14:15 2026 GMT
        Subject: CN=882291CB84581E2AB9F1CEDE5012F3286A263BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:98:0f:10:b1:f1:d8:2f:61:81:5c:bb:69:e9:
                    21:8f:31:ac:4e:66:77:17:d1:c8:6d:4d:72:53:ef:
                    9a:b9:c3:c4:9b:eb:dc:3d:74:55:49:ed:c5:5b:0d:
                    66:28:e2:96:81:3e:dd:b6:9f:51:14:f1:7b:c2:91:
                    12:b7:92:2f:1c:3d:61:e9:5a:20:b7:8f:f3:0a:df:
                    82:9c:5f:d2:72:4b:34:61:86:6e:ed:55:2b:6b:c6:
                    4c:ce:e1:af:d8:aa:48:ef:ab:e7:9f:07:43:03:dc:
                    0b:a6:30:0c:65:d8:72:a4:32:34:e4:da:a9:85:97:
                    eb:cc:6c:a7:97:83:a6:c7:89:e6:ec:c2:c7:a9:72:
                    fa:f4:10:1b:ee:86:61:b5:9d:39:a5:1c:c1:2b:3b:
                    be:54:4d:27:ce:4b:9b:2e:be:01:39:8d:19:65:0c:
                    aa:d5:e9:e9:4a:8a:bb:db:16:86:52:0d:b8:8f:c1:
                    36:46:95:f8:29:cb:ee:44:f2:45:17:26:68:19:19:
                    a2:00:04:32:33:8d:8f:12:c7:8e:bd:c8:4d:35:1a:
                    bf:09:24:47:52:85:5c:d4:b4:81:e6:66:c6:88:9e:
                    f6:9d:4f:d8:f9:1c:b9:85:6a:2a:11:05:2b:7e:49:
                    56:82:67:70:89:6c:a7:60:a8:c8:52:c0:0f:2c:45:
                    f5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:22:91:CB:84:58:1E:2A:B9:F1:CE:DE:50:12:F3:28:6A:26:3B:D1
            X509v3 Authority Key Identifier:
                keyid:9E:5A:74:B4:E1:E6:2D:25:BA:36:E3:E7:A4:40:2D:90:6E:F7:0E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:44:66:52:98:00:6f:16:34:67:46:74:ca:fa:46:b5:bc:ac:
         a8:49:e0:2c:3e:b6:31:62:74:b4:de:0d:95:1c:24:82:a9:87:
         08:fe:af:07:9a:6a:50:be:20:d6:52:bf:2c:81:cd:34:f4:8e:
         84:d4:7e:00:07:24:5d:b4:8b:ec:19:9a:f5:fd:fe:32:de:65:
         80:4d:8d:fd:e7:f7:98:0a:dd:5e:0d:d7:7e:05:cb:2b:96:6a:
         66:dc:fb:0a:8a:67:27:e2:78:5e:28:a3:6b:91:6b:2b:59:32:
         a2:b9:19:16:ea:99:ce:a0:60:56:aa:d3:34:e1:73:09:ff:a7:
         52:35:c4:b9:93:fd:b4:bc:ac:c8:08:6b:78:8f:d6:d7:23:40:
         00:6c:e9:5e:34:40:83:6c:47:1b:ff:a2:3d:99:cc:90:5b:02:
         2c:2c:4f:3a:57:f2:b5:84:06:21:fb:89:50:30:ab:6c:89:a9:
         9d:da:43:f2:44:9b:9c:b7:0f:f2:98:9d:8f:de:54:37:3d:36:
         48:7a:03:c0:91:c8:c0:47:78:39:ff:bf:64:14:d6:c6:04:e1:
         08:32:06:84:6e:05:e5:62:b8:b4:be:3a:70:95:8f:8f:1a:80:
         24:35:f7:4e:e1:d4:4f:81:4d:15:fe:d8:ca:60:cf:76:13:d8:
         4d:a2:7f:c2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOJhQJ0V4yDMMQo7apFf1sxc7yXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU1QTc0QjRFMUU2MkQyNUJBMzZFM0U3QTQ0MDJEOTA2
RUY3MEUyQTAeFw0yNjA2MTQxOTQ2MTVaFw0yNjA2MTUyMjE0MTVaMDMxMTAvBgNV
BAMTKDg4MjI5MUNCODQ1ODFFMkFCOUYxQ0VERTUwMTJGMzI4NkEyNjNCRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcmA8QsfHYL2GBXLtp6SGPMaxO
ZncX0chtTXJT75q5w8Sb69w9dFVJ7cVbDWYo4paBPt22n1EU8XvCkRK3ki8cPWHp
WiC3j/MK34KcX9JySzRhhm7tVStrxkzO4a/Yqkjvq+efB0MD3AumMAxl2HKkMjTk
2qmFl+vMbKeXg6bHiebswsepcvr0EBvuhmG1nTmlHMErO75UTSfOS5suvgE5jRll
DKrV6elKirvbFoZSDbiPwTZGlfgpy+5E8kUXJmgZGaIABDIzjY8Sx469yE01Gr8J
JEdShVzUtIHmZsaInvadT9j5HLmFaioRBSt+SVaCZ3CJbKdgqMhSwA8sRfX5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUiCKRy4RYHiq58c7eUBLzKGomO9EwHwYDVR0j
BBgwFoAUnlp0tOHmLSW6NuPnpEAtkG73DiowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTZjMGNkNWQtZDA4NS00ZTJmLWIyMzAtN2I3ZTY2ZDEzOTNmLzAvOUU1QTc0QjRF
MUU2MkQyNUJBMzZFM0U3QTQ0MDJEOTA2RUY3MEUyQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85RTVBNzRCNEUxRTYyRDI1QkEzNkUzRTdBNDQwMkQ5MDZFRjcw
RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZjMGNkNWQtZDA4NS00ZTJmLWIy
MzAtN2I3ZTY2ZDEzOTNmLzAvOUU1QTc0QjRFMUU2MkQyNUJBMzZFM0U3QTQ0MDJE
OTA2RUY3MEUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ5EZlKYAG8WNGdGdMr6RrW8rKhJ4Cw+tjFi
dLTeDZUcJIKphwj+rweaalC+INZSvyyBzTT0joTUfgAHJF20i+wZmvX9/jLeZYBN
jf3n95gK3V4N134FyyuWambc+wqKZyfieF4oo2uRaytZMqK5GRbqmc6gYFaq0zTh
cwn/p1I1xLmT/bS8rMgIa3iP1tcjQABs6V40QINsRxv/oj2ZzJBbAiwsTzpX8rWE
BiH7iVAwq2yJqZ3aQ/JEm5y3D/KYnY/eVDc9Nkh6A8CRyMBHeDn/v2QU1sYE4Qgy
BoRuBeViuLS+OnCVj48agCQ1907h1E+BTRX+2Mpgz3YT2E2if8I=
-----END CERTIFICATE-----
Generated at Mon Jun 15 14:10:26 2026 by rpki-client