Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
File:                     C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft (raw, json)
Hash identifier:          J/sFZZ6sEm/0AfujkIXWxvJki9kvprEF7NMn+HXxvZM=
Subject key identifier:   60:A5:01:F8:56:E0:13:07:8F:65:54:16:B6:86:D5:3D:04:62:C0:88
Authority key identifier: C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9
Certificate issuer:       /CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
Certificate serial:       52BA1879385F7DF440F8B60E97B1F9C7A98F3888
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 08:33:18 +0000
Manifest this update:     Wed 17 Jun 2026 08:28:18 +0000
Manifest next update:     Thu 18 Jun 2026 11:42:18 +0000
Files and hashes:         1: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: g2Ud6J6HCNFfVncrEeujGYDFgaSbLTIo6wU1RvlC+Tc=)
                          2: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: GPynHByObMVja2DkXkj4DTeAw6Zu/eMPLF3FIx9zUPw=)
                          3: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: eKAt3iHXo2lgEa5TxrbQhnXVdOLFjM4blG/eTgED9F0=)
                          4: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: YRJhcs0eQNvvPgXOg+gQPByywRt+Knf6CLtlmsMwkjM=)
                          5: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: fi/7+4zEIqvSpKlVqvbMDeqY2YCrGnjUpksCJ4fAKrA=)
                          6: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: WqJlVr9FXIRfRfoifCa2GdwTJsz5m8eNFT1ExD1lr/o=)
                          7: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: j1suU85D1/7FjlJvr2yGn6MbcsgwWHNmUCiTqlRJqgg=)
                          8: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: 9h4BjIyizuthkQUuXWWv2bNzQm5B95LJDNd0MLV8X24=)
                          9: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: RkOZ4BqJISFweILCm3wRYadHRRUC1NJILvlksQQiLxk=)
                          10: C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl (hash: GuVFYIhuOVwP5BMTJMR7IewA9uAsAB9y7vM8EWWeNrk=)
                          11: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: YSFAL2tW6cTVQfgDTgZL8q+MB0PvmVYIYCi98VnDYcA=)
                          12: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: ykRVY1EBIN+ucKdlxDLDuc2SEVpBAQD0eYMAZuEgryE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl
                          rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ba:18:79:38:5f:7d:f4:40:f8:b6:0e:97:b1:f9:c7:a9:8f:38:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
        Validity
            Not Before: Jun 17 08:28:18 2026 GMT
            Not After : Jun 18 11:42:18 2026 GMT
        Subject: CN=60A501F856E013078F655416B686D53D0462C088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:43:cf:9e:69:0e:5d:37:51:94:27:ac:61:5e:
                    30:a4:5d:c1:41:81:a5:aa:6e:b9:7d:b7:aa:0b:fe:
                    d5:04:3b:20:36:16:1f:2b:d7:de:58:e7:e4:93:e2:
                    30:43:a8:10:5a:65:08:28:e5:58:6f:55:4a:8a:2f:
                    13:b0:18:98:6c:ff:48:af:a1:16:16:48:08:f7:67:
                    b0:f7:8d:5e:0b:82:b7:91:08:ab:06:79:ce:28:c1:
                    85:b0:0d:b7:2f:aa:ac:57:da:85:56:bf:6c:b9:ae:
                    38:86:df:06:be:aa:ad:c0:ff:cc:8b:41:d2:cf:e6:
                    92:35:d8:f3:c1:16:0b:01:76:ec:5c:2c:83:90:61:
                    cd:a5:92:e3:3f:b6:06:7a:d5:02:31:f1:93:86:e9:
                    1b:54:9b:6a:60:50:57:73:d1:7b:f4:f2:e5:2d:17:
                    15:8f:c1:d3:e8:73:e1:f8:6f:89:5b:e8:f1:0a:2f:
                    5c:8f:ae:da:74:7c:db:c2:0f:ec:17:a5:5d:e1:21:
                    9d:bb:28:29:06:17:94:d0:23:94:6a:83:1d:a2:c1:
                    f4:78:ff:f4:37:db:94:b1:df:b6:96:ab:dd:b3:6a:
                    22:ce:b7:a4:1a:4c:11:3b:91:80:52:30:7e:82:02:
                    07:01:f4:20:3d:49:4a:e8:c4:96:9c:7a:2d:58:6a:
                    a1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A5:01:F8:56:E0:13:07:8F:65:54:16:B6:86:D5:3D:04:62:C0:88
            X509v3 Authority Key Identifier:
                keyid:C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:41:11:49:25:bc:b5:3a:a8:44:e6:41:ac:2b:d1:21:d9:9b:
         c9:3a:90:6f:3a:5f:79:77:01:e4:2f:bd:ae:ab:8c:ee:c0:57:
         35:d8:45:e0:c2:93:9d:bc:3d:f8:e4:37:7d:61:3d:60:4a:7b:
         54:a1:2d:57:35:d1:df:e4:ea:a5:59:90:ef:2f:d0:8d:10:a3:
         cc:f4:21:71:47:de:c8:c8:fa:77:f7:2f:bf:63:ee:48:e0:30:
         f7:11:88:a4:21:d4:1e:04:56:cd:8c:a2:9b:c6:75:63:d9:9a:
         66:2c:48:54:8b:0c:46:71:09:1e:7f:b1:13:93:aa:6c:2d:a7:
         5f:89:3d:76:23:aa:14:47:4d:3c:33:54:fe:b4:9b:eb:a4:55:
         6a:eb:1a:a8:df:ae:78:f7:a2:49:da:46:11:0b:86:c5:a5:9f:
         60:0b:46:0b:fb:b2:54:2e:89:45:83:1e:cc:9b:a0:f9:fc:48:
         24:37:19:38:52:2e:fc:2b:bb:9c:eb:7b:b2:7a:4d:63:f4:39:
         70:8d:ea:52:b4:6f:d1:52:62:0b:9d:e5:d5:6a:a8:3b:fa:74:
         6b:1c:56:2e:48:8e:60:fe:83:25:78:aa:93:75:ec:88:c9:91:
         c1:2b:c8:44:5a:62:88:3c:d4:59:53:69:7e:0f:d3:d5:ca:12:
         b7:35:cb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:18:29 2026 by rpki-client