Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft
File:                     148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft (raw, json)
Hash identifier:          i6QgfBlJacGyvMzp3rfsmeKSiVGqPb3McDRQ18PqnD8=
Subject key identifier:   D1:8E:E7:4F:6F:7F:07:3D:48:5E:D4:35:D5:7F:36:3F:87:EC:B0:F9
Authority key identifier: 14:8C:3A:87:20:C5:CD:8A:B7:FB:CE:7B:83:5B:9D:20:0B:CF:6B:6E
Certificate issuer:       /CN=148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E
Certificate serial:       72CD28F22A6DEA4D8445EEAE7268360000790336
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 03:21:50 +0000
Manifest this update:     Wed 17 Jun 2026 03:16:50 +0000
Manifest next update:     Thu 18 Jun 2026 07:11:50 +0000
Files and hashes:         1: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: b0p+aEnGITPNe6S1A1lEh2z0FMf0b3zvYLaeJ0qOUoQ=)
                          2: 148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl (hash: 98lZkGgz3Ym/DmU4joTzT4ESlaKonZr6xuBELe2sYMA=)
                          3: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: 4x7d4CbAIzm/F6oW0bYK3R10sGQPrNbSrYyem2DdQNw=)
                          4: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: 6N1mNk7kMJutxDC4iwMyVS1ZwmLt1n7dTUB5ei+yYU8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl
                          rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:cd:28:f2:2a:6d:ea:4d:84:45:ee:ae:72:68:36:00:00:79:03:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E
        Validity
            Not Before: Jun 17 03:16:50 2026 GMT
            Not After : Jun 18 07:11:50 2026 GMT
        Subject: CN=D18EE74F6F7F073D485ED435D57F363F87ECB0F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4f:2b:67:eb:91:86:a4:71:9d:34:64:6a:2a:
                    d5:3a:14:13:e4:b4:7a:97:a6:9a:64:2d:c7:24:9d:
                    e8:8a:6a:ba:8a:5c:2f:24:35:be:bf:16:a0:0f:23:
                    42:99:dc:5b:8e:e2:f1:2b:08:e0:f0:ba:e6:df:b7:
                    6a:fd:33:81:8d:0a:35:cf:bd:f6:2c:33:09:c4:ee:
                    56:6c:2e:b0:50:ae:4d:37:a7:a4:82:2c:71:e0:70:
                    71:21:51:d5:be:71:24:7f:4a:ac:ca:03:75:11:46:
                    b0:f6:38:27:a2:3b:dd:e5:fd:0f:cf:16:49:38:29:
                    6d:8b:b7:07:dd:52:ac:c3:88:f4:ac:d6:14:fb:5e:
                    35:f0:c8:cb:c0:c8:e7:26:d5:6c:cf:c1:cd:6a:ae:
                    ae:e4:14:c3:11:75:8e:60:f3:de:47:5d:33:a4:92:
                    a0:ae:ea:b5:70:3b:1a:56:e3:5a:98:5a:97:b9:af:
                    49:e0:1f:c4:b5:c9:c4:cd:90:de:09:5d:20:eb:24:
                    93:bd:47:d1:1c:45:1d:f8:15:f7:fd:e1:8d:17:ad:
                    e9:d6:04:88:d7:26:eb:b3:51:d4:f3:33:e3:8a:44:
                    d9:90:51:c0:e6:0c:b4:d5:6b:f1:00:78:8d:7f:db:
                    e0:6c:02:fa:30:3a:33:bf:6e:d0:b2:7b:6b:a0:36:
                    26:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8E:E7:4F:6F:7F:07:3D:48:5E:D4:35:D5:7F:36:3F:87:EC:B0:F9
            X509v3 Authority Key Identifier:
                keyid:14:8C:3A:87:20:C5:CD:8A:B7:FB:CE:7B:83:5B:9D:20:0B:CF:6B:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ff:38:2c:85:0e:29:e0:3c:92:d2:1e:b3:38:27:e4:ac:ac:
         af:7e:b8:ae:2d:21:c8:2b:a3:94:75:bd:56:12:f2:6d:b9:b2:
         97:29:80:15:e1:58:70:a7:a6:71:54:06:0b:0f:63:15:c1:0f:
         d4:c9:0c:7d:36:27:ff:4e:60:5c:3d:bc:9e:36:8b:87:97:3e:
         24:5e:4f:88:ca:3d:c1:d8:f3:68:07:fe:9b:53:27:57:8b:9b:
         c9:75:24:fe:f9:6b:31:be:6e:54:88:f8:da:af:7f:76:c2:1b:
         41:b7:ea:93:9b:21:21:78:b3:53:68:58:e6:57:de:69:6b:2b:
         30:cf:c7:8b:d0:94:15:22:29:44:da:e2:87:c8:e3:04:e3:f2:
         b1:37:8b:a0:f3:30:d0:4c:7e:e4:1f:04:7c:51:75:e7:66:db:
         74:62:62:d9:97:0c:97:38:71:88:e1:15:20:f2:bd:c4:c8:07:
         87:48:e5:f1:71:85:ec:ec:02:85:3f:1f:7f:2d:55:68:3e:94:
         56:97:cd:d2:1f:97:d4:0b:ff:de:33:d3:e5:78:d6:03:69:6e:
         23:bb:7d:38:84:08:55:f2:41:81:e4:56:f8:92:3f:24:49:38:
         d9:ae:bc:9f:a6:98:14:a3:85:5b:f8:f4:37:72:4d:68:77:50:
         54:e8:fb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:14:58 2026 by rpki-client