Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft
File:                     E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft (raw, json)
Hash identifier:          cRaWSWwcfstpRrA7T/bt9tWySIP6yPakjlPnNmNxrDc=
Subject key identifier:   6B:41:0B:40:93:BE:86:CE:5D:0D:D0:CF:83:4A:C5:60:79:8B:0F:B6
Authority key identifier: E8:F2:39:42:C8:71:B1:A2:3D:50:AA:70:27:A7:4A:BD:C7:17:2E:A3
Certificate issuer:       /CN=E8F23942C871B1A23D50AA7027A74ABDC7172EA3
Certificate serial:       7070551E4CB38ACACA02D5FE350C8FBF5800D9DC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 05:19:17 +0000
Manifest this update:     Wed 17 Jun 2026 05:14:17 +0000
Manifest next update:     Thu 18 Jun 2026 08:01:17 +0000
Files and hashes:         1: E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl (hash: nSkmWqXwiKwnYHSiGb1Qnm0+m2Dnxd828Eq1i4YY5Zg=)
                          2: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: hL7QfKjtDKqwKchVRtqitw7xLrTQDNQicxI0MMMupQI=)
                          3: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: /GUQyhQCCG48GVOr5PjkMlvyumHtwdaSkLWzQJVBKPU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl
                          rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:70:55:1e:4c:b3:8a:ca:ca:02:d5:fe:35:0c:8f:bf:58:00:d9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8F23942C871B1A23D50AA7027A74ABDC7172EA3
        Validity
            Not Before: Jun 17 05:14:17 2026 GMT
            Not After : Jun 18 08:01:17 2026 GMT
        Subject: CN=6B410B4093BE86CE5D0DD0CF834AC560798B0FB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:2a:5b:84:20:38:ce:a9:ca:4e:53:ac:97:
                    5d:a2:d3:e0:22:ee:6b:12:fc:d9:14:eb:02:ea:3b:
                    22:fa:1a:f4:f1:0c:99:76:ce:75:ba:a5:46:86:31:
                    9f:c3:15:17:08:1d:19:11:04:1b:90:43:ec:43:39:
                    97:a0:cc:bb:ed:4e:8f:16:22:70:bd:2e:9d:46:34:
                    20:30:ee:1b:8a:c5:df:ea:5a:66:40:0f:8e:80:20:
                    99:29:e6:85:05:be:5e:e1:8e:73:cd:19:7f:f9:a8:
                    f2:2c:96:ec:f2:12:7e:b4:2f:be:08:12:de:33:6b:
                    a0:8c:e2:87:f8:e8:ea:35:cb:19:be:2d:a5:5a:35:
                    68:47:c7:d6:30:a6:e4:c8:ce:10:87:87:18:f2:7f:
                    8a:9e:7b:31:53:15:54:00:8b:1b:0f:e2:1f:b8:b8:
                    fe:58:46:c6:27:a0:b2:82:fe:67:71:45:92:65:18:
                    22:69:08:21:ba:ec:65:7d:61:bd:8c:5d:34:3d:97:
                    68:7d:35:18:4d:9c:25:7d:e6:19:b1:6d:5b:f9:de:
                    91:57:99:bb:41:1c:c9:46:43:e1:f4:28:56:2f:d8:
                    fe:d0:a6:f5:48:26:f5:75:d6:29:87:2e:07:1d:99:
                    17:c4:5f:8b:76:6e:5a:a7:b5:26:3a:68:57:66:61:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:41:0B:40:93:BE:86:CE:5D:0D:D0:CF:83:4A:C5:60:79:8B:0F:B6
            X509v3 Authority Key Identifier:
                keyid:E8:F2:39:42:C8:71:B1:A2:3D:50:AA:70:27:A7:4A:BD:C7:17:2E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:3a:eb:93:e9:64:5b:ea:d2:1a:2a:3c:dc:22:9c:82:5a:a1:
         5c:83:0a:df:93:bf:16:1e:a9:07:f5:c4:1b:d9:d8:ab:55:f9:
         71:5f:9f:c0:6b:d6:dc:5e:ba:3d:d3:e2:e2:af:9e:7e:2d:4f:
         1d:5e:90:31:c7:3a:c7:d5:d9:64:45:28:6e:e1:d1:fe:ca:4e:
         1e:9e:e6:c6:51:7d:7c:6d:e5:23:53:74:a1:40:df:60:d4:d0:
         d4:35:29:1d:9a:1c:3b:d6:6a:62:16:b2:b5:a5:82:45:97:65:
         7b:0c:e1:8a:5b:d4:46:ca:a8:e6:92:cf:69:7a:93:34:d0:64:
         f5:47:30:18:94:d0:86:e4:6e:8c:f4:28:c3:07:92:91:18:58:
         4d:d9:c2:5c:ac:37:e8:ab:0e:6e:24:e5:c8:23:80:8d:0c:fd:
         56:63:5d:0d:e1:11:51:e1:7d:70:80:a3:33:15:35:e3:c9:a1:
         da:db:a6:56:e1:f2:b6:4e:71:47:60:2b:2d:4d:73:12:52:96:
         f4:de:8b:77:65:83:6e:e7:2c:8e:61:5e:8d:0a:ef:ec:3e:03:
         aa:75:59:3d:96:da:46:12:85:ca:ce:bd:55:d2:61:27:a2:68:
         61:eb:68:51:7c:ba:39:65:ed:e4:3d:50:96:57:ce:78:98:a5:
         b7:46:d2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:27 2026 by rpki-client