Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
File:                     F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft (raw, json)
Hash identifier:          vTVi8Sj9oaji3HwUJeWHaagibBEN/zb2lqMKBW1S0/Y=
Subject key identifier:   4A:04:FA:5C:C4:3C:0E:DE:35:75:F7:30:EB:F9:AB:17:7B:C1:C6:28
Authority key identifier: F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F
Certificate issuer:       /CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F
Certificate serial:       254BB3BCDED08D29668411DB5B6E8293B8E97619
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
Manifest number:          3A
Signing time:             Sun 14 Jun 2026 03:42:18 +0000
Manifest this update:     Sun 14 Jun 2026 03:37:18 +0000
Manifest next update:     Mon 15 Jun 2026 07:21:18 +0000
Files and hashes:         1: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: WoyiyEwtcxrs6WeZl6+1LDF+/GCvDZPi/2jRACfAICg=)
                          2: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: FbWZ4d1oaoXc64Oi7ejcQls/PiOFOld1/wrHXSd2XuI=)
                          3: F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl (hash: cFbFOvS+b40pFrEBMCjO3Jam8vHyturVe+HwdjRNIYM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl
                          rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Jun 2026 07:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4b:b3:bc:de:d0:8d:29:66:84:11:db:5b:6e:82:93:b8:e9:76:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F
        Validity
            Not Before: Jun 14 03:37:18 2026 GMT
            Not After : Jun 15 07:21:18 2026 GMT
        Subject: CN=4A04FA5CC43C0EDE3575F730EBF9AB177BC1C628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:bb:f9:89:b3:07:15:1a:9e:6e:2e:8a:e6:
                    d5:3e:34:48:82:1f:59:5a:07:fd:9f:90:43:92:5b:
                    45:6f:2f:a0:62:36:46:6f:29:95:90:33:6c:79:12:
                    11:ac:c6:6d:ea:cd:e8:48:15:0c:9e:64:12:d6:e6:
                    e9:22:6c:75:d0:0b:c7:ab:63:66:8f:1b:54:f7:28:
                    86:88:00:65:31:95:46:4c:d4:39:7b:a2:17:50:de:
                    3e:e4:d2:46:0d:db:4a:d7:4d:d8:16:0e:26:a3:82:
                    81:3d:29:69:3e:b3:88:d0:c3:1d:d2:cb:d4:53:8c:
                    74:31:4c:ab:08:c6:5e:09:5b:ca:27:e7:76:31:66:
                    41:92:54:8f:35:6b:9c:34:b9:56:28:97:be:b2:4b:
                    90:c6:ee:c5:44:f1:5a:c6:d9:8a:1a:e2:a8:96:29:
                    b0:94:8b:f8:03:32:58:e4:05:35:a6:ff:67:6d:62:
                    de:67:83:ba:0a:68:4c:59:1f:d8:7d:fb:f8:95:36:
                    5f:56:80:0f:33:e2:af:68:a4:e5:09:0c:bb:9e:94:
                    b8:ee:62:81:85:34:7f:fd:ec:ac:53:91:f5:ed:74:
                    82:5e:8b:0f:ff:9f:0e:bf:ee:d6:47:75:ff:a9:9f:
                    5b:f6:ed:da:44:ae:4b:79:bb:f5:b5:59:16:bd:41:
                    01:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:04:FA:5C:C4:3C:0E:DE:35:75:F7:30:EB:F9:AB:17:7B:C1:C6:28
            X509v3 Authority Key Identifier:
                keyid:F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0a:d0:19:5a:64:34:4e:2f:7e:0c:4b:e5:c5:e8:92:5e:26:
         5e:8f:74:82:e7:b6:9e:7f:6f:df:32:dd:47:31:d7:c1:90:65:
         e8:4e:79:6b:4d:fb:15:99:26:45:bf:f5:78:50:6d:78:3b:e6:
         52:cc:82:19:a7:38:11:4a:25:c6:20:ca:28:91:17:e9:56:9d:
         1d:b7:1a:aa:56:2c:12:dc:88:99:8f:76:c0:96:6b:f5:56:2e:
         e9:9f:dc:03:86:fd:42:6c:68:72:1d:52:cf:6e:fc:e8:3a:04:
         30:7d:10:fe:d6:20:a1:53:79:07:e6:4f:1e:3e:ca:01:a8:93:
         23:6c:14:60:a3:d4:db:f1:14:c9:8f:0c:1f:b0:84:b0:d1:30:
         2a:37:60:55:99:f5:2d:4c:ed:99:fd:d4:d9:67:ba:a4:23:84:
         a5:15:06:eb:65:05:fc:b6:cc:e9:ee:78:b1:84:a9:63:a4:48:
         68:10:ad:dd:9b:cb:22:f1:33:0b:56:c5:aa:df:de:0c:b4:f2:
         1d:92:5f:e4:de:ea:24:28:eb:53:71:ea:32:32:51:ce:8f:98:
         1f:ba:73:96:cf:af:23:6a:49:36:8b:a3:4d:08:10:7e:10:db:
         1f:95:22:d2:4d:06:d1:90:48:ec:d0:75:5c:fb:61:de:34:36:
         09:92:94:8e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJUuzvN7QjSlmhBHbW26Ck7jpdhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBEOEYwRDk4OTU4NjUwMzg1OTM0MURGN0ZGNEFFOEZG
MTJBNEExRjAeFw0yNjA2MTQwMzM3MThaFw0yNjA2MTUwNzIxMThaMDMxMTAvBgNV
BAMTKDRBMDRGQTVDQzQzQzBFREUzNTc1RjczMEVCRjlBQjE3N0JDMUM2MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAArv5ibMHFRqebi6K5tU+NEiC
H1laB/2fkEOSW0VvL6BiNkZvKZWQM2x5EhGsxm3qzehIFQyeZBLW5ukibHXQC8er
Y2aPG1T3KIaIAGUxlUZM1Dl7ohdQ3j7k0kYN20rXTdgWDiajgoE9KWk+s4jQwx3S
y9RTjHQxTKsIxl4JW8on53YxZkGSVI81a5w0uVYol76yS5DG7sVE8VrG2Yoa4qiW
KbCUi/gDMljkBTWm/2dtYt5ng7oKaExZH9h9+/iVNl9WgA8z4q9opOUJDLuelLju
YoGFNH/97KxTkfXtdIJeiw//nw6/7tZHdf+pn1v27dpErkt5u/W1WRa9QQHFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUSgT6XMQ8Dt41dfcw6/mrF3vBxigwHwYDVR0j
BBgwFoAU8Njw2YlYZQOFk0Hff/Suj/EqSh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWJkZmY4MTktMmJhZC00ODNkLTlmYTgtYjZlYmM0ODQwMzFhLzAvRjBEOEYwRDk4
OTU4NjUwMzg1OTM0MURGN0ZGNEFFOEZGMTJBNEExRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMEQ4RjBEOTg5NTg2NTAzODU5MzQxREY3RkY0QUU4RkYxMkE0
QTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm
YTgtYjZlYmM0ODQwMzFhLzAvRjBEOEYwRDk4OTU4NjUwMzg1OTM0MURGN0ZGNEFF
OEZGMTJBNEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGwK0BlaZDROL34MS+XF6JJeJl6PdILntp5/
b98y3Ucx18GQZehOeWtN+xWZJkW/9XhQbXg75lLMghmnOBFKJcYgyiiRF+lWnR23
GqpWLBLciJmPdsCWa/VWLumf3AOG/UJsaHIdUs9u/Og6BDB9EP7WIKFTeQfmTx4+
ygGokyNsFGCj1NvxFMmPDB+whLDRMCo3YFWZ9S1M7Zn91NlnuqQjhKUVButlBfy2
zOnueLGEqWOkSGgQrd2byyLxMwtWxarf3gy08h2SX+Te6iQo61Nx6jIyUc6PmB+6
c5bPryNqSTaLo00IEH4Q2x+VItJNBtGQSOzQdVz7Yd40NgmSlI4=
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:58:06 2026 by rpki-client