Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.mft
File:                     1072303E63837C5CAD6D6208D064394F85518DC3.mft (raw, json)
Hash identifier:          RDNINKwxaTDiI9xzHfa3zGNN99212jkNSdSe7ndXG7I=
Subject key identifier:   50:B9:FC:14:81:59:0F:06:68:D1:6F:7A:B6:5E:11:51:DB:95:2B:04
Authority key identifier: 10:72:30:3E:63:83:7C:5C:AD:6D:62:08:D0:64:39:4F:85:51:8D:C3
Certificate issuer:       /CN=1072303E63837C5CAD6D6208D064394F85518DC3
Certificate serial:       1BF221B30311637038C4EF75FD15772954BA8907
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1072303E63837C5CAD6D6208D064394F85518DC3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 07:47:16 +0000
Manifest this update:     Wed 17 Jun 2026 07:42:16 +0000
Manifest next update:     Thu 18 Jun 2026 08:23:16 +0000
Files and hashes:         1: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: VL+yGGs45eeKxi6k75PI3vnPXDk9Qwklp2W/skU92Zw=)
                          2: 1072303E63837C5CAD6D6208D064394F85518DC3.crl (hash: mnjTSz9Jnw8oZ6BA4bqOfqDJooW0yXa7SP36UZVflho=)
                          3: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: ZpWBUTYuQcAKlvk2d2JG20XN4fDhWIahOn1m4ehuvWM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.crl
                          rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1072303E63837C5CAD6D6208D064394F85518DC3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f2:21:b3:03:11:63:70:38:c4:ef:75:fd:15:77:29:54:ba:89:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1072303E63837C5CAD6D6208D064394F85518DC3
        Validity
            Not Before: Jun 17 07:42:16 2026 GMT
            Not After : Jun 18 08:23:16 2026 GMT
        Subject: CN=50B9FC1481590F0668D16F7AB65E1151DB952B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:f1:0b:91:81:1d:cd:39:8c:67:54:3e:6d:
                    b3:77:75:9c:39:be:da:b4:42:29:b3:45:72:be:f2:
                    1e:4f:e3:6e:d7:25:dd:41:b9:5e:b4:b5:76:b4:ff:
                    e7:0c:76:d8:96:09:83:30:2f:6c:7d:b3:b9:87:33:
                    14:12:1d:99:ff:24:14:b7:ce:82:16:7a:49:c6:e4:
                    26:80:43:6e:f4:82:01:27:09:d3:1c:3d:c0:97:a6:
                    03:97:57:02:16:a3:0f:83:6f:14:34:58:23:25:7f:
                    95:a7:7b:a7:d5:34:d7:82:25:8c:13:3a:c3:e3:b4:
                    af:f0:74:c4:73:04:da:e7:69:8a:f2:e0:15:01:0c:
                    bd:00:99:57:fe:dc:30:ca:40:c5:17:8e:71:ad:00:
                    40:c4:ae:d0:14:79:d2:12:8f:e0:7b:98:69:e0:59:
                    bf:76:03:a3:02:84:14:5a:8f:2d:5a:11:f3:f4:ae:
                    8e:4d:56:ce:54:66:c4:7d:1f:8a:62:62:a8:27:a9:
                    2f:6d:58:1e:fb:3d:3c:94:cc:96:df:26:41:6c:a4:
                    c5:18:ce:ce:dd:6a:ad:93:0b:67:6d:35:44:93:09:
                    33:9a:9d:36:30:91:8c:ae:29:79:bb:14:eb:0e:50:
                    3f:df:aa:68:51:c6:2d:71:e3:37:96:06:13:d4:b9:
                    1d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B9:FC:14:81:59:0F:06:68:D1:6F:7A:B6:5E:11:51:DB:95:2B:04
            X509v3 Authority Key Identifier:
                keyid:10:72:30:3E:63:83:7C:5C:AD:6D:62:08:D0:64:39:4F:85:51:8D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1072303E63837C5CAD6D6208D064394F85518DC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5a:81:14:a8:68:a6:2e:ba:c6:00:bd:5b:34:09:a7:a0:dd:
         66:ba:80:a7:4d:a4:a7:ff:46:f2:a5:1d:fd:3d:48:99:4f:43:
         2f:40:d6:e0:0c:10:8d:80:71:d3:1d:c1:f4:46:2a:ca:c3:c4:
         4d:27:67:6d:c5:35:4b:86:8e:ec:43:43:35:0c:53:0f:dc:36:
         de:fd:58:9c:5f:67:99:21:d7:4a:c0:fc:f6:75:2e:e6:0f:61:
         5c:c4:f4:5e:a0:70:38:ff:89:50:07:3c:74:00:6e:4e:66:43:
         a3:56:ec:87:2f:d2:74:65:4e:ac:81:64:06:0d:29:ee:90:21:
         50:b9:3e:a2:43:f8:75:55:62:46:4a:a7:15:bc:05:07:e7:6d:
         d7:73:48:31:80:bf:55:6e:bd:1b:0c:16:22:eb:84:77:06:3e:
         dd:b9:dd:14:81:f7:5e:d9:29:25:10:ff:c8:db:7b:da:fe:89:
         02:bc:14:f4:27:bb:a6:6d:a6:8f:9f:52:f0:6f:5a:f6:2e:50:
         33:cc:04:f3:f6:61:6d:2e:94:fc:12:8e:aa:16:52:92:4c:57:
         a3:53:78:ff:cf:ea:7a:72:00:e9:24:28:2d:d1:4b:3a:23:d6:
         91:fa:12:47:bc:b0:55:c4:3b:ec:46:e7:41:e2:f0:1a:1a:b5:
         b4:b9:69:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:13:12 2026 by rpki-client