Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
File:                     0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft (raw, json)
Hash identifier:          qRuwYp1ASy8gpC9tnQBvbduMLoVruSstA6wmVsZVjZo=
Subject key identifier:   C2:11:4E:41:6F:8C:4D:18:8F:FE:7F:B6:F0:A4:52:CA:1B:7D:EF:04
Authority key identifier: 0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2
Certificate issuer:       /CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2
Certificate serial:       54490EF66FCD1B5AFCBC1B69E737E2918B5871FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
Manifest number:          3D
Signing time:             Wed 17 Jun 2026 09:49:54 +0000
Manifest this update:     Wed 17 Jun 2026 09:44:54 +0000
Manifest next update:     Thu 18 Jun 2026 12:18:54 +0000
Files and hashes:         1: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (hash: prcWJfhlUErzmRWR1H7hkcJb4s+PiXSVs4vIyO1/46s=)
                          2: 3130332e32342e37322e302f32332d3233203d3e203436303631.roa (hash: G9sq4ErGZj+4CsLlGYQ96xB1AH1Q/5k7LHe36UaA1Pw=)
                          3: 3230322e35322e3134312e302f32342d3234203d3e203436303631.roa (hash: ooDWixoDrf/cdih9Rb8FLtagmcLYMAGnpLpX2ocgURU=)
                          4: 3130332e32342e37322e302f32342d3234203d3e203436303631.roa (hash: 6afeRIJnDM/uUZHogbKxMoXG/M34lmpUP/58vATJWAM=)
                          5: 3130332e32342e37332e302f32342d3234203d3e203436303631.roa (hash: MyQFtjJqg7ZYwpERzdoDmD5jzoRErmzO01EIiv31fWg=)
                          6: 3130332e32342e37322e302f32322d3232203d3e203436303631.roa (hash: HPMtJkG9vBmkfKDdQcScUoOmdbP+traQt1X9CJZPJyo=)
                          7: 0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl (hash: 2GTYCX3SWg4dVeLWMCUq5Dz+UoAsFOHjnU+zapxVT8I=)
                          8: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (hash: sfhfAHrl757lamU4yGIl09WzhCGt6COimj3NHeX2Rnc=)
                          9: 323430303a656134303a3a2f33322d3332203d3e203436303631.roa (hash: /Mgyo9ff3zy6arAcZsb+8DNgEw9iCUEDLwcPq3vZVTM=)
                          10: 3130332e32342e37352e302f32342d3234203d3e203436303631.roa (hash: k7wAQ0uD+feQhS7bp4KkJxo3uZUwNKoeGm20CJyRgyc=)
                          11: 3130332e32342e37342e302f32342d3234203d3e203436303631.roa (hash: 4mD9TjqePo/yOB3/Fiwn7z8Fd4y7bA97GyieYO2qTlw=)
                          12: 3130332e32342e37342e302f32332d3233203d3e203436303631.roa (hash: YEcfoQjDpMi0GF8b5kmh9JJ3H1tnO76M1gzrmxVWaMc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl
                          rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:49:0e:f6:6f:cd:1b:5a:fc:bc:1b:69:e7:37:e2:91:8b:58:71:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2
        Validity
            Not Before: Jun 17 09:44:54 2026 GMT
            Not After : Jun 18 12:18:54 2026 GMT
        Subject: CN=C2114E416F8C4D188FFE7FB6F0A452CA1B7DEF04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:04:2c:4a:a3:9f:95:e2:97:41:e6:8a:53:
                    c0:40:f2:45:cc:3d:6d:1b:2b:d8:cf:9b:44:ee:7d:
                    7a:5a:39:48:66:54:1c:ef:3e:6a:24:b2:83:66:05:
                    9a:83:cc:68:6a:f8:b2:94:1a:53:e6:6d:1d:e5:5c:
                    11:9d:82:d8:70:da:8d:96:5a:90:11:bd:84:c6:ce:
                    a0:7e:b1:de:ad:d7:3e:93:66:9d:e1:97:a7:92:b3:
                    4d:e2:a2:23:5c:c6:96:71:3f:a5:1f:aa:a1:94:17:
                    67:69:da:83:d7:ab:15:93:a9:ff:aa:2f:b8:56:60:
                    46:55:f1:91:2e:52:34:77:6e:f1:44:26:d6:b9:03:
                    e1:1d:54:71:50:ff:80:85:05:5d:11:82:14:9a:63:
                    cb:0d:e5:7d:e1:f5:e1:1f:14:55:69:05:5b:55:bc:
                    e0:a6:e8:90:be:81:b1:44:73:a2:e1:48:21:5e:ac:
                    ae:67:0e:3f:56:57:8c:76:14:d4:45:0b:fc:d2:25:
                    e4:b5:73:af:30:fc:6a:28:e1:f1:f3:18:0a:49:9f:
                    25:9a:f2:7b:6a:1c:cb:af:d9:c2:ae:04:3d:43:41:
                    ac:06:59:b5:9b:b3:b2:5f:c4:e3:2b:1a:14:96:8f:
                    fc:ef:69:3a:06:1a:9f:6d:2a:a3:2b:51:fb:76:a4:
                    45:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:11:4E:41:6F:8C:4D:18:8F:FE:7F:B6:F0:A4:52:CA:1B:7D:EF:04
            X509v3 Authority Key Identifier:
                keyid:0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5e:ac:06:4d:e0:02:11:8b:d8:9b:39:e1:d0:6b:9f:2c:cb:
         81:d1:83:c3:79:4c:ae:cd:f4:22:9e:70:dd:25:16:ba:b4:ea:
         2b:6f:9e:c6:d4:33:bd:1c:26:e4:50:ac:f9:01:40:d7:7e:d3:
         eb:1e:74:e5:8c:7a:17:b8:77:46:f9:c8:c5:3e:15:a6:36:dc:
         32:c9:ec:2f:fa:de:02:02:94:b9:69:b6:c7:81:ce:0e:b2:3b:
         00:f9:f5:cb:10:d9:13:ae:24:48:6b:3a:8c:48:52:fe:7d:cb:
         a5:63:93:c2:6a:80:16:e8:a5:c2:6f:12:f4:35:ea:a6:ed:a9:
         0d:69:0b:10:26:f4:61:3b:e5:f4:ec:d2:a5:01:0f:67:2b:b9:
         f6:f1:21:7d:16:bd:e5:cb:36:dc:78:52:d0:89:df:aa:30:07:
         44:a7:93:2a:a1:b9:a1:d6:8d:f7:74:4e:f7:96:eb:ac:98:55:
         f8:b1:88:e0:94:e2:02:ad:de:5b:f6:c4:6e:df:82:fb:20:7e:
         12:97:d8:f7:22:be:51:1b:50:66:fc:bb:13:b5:38:cb:fd:14:
         ba:33:f7:4a:d6:39:87:c6:33:8b:44:1d:a9:53:59:8f:ee:a7:
         4d:1c:ef:0c:16:c4:db:1e:d8:92:af:1a:a4:f4:6f:11:17:fc:
         e1:41:41:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:40:42 2026 by rpki-client