Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft
File:                     91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft (raw, json)
Hash identifier:          1XOGcq1g0NQN8tb+zAsG3XsK8E2AMXcZqrpU/WrQAts=
Subject key identifier:   73:B4:FF:30:4F:67:56:1D:7B:D2:EA:00:34:99:5B:A6:29:72:FF:54
Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9
Certificate issuer:       /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
Certificate serial:       072D299E7C123987A8851873828C558CF6328F3D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 17:55:51 +0000
Manifest this update:     Tue 16 Jun 2026 17:50:51 +0000
Manifest next update:     Wed 17 Jun 2026 20:22:51 +0000
Files and hashes:         1: 3230322e31302e33392e302f32342d3234203d3e203538343837.roa (hash: FMOzKFepxalJiA9R7ziV+8N8e6PtElsKQhGhROCbxF4=)
                          2: 3130332e3235332e3231322e302f32322d3232203d3e203538343837.roa (hash: 1jCC2C8CSqcWHluuI8h5rB9IAj4BjYVy3yCbZsU32bo=)
                          3: 3230322e31302e34352e302f32342d3234203d3e203538343837.roa (hash: Pq42kdvVdDx27B5bNAeqjUJLTlrLQKyMHAB5zlyHMPU=)
                          4: 3130332e3235332e3231322e302f32342d3234203d3e203538343837.roa (hash: pLawXbkYKxokhCiGu4htgBjnF2duVmR81lZEpVfXqtE=)
                          5: 3130332e3235332e3231342e302f32332d3233203d3e203538343837.roa (hash: lLp8Y/uyg9R/4Ak9RdIJf00LqFNskbQ2V+gJZBz02Jg=)
                          6: 3230322e31302e33372e302f32342d3234203d3e203538343837.roa (hash: 9q8vmFKL7oGsGWkB1BKhhu/P2e7OqlLbcokrLiJELeQ=)
                          7: 3230322e31302e33342e302f32332d3233203d3e203538343837.roa (hash: NFc2WVD68KvDyLGSXGxgzJXnsXBUY7x8VG9AIvZ5nuk=)
                          8: 3130332e3235332e3231322e302f32332d3233203d3e203538343837.roa (hash: DCKoKYnpwUxGTL6mTQPgNviVbzOSMo7Pt0/wG5p706Q=)
                          9: 3230322e31302e33362e302f32342d3234203d3e203538343837.roa (hash: QhlhHRS58TOKP2TlkeSZ3GSiJh6rVZb0yknG88DBN/8=)
                          10: 3230322e31302e33382e302f32332d3233203d3e203538343837.roa (hash: FfgCUaM5r0YJEAtUKJB14M1Hd/RxAj7aA8Zb83q8BcM=)
                          11: 3230322e31302e34322e302f32342d3234203d3e203538343837.roa (hash: iq+TPsb2JWtOfSocldqSjmo2icbhTwmo72t7zi5fLU4=)
                          12: 323030313a6466313a373830303a3a2f34382d3438203d3e203538343837.roa (hash: vY/Ub03xqcj72v4RHCIezucQY4Qdw7prwT9UpJT80Mk=)
                          13: 3130332e3235332e3231332e302f32342d3234203d3e203538343837.roa (hash: E+N1immRENPXVU/7bbv3smD3y2taIwXbBggOaxh1iyw=)
                          14: 3230322e31302e33382e302f32342d3234203d3e203538343837.roa (hash: BuU2j2Tzku9Y+Nv4sLTJnMWdagAd0n4W+YSomxmWS8w=)
                          15: 3230322e31302e34332e302f32342d3234203d3e203538343837.roa (hash: 5bOvpLw6b1VcZVTrWaOK+xges8G3zIybqqd+s4sPxNE=)
                          16: 3230322e31302e34362e302f32332d3234203d3e203538343837.roa (hash: kKmRE86U5utxwwvOtfvRLdagvzUOQsqXYNn7P0V7LAg=)
                          17: 3230322e31302e34312e302f32342d3234203d3e203538343837.roa (hash: g0Hx5yrKopEHxPdHtj/SRdO2/5oBYvD/cLkEtfxzcgA=)
                          18: 3130332e3235332e3231352e302f32342d3234203d3e203538343837.roa (hash: Vo2Jpt+dSXazibEuz+y6WvVaVvXarzLBSGUclttgvSw=)
                          19: 91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl (hash: mjGrWnAKFnf6LjI+UE1YPo3wcQ0rFznk7TfvXXOPLvw=)
                          20: 3230322e31302e34372e302f32342d3234203d3e203538343837.roa (hash: o/ovZODvAYW8nitqxabUgfoEb6l26ISQ4qAXkJQ9bRQ=)
                          21: 3230322e31302e33362e302f32332d3233203d3e203538343837.roa (hash: vbQLd6cdONw7Pp3qW0mvbEDsNufsb7r6bxU1ZSatIVI=)
                          22: 3230322e31302e33342e302f32342d3234203d3e203538343837.roa (hash: P0Lt12HkMOn7Oz1k9JyvB66m4KQafgfYAgd99v0Pdkg=)
                          23: 3230322e31302e34302e302f32342d3234203d3e203538343837.roa (hash: Hw0kdXNaECW5DIE3IdeWHlxia0Z8ePgN5IvMwxgcTk4=)
                          24: 3230322e31302e33352e302f32342d3234203d3e203538343837.roa (hash: xPINf6qMhMNXsRzoY5JvjSNwNPIFtsb12j6CHRo1d8o=)
                          25: 3230322e31302e34322e302f32332d3233203d3e203538343837.roa (hash: zIT7bQQsfuFKgRAuHb2rpJgo4iUY2OkkcZskjqMXX/8=)
                          26: 3130332e3235332e3231342e302f32342d3234203d3e203538343837.roa (hash: qXViQe0IG/eTHkD0fbY5SDfFmHb+Xoz2ICUsMklVTgs=)
                          27: 3230322e31302e34342e302f32332d3233203d3e203538343837.roa (hash: 5gGU6Ludw6Y05TY5TZpCEOfkE+AhTpTefa6G6vry47k=)
                          28: 3230322e31302e34342e302f32342d3234203d3e203538343837.roa (hash: WKuOJrVVZlYWwTvTmiW45MtVMO0eJoMBeuJku53fqVY=)
                          29: 3230322e31302e34302e302f32332d3233203d3e203538343837.roa (hash: bYsTywGdUh8Nwv8Sft0lrumaB+A6L+3snty95MBp9SE=)
                          30: 3230322e31302e34362e302f32342d3234203d3e203538343837.roa (hash: qBJmiieahiSmBerrZ+MrOlgczH6EjYj5/TLPwBkeogE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl
                          rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 20:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2d:29:9e:7c:12:39:87:a8:85:18:73:82:8c:55:8c:f6:32:8f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
        Validity
            Not Before: Jun 16 17:50:51 2026 GMT
            Not After : Jun 17 20:22:51 2026 GMT
        Subject: CN=73B4FF304F67561D7BD2EA0034995BA62972FF54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:00:48:d8:52:4f:0a:80:a9:5f:0f:e6:9c:dc:
                    a6:b0:05:ce:6d:0e:a6:fa:f6:16:01:12:b2:5d:87:
                    93:d8:53:ff:37:4e:3c:c2:08:95:f2:28:ae:a3:ac:
                    d4:2e:e2:54:54:c4:fa:ab:76:14:a1:79:68:cc:85:
                    2c:a4:04:b2:1b:5e:d1:f6:e7:cd:a5:28:27:c9:58:
                    b0:c1:5c:21:44:c4:9e:41:b1:b0:19:32:f3:22:dd:
                    52:71:7f:70:9d:56:c8:66:8d:0b:f6:d9:30:d6:fc:
                    17:2d:a5:9e:cc:d7:fc:b6:7a:94:cb:80:5a:13:3c:
                    9c:7d:d6:fc:bc:c4:e0:2c:1a:6d:84:01:52:36:34:
                    d2:29:38:d3:20:1f:7c:df:f1:10:17:96:f6:18:01:
                    ec:73:67:1e:2c:0d:b7:32:98:54:4c:0e:6b:8c:0d:
                    40:fa:bc:1e:7e:d0:df:f0:d4:50:e1:a4:9a:0b:aa:
                    ea:5e:6f:b8:24:da:9a:05:d3:f7:91:4a:dd:e0:25:
                    ff:8c:94:44:84:81:a8:2b:83:a0:03:df:3d:96:17:
                    8f:c0:3f:47:9d:c0:95:bd:3b:11:75:c8:57:ac:c5:
                    70:1e:9d:31:1c:ab:a8:21:45:89:e5:35:d8:71:39:
                    71:08:f9:d9:3e:cf:3c:f7:47:1a:8b:1a:4e:12:ff:
                    52:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B4:FF:30:4F:67:56:1D:7B:D2:EA:00:34:99:5B:A6:29:72:FF:54
            X509v3 Authority Key Identifier:
                keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:14:f4:d4:ec:4a:df:78:1e:1d:6d:34:62:15:69:af:a6:fa:
         65:50:1f:f7:af:c0:e5:5a:5b:95:6c:42:3a:7e:c1:7f:0e:85:
         a6:b4:1b:3c:61:d2:10:e9:90:e9:47:3e:75:e7:47:1f:1e:ab:
         ff:17:18:e4:03:02:17:58:9d:ad:67:b0:65:d9:ee:77:44:98:
         cf:13:bc:01:62:ef:36:36:8b:70:f7:de:49:1c:d1:27:ed:94:
         8a:f5:7f:f5:e8:f5:36:17:89:b0:6a:0c:dd:2b:ec:81:d8:25:
         92:32:3e:dd:a2:20:91:9c:45:39:d1:01:2e:62:fc:82:2f:ed:
         e7:7b:71:27:f7:73:5e:8a:07:75:5b:d5:32:2c:02:ad:8f:96:
         61:e7:a8:32:c3:c3:65:55:62:d9:c0:59:de:c4:c8:5c:fc:d7:
         62:8a:b4:cc:92:23:c5:77:76:bb:54:06:8a:8a:94:aa:d2:56:
         05:96:1f:14:1c:ba:7d:47:67:d8:46:25:b1:46:ce:9e:a8:7b:
         d1:62:f8:d5:9f:06:0d:34:88:ae:56:d1:97:14:2b:7c:b8:0f:
         c0:d3:66:e0:4d:51:d3:3c:3d:8d:8b:18:3c:59:df:b8:cf:a5:
         ee:5a:63:f8:d3:0b:6b:27:1e:14:be:bf:c7:6b:ef:64:a7:88:
         14:6b:c7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:32 2026 by rpki-client