Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft
File:                     E6D8657E7EEA10982DC10335C8109731A067DDF4.mft (raw, json)
Hash identifier:          ZH1tDU7wswutFFDoLOFdJALOGLDhzvmEjI+H466BZ+I=
Subject key identifier:   D7:8C:7F:F4:BC:86:E1:DA:E2:FA:C1:D6:1E:FF:26:81:8F:66:E1:09
Authority key identifier: E6:D8:65:7E:7E:EA:10:98:2D:C1:03:35:C8:10:97:31:A0:67:DD:F4
Certificate issuer:       /CN=E6D8657E7EEA10982DC10335C8109731A067DDF4
Certificate serial:       0D74DF2A8F8EABB25E87CC0E718D9974D0FC37C3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft
Manifest number:          3D
Signing time:             Wed 17 Jun 2026 04:02:42 +0000
Manifest this update:     Wed 17 Jun 2026 03:57:42 +0000
Manifest next update:     Thu 18 Jun 2026 07:32:42 +0000
Files and hashes:         1: 3135372e36362e33342e302f32332d3234203d3e203535363838.roa (hash: Q0bQ3r6hiZxbkMHCrchZCQ8u853MF4yPWxTMqg5/h/A=)
                          2: E6D8657E7EEA10982DC10335C8109731A067DDF4.crl (hash: k8fIlPSAurcllqncdqHWqyHb9p25+FJHB+85yiWEcEU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.crl
                          rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 04:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:74:df:2a:8f:8e:ab:b2:5e:87:cc:0e:71:8d:99:74:d0:fc:37:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6D8657E7EEA10982DC10335C8109731A067DDF4
        Validity
            Not Before: Jun 17 03:57:42 2026 GMT
            Not After : Jun 18 07:32:42 2026 GMT
        Subject: CN=D78C7FF4BC86E1DAE2FAC1D61EFF26818F66E109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a4:86:24:a5:6d:af:05:13:cb:4b:14:e2:0e:
                    84:b3:14:15:21:65:27:14:4c:f9:a2:d1:0f:a9:66:
                    7b:d7:c5:7c:5c:f7:cf:6b:5c:e9:26:2e:53:f9:05:
                    2b:65:e9:65:06:38:7e:3a:9c:94:59:fc:55:3f:ef:
                    23:a1:30:97:24:65:ff:7f:65:7b:bc:d0:31:ad:b0:
                    83:7d:1a:5e:f0:9b:c3:f4:59:37:39:ce:de:30:b7:
                    c0:d9:de:3f:39:c4:9f:e2:0f:dc:b7:66:85:48:47:
                    51:b0:b0:b4:60:a7:e4:9f:48:5f:23:97:9a:1e:62:
                    35:73:c6:5d:da:5a:00:7d:29:65:1c:27:ea:fc:cc:
                    66:dc:62:44:60:16:87:d6:e4:1e:be:57:35:42:b8:
                    f3:c0:e8:9a:01:ef:9c:ff:b6:1c:e6:71:f0:28:a7:
                    72:0d:de:d4:59:7e:04:b4:55:e4:34:36:66:68:4d:
                    06:9b:2b:65:bf:99:b6:c6:d4:44:a4:5f:94:64:e0:
                    ad:e5:4b:48:44:5b:dd:d8:0a:65:f3:a7:5e:7c:18:
                    2f:47:dc:61:6f:1b:33:97:93:29:b7:d5:32:be:5c:
                    29:f8:ec:46:02:83:77:a3:83:bd:f4:ad:8c:0a:69:
                    55:ef:a0:f6:b6:fa:be:db:1c:97:62:5c:9a:14:37:
                    ba:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8C:7F:F4:BC:86:E1:DA:E2:FA:C1:D6:1E:FF:26:81:8F:66:E1:09
            X509v3 Authority Key Identifier:
                keyid:E6:D8:65:7E:7E:EA:10:98:2D:C1:03:35:C8:10:97:31:A0:67:DD:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/E6D8657E7EEA10982DC10335C8109731A067DDF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:56:2a:ff:d3:b2:05:9d:13:0a:a4:28:17:d7:fb:84:ad:cf:
         16:2c:6a:68:27:cf:8b:6e:24:b8:cb:c9:18:02:6b:63:53:6f:
         20:76:20:c6:bc:c8:57:12:30:73:6a:ed:6f:12:1a:9f:b2:cf:
         f8:18:2f:1e:e4:9a:7b:d6:cf:93:2e:95:3d:68:84:c3:87:1a:
         8a:11:62:3b:25:58:04:4c:c1:55:12:82:2c:1f:9e:2b:b6:f4:
         ee:ea:d7:9d:58:ac:b3:c1:3f:af:d8:d5:89:23:bc:54:12:a0:
         ec:11:b4:c9:e7:fe:de:4a:9d:25:16:14:07:e5:96:68:84:21:
         c2:58:cb:dc:22:be:7f:49:ac:d2:5d:35:ad:64:a4:53:59:d5:
         8a:61:00:b7:11:f2:b3:31:2e:1c:b4:e9:99:31:83:6a:1e:de:
         8b:88:99:09:93:fe:3f:ca:9a:3d:0d:87:60:6a:9d:22:9b:cd:
         14:f6:02:42:0d:a5:e2:3c:0c:0b:b6:33:11:41:37:a3:9e:ec:
         5d:27:3e:85:57:2f:8c:44:b2:10:4c:c0:1d:3a:68:0e:24:eb:
         99:11:a1:e5:0d:12:47:6a:f8:5f:e0:82:06:70:1d:d9:ed:e1:
         ef:39:10:70:71:9f:61:73:d3:5f:9b:dd:3f:e3:e1:69:a5:c8:
         1d:c8:a4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:40:57 2026 by rpki-client