Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft
File:                     EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft (raw, json)
Hash identifier:          A2tsywf66vkiu6NT9pbSF3C24ge+fQjUqpeT0K7VG3A=
Subject key identifier:   C5:B1:81:BB:C1:C7:80:D9:6A:11:96:EE:4F:70:A5:F9:EA:6B:FB:99
Authority key identifier: EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44
Certificate issuer:       /CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744
Certificate serial:       68BB993CAADABAD207BF413E30038CF173DC1430
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 19:12:15 +0000
Manifest this update:     Tue 16 Jun 2026 19:07:15 +0000
Manifest next update:     Wed 17 Jun 2026 22:45:15 +0000
Files and hashes:         1: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: BnM/pd6T0nNd5d7QI+jI59NRWk0b0EsbuiWKkA+Hh+0=)
                          2: EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl (hash: tXpp7hZlej3RqRNTJ4Mg2y/L7IpDl7axM2IjddBPwlk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl
                          rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 22:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bb:99:3c:aa:da:ba:d2:07:bf:41:3e:30:03:8c:f1:73:dc:14:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF44D1A95206A20CB3AB52607DC981EEC1AA8744
        Validity
            Not Before: Jun 16 19:07:15 2026 GMT
            Not After : Jun 17 22:45:15 2026 GMT
        Subject: CN=C5B181BBC1C780D96A1196EE4F70A5F9EA6BFB99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d9:9b:c2:80:24:21:a5:4b:23:1e:3a:64:a8:
                    72:cc:d0:aa:ee:bb:97:93:a2:7c:3b:b7:90:29:49:
                    6d:6c:c2:4e:9c:35:d8:01:d2:8a:34:32:56:bd:fe:
                    b4:e0:3c:3d:20:8a:83:2d:0c:f4:a2:a6:c2:dd:7a:
                    68:c0:36:3e:a7:10:47:c9:87:9c:fa:f9:0c:5c:68:
                    73:12:da:31:ba:ff:7b:b1:a2:fe:1b:33:e5:a9:8e:
                    6f:10:e9:c3:a6:a2:10:09:01:e1:3d:73:d4:b9:89:
                    74:e6:84:cb:53:9b:3c:90:03:e2:70:a5:42:4c:ca:
                    46:04:83:46:67:7b:b5:de:91:89:35:83:4e:cf:a5:
                    b8:7a:87:5a:f7:ac:ea:3f:bc:3c:7a:dc:76:ef:25:
                    e6:da:d6:44:06:1e:ea:97:ef:92:81:38:cd:9e:24:
                    d7:2a:4e:b1:04:49:49:22:63:b0:76:1b:74:ea:41:
                    64:32:69:94:29:91:15:19:ae:32:6f:46:86:45:d1:
                    7e:ca:e5:5b:80:60:af:c9:d1:04:50:5c:2f:54:66:
                    88:0b:78:7f:d1:5c:2c:49:c5:ff:db:05:14:06:2c:
                    56:96:30:c8:01:be:af:e0:9e:a6:b5:c3:a6:a7:71:
                    fa:a9:7c:6b:bc:9a:f0:1a:5f:10:13:02:ce:2c:ad:
                    0e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B1:81:BB:C1:C7:80:D9:6A:11:96:EE:4F:70:A5:F9:EA:6B:FB:99
            X509v3 Authority Key Identifier:
                keyid:EF:44:D1:A9:52:06:A2:0C:B3:AB:52:60:7D:C9:81:EE:C1:AA:87:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/EF44D1A95206A20CB3AB52607DC981EEC1AA8744.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:cb:f2:06:45:a3:ed:29:a7:ce:c3:ba:d7:bd:a4:62:0b:ca:
         6e:5e:8d:24:67:d2:c8:df:a7:70:68:f1:23:65:b0:c7:21:69:
         f6:6f:ad:28:4c:56:fb:47:ff:13:04:65:15:38:35:cc:e9:d3:
         bd:9d:ee:85:7a:97:18:d3:2f:a8:e6:c8:3d:f9:00:13:90:61:
         fd:e4:bf:f0:ea:ea:4a:91:4e:26:d7:63:26:89:41:c6:18:aa:
         0a:0d:50:8f:fd:14:b2:df:2f:4f:91:c3:c0:c4:10:36:b5:48:
         f6:d7:df:3f:10:8d:42:a3:24:22:ed:6c:25:c0:e3:87:99:1f:
         7a:90:e3:ca:7c:d7:f8:51:d4:b3:5e:01:94:dc:d0:d0:35:e6:
         5c:6c:32:74:62:df:65:7f:88:ac:b7:69:01:da:f6:47:f9:a4:
         8a:54:ec:ef:c3:fc:55:76:85:34:4c:04:a4:b6:cc:8c:6f:51:
         f3:d1:74:98:78:e6:31:d8:b3:cc:eb:0c:52:39:a5:54:a7:84:
         28:c8:32:b6:8e:16:77:14:b9:5a:af:13:b4:42:23:c1:f1:88:
         df:4e:32:b2:f0:20:00:a4:37:2a:30:c1:ad:89:39:6e:6b:23:
         1a:86:96:68:f3:84:e0:3a:5a:38:c8:56:a2:17:f2:1c:19:ae:
         65:47:79:d8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaLuZPKrautIHv0E+MAOM8XPcFDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY0NEQxQTk1MjA2QTIwQ0IzQUI1MjYwN0RDOTgxRUVD
MUFBODc0NDAeFw0yNjA2MTYxOTA3MTVaFw0yNjA2MTcyMjQ1MTVaMDMxMTAvBgNV
BAMTKEM1QjE4MUJCQzFDNzgwRDk2QTExOTZFRTRGNzBBNUY5RUE2QkZCOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42ZvCgCQhpUsjHjpkqHLM0Kru
u5eTonw7t5ApSW1swk6cNdgB0oo0Mla9/rTgPD0gioMtDPSipsLdemjANj6nEEfJ
h5z6+QxcaHMS2jG6/3uxov4bM+Wpjm8Q6cOmohAJAeE9c9S5iXTmhMtTmzyQA+Jw
pUJMykYEg0Zne7XekYk1g07Ppbh6h1r3rOo/vDx63HbvJeba1kQGHuqX75KBOM2e
JNcqTrEESUkiY7B2G3TqQWQyaZQpkRUZrjJvRoZF0X7K5VuAYK/J0QRQXC9UZogL
eH/RXCxJxf/bBRQGLFaWMMgBvq/gnqa1w6ancfqpfGu8mvAaXxATAs4srQ7TAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxbGBu8HHgNlqEZbuT3Cl+epr+5kwHwYDVR0j
BBgwFoAU70TRqVIGogyzq1JgfcmB7sGqh0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2UxOWFiYzgtODUwNy00MWVkLTgyODktN2UzYWM3YjI0OTM1LzAvRUY0NEQxQTk1
MjA2QTIwQ0IzQUI1MjYwN0RDOTgxRUVDMUFBODc0NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRjQ0RDFBOTUyMDZBMjBDQjNBQjUyNjA3REM5ODFFRUMxQUE4
NzQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2UxOWFiYzgtODUwNy00MWVkLTgy
ODktN2UzYWM3YjI0OTM1LzAvRUY0NEQxQTk1MjA2QTIwQ0IzQUI1MjYwN0RDOTgx
RUVDMUFBODc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFDL8gZFo+0pp87Dute9pGILym5ejSRn0sjf
p3Bo8SNlsMchafZvrShMVvtH/xMEZRU4Nczp072d7oV6lxjTL6jmyD35ABOQYf3k
v/Dq6kqRTibXYyaJQcYYqgoNUI/9FLLfL0+Rw8DEEDa1SPbX3z8QjUKjJCLtbCXA
44eZH3qQ48p81/hR1LNeAZTc0NA15lxsMnRi32V/iKy3aQHa9kf5pIpU7O/D/FV2
hTRMBKS2zIxvUfPRdJh45jHYs8zrDFI5pVSnhCjIMraOFncUuVqvE7RCI8HxiN9O
MrLwIACkNyowwa2JOW5rIxqGlmjzhOA6WjjIVqIX8hwZrmVHedg=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:43 2026 by rpki-client