Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft
File:                     5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft (raw, json)
Hash identifier:          W7mp1ITs8qCvVTBMxi6J6efr/bhWQJxV5a6L/1hV1VE=
Subject key identifier:   88:40:5F:82:A0:56:5B:CA:9F:BE:A2:87:CB:3F:14:B5:D9:B5:48:8C
Authority key identifier: 56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B
Certificate issuer:       /CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B
Certificate serial:       312AAD01D2CE145E85127C3BF66542DF3E89C7E3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft
Manifest number:          3F
Signing time:             Wed 17 Jun 2026 07:01:21 +0000
Manifest this update:     Wed 17 Jun 2026 06:56:21 +0000
Manifest next update:     Thu 18 Jun 2026 08:00:21 +0000
Files and hashes:         1: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (hash: PFdBLc9JDIxArwgoU/YzuObUbGI99im6tjm/eoPLbM8=)
                          2: 3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (hash: tFFR6+x+fpHHrNjo8i5wrXGQVmpCIjPUzPsVU8CszYg=)
                          3: 5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl (hash: gKnYbP6EY6jgM2E+D2a8p6Aco+h7H7TFQxuMeWLEkgo=)
                          4: 3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (hash: Wb6gH+JiAvO+ARbeGk8L44agijONRst7EWLeoO4CUoU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl
                          rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2a:ad:01:d2:ce:14:5e:85:12:7c:3b:f6:65:42:df:3e:89:c7:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B
        Validity
            Not Before: Jun 17 06:56:21 2026 GMT
            Not After : Jun 18 08:00:21 2026 GMT
        Subject: CN=88405F82A0565BCA9FBEA287CB3F14B5D9B5488C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fe:a4:47:f0:27:e5:c1:87:f4:7a:5e:a5:b5:
                    a0:c5:cc:d2:79:1d:f8:ec:f2:8c:b4:0a:c2:87:4a:
                    f9:77:11:82:2e:da:8e:91:9f:48:48:39:0f:29:df:
                    d2:99:88:71:39:53:db:56:be:74:d1:5f:e3:21:33:
                    97:d8:d8:da:d5:30:ad:32:1b:5e:73:25:48:66:01:
                    c6:f8:17:38:4a:b2:1e:90:35:9f:79:d3:f3:e4:75:
                    71:7f:59:20:93:4a:b5:2a:20:33:75:c5:7c:1b:7a:
                    d2:34:44:b2:4d:af:54:09:1d:f3:b9:8c:c0:0b:de:
                    85:2e:13:a6:7b:0e:75:d5:0c:8f:b1:a5:05:4f:72:
                    cd:62:a4:a7:14:f8:17:16:ca:68:ac:4e:c0:89:d9:
                    4c:a1:db:11:ed:1c:7c:b6:97:a4:f6:1f:b9:7e:05:
                    64:01:7c:5e:6f:87:a1:48:34:13:10:9d:f0:44:8a:
                    01:66:d7:82:49:fd:09:48:3a:1e:c9:20:5d:7f:98:
                    3d:6c:0a:90:1f:2a:7b:3e:2e:5b:2a:38:e0:69:b4:
                    7d:0e:9f:41:ea:94:bf:23:b9:bf:af:88:fc:10:74:
                    cd:83:3e:9e:9e:04:f5:b1:63:09:ef:07:17:57:e5:
                    3d:5c:15:00:23:61:9c:74:e8:a0:4a:95:e7:2b:49:
                    6e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:40:5F:82:A0:56:5B:CA:9F:BE:A2:87:CB:3F:14:B5:D9:B5:48:8C
            X509v3 Authority Key Identifier:
                keyid:56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:4e:4d:11:2a:f3:fc:5b:b2:f4:a8:39:90:87:10:51:30:21:
         a7:64:ff:66:6e:88:23:18:1c:b8:9e:36:35:e1:73:1a:6e:e6:
         fb:9c:12:53:f3:8f:ee:59:f2:c3:c9:fe:4a:99:ca:7b:6a:b8:
         99:ec:e9:2e:cb:52:55:3b:0b:8e:04:0e:a4:ec:b9:12:2e:30:
         7a:90:d6:fc:92:6a:7e:3a:ed:6d:78:f0:85:26:3b:e3:d0:20:
         08:45:af:9a:8a:e1:d0:05:cd:44:ba:2b:f3:43:1d:81:29:37:
         43:92:1a:d7:ea:5a:d0:b0:a0:d7:58:28:61:7c:14:bb:94:51:
         74:cc:41:48:47:7f:3a:e6:75:ff:a1:21:e2:47:eb:73:d1:7d:
         e7:fd:ac:f3:3d:ba:32:d7:ab:7b:1f:15:e2:58:9a:85:5a:e9:
         e9:8e:01:c7:81:af:b5:66:03:61:80:d4:44:49:f6:83:c7:76:
         d2:40:80:a5:dc:00:1a:b7:3c:fa:24:50:94:85:ae:e1:48:75:
         d3:52:31:0f:3b:0f:b3:dd:a2:c9:45:7d:ab:3a:9d:1a:97:b3:
         39:8e:0e:e8:e6:4a:2d:99:85:5a:58:9a:4e:61:e1:61:7f:48:
         84:6b:1b:f9:4b:47:97:38:a5:8f:d8:1b:df:a4:1f:01:9e:5f:
         17:5e:71:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:14:41 2026 by rpki-client