Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft
File:                     71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft (raw, json)
Hash identifier:          VW8olyfrKZyKFT1BUCqVnj9ah8zqKswP3dJX+74Q/04=
Subject key identifier:   8D:11:BA:31:46:E4:27:6A:9D:5C:2D:2C:31:D0:A0:9A:C1:D2:C2:5A
Authority key identifier: 71:E3:BB:71:0F:59:21:46:B8:2A:3C:1C:FC:F3:6A:2B:D1:C5:A7:95
Certificate issuer:       /CN=71E3BB710F592146B82A3C1CFCF36A2BD1C5A795
Certificate serial:       333AEBFA903FE48F697507E78274DE0ECFE89967
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft
Manifest number:          3F
Signing time:             Wed 17 Jun 2026 03:11:38 +0000
Manifest this update:     Wed 17 Jun 2026 03:06:38 +0000
Manifest next update:     Thu 18 Jun 2026 03:25:38 +0000
Files and hashes:         1: 71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl (hash: AnVGkL4DfD5UjReZ14iAGn2P1CNCYUMxbyxhSh8xs8w=)
                          2: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: rUHpYIR2vJnsoxcjoNwsrIMb/p49L2kYzJuwadosSIk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl
                          rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3a:eb:fa:90:3f:e4:8f:69:75:07:e7:82:74:de:0e:cf:e8:99:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E3BB710F592146B82A3C1CFCF36A2BD1C5A795
        Validity
            Not Before: Jun 17 03:06:38 2026 GMT
            Not After : Jun 18 03:25:38 2026 GMT
        Subject: CN=8D11BA3146E4276A9D5C2D2C31D0A09AC1D2C25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:27:7d:78:fd:42:c6:5d:c5:71:ad:c6:f0:c3:
                    08:be:ef:98:48:86:58:64:65:c5:da:2d:4b:b2:64:
                    ee:04:da:05:7b:f9:35:d2:6c:a6:9b:bc:6f:f3:c3:
                    25:5a:c2:44:34:8c:bb:be:09:fd:10:16:50:3b:5a:
                    aa:77:a5:94:23:65:93:32:59:fb:57:60:ba:43:c8:
                    0e:aa:3c:40:37:ce:8e:53:ab:3d:14:fd:2d:d2:01:
                    3c:4c:e2:8e:37:0a:a3:e5:7b:86:22:0e:88:a5:ef:
                    ff:cf:51:57:01:3b:cf:1e:81:b2:38:c5:23:cf:06:
                    f7:cf:4b:8b:88:9a:99:cc:32:dc:80:da:e8:0a:82:
                    be:71:25:02:58:76:af:8a:d6:36:e9:12:ad:1c:b6:
                    70:df:e3:db:9c:53:6b:d6:14:d4:0b:0f:aa:f1:10:
                    59:a4:69:72:5b:e5:9f:2f:95:2a:2a:61:f9:f1:7c:
                    d7:0a:d4:94:bf:93:d1:dc:6f:6b:0e:08:c5:dc:f2:
                    b2:9a:28:8b:18:3c:43:a6:d0:3a:33:38:c8:f4:6a:
                    1c:ba:23:bd:5b:d6:25:46:78:51:0c:76:65:2d:0b:
                    61:d8:3d:80:b7:40:5f:5b:12:15:a7:c2:92:19:3f:
                    d6:bc:8a:a9:26:3f:f8:9a:93:1f:d1:c3:55:b6:cf:
                    23:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:11:BA:31:46:E4:27:6A:9D:5C:2D:2C:31:D0:A0:9A:C1:D2:C2:5A
            X509v3 Authority Key Identifier:
                keyid:71:E3:BB:71:0F:59:21:46:B8:2A:3C:1C:FC:F3:6A:2B:D1:C5:A7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c5:00:84:61:3a:33:bf:85:24:bc:0a:c4:04:88:4f:2f:bc:
         87:9f:46:c8:55:4c:8a:26:94:08:f1:26:78:64:2d:dd:f3:d7:
         1d:ba:fb:46:80:42:f8:77:f5:ea:e9:36:ba:57:32:fd:65:5b:
         d5:b4:ee:99:41:50:3a:44:4e:3d:de:55:4d:b9:4b:ed:9d:4c:
         8b:14:7f:2c:64:fb:cd:1d:dd:be:bb:f7:25:ad:43:ce:4c:b4:
         c3:14:f5:85:ae:94:ef:50:e3:61:ac:0d:77:57:1e:34:ef:32:
         18:23:be:6f:b8:a1:e6:cf:ef:e1:75:1c:6a:dd:e0:9b:fa:33:
         3e:bd:c6:62:5f:c6:f4:fe:0a:3d:a7:6a:7a:6b:75:74:dd:69:
         95:0e:a6:89:ef:f2:9e:f4:eb:b9:7b:fd:ba:3c:f4:99:f9:f4:
         db:01:18:a6:2a:a3:dd:ee:65:79:f7:00:a1:03:7b:70:29:4c:
         94:a3:de:bc:22:f9:97:3c:b5:6c:7f:d1:13:e8:76:f6:65:3f:
         4d:c8:8c:27:1e:2c:49:2f:cc:e2:d9:78:18:d9:7b:35:50:63:
         af:10:bd:65:d9:e5:91:e9:c8:1f:dc:98:3b:03:f4:08:22:da:
         28:a0:95:6f:9a:9d:3d:d7:2e:3b:1c:92:db:8d:e3:6d:7a:4b:
         c8:3d:8d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:36 2026 by rpki-client