Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
File:                     E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft (raw, json)
Hash identifier:          XA154ez9VnVd+kMrxYmK5yLWcL6GqNi4Dn4Wt7sihMQ=
Subject key identifier:   A2:5B:F6:58:10:D6:FA:87:AD:B0:4B:DF:34:D6:A7:BD:A2:BF:98:FB
Authority key identifier: E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93
Certificate issuer:       /CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
Certificate serial:       36A0391B6D4EF3A00AC535BA242D147646F31E2A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
Manifest number:          38
Signing time:             Fri 12 Jun 2026 23:23:41 +0000
Manifest this update:     Fri 12 Jun 2026 23:18:41 +0000
Manifest next update:     Sun 14 Jun 2026 03:08:41 +0000
Files and hashes:         1: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: m1pNwOSLl0bdCga72bgV0UjJBtOBSgU1ellU74iVk3k=)
                          2: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: phcDv0m0vLlfwZ99qeKbMtyh63ijZFKiTdhh4MVincM=)
                          3: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: Sd3fhLkfAzIYKIa+lxI8//LD+Sqt+jk5hVCJVdmO8ro=)
                          4: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: 0O4aswxD1VoxCc8I8JRXFhna+2fhOQAti4akwG9PjgQ=)
                          5: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: PekXXJ/q55kTEO5kx0CRU0xx2H+12J366upyeQ1nZA8=)
                          6: E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl (hash: hOo5N+8/pJQilpRVzcAN+fFJZJ7rlEtSvOcjtdntJAo=)
                          7: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: M9jyn5/cfkiIh8r7xaktGDoS2J9kM31RBGKJ46gBojU=)
                          8: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: v44LsT6qMPli0zPJF9qTEG8AjfBqu7Oywt77FQr+HWc=)
                          9: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: E6gLrMvPbF2DgnqL5izEh9JlZeBZOXfgDDhLttXgRCM=)
                          10: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: ho4hOFufXidWAYsTbOliD6cEtUCuHGtc5gpjUTGtn7w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl
                          rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 20:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a0:39:1b:6d:4e:f3:a0:0a:c5:35:ba:24:2d:14:76:46:f3:1e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
        Validity
            Not Before: Jun 12 23:18:41 2026 GMT
            Not After : Jun 14 03:08:41 2026 GMT
        Subject: CN=A25BF65810D6FA87ADB04BDF34D6A7BDA2BF98FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8a:95:95:2e:c8:7a:9b:67:c5:f0:8e:fe:c0:
                    71:55:39:b9:02:94:58:8b:17:94:13:95:e5:48:bb:
                    f3:5e:72:d9:8f:6c:2d:9e:3b:56:47:f6:ac:02:95:
                    53:0b:fa:48:07:b9:21:76:12:f1:76:f7:45:18:98:
                    88:75:7a:89:85:86:a9:ea:df:66:98:af:f7:94:bf:
                    89:7a:81:c0:8e:2d:92:43:e0:6d:16:19:6c:86:8b:
                    ba:5b:8e:59:da:90:b6:1b:60:2f:1e:3e:c3:05:73:
                    5b:21:47:92:fb:61:99:b5:9b:53:fc:3f:00:09:5c:
                    40:eb:2d:82:1e:c6:c6:17:21:7a:c8:a9:8e:06:c3:
                    ca:1e:e5:ad:22:b1:a5:c6:f9:b7:b5:c2:2b:cc:b3:
                    75:52:7d:f1:1a:44:a9:81:c0:19:83:82:5f:e5:ae:
                    13:bd:94:d7:fb:1a:0c:75:5e:2a:0a:f5:d4:73:c6:
                    71:02:c1:03:c2:9e:05:e0:4f:c4:d8:61:b2:8f:00:
                    5f:93:76:21:10:7f:74:2f:bc:96:38:fb:bb:f3:98:
                    b6:85:0a:98:97:d5:f2:2d:01:c5:a3:45:b9:31:62:
                    7a:22:60:e5:e8:12:13:b9:cc:73:ea:bf:0e:4c:1a:
                    8b:d0:1c:71:86:79:4a:23:5d:ef:80:41:60:07:93:
                    70:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5B:F6:58:10:D6:FA:87:AD:B0:4B:DF:34:D6:A7:BD:A2:BF:98:FB
            X509v3 Authority Key Identifier:
                keyid:E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:23:d8:e2:32:0d:70:19:c6:fe:7c:aa:35:25:46:07:10:92:
         6f:c5:8e:c8:57:ed:7c:d7:65:f8:e1:4a:92:8e:51:2d:3f:96:
         5e:11:66:0b:00:10:0b:b8:02:26:bd:45:57:16:7b:a2:ca:e1:
         6c:d1:43:ba:22:5e:ed:e3:06:b3:b2:2e:0b:36:5e:7d:3b:b7:
         48:d4:a9:ac:bd:9f:fc:60:93:39:d7:75:1a:72:6a:7b:3b:18:
         21:b2:76:ee:5e:21:b4:19:41:93:29:0c:7e:5c:43:f6:e5:af:
         d6:b6:61:5a:e2:f8:8b:fc:d5:bd:a5:ef:cc:70:77:3d:d2:60:
         61:4f:23:2d:98:30:d5:8f:65:ad:95:4a:f7:23:9e:23:f9:13:
         36:6e:81:52:90:fd:00:be:59:1b:60:9d:21:65:0a:20:79:63:
         20:46:f2:12:da:11:0a:d1:25:65:8c:53:fd:75:d1:39:99:a0:
         65:72:70:22:dc:28:8d:92:4a:3b:fc:48:49:60:d6:18:f1:d8:
         69:b2:5b:4e:70:03:b2:a0:00:e8:63:37:8c:dc:9e:11:da:de:
         ac:cb:11:30:b6:76:a7:9d:53:7f:6c:36:11:c0:b2:7f:df:85:
         72:dc:a9:c0:ea:47:3c:b2:a6:17:3f:d4:e3:86:83:30:13:90:
         b8:c1:9f:64
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNqA5G21O86AKxTW6JC0UdkbzHiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZFQzM1Q0ZDMjQ5M0EzQTc5RENENTlEMUMxREJBRkIy
RTc0Mjc5MzAeFw0yNjA2MTIyMzE4NDFaFw0yNjA2MTQwMzA4NDFaMDMxMTAvBgNV
BAMTKEEyNUJGNjU4MTBENkZBODdBREIwNEJERjM0RDZBN0JEQTJCRjk4RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlipWVLsh6m2fF8I7+wHFVObkC
lFiLF5QTleVIu/NectmPbC2eO1ZH9qwClVML+kgHuSF2EvF290UYmIh1eomFhqnq
32aYr/eUv4l6gcCOLZJD4G0WGWyGi7pbjlnakLYbYC8ePsMFc1shR5L7YZm1m1P8
PwAJXEDrLYIexsYXIXrIqY4Gw8oe5a0isaXG+be1wivMs3VSffEaRKmBwBmDgl/l
rhO9lNf7Ggx1XioK9dRzxnECwQPCngXgT8TYYbKPAF+TdiEQf3QvvJY4+7vzmLaF
CpiX1fItAcWjRbkxYnoiYOXoEhO5zHPqvw5MGovQHHGGeUojXe+AQWAHk3BvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUolv2WBDW+oetsEvfNNanvaK/mPswHwYDVR0j
BBgwFoAU5uw1z8JJOjp53NWdHB26+y50J5MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGY1ZDM2NGEtZGEwYi00NTQwLTkzNDktNTkzMGJkNzI1Y2UzLzAvRTZFQzM1Q0ZD
MjQ5M0EzQTc5RENENTlEMUMxREJBRkIyRTc0Mjc5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNkVDMzVDRkMyNDkzQTNBNzlEQ0Q1OUQxQzFEQkFGQjJFNzQy
NzkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY1ZDM2NGEtZGEwYi00NTQwLTkz
NDktNTkzMGJkNzI1Y2UzLzAvRTZFQzM1Q0ZDMjQ5M0EzQTc5RENENTlEMUMxREJB
RkIyRTc0Mjc5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABAj2OIyDXAZxv58qjUlRgcQkm/FjshX7XzX
ZfjhSpKOUS0/ll4RZgsAEAu4Aia9RVcWe6LK4WzRQ7oiXu3jBrOyLgs2Xn07t0jU
qay9n/xgkznXdRpyans7GCGydu5eIbQZQZMpDH5cQ/blr9a2YVri+Iv81b2l78xw
dz3SYGFPIy2YMNWPZa2VSvcjniP5EzZugVKQ/QC+WRtgnSFlCiB5YyBG8hLaEQrR
JWWMU/110TmZoGVycCLcKI2SSjv8SElg1hjx2GmyW05wA7KgAOhjN4zcnhHa3qzL
ETC2dqedU39sNhHAsn/fhXLcqcDqRzyyphc/1OOGgzATkLjBn2Q=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:39 2026 by rpki-client