Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
File:                     E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft (raw, json)
Hash identifier:          CVNVivzMSCzm4ZsWm0ulqoKeTjtyfHsGa7ju3bHspUg=
Subject key identifier:   2B:C9:31:1F:B6:A7:56:78:12:13:8C:12:1A:3C:A3:A4:9E:C1:F2:12
Authority key identifier: E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9
Certificate issuer:       /CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
Certificate serial:       0B5E3E1D24AA69CEFFD0226293CE1E0734D9F893
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 13:56:08 +0000
Manifest this update:     Tue 16 Jun 2026 13:51:08 +0000
Manifest next update:     Wed 17 Jun 2026 17:30:08 +0000
Files and hashes:         1: 3230332e38302e31322e302f32342d3234203d3e203234323034.roa (hash: h2tT8uN39aiQAWcw3BdGn9c/xBwZZb5nFDTta01r+Os=)
                          2: 3230332e38302e392e302f32342d3234203d3e203234323034.roa (hash: ctsdmpn5r5VUvDq4FMqshtD+HVeYmHxVfhu5eYtcuDY=)
                          3: 3230332e38302e31352e302f32342d3234203d3e203234323034.roa (hash: nN8alNrnuAC96uGmiPX7P2NYnsdlkO57xsP55iMfUwk=)
                          4: E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl (hash: A25ApXmPTWEE4z40VS2+vmqbLgEtLa3K+qXC8Fd0LYk=)
                          5: 3230332e38302e31332e302f32342d3234203d3e203234323034.roa (hash: v5fNxHZnP1wOLH3moKO1JSlLZXs/nZienvrRCarDRlk=)
                          6: 3230332e38302e31312e302f32342d3234203d3e203234323034.roa (hash: Z8294bGV1BqnPHshmggOhT7N0D0yzpQrvHBjc8hglpQ=)
                          7: 3230332e38302e382e302f32342d3234203d3e203234323034.roa (hash: 0Yyl1JFAblaXf8Yb0JCPy2SmOr5D/U6YS39l5rE81q0=)
                          8: 3230332e38302e31302e302f32342d3234203d3e203234323034.roa (hash: 1WqLfIO26zKRMIVkfVN7TnPFzjNdo3+29X6uUFeeV7A=)
                          9: 3230332e38302e31342e302f32342d3234203d3e203234323034.roa (hash: 4fpWKKYBY0nnGQkJs0R+bmSKgdPRaMES9zE1728pF2E=)
                          10: 323430353a386530303a3a2f33322d3332203d3e203234323034.roa (hash: sqWc0G+az7rG1OKeMlrjkBetXfc6E3+lsrE6DeDNqXY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl
                          rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 17:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5e:3e:1d:24:aa:69:ce:ff:d0:22:62:93:ce:1e:07:34:d9:f8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
        Validity
            Not Before: Jun 16 13:51:08 2026 GMT
            Not After : Jun 17 17:30:08 2026 GMT
        Subject: CN=2BC9311FB6A7567812138C121A3CA3A49EC1F212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7a:30:87:f8:f4:f4:39:f5:bf:a8:a5:44:c7:
                    f4:12:3f:70:3d:4d:db:a3:51:01:2d:6f:94:f0:88:
                    df:b7:f1:ac:38:92:47:7d:5a:fa:62:49:12:cd:7c:
                    cb:a6:52:93:a0:b8:6b:9b:65:17:57:d6:41:6e:bd:
                    74:68:63:a1:21:b5:c0:7a:8d:9f:ea:05:f2:c5:ae:
                    76:db:4f:a0:8c:7b:87:50:4e:77:b8:1e:13:f2:28:
                    b7:43:c5:fe:c4:12:b6:fb:b0:7d:5d:15:6c:f2:c8:
                    59:f6:d8:73:61:75:9b:f0:82:b4:a4:e7:93:5d:2b:
                    00:8b:b0:bf:55:bc:45:e2:47:f5:74:54:f9:ec:1a:
                    7c:d3:b5:30:c3:77:aa:60:de:53:52:15:1c:6b:fa:
                    9c:e1:2a:4e:dc:37:e9:c6:08:d1:9c:c8:9d:8a:05:
                    aa:16:17:c5:1d:99:2b:30:4d:53:74:29:37:5b:b9:
                    6f:3e:f3:52:fc:f8:e6:47:5c:d6:02:cd:90:7c:d1:
                    de:73:f7:ad:a0:7d:86:06:b1:e8:27:38:a8:87:81:
                    50:b6:8b:48:e9:fe:4c:36:57:7c:9f:d6:49:78:78:
                    58:d1:03:af:e4:c0:c7:1b:3d:ce:de:29:bd:0d:61:
                    77:78:04:99:25:59:30:c2:e5:09:33:19:43:fd:32:
                    e3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C9:31:1F:B6:A7:56:78:12:13:8C:12:1A:3C:A3:A4:9E:C1:F2:12
            X509v3 Authority Key Identifier:
                keyid:E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:77:0e:a9:35:56:60:27:01:f0:97:44:15:81:da:5d:82:c1:
         55:d3:db:cc:6a:7a:6b:72:54:d7:56:cc:f1:9b:1e:0a:d4:66:
         21:00:a8:bf:ed:13:66:d5:a7:a3:7e:c9:b1:25:04:c3:a9:7e:
         04:96:35:c8:97:3a:45:a4:4a:31:41:cf:e1:79:69:52:c8:98:
         f5:34:c5:5e:d4:6c:5d:29:10:43:ef:16:2a:38:24:9d:69:2d:
         2f:52:a4:49:d5:95:b7:e1:d0:8a:f1:c9:c1:b8:69:b7:0a:ac:
         a9:69:13:c4:30:ca:7a:17:dc:3c:72:75:7f:78:9c:1d:f1:ca:
         05:fa:b7:99:99:16:fc:4a:24:13:8d:12:2d:5b:db:b5:f8:d2:
         ab:36:32:b4:92:a3:ed:72:7f:a5:df:11:6c:20:00:f1:57:db:
         90:84:e5:f6:6c:40:bb:62:3e:b1:24:24:2a:90:36:95:73:fe:
         7c:4c:96:2b:96:ca:e4:ca:d2:5f:86:cb:d2:ce:d6:e7:10:40:
         30:b4:7e:ef:2c:68:da:6a:e3:71:9f:54:28:e6:30:f3:35:c8:
         76:2a:44:13:bd:62:5b:96:6a:20:d9:b8:55:c8:b8:20:00:28:
         be:4e:e4:12:e5:bb:0c:91:9f:3f:9f:f4:a6:71:fb:4c:31:a1:
         ac:df:02:aa
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUC14+HSSqac7/0CJik84eBzTZ+JMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZCRDNC
MTMyNEFCOTAeFw0yNjA2MTYxMzUxMDhaFw0yNjA2MTcxNzMwMDhaMDMxMTAvBgNV
BAMTKDJCQzkzMTFGQjZBNzU2NzgxMjEzOEMxMjFBM0NBM0E0OUVDMUYyMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtejCH+PT0OfW/qKVEx/QSP3A9
TdujUQEtb5TwiN+38aw4kkd9WvpiSRLNfMumUpOguGubZRdX1kFuvXRoY6EhtcB6
jZ/qBfLFrnbbT6CMe4dQTne4HhPyKLdDxf7EErb7sH1dFWzyyFn22HNhdZvwgrSk
55NdKwCLsL9VvEXiR/V0VPnsGnzTtTDDd6pg3lNSFRxr+pzhKk7cN+nGCNGcyJ2K
BaoWF8UdmSswTVN0KTdbuW8+81L8+OZHXNYCzZB80d5z962gfYYGsegnOKiHgVC2
i0jp/kw2V3yf1kl4eFjRA6/kwMcbPc7eKb0NYXd4BJklWTDC5QkzGUP9MuNRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUK8kxH7anVngSE4wSGjyjpJ7B8hIwHwYDVR0j
BBgwFoAU5FAef9vFcWDG2vDTvpL707EySrkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTI0YTkxMDUtOGQyYS00YjM4LWE2YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZE
QkM1NzE2MEM2REFGMEQzQkU5MkZCRDNCMTMyNEFCOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNDUwMUU3RkRCQzU3MTYwQzZEQUYwRDNCRTkyRkJEM0IxMzI0
QUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI0YTkxMDUtOGQyYS00YjM4LWE2
YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZC
RDNCMTMyNEFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC53Dqk1VmAnAfCXRBWB2l2CwVXT28xqemty
VNdWzPGbHgrUZiEAqL/tE2bVp6N+ybElBMOpfgSWNciXOkWkSjFBz+F5aVLImPU0
xV7UbF0pEEPvFio4JJ1pLS9SpEnVlbfh0IrxycG4abcKrKlpE8QwynoX3DxydX94
nB3xygX6t5mZFvxKJBONEi1b27X40qs2MrSSo+1yf6XfEWwgAPFX25CE5fZsQLti
PrEkJCqQNpVz/nxMliuWyuTK0l+Gy9LO1ucQQDC0fu8saNpq43GfVCjmMPM1yHYq
RBO9YluWaiDZuFXIuCAAKL5O5BLluwyRnz+f9KZx+0wxoazfAqo=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:04 2026 by rpki-client