Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft
File:                     78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft (raw, json)
Hash identifier:          lO0QUbGCRG6x/JwqnXzDn8FvWMITB3lAU2YaV4TF1y0=
Subject key identifier:   63:97:8E:C9:21:5F:83:F5:4F:51:DC:BA:1C:3B:07:E2:A1:D4:A5:1B
Authority key identifier: 78:E6:D3:92:CE:D2:11:6E:3E:51:67:D5:20:6B:5F:C3:75:EA:9F:35
Certificate issuer:       /CN=78E6D392CED2116E3E5167D5206B5FC375EA9F35
Certificate serial:       2AFD306E482436F6AE076505724EFE4DFF48B4A7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E6D392CED2116E3E5167D5206B5FC375EA9F35.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft
Manifest number:          3A
Signing time:             Sun 14 Jun 2026 08:02:39 +0000
Manifest this update:     Sun 14 Jun 2026 07:57:39 +0000
Manifest next update:     Mon 15 Jun 2026 11:05:39 +0000
Files and hashes:         1: 78E6D392CED2116E3E5167D5206B5FC375EA9F35.crl (hash: Vl5g9ZY6bV0RGw5mwNbs9u6zq+N8wcrN+eHMAcraYqE=)
                          2: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (hash: 3Berm5Gapt1UeoI40U+e3+MMW9FgSwdKP2f8X5GE7qo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.crl
                          rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E6D392CED2116E3E5167D5206B5FC375EA9F35.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Jun 2026 07:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fd:30:6e:48:24:36:f6:ae:07:65:05:72:4e:fe:4d:ff:48:b4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78E6D392CED2116E3E5167D5206B5FC375EA9F35
        Validity
            Not Before: Jun 14 07:57:39 2026 GMT
            Not After : Jun 15 11:05:39 2026 GMT
        Subject: CN=63978EC9215F83F54F51DCBA1C3B07E2A1D4A51B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:44:07:73:b4:85:e9:aa:8b:46:e8:07:fa:
                    eb:bb:a2:cf:10:50:f6:57:f6:a8:77:a4:47:77:02:
                    18:eb:b1:7d:7f:e3:27:1e:84:26:dc:c8:12:8b:11:
                    cf:64:f3:e7:4b:a9:ab:fe:34:ec:5d:af:42:41:2b:
                    fd:a9:67:be:7a:94:5e:14:15:4f:ff:e0:c2:ed:da:
                    8f:ee:e5:cd:c3:ea:c5:cc:6b:2f:d8:9e:89:a6:07:
                    06:19:15:29:b3:45:51:14:f4:f6:05:01:08:4f:f2:
                    e7:5c:57:cf:47:72:3b:6f:0f:55:45:35:77:7a:e8:
                    37:d5:1c:fd:0e:cc:43:a4:f9:2b:03:ab:2d:cb:f1:
                    bc:cc:1c:21:73:19:dd:cf:d8:fa:36:7b:20:ee:0a:
                    ae:32:67:6f:c1:41:5a:d4:10:9e:0e:68:00:55:47:
                    76:c1:1c:12:ef:81:52:d6:67:31:60:b8:c3:36:e6:
                    32:97:e2:31:e9:99:5d:d5:10:d4:37:d0:b3:d0:cf:
                    bc:cd:11:08:a7:77:ef:b5:68:a7:ce:1f:4c:46:0e:
                    95:d7:f2:3a:58:48:1e:40:ac:67:c6:c5:5d:1d:b2:
                    35:45:22:0d:07:a5:79:d8:87:96:e5:74:8d:13:bb:
                    d2:d6:33:4a:c3:73:ed:ba:ed:ac:dc:8c:f8:ae:96:
                    3a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:97:8E:C9:21:5F:83:F5:4F:51:DC:BA:1C:3B:07:E2:A1:D4:A5:1B
            X509v3 Authority Key Identifier:
                keyid:78:E6:D3:92:CE:D2:11:6E:3E:51:67:D5:20:6B:5F:C3:75:EA:9F:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E6D392CED2116E3E5167D5206B5FC375EA9F35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:bc:16:5f:20:68:e1:c1:06:4c:e9:ff:7c:27:09:48:a3:1b:
         41:ca:d4:79:14:cb:ca:14:21:57:4a:48:bd:bb:0f:85:02:cd:
         70:db:7c:ed:f1:7f:72:31:85:46:40:2b:5d:ea:42:74:24:21:
         66:a5:79:9c:75:f4:bd:ed:a7:1d:64:d7:f9:70:6a:d6:f3:16:
         2d:3c:63:83:94:24:a4:25:7a:51:8f:98:17:11:51:33:58:e8:
         a0:26:ee:ab:a8:ad:34:bf:cd:a9:76:cc:fd:5a:a4:6f:64:02:
         0e:bb:93:60:33:f9:8d:64:af:f9:2c:16:bd:7a:29:f9:52:03:
         19:41:97:d1:25:fc:48:9a:29:6c:32:16:b6:26:27:8a:58:ca:
         a5:5b:ab:d0:ec:36:91:f4:91:e1:28:5f:0a:fb:24:25:60:f5:
         25:a7:9b:06:ca:39:80:ba:ab:01:7d:77:05:12:eb:e6:ec:b9:
         e7:08:9b:49:5b:3f:5e:fa:7e:50:00:bf:bf:e9:35:ae:20:f3:
         a2:35:55:61:cc:2e:2e:85:71:5f:5b:3e:3c:09:77:a3:4c:8d:
         ed:dc:f9:68:75:fe:84:44:ee:76:c9:6a:c9:fa:56:52:b1:54:
         32:e6:67:94:52:e9:40:73:1b:0e:22:4b:44:c5:b3:6b:44:97:
         6a:15:0b:f8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKv0wbkgkNvauB2UFck7+Tf9ItKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhFNkQzOTJDRUQyMTE2RTNFNTE2N0Q1MjA2QjVGQzM3
NUVBOUYzNTAeFw0yNjA2MTQwNzU3MzlaFw0yNjA2MTUxMTA1MzlaMDMxMTAvBgNV
BAMTKDYzOTc4RUM5MjE1RjgzRjU0RjUxRENCQTFDM0IwN0UyQTFENEE1MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Y0QHc7SF6aqLRugH+uu7os8Q
UPZX9qh3pEd3AhjrsX1/4ycehCbcyBKLEc9k8+dLqav+NOxdr0JBK/2pZ756lF4U
FU//4MLt2o/u5c3D6sXMay/YnommBwYZFSmzRVEU9PYFAQhP8udcV89HcjtvD1VF
NXd66DfVHP0OzEOk+SsDqy3L8bzMHCFzGd3P2Po2eyDuCq4yZ2/BQVrUEJ4OaABV
R3bBHBLvgVLWZzFguMM25jKX4jHpmV3VENQ30LPQz7zNEQind++1aKfOH0xGDpXX
8jpYSB5ArGfGxV0dsjVFIg0HpXnYh5bldI0Tu9LWM0rDc+267azcjPiuljp9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUY5eOySFfg/VPUdy6HDsH4qHUpRswHwYDVR0j
BBgwFoAUeObTks7SEW4+UWfVIGtfw3XqnzUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTk1ZGQ1NzMtMzFmNC00MTZjLWExYjctNjk4ZDZiMTY5N2FkLzAvNzhFNkQzOTJD
RUQyMTE2RTNFNTE2N0Q1MjA2QjVGQzM3NUVBOUYzNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83OEU2RDM5MkNFRDIxMTZFM0U1MTY3RDUyMDZCNUZDMzc1RUE5
RjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk1ZGQ1NzMtMzFmNC00MTZjLWEx
YjctNjk4ZDZiMTY5N2FkLzAvNzhFNkQzOTJDRUQyMTE2RTNFNTE2N0Q1MjA2QjVG
QzM3NUVBOUYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABO8Fl8gaOHBBkzp/3wnCUijG0HK1HkUy8oU
IVdKSL27D4UCzXDbfO3xf3IxhUZAK13qQnQkIWaleZx19L3tpx1k1/lwatbzFi08
Y4OUJKQlelGPmBcRUTNY6KAm7quorTS/zal2zP1apG9kAg67k2Az+Y1kr/ksFr16
KflSAxlBl9El/EiaKWwyFrYmJ4pYyqVbq9DsNpH0keEoXwr7JCVg9SWnmwbKOYC6
qwF9dwUS6+bsuecIm0lbP176flAAv7/pNa4g86I1VWHMLi6FcV9bPjwJd6NMje3c
+Wh1/oRE7nbJasn6VlKxVDLmZ5RS6UBzGw4iS0TFs2tEl2oVC/g=
-----END CERTIFICATE-----
Generated at Sun Jun 14 12:18:27 2026 by rpki-client