Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
File:                     68A727878748F40EF62D744B06303F71A6B3F75C.mft (raw, json)
Hash identifier:          XEyKnj6lOTs1vYDdde5M4seXDq3FLRPmIn4hjCz6ap4=
Subject key identifier:   2E:CC:34:82:24:2F:3D:9F:D9:9A:37:C2:9F:19:DD:A8:27:47:FA:E7
Authority key identifier: 68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C
Certificate issuer:       /CN=68A727878748F40EF62D744B06303F71A6B3F75C
Certificate serial:       5A2E0D0F989D8F1F9BC1BA02207E60B0A6B54A91
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
Manifest number:          38
Signing time:             Sat 13 Jun 2026 03:53:43 +0000
Manifest this update:     Sat 13 Jun 2026 03:48:43 +0000
Manifest next update:     Sun 14 Jun 2026 06:25:43 +0000
Files and hashes:         1: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: CeqXPBLKTKcb4QWFvGgnRWapqG6f1Vmt1NBorMo+v2c=)
                          2: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: S8QwzcFeryIcuSdPBiMnAYW7dqUXcBjtqFkLeF9/BcE=)
                          3: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: IbAFzZACUnD6lwBQxPhQqMDiyphOZDVL6AMwxKGfiyQ=)
                          4: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: r2ZYiFd01bWs0eEN9nD+Mp8m+K6B0HFPjNNciuS/bGc=)
                          5: 68A727878748F40EF62D744B06303F71A6B3F75C.crl (hash: 28zhWDBOfnhb8DSROIYy4KycgJ+scVy+U9SJpsiW8/U=)
                          6: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: Tv2GPPjlGM6s70rJUxZeMrMG5Grjr8wYER/e5zbXioI=)
                          7: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: 6s+J2D1xc+Un9FBlPt0gue96vFI4b8yX8woz+h6eFQo=)
                          8: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: NLB3lY9DFzaCd5CKPizbBhfO5LYHEpYinHrGVDAbCes=)
                          9: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: pivfi9ji1ihnIAJ1idyzgwRmHruzS5uloDq3BscV5e0=)
                          10: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: WRqUfw4kkLNha7EwV7NENaJIZvhb1ikV9t5ePDUcyD4=)
                          11: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: PvN2AuvxpSJAs/KNp18Hx71tEJNrxtBQ9MHqNXHlPGI=)
                          12: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: c+NnvyqB3knbtuO7KdhM0hJjec2wwtXVinOUBhE4/24=)
                          13: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: ghKRefxmMKmKlt978ds7tp9D7g1WWsJyZmES+glyEMw=)
                          14: 3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa (hash: vW5w5IkuRb83zA5ANSFF1CJerE321mN8QnbQgdvihxM=)
                          15: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: hz0u1O8torhSAEu0GK+s8W9famRD261lcziOb/ZySjc=)
                          16: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: gR1DTuGl5zoFpulg1oigiYRS4tO3/p7LnE5jaqD1jaU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl
                          rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 06:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2e:0d:0f:98:9d:8f:1f:9b:c1:ba:02:20:7e:60:b0:a6:b5:4a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68A727878748F40EF62D744B06303F71A6B3F75C
        Validity
            Not Before: Jun 13 03:48:43 2026 GMT
            Not After : Jun 14 06:25:43 2026 GMT
        Subject: CN=2ECC3482242F3D9FD99A37C29F19DDA82747FAE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:54:e8:09:56:e5:eb:67:53:a5:4e:b3:1e:c1:
                    82:38:49:39:38:fb:73:e9:5f:a9:aa:29:c5:d7:10:
                    57:79:69:d5:4e:94:1d:d7:02:09:d2:97:bc:1a:ae:
                    8f:f8:53:f1:a9:f6:a6:26:37:2c:dd:e4:aa:13:52:
                    08:07:c6:0f:4f:90:9c:51:43:b9:b3:81:5a:09:2b:
                    3d:02:2d:de:b3:ed:3e:a6:75:17:65:b0:91:64:0d:
                    1a:59:ce:f1:68:1b:db:ff:88:fd:93:9f:ff:77:c7:
                    42:b7:4a:da:d6:5d:d6:7f:65:6f:0a:dc:d9:b1:d2:
                    e1:d6:ea:e7:3b:82:d5:f3:c2:85:40:94:9f:b0:5c:
                    04:eb:71:5e:40:4e:bf:00:cb:76:e1:c9:1c:40:e3:
                    2b:8a:b2:60:fa:51:5c:89:51:05:e9:b1:d0:2a:21:
                    23:33:43:35:2c:eb:a2:43:46:aa:ba:10:9c:6c:61:
                    ff:f9:4b:8c:22:aa:13:10:c0:62:c9:89:a8:8c:11:
                    d7:6c:63:de:d7:c9:b0:c4:90:34:84:93:ee:f4:4c:
                    ce:ca:4f:ae:82:9e:a4:3f:f1:76:47:fc:f4:cc:53:
                    8f:04:8b:e3:15:24:11:dc:13:61:cd:91:27:e9:fd:
                    83:00:16:72:d9:a6:8f:d1:54:e2:a9:f4:76:72:34:
                    f6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CC:34:82:24:2F:3D:9F:D9:9A:37:C2:9F:19:DD:A8:27:47:FA:E7
            X509v3 Authority Key Identifier:
                keyid:68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:63:e9:39:49:10:7f:62:22:ef:b7:69:14:b4:77:bc:28:03:
         9a:f4:c0:6d:6e:9f:2a:cd:9e:ce:10:da:31:32:f1:07:72:36:
         9b:41:ef:16:12:d6:3d:ef:a5:cb:b4:ac:e9:cb:f5:61:f1:2c:
         c1:b8:a1:31:1a:9a:f1:e6:96:8b:9b:6b:a7:69:d8:0e:ba:f3:
         cb:c8:58:a3:57:f6:72:a3:00:53:ad:fb:da:a2:b6:d1:52:e6:
         fa:c1:55:63:68:f9:e9:77:5f:ed:4d:36:e0:af:aa:f1:3d:ff:
         ed:cc:35:19:14:b5:2c:01:b2:c7:eb:d6:fa:81:dd:92:f4:54:
         82:9b:e0:a2:3a:ed:4e:18:18:5a:49:53:6a:f8:9b:28:b8:1a:
         7f:ac:e4:7e:8b:7a:ea:07:2d:36:7d:19:cf:68:a3:2d:4f:f3:
         1b:f1:6c:86:b8:7f:4c:45:ee:0d:57:c4:79:7c:61:66:0e:7d:
         f9:f4:df:64:bd:cf:0d:83:8b:fb:36:9e:c3:3c:06:69:db:40:
         b5:ec:10:30:61:ea:c8:5b:13:69:f8:61:28:58:c8:89:90:bd:
         91:9c:df:87:da:4e:09:49:02:f4:71:58:9e:f7:66:a2:8d:a6:
         89:1a:c1:d7:1f:52:dc:38:bc:18:73:94:d0:9f:7e:b7:e2:71:
         8b:79:07:19
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWi4ND5idjx+bwboCIH5gsKa1SpEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhBNzI3ODc4NzQ4RjQwRUY2MkQ3NDRCMDYzMDNGNzFB
NkIzRjc1QzAeFw0yNjA2MTMwMzQ4NDNaFw0yNjA2MTQwNjI1NDNaMDMxMTAvBgNV
BAMTKDJFQ0MzNDgyMjQyRjNEOUZEOTlBMzdDMjlGMTlEREE4Mjc0N0ZBRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYVOgJVuXrZ1OlTrMewYI4STk4
+3PpX6mqKcXXEFd5adVOlB3XAgnSl7waro/4U/Gp9qYmNyzd5KoTUggHxg9PkJxR
Q7mzgVoJKz0CLd6z7T6mdRdlsJFkDRpZzvFoG9v/iP2Tn/93x0K3StrWXdZ/ZW8K
3Nmx0uHW6uc7gtXzwoVAlJ+wXATrcV5ATr8Ay3bhyRxA4yuKsmD6UVyJUQXpsdAq
ISMzQzUs66JDRqq6EJxsYf/5S4wiqhMQwGLJiaiMEddsY97XybDEkDSEk+70TM7K
T66CnqQ/8XZH/PTMU48Ei+MVJBHcE2HNkSfp/YMAFnLZpo/RVOKp9HZyNPaBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULsw0giQvPZ/ZmjfCnxndqCdH+ucwHwYDVR0j
BBgwFoAUaKcnh4dI9A72LXRLBjA/caaz91wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTlmMDEzZjktYjRmNy00NThjLWFhYzUtMDgwNDFiM2Y2NWU2LzAvNjhBNzI3ODc4
NzQ4RjQwRUY2MkQ3NDRCMDYzMDNGNzFBNkIzRjc1Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82OEE3Mjc4Nzg3NDhGNDBFRjYyRDc0NEIwNjMwM0Y3MUE2QjNG
NzVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlmMDEzZjktYjRmNy00NThjLWFh
YzUtMDgwNDFiM2Y2NWU2LzAvNjhBNzI3ODc4NzQ4RjQwRUY2MkQ3NDRCMDYzMDNG
NzFBNkIzRjc1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHxj6TlJEH9iIu+3aRS0d7woA5r0wG1unyrN
ns4Q2jEy8QdyNptB7xYS1j3vpcu0rOnL9WHxLMG4oTEamvHmlouba6dp2A6688vI
WKNX9nKjAFOt+9qittFS5vrBVWNo+el3X+1NNuCvqvE9/+3MNRkUtSwBssfr1vqB
3ZL0VIKb4KI67U4YGFpJU2r4myi4Gn+s5H6LeuoHLTZ9Gc9ooy1P8xvxbIa4f0xF
7g1XxHl8YWYOffn032S9zw2Di/s2nsM8BmnbQLXsEDBh6shbE2n4YShYyImQvZGc
34faTglJAvRxWJ73ZqKNpokawdcfUtw4vBhzlNCffrficYt5Bxk=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:19:48 2026 by rpki-client