Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
File:                     AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft (raw, json)
Hash identifier:          LO71o4hg5iB2c+aclvNkByczPAxU6xvzblDl6wOpCMk=
Subject key identifier:   12:20:F7:A2:BF:A5:BE:34:CD:37:74:63:58:8E:77:3D:C8:69:28:4A
Authority key identifier: AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A
Certificate issuer:       /CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
Certificate serial:       09457B965C63474C316A46C3A76F20505A8DACFD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 07:36:59 +0000
Manifest this update:     Wed 17 Jun 2026 07:31:59 +0000
Manifest next update:     Thu 18 Jun 2026 08:45:59 +0000
Files and hashes:         1: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: xtIac8VAw15L09WUieeUSir9eYOGXhXfymWhdgL7e/Y=)
                          2: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: bzgmeNk+RTlBoGqusN6v8fvRVhXp8YED5fczTfvL+Pk=)
                          3: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: Azh7PmQbddqZUxJOxiTwYESOb0WkJfacl3QlGxSp7Ls=)
                          4: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sfzwSxhwf93yzsApW5cK5kJn4eNAyyEFWMZjQtMY6Ok=)
                          5: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: SsEkvpd7Ya0vJcTfzCdLVaBKw02BlHsoNedgx56rz7o=)
                          6: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: PK17dkljk3cirdVkAhnzBVlvFjbQaBFW384JrVTU5eI=)
                          7: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 9bsIgvpn+nDqB1JkEO35LZUnAXe5IvhJf7x4sHOoJLY=)
                          8: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: ry1zcsxyp5rx5aqnNqVzN9RbPAzFPE5OKy5fVA/tBsY=)
                          9: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: aykb9pBBSkXI3tTi9mpSHn2tVZ0H++we7ChH689sRxg=)
                          10: AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl (hash: N4mOFG1zV9EH/eQH6WJzbRCC28UQrtZW75U7JM0xunU=)
                          11: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: Cz0RsKoVkeeB1IsUqTtQO8T5aC2XyKwMvob94kUO7oA=)
                          12: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: UF7aCyE5FESxwGGWBM/poN89N17rR7jv22FSOfKjvlk=)
                          13: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: 0nmqU55YZ3VtV1W8dEUj6+BAJuQ389WNc46VpzYQeA4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl
                          rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:45:7b:96:5c:63:47:4c:31:6a:46:c3:a7:6f:20:50:5a:8d:ac:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
        Validity
            Not Before: Jun 17 07:31:59 2026 GMT
            Not After : Jun 18 08:45:59 2026 GMT
        Subject: CN=1220F7A2BFA5BE34CD377463588E773DC869284A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ec:13:40:ff:1f:2c:87:e9:30:91:75:0a:69:
                    d2:c6:47:b1:fb:c9:5e:1d:e9:06:d5:b6:e9:c2:64:
                    f2:c0:d0:e4:8f:84:ca:56:28:64:0e:af:25:c4:a6:
                    f8:0e:83:d8:6d:17:ab:d2:04:39:3a:a3:7f:57:52:
                    1e:6d:d4:ee:2d:4d:4c:1b:d7:aa:55:e0:fc:9f:8e:
                    a9:af:83:01:80:92:41:e3:3f:89:72:50:a1:a8:75:
                    a2:24:f8:15:9b:c0:20:72:5d:1c:09:58:5f:81:6b:
                    21:95:c6:55:8d:5d:3c:e5:82:f4:9b:86:a9:da:a3:
                    1c:37:db:6b:05:bd:9b:17:81:56:a3:7c:78:e3:4f:
                    32:b2:ee:52:2b:24:6e:c4:56:0e:92:a0:ff:b0:5b:
                    5b:56:ba:96:c5:90:f9:eb:ac:92:84:fa:61:2b:1f:
                    22:cb:0f:09:36:f9:9b:23:23:75:5b:79:82:f8:db:
                    bb:05:01:33:31:cb:8a:59:0f:bb:1d:d2:fd:4b:63:
                    80:10:13:4b:7e:5f:85:e6:3d:a3:60:00:a9:1f:e3:
                    a4:c0:c8:68:a1:a7:30:55:77:72:88:c4:a8:89:e2:
                    1a:83:80:d4:1c:9e:b7:c4:bd:e3:76:67:dc:21:cc:
                    43:ce:e9:ba:3d:2f:ef:7e:69:5c:55:71:59:03:5d:
                    ca:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:20:F7:A2:BF:A5:BE:34:CD:37:74:63:58:8E:77:3D:C8:69:28:4A
            X509v3 Authority Key Identifier:
                keyid:AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e7:db:04:49:4d:3f:14:dc:64:36:6d:20:4e:cb:de:60:6e:
         a6:4e:2c:66:92:0a:b0:ee:57:74:25:31:3b:20:75:9e:72:a7:
         bd:d7:32:04:58:73:ca:26:5e:bd:73:0c:fa:17:2f:a1:93:b8:
         91:f9:cf:8e:a9:5b:d8:9f:a5:6a:f7:5b:d2:84:1b:d4:60:f9:
         1d:49:e0:65:ef:b3:6b:8d:06:01:11:d2:76:6c:93:6c:93:7e:
         2d:38:f7:d5:a0:7f:b2:70:ef:3a:ee:3a:f6:3a:c1:1c:6d:91:
         ec:9c:f1:3a:a2:a6:b6:62:8c:72:ce:37:53:31:1f:a2:cd:ad:
         70:db:cc:84:75:cf:ce:5d:06:4a:de:d5:0d:37:1b:0f:16:42:
         dd:ff:20:71:a1:fb:3d:5e:a8:df:94:e1:1d:47:8b:90:50:a1:
         e7:28:27:66:f8:23:73:cc:d1:73:1e:ef:c0:4c:f2:29:71:f3:
         9b:a3:2d:b6:aa:cc:70:bb:94:ec:cc:1e:89:83:db:9f:a1:ac:
         85:f6:b0:d7:ab:df:5e:30:ec:4f:20:85:4e:42:47:87:a9:a4:
         a2:e1:9a:2b:01:5d:16:c1:16:18:a8:36:b8:4c:f6:f5:2b:8e:
         53:97:a4:0e:14:2d:da:95:7e:89:ac:c0:71:ed:f8:e0:7e:28:
         d2:aa:91:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:40 2026 by rpki-client