Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
File:                     3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft (raw, json)
Hash identifier:          dCzVi7sWHRIXqfqu3+S0zk7tb3NI0b6dFvq0uxo/+qs=
Subject key identifier:   9B:4F:A4:C4:4C:A7:63:08:DD:98:A5:D5:82:96:8C:7B:F0:DB:F0:02
Authority key identifier: 3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
Certificate issuer:       /CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Certificate serial:       1FB1EE88548C53F7A2D60E598BE2DC1AC55E9AB1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
Manifest number:          3C
Signing time:             Mon 15 Jun 2026 07:15:06 +0000
Manifest this update:     Mon 15 Jun 2026 07:10:06 +0000
Manifest next update:     Tue 16 Jun 2026 10:24:06 +0000
Files and hashes:         1: 3231302e35372e3231322e302f32342d3234203d3e203338313432.roa (hash: 9Uh4g+j84Dsp+SQG55jiqFV/GXapMzCJHzdMQ8QVMIs=)
                          2: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (hash: 5bkG3r6aOam2UYiAyDRHJLOMYGtAoc4TWZuSkWY6DW8=)
                          3: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (hash: SZ3yY2r9mzkD9TfHT8RxuOv5AwUhsGvKGPEF8U53ZKI=)
                          4: 3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (hash: Fncw6ejzrq4zIDml7sJv0ARYNNSdP3usP81sr9K6idM=)
                          5: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (hash: ZJYJND6cBL2XfAoUPgiKsDkKfS/wfCExUcg8XPfgBm0=)
                          6: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (hash: mUUIB+/mtgQYA4ZJFgHA5FD7YbXkeVVQm5wqTm9otqY=)
                          7: 3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (hash: furgG1WGsI/SaHbEkYDIDFe9YchJUqhB/+OGElUaiP4=)
                          8: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (hash: Y9dwS9JvSaOl4mADQu18dqt11q2d+GtfYQ7OjGf2xvk=)
                          9: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (hash: dVzU+GqvAS7Wn+MjXVPbLdaACaAzf5gsplbVnIYe7RI=)
                          10: 3231302e35372e3231332e302f32342d3234203d3e203338313432.roa (hash: tc07x6I5GlIGtQm74mFDwkPY7veOT+58YPaMpLFuMP8=)
                          11: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (hash: QO5w5W9cp8cI6poTkpuXpM9F3mhiRyQeqAdZ2Rfgw6w=)
                          12: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (hash: FPgfsxknLRU1LHc9BebuH01+tHe4lP7NUuhwY6WPhmk=)
                          13: 3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (hash: 8kncCReHuUftWwxEVQGeXIdZhJBx7PmiqOaqTEDqEqo=)
                          14: 3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl (hash: iELuDoHL9Xu/9bnBpyY0RFdddL9lthLqTkiAZr1CogI=)
                          15: 3231302e35372e3230382e302f32302d3234203d3e203338313432.roa (hash: FGw2BZbAPXB424pj8gkt+KyDf13NBMafjHJz1qqtroA=)
                          16: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (hash: S43umrQnayZCpSzQYIAmH2LGDnCAWJ6VcBOOrq/ns7Y=)
                          17: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (hash: J+zYKwZ+SXdC6vvuqB/51PHxQKuHMJSM0Dgp8PV/GWI=)
                          18: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (hash: P12FJNsFFyWSsRexfHM3kWn+2VKYuVhwIEq6slsbCcg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
                          rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Jun 2026 03:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b1:ee:88:54:8c:53:f7:a2:d6:0e:59:8b:e2:dc:1a:c5:5e:9a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
        Validity
            Not Before: Jun 15 07:10:06 2026 GMT
            Not After : Jun 16 10:24:06 2026 GMT
        Subject: CN=9B4FA4C44CA76308DD98A5D582968C7BF0DBF002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6e:f1:ad:a0:a5:72:7c:d0:30:33:49:d4:d9:
                    d2:43:49:e6:43:27:31:e1:f5:06:89:df:c5:c0:9f:
                    a5:5f:47:6f:08:a5:a4:ed:4d:cc:30:b6:a3:c9:99:
                    a2:7c:4f:48:e1:cf:4b:c2:a5:8e:b0:82:dd:d9:7c:
                    42:f8:51:21:59:65:80:ea:c7:f1:11:2b:8e:61:71:
                    e0:e5:f3:d3:f4:bd:51:fe:2c:ba:c0:db:9e:de:dc:
                    ce:53:b7:15:38:0f:da:20:d3:5a:03:dc:04:8f:ce:
                    57:c1:89:d9:85:fb:75:3f:2c:c5:be:71:3b:63:c2:
                    b5:6c:3f:ec:59:45:08:e0:a3:eb:e2:99:11:0a:34:
                    c1:7a:94:5b:83:9e:ef:33:53:02:40:0e:ea:a7:34:
                    1a:b5:53:1d:29:e9:ed:6d:8e:44:98:6f:5f:7a:ce:
                    9a:02:9b:cb:3f:0d:1c:1b:63:5b:3a:5d:16:f6:5c:
                    47:1c:47:53:6c:dc:86:88:fd:9d:51:12:42:b3:71:
                    70:e0:8e:02:a1:8c:fc:90:52:b1:a0:32:30:d0:b4:
                    ff:0a:b4:cd:25:a9:a8:6c:05:03:b1:f3:8e:87:3e:
                    ea:86:90:7f:aa:a3:aa:3c:29:0a:70:03:61:79:33:
                    97:c3:86:89:7d:03:8a:da:41:76:c7:3b:38:51:57:
                    f6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4F:A4:C4:4C:A7:63:08:DD:98:A5:D5:82:96:8C:7B:F0:DB:F0:02
            X509v3 Authority Key Identifier:
                keyid:3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:94:d6:0a:da:b5:da:03:c2:66:76:5f:1a:b0:8a:8b:70:6a:
         09:60:95:b9:f3:55:8f:20:79:f2:77:02:93:5d:d7:7d:1f:db:
         14:90:43:f5:ea:f4:4b:6a:8d:9a:ae:b2:b7:ed:3c:b6:ac:ae:
         9b:33:27:c6:11:7e:50:ea:e1:3c:ad:71:28:96:ac:a4:4e:8d:
         af:fd:81:b3:12:7f:33:d1:e0:5e:dc:c6:9f:91:4b:9d:5f:94:
         31:71:96:f6:81:7d:c0:dd:39:8b:af:ec:d0:a1:3e:67:c3:20:
         ba:aa:38:c9:9e:23:a4:34:a8:50:67:67:db:c7:2c:09:39:ce:
         80:e0:50:9e:68:be:19:a1:68:d3:c3:af:be:40:9d:12:19:3f:
         ac:3e:de:74:1a:f4:f3:24:24:53:d6:c7:6a:76:1f:2c:5e:00:
         b7:fb:69:40:14:71:1d:8e:f5:b2:c9:0d:c7:06:d4:aa:b6:48:
         66:20:f5:a3:f7:51:b5:e3:57:c1:7d:51:88:b3:ec:ac:33:f3:
         c4:ae:27:43:0b:af:c3:a2:1a:b8:27:8a:78:56:41:14:0c:fb:
         cc:b3:e0:db:9e:78:6b:d6:c0:f2:0d:99:db:8f:48:63:2b:fe:
         24:7e:be:7d:09:97:a4:fd:b2:61:dc:70:d0:61:ef:02:ef:e6:
         a0:d3:db:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 14:15:43 2026 by rpki-client