Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft
File:                     9DE0710D199DAE298457CA63B91BD20C03F148B9.mft (raw, json)
Hash identifier:          4EO8IjRHDnfZUnzJtgNqYyt6034JUoEA/jqIafaAjek=
Subject key identifier:   1E:6B:11:2C:CD:EE:36:11:97:6F:DE:44:8F:94:F1:5B:8C:C5:0F:37
Authority key identifier: 9D:E0:71:0D:19:9D:AE:29:84:57:CA:63:B9:1B:D2:0C:03:F1:48:B9
Certificate issuer:       /CN=9DE0710D199DAE298457CA63B91BD20C03F148B9
Certificate serial:       4E771DDDC7C5C03D3DAC13DA852BEAB270CCFC74
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 17:25:13 +0000
Manifest this update:     Tue 16 Jun 2026 17:20:13 +0000
Manifest next update:     Wed 17 Jun 2026 19:58:13 +0000
Files and hashes:         1: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: Wixcu+2ilRcFPig7lum9EHWYiNT3uxWOphv6H0Og4uE=)
                          2: 9DE0710D199DAE298457CA63B91BD20C03F148B9.crl (hash: BLiSELxl8t9tUyMZ4oYHVZC1/zNZGr09YgDHDLqEasI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.crl
                          rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 19:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:77:1d:dd:c7:c5:c0:3d:3d:ac:13:da:85:2b:ea:b2:70:cc:fc:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DE0710D199DAE298457CA63B91BD20C03F148B9
        Validity
            Not Before: Jun 16 17:20:13 2026 GMT
            Not After : Jun 17 19:58:13 2026 GMT
        Subject: CN=1E6B112CCDEE3611976FDE448F94F15B8CC50F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:24:f2:98:ba:e1:ae:16:a7:d9:b7:e0:a9:ea:
                    12:48:09:2f:51:dc:8f:f8:a0:f9:08:5e:32:6f:57:
                    c7:91:b1:b2:c4:dc:45:8e:c0:51:b5:82:33:2b:75:
                    44:3a:e8:57:df:e5:e6:16:00:cb:e9:13:93:12:23:
                    b3:62:83:af:57:e7:73:f0:f6:f5:15:53:3a:68:31:
                    39:88:de:e8:41:9f:a0:9b:85:4d:9e:2a:96:43:cc:
                    9b:64:e8:06:06:b6:60:39:03:d2:08:e0:18:a5:ca:
                    45:9f:2e:cc:a9:38:c8:f6:fa:c3:22:23:ed:87:73:
                    47:06:75:e9:5e:6b:5d:ad:6d:ad:a2:e3:06:58:74:
                    81:03:18:ea:13:c8:e0:82:23:5a:30:8e:08:84:f1:
                    c3:01:99:67:52:53:1d:73:87:2d:fa:fb:b4:86:4e:
                    7b:86:55:95:1d:6a:c4:d0:9e:32:6d:91:37:ea:c4:
                    84:d7:33:d5:d8:8a:53:a5:b0:68:24:18:5d:0c:b2:
                    c7:9c:41:0e:14:7d:69:34:2c:92:dd:4a:07:61:4a:
                    4f:4d:9e:d1:eb:25:ab:49:ca:46:9d:85:ec:4e:cf:
                    3a:67:6f:f5:79:0c:c0:ee:49:80:70:a2:3d:0d:35:
                    06:4d:02:5a:30:b9:d4:6b:e6:0c:38:31:78:52:99:
                    65:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6B:11:2C:CD:EE:36:11:97:6F:DE:44:8F:94:F1:5B:8C:C5:0F:37
            X509v3 Authority Key Identifier:
                keyid:9D:E0:71:0D:19:9D:AE:29:84:57:CA:63:B9:1B:D2:0C:03:F1:48:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:e3:5a:88:5a:9d:89:30:ff:d5:86:8c:c2:2e:9b:12:67:61:
         a4:d4:26:7d:ae:77:56:1e:46:93:60:4d:7e:d1:3d:a8:44:d4:
         50:c7:21:b4:da:1e:f5:bc:8a:7e:e0:8e:31:87:33:e7:cf:df:
         da:40:a4:ed:ae:22:35:3d:0c:3a:94:cc:6b:95:21:4f:1a:80:
         84:e3:ad:e8:ec:59:a9:fc:3e:52:88:05:57:8e:78:43:be:4e:
         9f:bc:a6:40:a1:24:4d:f7:32:a8:88:e4:fb:e0:d1:a5:48:69:
         74:25:94:5b:46:71:5f:c7:18:e6:14:69:fd:99:b9:32:40:0c:
         87:03:72:81:0a:3a:6b:dc:ef:b6:f9:4f:b6:ab:4b:8e:fb:64:
         49:99:71:ac:40:77:83:57:13:04:0a:71:04:97:29:51:cf:38:
         22:21:8b:d9:9c:81:d6:6d:65:4a:81:06:5b:91:77:82:43:0d:
         fc:3f:a7:96:f7:cb:8b:10:e7:17:fc:d3:e3:1c:f2:29:29:39:
         9f:76:2d:16:c4:1d:b6:17:c3:c3:0c:90:04:08:29:e2:2b:2f:
         ed:11:b8:b8:bc:fc:45:58:75:c9:66:8b:83:7a:1c:f6:93:f3:
         57:97:e8:82:78:a2:f4:f2:79:cd:c6:c3:c5:d8:ce:14:df:f3:
         c3:b8:0b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:32:48 2026 by rpki-client