Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
File:                     F440C463790421765C0B198FBF82B80F70529E23.mft (raw, json)
Hash identifier:          WVkXboGDvrA18KBeOO3kU4JbW6T7ar4sQWHcM38Bppk=
Subject key identifier:   05:AF:82:CA:63:2E:5F:80:6A:17:5F:9A:38:8A:61:FA:C2:78:58:49
Authority key identifier: F4:40:C4:63:79:04:21:76:5C:0B:19:8F:BF:82:B8:0F:70:52:9E:23
Certificate issuer:       /CN=F440C463790421765C0B198FBF82B80F70529E23
Certificate serial:       1F49223630C1DB598D2D9A415641350A1FC45A52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 06:25:40 +0000
Manifest this update:     Wed 17 Jun 2026 06:20:40 +0000
Manifest next update:     Thu 18 Jun 2026 08:07:40 +0000
Files and hashes:         1: 3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa (hash: vIUCd1IemIKCQ+NzE6xQfnpmhwQEajDU6BevZYDhd68=)
                          2: 323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa (hash: DUNSj4kP6eOZRckNiWJJBeXQEQuZewuUxpFimv6tinc=)
                          3: F440C463790421765C0B198FBF82B80F70529E23.crl (hash: MeNi/C40wdrYH3tZcBob1t/FyhOuw4C/sHlBAGI80m4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.crl
                          rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:49:22:36:30:c1:db:59:8d:2d:9a:41:56:41:35:0a:1f:c4:5a:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F440C463790421765C0B198FBF82B80F70529E23
        Validity
            Not Before: Jun 17 06:20:40 2026 GMT
            Not After : Jun 18 08:07:40 2026 GMT
        Subject: CN=05AF82CA632E5F806A175F9A388A61FAC2785849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:d1:50:1c:d6:86:a1:a1:a9:31:98:7c:58:
                    64:e8:eb:96:6c:19:c6:82:64:3b:69:09:65:c0:34:
                    6d:f0:c1:9c:7d:b4:2a:8c:d4:b2:8d:e2:22:b6:ef:
                    8e:3e:91:61:3a:24:07:93:51:78:88:35:32:f2:4f:
                    ee:16:20:26:90:35:8b:27:b3:b1:75:3d:70:63:5d:
                    56:b0:65:c0:08:4a:c9:6a:fd:1c:68:fc:b2:40:db:
                    94:d4:ec:bc:4a:79:f8:b2:93:86:2c:51:5e:7f:12:
                    cc:c4:e0:03:ae:56:26:27:6b:c1:09:a9:c5:c1:67:
                    23:ba:09:32:3d:5c:a4:44:a3:e0:87:7e:e9:61:c5:
                    62:d8:5a:ae:e7:ae:e5:2c:8d:5f:66:43:7b:ed:f1:
                    d0:29:7b:3a:57:76:76:03:62:f7:25:91:1d:77:1d:
                    b9:87:a0:aa:87:ec:33:4e:8b:c4:c9:8b:da:e1:3b:
                    12:c6:13:7d:d9:64:88:e1:b4:46:d6:09:a0:29:46:
                    31:c9:83:4c:56:04:68:40:c9:02:48:28:4b:49:cc:
                    27:f6:f0:2a:32:4a:9f:39:a1:63:80:34:1a:1d:79:
                    7b:a7:d8:89:bc:60:9c:aa:97:45:7f:22:48:03:e8:
                    fb:4e:b1:05:00:e7:07:05:b6:ca:fd:90:01:44:ff:
                    64:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AF:82:CA:63:2E:5F:80:6A:17:5F:9A:38:8A:61:FA:C2:78:58:49
            X509v3 Authority Key Identifier:
                keyid:F4:40:C4:63:79:04:21:76:5C:0B:19:8F:BF:82:B8:0F:70:52:9E:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:10:64:0d:1e:35:7f:7a:60:50:b6:a0:5b:4b:5c:5d:af:0b:
         3f:ac:7b:ae:45:b4:04:46:af:71:6e:ed:6a:54:61:34:a6:36:
         07:e2:34:7d:2b:62:d0:9a:a8:79:22:f2:58:ec:2d:87:87:ee:
         0b:59:bf:35:b9:6a:e6:66:33:4d:50:cf:a4:e2:c5:88:c1:3c:
         3a:6b:0b:4a:a4:60:e8:42:13:e3:43:3e:5c:cb:13:63:d7:20:
         6a:89:d8:05:33:1e:6c:12:ba:f1:ea:c1:09:ce:d5:10:da:8b:
         ea:f1:8a:b4:9e:7e:ec:ab:99:b4:38:ca:30:84:03:45:1a:cc:
         53:d0:d4:33:ae:89:5d:f7:ea:0d:2c:f9:c7:87:c1:40:ae:b6:
         6d:a6:fa:d8:d3:0e:9c:c5:9b:76:f7:ab:52:31:db:7a:f9:68:
         14:ba:c4:28:e9:d2:84:7d:64:78:c0:f0:84:ea:e6:6e:54:49:
         5a:52:56:a8:1c:dd:78:a0:e0:bd:7e:ab:f8:ad:5b:c7:c9:59:
         00:db:96:49:29:85:b7:a7:e9:08:4d:9c:9e:ed:c0:94:a5:40:
         21:3e:97:f7:e9:a1:c8:80:89:cb:c2:34:13:f8:48:75:3c:1b:
         5f:12:e8:16:cf:00:11:ce:fa:5b:a8:4c:9b:56:5c:ce:19:35:
         a7:64:33:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:35 2026 by rpki-client