Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
File:                     0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft (raw, json)
Hash identifier:          aF1J79MCKD46QqtrUNS667jNdOpl2zZXKs+A69YWD20=
Subject key identifier:   24:09:CD:43:2F:A1:6A:9C:E5:A6:12:F9:32:81:2F:E8:6C:C3:8F:4E
Authority key identifier: 0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83
Certificate issuer:       /CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783
Certificate serial:       614EE0A936FD679948FF7FAB17B70D35E287B904
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
Manifest number:          3F
Signing time:             Wed 17 Jun 2026 04:33:22 +0000
Manifest this update:     Wed 17 Jun 2026 04:28:22 +0000
Manifest next update:     Thu 18 Jun 2026 06:26:22 +0000
Files and hashes:         1: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: yMPJNSkMGIl2UvT1CYNlCKulD32gYlJwLvlyIrBqbfE=)
                          2: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: jn+K6WOORye+NOCB1GXieBBnyp4klMVwEtXChM9Gflg=)
                          3: 0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl (hash: 22Uhokz9DLO0fma7AsUBNS2Be9M4SCyESy1WUtGxXTQ=)
                          4: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: 0buGIXn5F8o+JhXrXgmfNJ2sJWtjHLxvA64EOEEpl5Q=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl
                          rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4e:e0:a9:36:fd:67:99:48:ff:7f:ab:17:b7:0d:35:e2:87:b9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783
        Validity
            Not Before: Jun 17 04:28:22 2026 GMT
            Not After : Jun 18 06:26:22 2026 GMT
        Subject: CN=2409CD432FA16A9CE5A612F932812FE86CC38F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6d:0e:df:1a:b6:77:82:b3:7d:27:e2:9c:1a:
                    76:d6:71:e7:8c:aa:2c:9e:d6:74:38:43:52:30:d1:
                    1d:72:2e:00:0d:a7:2d:bb:11:81:8b:51:11:e8:94:
                    2c:10:bf:60:b3:bd:55:0e:d8:79:b8:29:53:5d:c4:
                    0e:26:54:bf:6c:ef:c6:b9:ca:2d:ad:e1:a4:c5:39:
                    8f:cf:23:ec:8c:ad:4a:43:9b:be:d3:9c:f9:2e:79:
                    a9:d9:ea:be:eb:d2:19:48:10:a9:72:06:a6:26:aa:
                    73:c8:15:45:8d:f4:fa:55:b7:3f:c8:e2:06:b1:0f:
                    41:85:84:15:fb:98:5d:6f:45:1b:2e:c3:b2:81:14:
                    d8:9a:5e:27:4d:cf:1a:fd:9a:a1:e2:30:b9:6b:b3:
                    fc:62:56:f3:4b:66:a1:22:c3:8d:5e:32:19:b3:cf:
                    04:c4:10:10:93:1f:6d:07:fc:6d:08:d1:3c:0b:4e:
                    3f:79:dd:20:9f:c5:94:cd:59:78:15:c3:44:76:54:
                    e9:ec:97:b4:2b:dc:e5:77:01:97:44:14:1d:f2:9c:
                    98:cc:16:72:34:5f:22:e7:1d:fc:ef:e8:a9:ac:5f:
                    95:2c:85:30:7a:ea:19:9b:1a:0f:22:1e:98:c2:d9:
                    53:6d:4b:ba:e3:cb:3c:76:87:da:d7:af:1b:a2:6a:
                    84:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:09:CD:43:2F:A1:6A:9C:E5:A6:12:F9:32:81:2F:E8:6C:C3:8F:4E
            X509v3 Authority Key Identifier:
                keyid:0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:50:0f:0d:83:ce:86:2b:27:60:c2:4e:42:db:ec:e6:b0:e1:
         50:57:0d:b6:6b:73:5d:10:68:f1:eb:be:84:e9:2b:e4:41:fe:
         e6:f5:ca:5f:8b:94:99:fe:c0:9a:32:5d:7e:52:2a:2a:db:a4:
         15:0c:80:a3:02:3c:d4:6f:ed:c3:b7:fe:0f:72:70:e7:8e:6b:
         a6:29:f3:f8:45:e2:3a:a6:7d:32:d4:99:e0:73:3a:77:9b:13:
         46:9a:50:b6:ac:a6:b0:22:c8:62:63:ca:a8:d4:79:98:6c:3e:
         96:2d:ad:1f:96:59:a4:3a:07:c7:9f:c7:1a:01:28:7f:68:b5:
         75:ca:20:da:30:03:c7:ae:49:1d:5c:f4:b0:f5:67:36:73:a2:
         ad:5c:3c:57:b9:18:a8:9c:a5:2c:99:37:ad:93:e6:fa:ca:fc:
         1d:99:a1:04:83:f2:9b:d7:0e:d3:56:2b:76:80:e2:85:70:28:
         77:0a:53:b0:0a:4f:bc:55:8f:e7:29:46:57:d6:e8:03:ac:57:
         56:a1:90:eb:40:0e:3a:22:2c:67:3f:38:3b:f0:b5:6c:50:de:
         45:1e:6d:fc:0f:c0:29:49:73:56:11:b3:3a:5d:e2:71:8d:ad:
         3e:1c:a0:c9:8c:68:f3:29:b0:b7:a9:27:4a:15:2f:27:c4:4f:
         a6:04:6a:7e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYU7gqTb9Z5lI/3+rF7cNNeKHuQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENDRjk0OEYzREEyQ0MwOEYwNjJERkNCNTdDQTA3MDY3
RDQxOTc4MzAeFw0yNjA2MTcwNDI4MjJaFw0yNjA2MTgwNjI2MjJaMDMxMTAvBgNV
BAMTKDI0MDlDRDQzMkZBMTZBOUNFNUE2MTJGOTMyODEyRkU4NkNDMzhGNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSbQ7fGrZ3grN9J+KcGnbWceeM
qiye1nQ4Q1Iw0R1yLgANpy27EYGLURHolCwQv2CzvVUO2Hm4KVNdxA4mVL9s78a5
yi2t4aTFOY/PI+yMrUpDm77TnPkueanZ6r7r0hlIEKlyBqYmqnPIFUWN9PpVtz/I
4gaxD0GFhBX7mF1vRRsuw7KBFNiaXidNzxr9mqHiMLlrs/xiVvNLZqEiw41eMhmz
zwTEEBCTH20H/G0I0TwLTj953SCfxZTNWXgVw0R2VOnsl7Qr3OV3AZdEFB3ynJjM
FnI0XyLnHfzv6KmsX5UshTB66hmbGg8iHpjC2VNtS7rjyzx2h9rXrxuiaoSpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJAnNQy+hapzlphL5MoEv6GzDj04wHwYDVR0j
BBgwFoAUDM+Ujz2izAjwYt/LV8oHBn1Bl4MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmZmOGY0YWItMWFiOC00ODk0LWI3NTgtZDliY2UzODAzZTRjLzAvMENDRjk0OEYz
REEyQ0MwOEYwNjJERkNCNTdDQTA3MDY3RDQxOTc4My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQ0NGOTQ4RjNEQTJDQzA4RjA2MkRGQ0I1N0NBMDcwNjdENDE5
NzgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmZmOGY0YWItMWFiOC00ODk0LWI3
NTgtZDliY2UzODAzZTRjLzAvMENDRjk0OEYzREEyQ0MwOEYwNjJERkNCNTdDQTA3
MDY3RDQxOTc4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABVQDw2DzoYrJ2DCTkLb7Oaw4VBXDbZrc10Q
aPHrvoTpK+RB/ub1yl+LlJn+wJoyXX5SKirbpBUMgKMCPNRv7cO3/g9ycOeOa6Yp
8/hF4jqmfTLUmeBzOnebE0aaULasprAiyGJjyqjUeZhsPpYtrR+WWaQ6B8efxxoB
KH9otXXKINowA8euSR1c9LD1ZzZzoq1cPFe5GKicpSyZN62T5vrK/B2ZoQSD8pvX
DtNWK3aA4oVwKHcKU7AKT7xVj+cpRlfW6AOsV1ahkOtADjoiLGc/ODvwtWxQ3kUe
bfwPwClJc1YRszpd4nGNrT4coMmMaPMpsLepJ0oVLyfET6YEan4=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:26 2026 by rpki-client