Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
File:                     99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft (raw, json)
Hash identifier:          V3N9vIcm9r3asCLusW0lmHHyYVL33EPZiUy+IalYC9E=
Subject key identifier:   07:1E:0B:FE:86:05:24:49:72:71:A3:EA:40:2F:CE:84:45:26:90:54
Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
Certificate issuer:       /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Certificate serial:       228579F50723F29B829DF4A94210067D4B08FAC3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 22:41:37 +0000
Manifest this update:     Tue 16 Jun 2026 22:36:37 +0000
Manifest next update:     Thu 18 Jun 2026 01:13:37 +0000
Files and hashes:         1: 3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa (hash: Aetna6+21CQMAQqjAiUJIu47yG7i7XqoQJ5+dzrZLGg=)
                          2: 3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa (hash: REpKs/RXrD6+kSVY+pi8I08ad5JiVlI+VsKG+qhKX6I=)
                          3: 3230322e3137392e3138372e302f32342d3234203d3e203338373530.roa (hash: jzsgtTn7mipYVhReFlEPzAsVetPtmxUsBitMhsGc8oI=)
                          4: 3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa (hash: s0tvtnOzBx2wg+4vUHWBA8KcfOBbxN88qTxKuGgJguU=)
                          5: 3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa (hash: P+T4tPAca5KIeh3NpH+v8b7bFtAY7StYgksmfQ3/9cM=)
                          6: 3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa (hash: UKS72Ik2t69VNkZx10eznMiDop94XfhDTWq/cxqZMcs=)
                          7: 323430343a3838303a3a2f34382d3438203d3e203338373530.roa (hash: VgQXPBS32nNSzlwVl57OwsniexA2zZE5SydGF9v31zc=)
                          8: 323430343a3838303a31323a3a2f34382d3438203d3e203338373530.roa (hash: QNrAoCsUOKZCnY1N/fc3km7EG9A1f+dPgBphZu0nJbw=)
                          9: 3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa (hash: PRboNqucT4aVoRVOc4nRu3lOYaSHw3BpjErOfcflPnE=)
                          10: 3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa (hash: wtJefws1IQawoe8yb4jVgj5X5P3cewMGRSuqKr8w5/I=)
                          11: 3130332e3231332e3131372e302f32342d3234203d3e203338373530.roa (hash: MlpXJYuG8TKs4UXbWN+4r8Aq3XSuZvsK0qVMIYngvjU=)
                          12: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (hash: 7tVf8gGpMSKXIGs5t/hRwc2QOWzsG/fnuruBADT3qTU=)
                          13: 3230322e3137392e3139302e302f32332d3233203d3e203338373530.roa (hash: /g2f6okgGj8HKNPWnvqkUbF7FmFrL81D5X1Q6gvNPZk=)
                          14: 3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa (hash: JSpaszPWtP5AqDUfpY+T4zXizj7Q33fbh+pedpw+rSQ=)
                          15: 3230322e3137392e3138362e302f32342d3234203d3e203338373530.roa (hash: AzT5TPIp9fZ7Lzw08VDmHNbwLWKNghx+Y7H+VOnzBzQ=)
                          16: 99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl (hash: +QYncMjdblmoA3iuVezgd5zcP5v3Vvxws56lTPgRZDI=)
                          17: 3130332e3231332e3131382e302f32332d3233203d3e203338373530.roa (hash: 9TeQcqWDARNn53jqbj5jMqu8OaGQOBp3BzElbwHdS0o=)
                          18: 323430343a3838303a31303a3a2f34382d3438203d3e203338373530.roa (hash: YRbfvStJ8Xz50EBiTCoGlectFVsjTE1eI7CsInhJEBw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
                          rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 01:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:85:79:f5:07:23:f2:9b:82:9d:f4:a9:42:10:06:7d:4b:08:fa:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
        Validity
            Not Before: Jun 16 22:36:37 2026 GMT
            Not After : Jun 18 01:13:37 2026 GMT
        Subject: CN=071E0BFE860524497271A3EA402FCE8445269054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4b:08:2d:7b:30:a0:b2:84:8e:48:ff:76:ac:
                    81:9b:8c:d3:49:bd:25:78:6d:73:8c:cb:cb:2c:58:
                    e7:eb:c7:35:40:f6:c3:b5:03:09:5a:30:5c:38:60:
                    61:82:7f:f3:6d:a4:81:48:5d:12:8c:ee:24:6d:74:
                    ce:67:19:2c:2e:db:29:7c:8c:c0:a8:1e:eb:00:0f:
                    50:c7:99:ee:9a:8b:d3:84:02:51:5b:91:cd:a0:cc:
                    d8:4b:d2:38:31:f2:5d:19:63:d7:27:35:f5:89:01:
                    92:a7:05:b8:1b:5b:4a:8a:26:fe:e3:32:bf:a1:19:
                    4f:e7:21:c6:ca:0e:ec:88:46:6f:0e:86:ce:9a:7e:
                    b9:90:f5:84:66:10:35:6a:e1:85:29:c7:d5:02:31:
                    8b:e1:f6:3b:77:93:15:b8:28:a6:fc:5a:b2:05:cc:
                    7f:09:e9:64:cc:81:b4:ae:a8:5c:c8:a0:5c:83:f9:
                    12:10:d3:dc:2c:a4:b2:e7:9f:4b:0e:24:96:80:4e:
                    78:0e:e6:5a:71:f4:21:3d:7e:05:11:c8:ae:03:61:
                    6f:ab:e2:db:ab:9a:d9:c2:54:a6:30:35:ec:b8:f5:
                    7e:6a:73:2b:ec:65:18:d8:1b:88:83:e1:5a:5a:eb:
                    f5:a2:f8:c5:16:48:51:d8:40:2d:2f:54:b0:c3:96:
                    79:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1E:0B:FE:86:05:24:49:72:71:A3:EA:40:2F:CE:84:45:26:90:54
            X509v3 Authority Key Identifier:
                keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:65:35:90:91:9c:19:ba:fd:a8:58:28:61:05:46:4a:a7:ed:
         7d:14:44:cb:42:72:d0:f6:5d:cf:81:62:8c:e0:4a:d6:7b:1c:
         cd:e2:0d:af:7c:31:c8:2a:4b:9f:88:bc:a4:77:44:d9:a0:2d:
         dc:55:4e:e6:14:0e:b4:12:ee:d1:65:3d:45:60:6c:91:69:6d:
         4a:e6:26:73:4e:1c:be:49:4d:a2:79:13:49:3a:63:3e:a3:99:
         d5:b6:59:2f:71:20:77:e0:56:06:e3:8d:b3:e8:eb:3c:d9:93:
         27:c3:5e:1a:41:41:3b:cf:9b:d5:f9:88:d0:74:da:0e:04:76:
         88:77:59:0a:bc:4c:db:e8:69:c3:ef:c0:9c:c1:84:73:a0:62:
         f7:77:d3:e5:cb:f3:9d:ca:4e:cd:2b:d8:e4:77:d2:8a:8c:8f:
         68:54:8e:ab:0a:bd:92:18:dd:6f:eb:11:06:59:83:bc:eb:35:
         73:bf:b2:57:6a:4d:69:93:00:19:3b:13:19:6c:86:c8:8d:d5:
         68:c8:eb:b1:94:3f:ad:89:eb:82:a3:07:65:c6:22:51:6a:b5:
         8a:98:50:4b:32:f9:20:ed:fc:0e:8b:9b:7d:54:f2:50:fc:2b:
         43:fc:11:51:29:10:b6:a3:9e:71:b8:2d:01:b6:5a:cd:44:b4:
         ed:cb:eb:b2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIoV59Qcj8puCnfSpQhAGfUsI+sMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlGMEU2REUwMkM2MDJEMUU0ODU0NTU0NzRGNEIyMTIw
N0QyRDdGODAeFw0yNjA2MTYyMjM2MzdaFw0yNjA2MTgwMTEzMzdaMDMxMTAvBgNV
BAMTKDA3MUUwQkZFODYwNTI0NDk3MjcxQTNFQTQwMkZDRTg0NDUyNjkwNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRSwgtezCgsoSOSP92rIGbjNNJ
vSV4bXOMy8ssWOfrxzVA9sO1AwlaMFw4YGGCf/NtpIFIXRKM7iRtdM5nGSwu2yl8
jMCoHusAD1DHme6ai9OEAlFbkc2gzNhL0jgx8l0ZY9cnNfWJAZKnBbgbW0qKJv7j
Mr+hGU/nIcbKDuyIRm8Ohs6afrmQ9YRmEDVq4YUpx9UCMYvh9jt3kxW4KKb8WrIF
zH8J6WTMgbSuqFzIoFyD+RIQ09wspLLnn0sOJJaATngO5lpx9CE9fgURyK4DYW+r
4turmtnCVKYwNey49X5qcyvsZRjYG4iD4Vpa6/Wi+MUWSFHYQC0vVLDDlnnRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBx4L/oYFJElycaPqQC/OhEUmkFQwHwYDVR0j
BBgwFoAUmfDm3gLGAtHkhUVUdPSyEgfS1/gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzBmNWNmZGItNzk4Ny00MzUxLWJjMmUtNjZjMjRmNDlmNDQwLzAvOTlGMEU2REUw
MkM2MDJEMUU0ODU0NTU0NzRGNEIyMTIwN0QyRDdGOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85OUYwRTZERTAyQzYwMkQxRTQ4NTQ1NTQ3NEY0QjIxMjA3RDJE
N0Y4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBmNWNmZGItNzk4Ny00MzUxLWJj
MmUtNjZjMjRmNDlmNDQwLzAvOTlGMEU2REUwMkM2MDJEMUU0ODU0NTU0NzRGNEIy
MTIwN0QyRDdGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAANlNZCRnBm6/ahYKGEFRkqn7X0URMtCctD2
Xc+BYozgStZ7HM3iDa98McgqS5+IvKR3RNmgLdxVTuYUDrQS7tFlPUVgbJFpbUrm
JnNOHL5JTaJ5E0k6Yz6jmdW2WS9xIHfgVgbjjbPo6zzZkyfDXhpBQTvPm9X5iNB0
2g4Edoh3WQq8TNvoacPvwJzBhHOgYvd30+XL853KTs0r2OR30oqMj2hUjqsKvZIY
3W/rEQZZg7zrNXO/sldqTWmTABk7ExlshsiN1WjI67GUP62J64KjB2XGIlFqtYqY
UEsy+SDt/A6Lm31U8lD8K0P8EVEpELajnnG4LQG2Ws1EtO3L67I=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:13:03 2026 by rpki-client