Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
File:                     FF5E59BD445AE731E58ED471848043C324931D05.mft (raw, json)
Hash identifier:          pnmED9BA9LvIZzo25xFdVdcKrhQ5JYWv0Q9xz8XBa6s=
Subject key identifier:   3E:54:0F:53:27:82:1C:43:5F:AB:CC:40:DD:28:1B:D3:FD:EB:73:67
Authority key identifier: FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05
Certificate issuer:       /CN=FF5E59BD445AE731E58ED471848043C324931D05
Certificate serial:       25402C1A14647F02ECDDA5262E3462DFD0D3D215
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 13:46:22 +0000
Manifest this update:     Sat 13 Jun 2026 13:41:22 +0000
Manifest next update:     Sun 14 Jun 2026 16:58:22 +0000
Files and hashes:         1: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: OeYZDJDnfFOrv0gLIl0BcG8+/dZQ9bC3jq7crp9LkMo=)
                          2: FF5E59BD445AE731E58ED471848043C324931D05.crl (hash: Zo34RTYcwugL34z7mhDRDVifZ47gVY5idbp9P4bKoOg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.crl
                          rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:40:2c:1a:14:64:7f:02:ec:dd:a5:26:2e:34:62:df:d0:d3:d2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5E59BD445AE731E58ED471848043C324931D05
        Validity
            Not Before: Jun 13 13:41:22 2026 GMT
            Not After : Jun 14 16:58:22 2026 GMT
        Subject: CN=3E540F5327821C435FABCC40DD281BD3FDEB7367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:3b:69:29:a9:7a:28:45:11:6b:a8:42:eb:
                    e0:cb:8c:91:a2:8e:8e:db:73:c5:b8:f0:04:f5:de:
                    80:2a:e5:bb:df:16:88:42:b4:c0:c6:bf:68:21:dd:
                    f3:b6:f2:43:ea:66:b7:b7:3e:47:69:d2:72:c6:0a:
                    2a:cf:b4:58:94:ae:fc:fe:b4:ff:cc:79:be:b8:8c:
                    9f:42:1f:3a:4f:96:bb:91:a0:df:67:35:c3:91:72:
                    05:a9:2f:a3:b9:48:4f:c2:8d:dd:07:d8:53:fa:84:
                    f6:4a:a8:0c:bd:5b:1a:3f:7f:c7:5c:ba:d0:a6:ac:
                    c8:e3:4f:c1:93:4c:24:bd:6a:2d:07:2e:7d:d1:26:
                    cb:63:e8:6f:2b:fc:75:96:76:4d:01:11:b7:aa:8a:
                    36:27:cf:6a:fb:31:72:66:1e:69:52:1d:18:75:fb:
                    dc:be:0e:5d:6f:a8:73:b8:03:9c:82:1b:c4:5b:cb:
                    c4:7e:15:a3:2f:1e:31:f9:69:76:68:f0:49:74:6d:
                    79:bc:60:d4:cd:66:47:9f:09:4a:49:7b:8b:17:e0:
                    49:7e:88:82:4c:8c:cd:0e:99:b4:57:81:30:08:48:
                    4e:27:67:88:aa:0e:cb:c7:5b:06:3e:d0:56:71:e3:
                    74:f8:de:6a:01:ad:87:75:c8:21:91:c4:80:1d:06:
                    f7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:54:0F:53:27:82:1C:43:5F:AB:CC:40:DD:28:1B:D3:FD:EB:73:67
            X509v3 Authority Key Identifier:
                keyid:FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:eb:38:7c:8c:16:3a:0f:91:95:63:8c:f2:82:0e:2c:d0:88:
         b2:c6:92:5f:14:29:c7:1b:70:0e:25:b9:83:78:0e:cd:8d:35:
         67:de:23:84:bd:2a:34:92:e4:63:79:ea:61:2f:97:28:99:1c:
         8d:c2:07:30:da:19:9f:fe:f0:28:60:fa:99:ae:1d:47:38:da:
         38:5e:0a:3e:f9:48:d0:d8:0d:6f:07:91:a4:d3:38:d2:aa:45:
         b0:73:fb:c2:5a:55:be:71:af:92:97:69:94:df:d6:80:b9:d0:
         c8:e1:a5:b6:ad:c1:ec:37:26:39:1b:27:61:91:72:a1:b3:2a:
         bc:53:7f:24:a0:d0:f2:58:6a:c3:ee:28:64:95:65:37:2c:0b:
         72:7e:e7:6f:21:98:1d:cd:04:78:21:43:b8:bd:06:07:dc:3f:
         8e:6a:ba:67:cf:57:bc:fd:8b:b4:8d:e4:bf:9c:7b:09:94:77:
         33:e8:a6:4e:c1:42:30:5b:d8:f7:73:9e:a1:75:d4:3f:d0:ab:
         00:58:55:a1:19:62:96:74:57:79:91:95:61:63:d0:1d:f0:14:
         3c:fd:70:6a:b6:23:b2:eb:e7:e6:39:49:d6:19:de:0c:30:41:
         a6:42:33:0f:95:22:02:79:2e:46:ed:4d:1d:f0:80:88:7f:a4:
         83:cd:02:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:34:02 2026 by rpki-client