Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
File:                     E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft (raw, json)
Hash identifier:          fejiECcV8XZ4wlmI51K+g9sjseReMj2GAkEBVH5Np2I=
Subject key identifier:   BD:C2:E4:2B:82:57:2C:E7:28:7D:45:55:40:94:E2:7F:37:A3:A7:88
Authority key identifier: E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
Certificate issuer:       /CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Certificate serial:       745FC37FF053615BA966F388C2A593A4912C230C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 20:54:27 +0000
Manifest this update:     Tue 16 Jun 2026 20:49:27 +0000
Manifest next update:     Wed 17 Jun 2026 23:58:27 +0000
Files and hashes:         1: 3230322e34332e3131342e302f32332d3234203d3e20313339393338.roa (hash: zkpoPaCvym1nePddds0Q6RkGOhVKM8mr34gyM4UC8cI=)
                          2: 3130332e31382e32382e302f32322d3234203d3e20313339393338.roa (hash: I7UPuFvym8p8pJP6diQSrrFx2chmGGAd+K6o7fzpvv0=)
                          3: 3130332e31382e32382e302f32322d3234203d3e203435373036.roa (hash: Pn0Z404yzeHHtXmdQ9DEjG8okFo36OY3UkZiEWBYoXE=)
                          4: 3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa (hash: Jc9uidaalUxZZcIN6U2HF/YTypqnkC1z9uB0RypRbr8=)
                          5: 3230322e34332e3131342e302f32332d3234203d3e203435373036.roa (hash: PwwIV0M1bktSo20UeNkcLhDf5y3VQGfSd2Gx4evwdcY=)
                          6: 32372e3132332e302e302f32312d3234203d3e20313339393338.roa (hash: CrDosYMbaMymGSuAwPQv1AxOjr/T7uHU3jsk81GEu9s=)
                          7: 32372e3132332e302e302f32312d3234203d3e203435373036.roa (hash: kKeNFgEWYpxJdEVxaw5r/j+gOBdLDAvajOzNPHKCcoc=)
                          8: E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl (hash: +2RsqzAM8ap7QYe5W9Dwj0wp4OlFEVY6L8S/c3lXXRQ=)
                          9: 3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa (hash: 89cfsFLBXkB3WFs7rNpw78ZZSzujq+PLIJTF9YsulHg=)
                          10: 323430363a613330303a3a2f33322d3332203d3e203435373036.roa (hash: LXNYT1nV1xGIxdVsRECQ3Cj/A4MmgkuRi4tC78/lvhM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
                          rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 23:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5f:c3:7f:f0:53:61:5b:a9:66:f3:88:c2:a5:93:a4:91:2c:23:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
        Validity
            Not Before: Jun 16 20:49:27 2026 GMT
            Not After : Jun 17 23:58:27 2026 GMT
        Subject: CN=BDC2E42B82572CE7287D45554094E27F37A3A788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ca:1d:51:43:dd:41:f0:6f:f0:8b:8d:3a:d4:
                    79:4b:2a:fc:09:dc:5f:9a:6c:fb:fa:ac:ba:40:cc:
                    e3:c2:f6:9f:3c:4f:46:c6:16:be:1e:ea:df:f1:d4:
                    22:6c:7e:28:c4:be:b9:b8:78:59:f8:0b:53:4a:8d:
                    38:c3:77:0d:29:69:8c:f5:37:14:84:42:87:fe:04:
                    c5:2c:38:4d:da:d9:c7:33:f7:7f:4e:8a:db:49:01:
                    88:66:3a:6d:63:d6:9e:19:37:9f:54:2f:54:bc:7e:
                    ba:11:f5:76:c3:b2:be:aa:f1:de:1f:93:c7:92:63:
                    17:7d:16:31:1d:9d:61:5b:4e:76:e8:41:6a:9f:63:
                    8a:0f:ee:a9:cf:51:ed:c0:7c:77:a7:41:5d:7c:0b:
                    9e:1b:42:3e:e0:70:5a:1b:99:d3:fe:6d:d3:90:12:
                    1c:af:6a:a1:0d:35:4b:26:eb:cd:97:37:ab:f6:8b:
                    7c:94:bf:a7:ac:f6:92:1a:a3:48:4b:bc:ca:79:23:
                    29:8d:bb:87:e0:bb:dd:f5:21:a3:bf:22:2b:78:33:
                    74:33:6b:d3:a9:c0:92:f0:47:08:70:44:31:1f:de:
                    6b:d4:1e:08:6e:b1:c9:e3:11:6f:83:8c:a5:2d:be:
                    90:d3:30:08:ee:38:2c:15:1c:95:22:88:26:66:87:
                    d6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C2:E4:2B:82:57:2C:E7:28:7D:45:55:40:94:E2:7F:37:A3:A7:88
            X509v3 Authority Key Identifier:
                keyid:E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:37:1e:60:91:9c:6b:5c:9e:1f:87:94:2d:61:4a:e4:b0:b9:
         25:ac:ea:d4:bb:47:69:46:61:1b:69:77:6a:e8:ef:dc:7f:97:
         a1:f7:92:59:f3:ee:8c:a6:e9:e1:33:78:0c:df:c3:ee:d8:34:
         7c:72:b4:57:30:ee:3c:e5:94:bd:a8:c7:56:be:57:99:d7:a3:
         d9:e8:e1:db:e3:81:9e:dc:b5:71:44:31:35:be:be:1e:05:c2:
         9b:b7:f0:b6:36:9b:66:7c:39:8f:0d:b9:3e:1f:a3:41:13:e5:
         9d:23:0e:77:a8:8f:79:f0:17:e8:ae:0f:ab:49:05:7c:a5:69:
         f1:9d:4a:f6:15:5d:69:ca:7f:f3:82:7b:23:c1:b7:89:89:96:
         15:d2:87:0f:5d:d5:b7:1c:1b:96:08:da:b1:7b:43:35:71:04:
         f2:8f:9b:62:f6:51:74:39:a7:b0:87:1f:82:42:55:26:97:46:
         0c:5a:80:ea:e7:a2:af:9e:51:ad:cc:a0:23:3d:fe:81:82:86:
         85:b7:0e:33:28:17:1d:ad:37:a6:9e:d5:82:9a:f5:18:37:f0:
         17:74:5a:46:21:ff:e3:8f:ed:5f:09:de:1c:bc:3b:7b:02:2e:
         0f:65:70:97:7a:77:ed:16:2f:20:2b:77:1e:52:5a:d3:1d:b9:
         70:e7:17:a5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdF/Df/BTYVupZvOIwqWTpJEsIwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAwQzBBRDAxQ0JGNkVFOUI0MjU0MzA1RTdCMzQwRDY0
QzU5NzREMDAeFw0yNjA2MTYyMDQ5MjdaFw0yNjA2MTcyMzU4MjdaMDMxMTAvBgNV
BAMTKEJEQzJFNDJCODI1NzJDRTcyODdENDU1NTQwOTRFMjdGMzdBM0E3ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWyh1RQ91B8G/wi4061HlLKvwJ
3F+abPv6rLpAzOPC9p88T0bGFr4e6t/x1CJsfijEvrm4eFn4C1NKjTjDdw0paYz1
NxSEQof+BMUsOE3a2ccz939OittJAYhmOm1j1p4ZN59UL1S8froR9XbDsr6q8d4f
k8eSYxd9FjEdnWFbTnboQWqfY4oP7qnPUe3AfHenQV18C54bQj7gcFobmdP+bdOQ
EhyvaqENNUsm682XN6v2i3yUv6es9pIao0hLvMp5IymNu4fgu931IaO/Iit4M3Qz
a9OpwJLwRwhwRDEf3mvUHghuscnjEW+DjKUtvpDTMAjuOCwVHJUiiCZmh9a9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUvcLkK4JXLOcofUVVQJTifzejp4gwHwYDVR0j
BBgwFoAU4AwK0By/bum0JUMF57NA1kxZdNAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzdjZDY4ZjQtNjlhNS00NzVmLWFlZTQtM2VmNGI4ZDMwMmRkLzAvRTAwQzBBRDAx
Q0JGNkVFOUI0MjU0MzA1RTdCMzQwRDY0QzU5NzREMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FMDBDMEFEMDFDQkY2RUU5QjQyNTQzMDVFN0IzNDBENjRDNTk3
NEQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzdjZDY4ZjQtNjlhNS00NzVmLWFl
ZTQtM2VmNGI4ZDMwMmRkLzAvRTAwQzBBRDAxQ0JGNkVFOUI0MjU0MzA1RTdCMzQw
RDY0QzU5NzREMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI03HmCRnGtcnh+HlC1hSuSwuSWs6tS7R2lG
YRtpd2ro79x/l6H3klnz7oym6eEzeAzfw+7YNHxytFcw7jzllL2ox1a+V5nXo9no
4dvjgZ7ctXFEMTW+vh4Fwpu38LY2m2Z8OY8NuT4fo0ET5Z0jDneoj3nwF+iuD6tJ
BXylafGdSvYVXWnKf/OCeyPBt4mJlhXShw9d1bccG5YI2rF7QzVxBPKPm2L2UXQ5
p7CHH4JCVSaXRgxagOrnoq+eUa3MoCM9/oGChoW3DjMoFx2tN6ae1YKa9Rg38Bd0
WkYh/+OP7V8J3hy8O3sCLg9lcJd6d+0WLyArdx5SWtMduXDnF6U=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:02:41 2026 by rpki-client