Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
File:                     12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft (raw, json)
Hash identifier:          YsyxR7OCJIggRJsS94UdJ+WDcoQ5LZrsDacFGhGDQ9I=
Subject key identifier:   0E:39:FC:52:73:D8:36:AB:14:DC:5E:13:9B:A7:C9:8A:53:2F:52:45
Authority key identifier: 12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
Certificate issuer:       /CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Certificate serial:       2D0025C145723C47EE1D06C11C82CCFA4373D5E7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 21:45:34 +0000
Manifest this update:     Tue 16 Jun 2026 21:40:34 +0000
Manifest next update:     Thu 18 Jun 2026 00:33:34 +0000
Files and hashes:         1: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: P7oRDyeMFp3GGVH+xItLcQl5cfAi5+V0YTxFNRF2C0E=)
                          2: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: OU86nZYQrz1f0zZsfAKDY29WgpGVg/0ubhimI1XnObE=)
                          3: 12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl (hash: gGp3mgTuGk14ZN8W3c36iMK797eDdHM3XObuNETuAaE=)
                          4: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: 8vjkp3sLrVBHiAgyH56aiCnbINXIhcUYHhrNLKFnaHI=)
                          5: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: jn+GzuAFdRGnqz/8h2QUcRukZQjtYixsBnGXWuK3nO4=)
                          6: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: 5iKsngZjg/l5di0MQ+AlFhBsTwnY2MGxKfhU9yL6oXQ=)
                          7: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: rRunzg5grI5Ndu/SnsBkpVbfTxQjQL07FKaDwNl7X7E=)
                          8: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: MAg0dVjN/VisS1hFmLJD+dd3x6Va1gOOR658nswBpQU=)
                          9: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Wx7ZMhfu3QmD55ls7OXnHTLI9Lf1rMbERV/S++9hKS0=)
                          10: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: iv2uySioSu/LP3pkRp7Yqlhu3HDQ0VTi7eqjw18RcDM=)
                          11: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: yNSswNu7I5mxAU9hq/xHGawbAp2gMK9dl+S56V1qrxg=)
                          12: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: M54jxmbu4YqiH5X9dKoh0g3u0CXxxc0mduMC1QC7i/M=)
                          13: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: p1nXgf4HFcxW2Y4PUtsAhVWmj9aD2WMQQIgpZQnsekc=)
                          14: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: U/FMi72YlD8fNIhbb89qQOjcqCNZEMwjeIPmXn3ZWgc=)
                          15: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: 2s3lWabzD50sQ0ixmB15BHbTU/1RTqhE4LdKo/MqXUU=)
                          16: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: vuwCjebAC0K8psv6+IDrny1yHZ/N79DOq7lCZjfajGI=)
                          17: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: by6bVuVjvD6SHS/RSc1MKPNjclAKxLlvShxlE0Ivay8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
                          rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 00:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:00:25:c1:45:72:3c:47:ee:1d:06:c1:1c:82:cc:fa:43:73:d5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
        Validity
            Not Before: Jun 16 21:40:34 2026 GMT
            Not After : Jun 18 00:33:34 2026 GMT
        Subject: CN=0E39FC5273D836AB14DC5E139BA7C98A532F5245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cc:d5:57:02:a1:a8:d8:82:23:0a:9f:31:fc:
                    37:db:d8:aa:5c:28:75:ff:c5:4a:1f:2f:37:61:ad:
                    5c:05:3c:68:24:fe:f7:19:bb:1c:7e:31:3a:3f:33:
                    12:3b:fb:c5:8a:db:0f:ff:10:a2:a7:65:d6:51:55:
                    e8:cb:1e:6b:94:58:14:6b:56:89:dc:31:90:a4:74:
                    3c:5d:f6:e5:53:ba:48:cf:40:58:2b:31:7c:0c:ac:
                    37:6a:bd:85:27:0d:98:63:49:da:ff:94:2b:bb:e4:
                    9c:99:d1:66:65:91:6b:86:5c:6f:8a:1e:8f:1e:a5:
                    92:44:81:0c:76:95:54:13:2e:b8:c0:6d:e0:ab:93:
                    ff:c1:87:f6:97:5c:7b:aa:a5:92:99:32:2d:91:46:
                    e0:15:b9:18:e2:1f:f4:d4:f2:1a:09:15:8b:f1:8a:
                    ba:54:61:0e:ad:6b:15:71:d1:37:c5:29:d5:dd:0d:
                    1f:00:23:78:72:35:77:ad:c8:ed:64:c6:fc:4c:26:
                    49:c7:a5:4c:1e:e3:d8:ce:d8:ed:e0:08:ab:0b:55:
                    1d:ee:d1:ea:54:45:a2:71:c8:29:6c:15:c8:ef:8c:
                    00:73:f5:17:f6:0e:3d:5a:10:75:06:79:88:e1:78:
                    55:45:84:80:aa:3d:af:f3:ed:ef:57:f3:1a:f0:d5:
                    65:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:39:FC:52:73:D8:36:AB:14:DC:5E:13:9B:A7:C9:8A:53:2F:52:45
            X509v3 Authority Key Identifier:
                keyid:12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:90:93:a0:d1:9f:44:99:90:0c:92:94:76:3d:06:32:6d:a4:
         4d:a5:5e:79:d3:cb:f7:d1:f1:b5:c8:52:d8:d2:8e:57:e1:e7:
         5c:0e:8f:4f:29:c3:8c:28:dd:1f:69:a7:00:2c:59:4c:75:2b:
         1a:12:24:e7:4b:cc:11:42:81:22:70:df:ac:7c:c9:08:d1:2c:
         f7:fc:ae:ea:38:9d:10:81:0b:7a:84:c7:0c:98:df:93:f0:26:
         f4:71:c9:7f:4e:aa:29:9f:1d:f2:8c:b0:a1:ed:f9:a9:8d:c4:
         d8:2f:a8:40:96:14:a9:21:d9:c4:93:20:77:80:8d:fc:08:d5:
         63:ad:09:c8:c5:1d:6d:f9:df:e0:8d:1c:70:55:1e:64:44:51:
         2d:ce:e7:72:58:dc:00:e7:ee:2d:2a:d8:05:eb:af:eb:07:31:
         bc:98:2e:38:51:a5:b4:47:e4:5c:c9:d7:c8:23:e5:54:80:f2:
         49:31:3c:6f:11:f5:9a:8c:f5:71:99:e8:fa:7b:76:5d:59:d3:
         a0:79:c9:4a:e4:c3:ca:c7:ae:2a:0f:ee:1d:bc:96:3a:d3:c5:
         f0:85:9c:ab:93:59:9f:8d:4a:a8:24:71:aa:2a:c9:ea:96:7c:
         fa:99:ff:a8:7e:41:b8:b7:69:96:7e:57:5d:1c:af:fa:9a:bf:
         74:f3:c3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:08 2026 by rpki-client