Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
File:                     90B9450AA39B9CD9586085EFA9EF7887EE613759.mft (raw, json)
Hash identifier:          T5mhFoaigLkNlBM8qAYFvemtgUrK9eTLm+CoxnHf5/I=
Subject key identifier:   35:70:CC:33:80:EF:00:4B:3E:5F:2C:BD:93:48:C4:41:16:58:6D:79
Authority key identifier: 90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59
Certificate issuer:       /CN=90B9450AA39B9CD9586085EFA9EF7887EE613759
Certificate serial:       025DAACD704E0D36E18AC90AE4D0CDCD22F88299
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 03:47:23 +0000
Manifest this update:     Wed 17 Jun 2026 03:42:23 +0000
Manifest next update:     Thu 18 Jun 2026 07:27:23 +0000
Files and hashes:         1: 3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa (hash: i2oBSFPKpVqeh9es/WJHy0i/TdHRHJL5ycGj+adtwXc=)
                          2: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: J0+iHCZ4UXpTu9FbQSO8iPWMu0E+Lc3DRVGjSSCxGxw=)
                          3: 90B9450AA39B9CD9586085EFA9EF7887EE613759.crl (hash: 55uD2K/Oj4IJMDTeqhkPYaogfm2514dd+2fCijiOh3U=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl
                          rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5d:aa:cd:70:4e:0d:36:e1:8a:c9:0a:e4:d0:cd:cd:22:f8:82:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90B9450AA39B9CD9586085EFA9EF7887EE613759
        Validity
            Not Before: Jun 17 03:42:23 2026 GMT
            Not After : Jun 18 07:27:23 2026 GMT
        Subject: CN=3570CC3380EF004B3E5F2CBD9348C44116586D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b4:90:ed:29:7e:79:6b:7b:59:52:13:e1:8f:
                    e5:3a:03:60:91:c9:80:e0:20:95:7a:bf:ff:df:6e:
                    13:d7:8c:c7:c8:d1:7a:f8:22:d0:6b:53:2e:c1:b7:
                    e3:e9:c8:61:b6:ff:32:55:92:78:88:9e:70:bb:9c:
                    76:ae:57:df:c6:ad:fb:c8:e6:30:47:c9:fb:93:59:
                    9f:d1:89:07:dd:29:96:68:aa:89:b5:12:01:a5:54:
                    f3:1b:fb:04:ad:aa:1b:60:77:e1:40:aa:73:7a:6e:
                    ed:a0:34:4f:aa:c8:e7:ac:83:b7:5e:d3:12:f5:7e:
                    32:ee:70:5b:35:ab:42:95:cb:51:cb:93:0b:97:2c:
                    1d:6e:c5:59:8c:74:98:7e:91:2f:eb:7a:13:61:ee:
                    9d:4f:bc:85:a7:8f:ae:0f:97:34:c7:b9:d8:e0:cc:
                    c4:c2:71:10:21:ec:5d:2d:4c:6b:74:2d:82:77:1a:
                    f1:4e:12:f4:4c:5d:0d:e2:05:34:38:71:69:3c:f0:
                    e1:d1:48:8e:8b:0a:cc:41:67:bf:fc:29:ee:5b:c3:
                    81:eb:91:a8:b9:6b:2c:ec:b4:2b:60:bb:e7:24:b5:
                    f2:f9:9a:8e:53:ab:7b:68:48:a1:81:5a:5b:bc:4a:
                    8d:ae:d2:fb:88:18:51:32:30:59:b0:d4:91:7d:52:
                    30:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:70:CC:33:80:EF:00:4B:3E:5F:2C:BD:93:48:C4:41:16:58:6D:79
            X509v3 Authority Key Identifier:
                keyid:90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0f:4c:75:b1:71:1b:38:80:06:24:e6:14:de:b7:12:e6:d4:
         12:79:f3:52:27:2b:c9:3a:10:18:c4:85:bf:45:97:b8:48:73:
         ba:8a:40:20:41:66:f7:60:42:f8:55:93:44:23:bf:d1:64:04:
         2b:b5:2f:8e:80:52:d1:2a:e2:6c:21:aa:8f:67:49:8d:1f:f9:
         ff:d3:54:57:45:70:33:15:c1:19:e8:38:c4:e2:bf:e9:9f:14:
         96:eb:5c:74:5b:54:74:db:1b:b7:21:e1:67:56:9c:41:cf:23:
         fa:e8:84:3c:19:c0:da:87:e2:93:b2:ce:77:dc:8c:90:45:50:
         f8:a2:a0:00:54:8f:fb:0d:3d:8a:a0:4b:16:f5:97:36:37:a1:
         97:c5:7d:bd:f2:3e:65:85:25:1f:1b:f9:62:f8:6e:59:98:39:
         77:d2:a5:47:ac:c9:8e:26:8d:03:2a:01:86:c9:9e:57:d0:ce:
         e1:b8:a5:8b:d9:49:3d:c1:6c:bc:f3:23:d1:52:11:2d:93:f4:
         13:c8:ce:e8:df:89:83:dd:f8:f2:d8:fc:d8:cd:56:83:2e:ec:
         58:3c:fc:0a:f8:4e:71:6b:05:be:52:a3:a9:0f:78:1d:dc:42:
         6b:21:b5:14:4c:f2:63:cd:dd:53:bc:22:1e:94:0e:4b:0a:bb:
         72:2f:0e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:24 2026 by rpki-client