Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
File:                     EC59C36AB88A35CEA64B4ED019F2F05317672299.mft (raw, json)
Hash identifier:          HZOV9vsG2Slmk5JZRtneXPDgii0LWm4z8+UEm1OcLi0=
Subject key identifier:   B1:B0:A8:B4:FA:FE:EA:37:33:C1:BF:FE:F6:E5:F8:4B:6E:32:40:DE
Authority key identifier: EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
Certificate issuer:       /CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Certificate serial:       06AA3AEB2B4BDD26E8C9DBC38FDBE939F69A7430
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 23:22:19 +0000
Manifest this update:     Tue 16 Jun 2026 23:17:19 +0000
Manifest next update:     Thu 18 Jun 2026 01:26:19 +0000
Files and hashes:         1: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: n+eUGlNoGxyXiKbu/ITCTX0cNeFjGes4nvyKs6e972Y=)
                          2: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: +30yZ3DQ/J4gQPQfBONcQspdy36OErhmpY2jH4HzLiQ=)
                          3: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: nvBOhOQVzXAnJ4HGpau+WjYJtRHl8i2975iE/qVl3BQ=)
                          4: 3230322e3132372e39362e302f32302d3234203d3e203137393130.roa (hash: +dGVRe6EsrE8x8JkrbEl5y9M3KyI6+RObwSg+1Gl944=)
                          5: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: YPwGvhjJSaspOvLgrZ3Fyf5ldBDtpaa3xSbfWjcGrDA=)
                          6: 3231302e37392e3230382e302f32302d3234203d3e203137393130.roa (hash: 5vaZfShfqgbUD5UrW2OwsFkdXsmnoUQ2LgDSdBEsxKs=)
                          7: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: 57swP2LUwPdheqaXWgJ8pT9nt0r4LCH8JoFCbrhNwuw=)
                          8: EC59C36AB88A35CEA64B4ED019F2F05317672299.crl (hash: tDK+0772068aFX1lFbpZHfcBwgrXmIis2eEVvhmx4mk=)
                          9: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: Ju2Rnafj0JXyXCFyRIYbsuCCwhT0mQqqDAAoegLW2lk=)
                          10: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: AfPj1/WANHCA8ksluVDxgnesb53b+Rlio8ADTE+u1pQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
                          rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 01:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:aa:3a:eb:2b:4b:dd:26:e8:c9:db:c3:8f:db:e9:39:f6:9a:74:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
        Validity
            Not Before: Jun 16 23:17:19 2026 GMT
            Not After : Jun 18 01:26:19 2026 GMT
        Subject: CN=B1B0A8B4FAFEEA3733C1BFFEF6E5F84B6E3240DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:58:b0:4e:ee:21:55:3d:54:bf:f7:27:ba:d2:
                    37:1b:20:70:b7:00:da:4a:de:6d:3b:06:a4:9c:a3:
                    f2:9a:b9:71:50:b5:94:99:f7:06:d0:ec:72:10:f8:
                    fe:ac:e7:c1:36:48:71:2d:0e:2e:ad:ca:83:76:9a:
                    9d:b3:ed:47:3b:1e:d0:00:58:e3:c7:c7:25:75:f1:
                    a5:1b:68:71:ee:61:be:d4:04:60:5d:8d:45:8e:2e:
                    f2:98:1e:4f:fc:f6:8d:d5:d0:bd:05:fb:1c:43:79:
                    98:91:3f:65:ca:ab:82:86:2e:10:e9:90:7d:f4:2c:
                    a9:41:c3:e3:c3:f1:0b:02:6f:9d:3d:05:fe:86:fb:
                    30:de:b0:05:df:81:97:64:d4:ad:06:5d:da:5d:3f:
                    13:f2:e5:0d:c7:3f:6a:62:02:4f:55:b3:c1:60:74:
                    44:e1:88:0f:ba:29:4d:c2:b2:33:d6:29:e4:42:52:
                    03:55:d3:a6:6d:3d:f5:8c:ff:42:9c:0c:69:b2:67:
                    d4:14:65:3b:94:db:38:8e:58:98:59:c8:ab:56:5f:
                    6c:1a:ff:ad:5a:50:09:e9:90:12:39:f8:42:2b:2a:
                    e9:b3:a7:6a:97:fc:62:1c:c1:7b:50:4a:e8:bc:c6:
                    8b:c2:87:7f:c3:46:e5:cf:19:3f:0e:66:ef:1a:af:
                    ae:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B0:A8:B4:FA:FE:EA:37:33:C1:BF:FE:F6:E5:F8:4B:6E:32:40:DE
            X509v3 Authority Key Identifier:
                keyid:EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3c:82:87:4e:d5:8d:6e:4b:1a:af:2e:bd:bc:78:34:d1:f8:
         70:5f:fe:07:61:17:dc:38:53:d9:44:8b:ee:7f:ca:f2:95:cf:
         2e:be:d8:5b:35:bc:17:61:79:17:66:55:5d:e5:c7:b7:eb:36:
         1d:f5:48:4f:40:5c:b2:87:6a:e2:8e:ed:f0:b4:27:e0:e9:34:
         4b:5e:96:34:e8:6e:19:ea:81:19:fd:31:3e:bb:ee:03:e9:a6:
         fc:4a:6d:06:9f:5b:84:25:1c:37:36:a3:fb:48:00:5d:05:90:
         e8:03:5d:34:5f:bd:12:71:89:82:bf:a7:7c:2a:5e:f4:a4:7b:
         2f:94:c1:8f:0c:64:03:4a:54:db:8b:aa:bf:83:f0:46:22:a7:
         b1:07:98:bb:4c:4b:98:f7:1b:1d:5d:ea:e2:43:a5:d7:11:83:
         09:ba:d3:72:be:ad:c3:6e:b7:86:3e:db:b5:f5:a7:17:9d:8a:
         e7:0d:e7:97:c3:97:0a:35:b6:83:19:ff:16:85:52:5d:80:66:
         52:09:fb:a8:2b:92:e4:8f:bb:12:f1:7c:3b:ac:04:06:0d:95:
         d3:4f:34:55:b2:97:b8:2e:cd:ab:9d:68:a6:c3:8e:3f:c9:20:
         ec:28:3a:9c:ca:46:c8:da:db:49:c6:a7:96:5e:29:7c:e5:28:
         fd:78:1f:34
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBqo66ytL3SboydvDj9vpOfaadDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM1OUMzNkFCODhBMzVDRUE2NEI0RUQwMTlGMkYwNTMx
NzY3MjI5OTAeFw0yNjA2MTYyMzE3MTlaFw0yNjA2MTgwMTI2MTlaMDMxMTAvBgNV
BAMTKEIxQjBBOEI0RkFGRUVBMzczM0MxQkZGRUY2RTVGODRCNkUzMjQwREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnWLBO7iFVPVS/9ye60jcbIHC3
ANpK3m07BqSco/KauXFQtZSZ9wbQ7HIQ+P6s58E2SHEtDi6tyoN2mp2z7Uc7HtAA
WOPHxyV18aUbaHHuYb7UBGBdjUWOLvKYHk/89o3V0L0F+xxDeZiRP2XKq4KGLhDp
kH30LKlBw+PD8QsCb509Bf6G+zDesAXfgZdk1K0GXdpdPxPy5Q3HP2piAk9Vs8Fg
dEThiA+6KU3CsjPWKeRCUgNV06ZtPfWM/0KcDGmyZ9QUZTuU2ziOWJhZyKtWX2wa
/61aUAnpkBI5+EIrKumzp2qX/GIcwXtQSui8xovCh3/DRuXPGT8OZu8ar65BAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsbCotPr+6jczwb/+9uX4S24yQN4wHwYDVR0j
BBgwFoAU7FnDariKNc6mS07QGfLwUxdnIpkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODY0NTAwMzItNTQ5Mi00YTVhLTk0M2YtYmRiNDczMzQxMjMzLzAvRUM1OUMzNkFC
ODhBMzVDRUE2NEI0RUQwMTlGMkYwNTMxNzY3MjI5OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQzU5QzM2QUI4OEEzNUNFQTY0QjRFRDAxOUYyRjA1MzE3Njcy
Mjk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODY0NTAwMzItNTQ5Mi00YTVhLTk0
M2YtYmRiNDczMzQxMjMzLzAvRUM1OUMzNkFCODhBMzVDRUE2NEI0RUQwMTlGMkYw
NTMxNzY3MjI5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGc8godO1Y1uSxqvLr28eDTR+HBf/gdhF9w4
U9lEi+5/yvKVzy6+2Fs1vBdheRdmVV3lx7frNh31SE9AXLKHauKO7fC0J+DpNEte
ljTobhnqgRn9MT677gPppvxKbQafW4QlHDc2o/tIAF0FkOgDXTRfvRJxiYK/p3wq
XvSkey+UwY8MZANKVNuLqr+D8EYip7EHmLtMS5j3Gx1d6uJDpdcRgwm603K+rcNu
t4Y+27X1pxediucN55fDlwo1toMZ/xaFUl2AZlIJ+6grkuSPuxLxfDusBAYNldNP
NFWyl7guzaudaKbDjj/JIOwoOpzKRsja20nGp5ZeKXzlKP14HzQ=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:45:53 2026 by rpki-client