Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft
File:                     8A88C62D67BF9B5D27095014663D7564A99145C4.mft (raw, json)
Hash identifier:          w93ok1nNGiALPV1/wURTsT9R/lPmyf5sgygeaeVsE/w=
Subject key identifier:   1B:33:6A:7C:0E:36:8B:5D:8F:73:2F:77:B0:1F:13:58:33:CC:9B:C2
Authority key identifier: 8A:88:C6:2D:67:BF:9B:5D:27:09:50:14:66:3D:75:64:A9:91:45:C4
Certificate issuer:       /CN=8A88C62D67BF9B5D27095014663D7564A99145C4
Certificate serial:       57541321679DFC7278716B478BE0705D769B83D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft
Manifest number:          3F
Signing time:             Wed 17 Jun 2026 09:39:42 +0000
Manifest this update:     Wed 17 Jun 2026 09:34:42 +0000
Manifest next update:     Thu 18 Jun 2026 12:54:42 +0000
Files and hashes:         1: 3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa (hash: F053eE0i+9sM4Zlpf0wasuwbYczZ4FiYljBeIYhXU8s=)
                          2: 8A88C62D67BF9B5D27095014663D7564A99145C4.crl (hash: ++eIxDNvOm5IdvKY6fE9uwXuqNmn61M7X/s7nTZrDbU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.crl
                          rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:54:13:21:67:9d:fc:72:78:71:6b:47:8b:e0:70:5d:76:9b:83:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A88C62D67BF9B5D27095014663D7564A99145C4
        Validity
            Not Before: Jun 17 09:34:42 2026 GMT
            Not After : Jun 18 12:54:42 2026 GMT
        Subject: CN=1B336A7C0E368B5D8F732F77B01F135833CC9BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:4f:c5:ae:0c:2b:2c:64:bc:7d:4e:a9:f4:
                    6e:a3:68:9a:a6:e6:29:c0:f8:09:f2:31:27:1e:af:
                    a6:c5:bd:87:e2:ff:9b:d7:f5:ff:2e:ce:94:12:57:
                    37:7f:e4:a4:c0:41:f5:85:98:b3:10:4f:41:bf:81:
                    a7:90:43:c2:1b:dd:a9:c8:2a:8b:1c:eb:04:a3:c1:
                    73:ad:e9:e7:bb:84:31:01:e0:04:0f:89:35:81:a2:
                    7e:c4:2f:ce:b1:df:d5:d1:8b:2e:02:cb:d9:09:12:
                    a1:41:84:31:45:66:69:b1:5e:14:c3:e6:58:43:d8:
                    03:87:09:a3:ca:c4:56:75:d2:1a:62:e7:e0:cb:a2:
                    a2:e2:73:1f:a9:0c:91:0c:75:4c:c2:80:37:5d:3d:
                    e6:ea:0e:3f:ea:32:a7:6e:31:bd:e4:c0:bf:b9:c9:
                    56:1e:97:79:74:ee:c5:46:c4:84:60:a4:82:01:09:
                    f6:08:9a:b3:31:d4:4e:9e:9b:aa:ae:ec:48:35:c7:
                    1e:5e:7f:1b:f1:6d:9b:29:da:03:82:56:e3:44:ec:
                    e1:d9:38:6b:5a:b7:06:c7:d5:9a:cd:5f:1e:b2:f0:
                    37:81:2c:f5:2a:f0:ca:0d:0a:74:4c:15:84:3f:11:
                    0b:61:41:35:c6:bd:18:59:52:a9:33:d3:b0:fa:05:
                    4a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:33:6A:7C:0E:36:8B:5D:8F:73:2F:77:B0:1F:13:58:33:CC:9B:C2
            X509v3 Authority Key Identifier:
                keyid:8A:88:C6:2D:67:BF:9B:5D:27:09:50:14:66:3D:75:64:A9:91:45:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c9:97:a7:4a:9e:fa:91:f9:8c:aa:c5:f8:2b:39:e2:0b:57:
         b8:ef:52:e4:17:73:6c:4f:fd:12:df:b2:30:c5:f8:e3:51:08:
         3e:02:19:3d:22:db:c0:aa:88:01:36:25:43:dd:55:14:fb:b6:
         c4:0a:42:26:e2:d4:07:64:d8:84:57:83:e7:63:3b:b6:e8:9c:
         49:0e:07:6e:3d:c5:45:10:72:1e:49:82:d1:2d:65:99:1c:08:
         96:1b:76:3c:24:81:ac:ac:92:8b:08:99:db:b4:cd:63:dd:5d:
         80:88:5e:d2:0e:68:7c:94:ed:ca:58:44:c5:e2:97:c5:7b:cb:
         66:b5:a1:f8:c9:4b:bc:e4:ed:ba:a7:9a:54:45:fb:11:8c:58:
         9e:c2:57:25:d3:6b:da:15:29:8e:82:5d:0b:54:78:ce:cb:58:
         d1:a8:a2:b9:f6:34:9f:b7:4d:c0:e9:00:3a:83:01:ce:23:34:
         78:89:41:0f:12:9e:5e:7d:be:63:00:38:cc:a6:a9:50:6a:fe:
         9b:e4:19:ae:23:16:2f:0e:72:1c:03:9f:11:c2:d4:bf:85:b8:
         b1:a7:42:c4:86:86:b5:66:88:fd:c5:c0:0c:3e:be:5c:7f:37:
         79:54:73:55:04:a5:aa:4b:b9:9b:15:87:f8:14:bf:b0:4f:c8:
         91:31:a0:79
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUV1QTIWed/HJ4cWtHi+BwXXabg9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE4OEM2MkQ2N0JGOUI1RDI3MDk1MDE0NjYzRDc1NjRB
OTkxNDVDNDAeFw0yNjA2MTcwOTM0NDJaFw0yNjA2MTgxMjU0NDJaMDMxMTAvBgNV
BAMTKDFCMzM2QTdDMEUzNjhCNUQ4RjczMkY3N0IwMUYxMzU4MzNDQzlCQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXk/FrgwrLGS8fU6p9G6jaJqm
5inA+AnyMScer6bFvYfi/5vX9f8uzpQSVzd/5KTAQfWFmLMQT0G/gaeQQ8Ib3anI
Kosc6wSjwXOt6ee7hDEB4AQPiTWBon7EL86x39XRiy4Cy9kJEqFBhDFFZmmxXhTD
5lhD2AOHCaPKxFZ10hpi5+DLoqLicx+pDJEMdUzCgDddPebqDj/qMqduMb3kwL+5
yVYel3l07sVGxIRgpIIBCfYImrMx1E6em6qu7Eg1xx5efxvxbZsp2gOCVuNE7OHZ
OGtatwbH1ZrNXx6y8DeBLPUq8MoNCnRMFYQ/EQthQTXGvRhZUqkz07D6BUq9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGzNqfA42i12Pcy93sB8TWDPMm8IwHwYDVR0j
BBgwFoAUiojGLWe/m10nCVAUZj11ZKmRRcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODY0YzMxNTUtYzhmZi00MjA3LWEyZGMtNTFlMDA1NTMwYjUyLzAvOEE4OEM2MkQ2
N0JGOUI1RDI3MDk1MDE0NjYzRDc1NjRBOTkxNDVDNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84QTg4QzYyRDY3QkY5QjVEMjcwOTUwMTQ2NjNENzU2NEE5OTE0
NUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODY0YzMxNTUtYzhmZi00MjA3LWEy
ZGMtNTFlMDA1NTMwYjUyLzAvOEE4OEM2MkQ2N0JGOUI1RDI3MDk1MDE0NjYzRDc1
NjRBOTkxNDVDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAADJl6dKnvqR+YyqxfgrOeILV7jvUuQXc2xP
/RLfsjDF+ONRCD4CGT0i28CqiAE2JUPdVRT7tsQKQibi1Adk2IRXg+djO7bonEkO
B249xUUQch5JgtEtZZkcCJYbdjwkgayskosImdu0zWPdXYCIXtIOaHyU7cpYRMXi
l8V7y2a1ofjJS7zk7bqnmlRF+xGMWJ7CVyXTa9oVKY6CXQtUeM7LWNGoorn2NJ+3
TcDpADqDAc4jNHiJQQ8Snl59vmMAOMymqVBq/pvkGa4jFi8OchwDnxHC1L+FuLGn
QsSGhrVmiP3FwAw+vlx/N3lUc1UEpapLuZsVh/gUv7BPyJExoHk=
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:39:59 2026 by rpki-client