Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
File:                     F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft (raw, json)
Hash identifier:          6Y2+orHt09nujjjBW10wC0kArp8CToXqpoTNODnHenM=
Subject key identifier:   73:3F:AB:33:B9:03:06:46:FF:BB:B0:D9:E5:6D:47:4B:2A:F2:BB:C3
Authority key identifier: F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
Certificate issuer:       /CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Certificate serial:       0956CF9B14DBB5B5E49D025CD313C5DB1FF93977
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 01:24:33 +0000
Manifest this update:     Wed 17 Jun 2026 01:19:33 +0000
Manifest next update:     Thu 18 Jun 2026 05:18:33 +0000
Files and hashes:         1: 3130332e34392e33302e302f32342d3234203d3e203633383632.roa (hash: +pjc1foIJ9rbBMQG2IfKQY7Dn9Qqy0Sm/AbZle88apI=)
                          2: 323430313a663938303a343030303a3a2f33362d3336203d3e203633383632.roa (hash: FmE6EgtaiTdvHmSv4NYOkhmIVErFQ56Arw5rq6qu5sc=)
                          3: 323430313a663938303a373030303a3a2f33362d3336203d3e203633383632.roa (hash: rU/VCfOcmioGmVK72orlaC2seYco9bFHexowAk81BN4=)
                          4: 323430313a663938303a653030303a3a2f33362d3336203d3e203633383632.roa (hash: 188nUZpWLjC5I5E2PwrEZNz+ZoqJ97KrIMhNsQpTeds=)
                          5: 3130332e34392e32392e302f32342d3234203d3e203633383632.roa (hash: jymQxIodNK96y3uCKc9HAkpGHF4gay+EOqO/ZQMQfCc=)
                          6: 3130332e34392e33312e302f32342d3234203d3e203633383632.roa (hash: qdY1qEnMzrOMN6qPgYkSjiZrgYyzVV6DpcwDNKx+tzM=)
                          7: 323430313a663938303a323030303a3a2f33362d3336203d3e203633383632.roa (hash: m4R9NZih4vbFiWk/oapYLtzrrHyjwTP8TnZiW2TIsYQ=)
                          8: 3130332e34392e32382e302f32332d3233203d3e203633383632.roa (hash: 00W7ni+GkGcQM0VVSCT1HddEcXw1sIY406K+a7D7bz4=)
                          9: 323430313a663938303a613030303a3a2f33362d3336203d3e203633383632.roa (hash: zHdIBVS0XR/c8iQ3ecyXV97YNC4K/MzxZJeB0bWu9pM=)
                          10: 323430313a663938303a623030303a3a2f33362d3336203d3e203633383632.roa (hash: bPcyFOp3Vx7C20HhMoZKMLWt5nkpzrt8bNAH4/4hnmA=)
                          11: 323430313a663938303a333030303a3a2f33362d3336203d3e203633383632.roa (hash: ImkuzGgdshM6qrGvNWPcvXA2U/OhWZTyq0kx6i7Y0vo=)
                          12: 323430313a663938303a353030303a3a2f33362d3336203d3e203633383632.roa (hash: gx4l1RClNVMIicd/OFhkIDB2zi0aLeUfQl4uYWjAKfI=)
                          13: 323430313a663938303a3a2f33362d3336203d3e203633383632.roa (hash: Yio/Y/6sVq/GkVsFsKOZtlUHd35vO5YLp03zhopVfiI=)
                          14: 3130332e34392e33302e302f32332d3233203d3e203633383632.roa (hash: XTYnRt9z2ZfmnVz7ZmT7O89jA08YspVmr19Q3ReJvHk=)
                          15: 3130332e34392e32382e302f32322d3232203d3e203633383632.roa (hash: iI74X3sladmzau4MBHsjwwPESmiR9DW2VEnZxuUovw4=)
                          16: F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl (hash: AsiyTxU1esRrXC3NQvqBNHkdWuXptr/CIrimU3JU5ZY=)
                          17: 323430313a663938303a663030303a3a2f33362d3336203d3e203633383632.roa (hash: e4DmCvjrwHyT7r3+k79q2aF3Szs2g3FJzTfH2C7ERr0=)
                          18: 323430313a663938303a633030303a3a2f33362d3336203d3e203633383632.roa (hash: 9owZN+SGixSRv5paln4ebqIe0QfV06FiQxst/eJe3DU=)
                          19: 323430313a663938303a393030303a3a2f33362d3336203d3e203633383632.roa (hash: u5GTISKareluIOuRlJCcyd5lT161QC2aLw11DfKTlGQ=)
                          20: 3130332e34392e32382e302f32342d3234203d3e203633383632.roa (hash: 3YXWMM41Pq4tpTkJcAa/g/i/xwLMU1IDNTLSp+AdGWk=)
                          21: 323430313a663938303a363030303a3a2f33362d3336203d3e203633383632.roa (hash: FG4YqxC2Q73IfOAJ8VlqlbH+o++S2tHH9i7KG5m04js=)
                          22: 323430313a663938303a313030303a3a2f33362d3336203d3e203633383632.roa (hash: FyYMB40kDwpjCvWN+TSVBf46H3DhYilIANCtvHDsagI=)
                          23: 323430313a663938303a3a2f33322d3332203d3e203633383632.roa (hash: DBKvW9NxqaLL8RHuYyc+b3LPNUUrC7Hwp8Qyq6M4iN0=)
                          24: 323430313a663938303a383030303a3a2f33362d3336203d3e203633383632.roa (hash: xBuVDFknIKocW5PCReZ6kwYrsbAP9yAUXV608PwI7kc=)
                          25: 323430313a663938303a643030303a3a2f33362d3336203d3e203633383632.roa (hash: dQ0LTq0QuS8FxqZD/SqB4MlcMzsUyUSMHylX8gcVxQI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
                          rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:56:cf:9b:14:db:b5:b5:e4:9d:02:5c:d3:13:c5:db:1f:f9:39:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
        Validity
            Not Before: Jun 17 01:19:33 2026 GMT
            Not After : Jun 18 05:18:33 2026 GMT
        Subject: CN=733FAB33B9030646FFBBB0D9E56D474B2AF2BBC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7f:d9:09:40:1d:7f:77:a4:75:dc:cd:c8:64:
                    17:66:ca:62:1b:64:6d:d6:c0:7c:42:28:6a:bb:47:
                    aa:fb:ab:d5:2b:8d:88:39:4e:61:58:82:0a:37:ba:
                    b6:8f:cc:0b:ab:e0:93:80:f0:3b:38:3a:a6:af:71:
                    76:9a:35:e2:af:69:3a:82:ac:e9:fc:19:c2:10:4c:
                    90:f1:57:75:6a:f7:e1:ec:e0:d5:5a:67:15:88:57:
                    12:fc:fe:eb:4e:b3:f0:c0:76:80:26:28:b5:71:f2:
                    66:e3:1d:2e:9f:5a:a4:1b:0c:65:f7:94:da:1f:3b:
                    7f:72:3e:a4:1d:f9:61:3d:7f:c7:22:06:88:e9:65:
                    5b:38:41:70:c7:d8:7b:ae:41:23:81:54:73:00:8a:
                    50:f6:63:1e:2b:88:72:69:d8:8f:30:60:10:bb:a4:
                    50:c8:57:bf:1f:be:9b:4a:99:d2:a1:99:2a:24:11:
                    af:9e:f2:08:ee:88:98:cf:b3:1d:08:e0:79:fe:71:
                    b7:63:43:96:d2:ed:70:db:57:97:e6:49:85:bb:bc:
                    46:be:4a:2a:ff:71:11:03:f2:bc:dd:24:31:ec:4d:
                    59:64:4f:99:fd:41:a0:3d:05:b2:27:74:95:60:45:
                    0c:9f:3e:6a:76:02:0e:c4:5b:08:90:1f:03:e1:b8:
                    d7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3F:AB:33:B9:03:06:46:FF:BB:B0:D9:E5:6D:47:4B:2A:F2:BB:C3
            X509v3 Authority Key Identifier:
                keyid:F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a6:e9:28:61:c2:54:56:9a:a1:4e:d3:de:5c:e0:98:79:c2:
         6a:f5:b6:5c:6f:58:b9:f6:00:f5:da:fd:db:00:0a:eb:44:47:
         55:97:83:0e:c4:a3:fb:80:8f:69:ec:5f:b4:10:b4:ae:10:b1:
         39:c1:d0:17:bf:7e:b9:81:9e:c6:c6:1f:a8:9a:15:fe:ee:c4:
         e6:a3:03:db:e1:15:37:53:f5:de:75:70:94:ef:d4:e2:03:e7:
         24:34:94:05:b3:85:d8:46:64:cb:d1:f8:de:14:a3:aa:44:5a:
         6e:47:17:c9:d2:f9:0e:4f:3a:b4:01:b6:b5:bf:ba:8c:1f:b9:
         0a:52:da:19:cd:1c:cb:d6:bc:59:99:79:c1:20:ab:fa:f3:b8:
         96:b1:2a:21:9c:d7:db:c8:61:eb:cb:9f:f0:d2:27:77:da:37:
         83:bc:01:d6:9e:a0:6a:1e:4c:4b:b1:35:28:57:82:79:fb:8a:
         df:2b:3d:b1:a1:1b:e6:84:97:ed:f4:3e:83:d0:31:f5:04:1d:
         7b:48:db:55:5c:c7:9e:f6:6b:b6:f8:4c:bc:1e:7a:d4:5b:5b:
         b3:27:ea:f0:a1:40:9c:d1:f2:aa:07:0c:26:ce:2a:63:a1:30:
         a3:f6:a8:db:29:92:b4:6d:2e:e4:8f:46:f1:0e:7b:96:eb:3b:
         a8:8b:77:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:40:58 2026 by rpki-client