Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft
File:                     39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft (raw, json)
Hash identifier:          MbOQYW9zTAqp+IzNu6IldCC2aANwl2gcXJgd8gB+sj0=
Subject key identifier:   42:8A:0F:89:BE:0F:AE:E9:65:6A:96:B2:47:CE:9F:77:3B:2C:74:B0
Authority key identifier: 39:EF:56:0E:07:C0:B4:2E:F0:45:7F:7D:5A:70:F8:DB:FF:24:C7:98
Certificate issuer:       /CN=39EF560E07C0B42EF0457F7D5A70F8DBFF24C798
Certificate serial:       0F957B355DC6C34198E3A4CC1B394C9FCC3533D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 23:47:52 +0000
Manifest this update:     Tue 16 Jun 2026 23:42:52 +0000
Manifest next update:     Thu 18 Jun 2026 02:16:52 +0000
Files and hashes:         1: 3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa (hash: sJco2gFyjRbFkYkBOL4SjT5LogqtsvE6E0crTfpTSo4=)
                          2: 39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl (hash: g3k9OwYhwuQT0Sio1tnTh7bZ0Tg1pK9Ej4gO41jteic=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl
                          rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 02:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:95:7b:35:5d:c6:c3:41:98:e3:a4:cc:1b:39:4c:9f:cc:35:33:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39EF560E07C0B42EF0457F7D5A70F8DBFF24C798
        Validity
            Not Before: Jun 16 23:42:52 2026 GMT
            Not After : Jun 18 02:16:52 2026 GMT
        Subject: CN=428A0F89BE0FAEE9656A96B247CE9F773B2C74B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:8a:93:26:61:bc:11:15:33:c7:0e:45:e0:
                    56:eb:97:a3:2c:93:19:56:18:17:e7:28:0e:fc:ed:
                    09:9b:ed:28:5f:74:07:0e:14:5b:e6:e8:b8:98:75:
                    95:ac:7e:0b:d4:6c:cb:90:61:a9:bf:fd:62:92:86:
                    8b:19:37:7c:94:c1:7f:d2:7a:ee:7d:02:d1:98:18:
                    31:8f:ca:fa:a3:03:42:0c:1b:e5:9f:eb:73:c2:6f:
                    19:14:78:86:de:b9:6c:24:5e:c9:b4:5b:15:21:07:
                    1d:3d:40:c7:ec:1f:19:60:fa:a0:da:bc:4e:d9:f2:
                    65:3e:bb:38:42:48:a4:a5:52:3e:8b:c1:8d:7c:b1:
                    77:ab:1d:f2:7a:e7:d2:b5:7a:d0:b9:c4:1c:c5:d9:
                    b8:64:4d:46:bd:f1:d0:d0:7a:7e:04:ec:13:f3:ca:
                    c2:01:52:50:9a:51:2b:24:05:f4:80:98:3c:79:c1:
                    5d:a4:08:16:ca:bd:f2:e3:72:f2:cd:9f:53:db:c2:
                    23:fb:a8:ae:11:ab:fb:46:1a:4f:3d:35:58:3d:b7:
                    59:6c:81:b4:9d:40:85:34:c8:1d:60:70:25:e8:09:
                    6b:fd:3b:be:11:65:99:3b:59:22:65:af:db:18:79:
                    b1:d6:14:76:f4:16:1b:a2:3d:c0:53:07:76:4d:a1:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8A:0F:89:BE:0F:AE:E9:65:6A:96:B2:47:CE:9F:77:3B:2C:74:B0
            X509v3 Authority Key Identifier:
                keyid:39:EF:56:0E:07:C0:B4:2E:F0:45:7F:7D:5A:70:F8:DB:FF:24:C7:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3a:73:d1:ae:ba:e4:24:1b:ff:d6:38:77:49:b9:ce:c6:60:
         b4:34:ba:16:a3:b7:80:b5:37:9c:c1:96:bc:9e:b0:9a:fb:0b:
         bf:ae:e4:8b:4f:da:5a:ff:91:d3:43:63:00:22:98:e2:fa:31:
         83:04:a1:3a:89:ac:36:fa:77:80:d4:a2:ba:7c:5a:67:4c:11:
         87:cb:ac:0b:b2:4f:2b:df:72:69:46:1a:1f:d8:69:4d:d7:43:
         b2:c6:cc:7e:61:11:3a:47:3d:1f:ab:d7:36:93:61:83:c1:97:
         e3:37:9d:67:47:ae:c0:60:8e:d7:eb:21:6a:54:62:86:24:c4:
         1f:d5:c0:7e:96:7b:26:71:76:42:2a:b1:c5:b7:f1:a0:69:c7:
         32:77:10:93:18:72:25:45:2c:69:13:02:25:77:ea:8f:83:4a:
         c9:40:dd:e7:29:82:9b:2b:7a:c2:2c:e8:72:b3:2e:70:41:ce:
         b9:83:97:92:c0:67:81:3a:61:b6:89:f0:d4:e8:7c:13:19:8e:
         ff:9b:46:49:00:6a:c5:63:7e:d5:19:dd:1e:36:11:00:8d:fe:
         8d:62:0f:a2:d8:4c:68:c2:27:36:86:29:68:d5:0c:11:a5:c6:
         7a:47:4e:0c:b4:96:0e:8d:39:bf:95:a1:79:d8:ee:1f:f3:b7:
         73:5b:ec:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:45:39 2026 by rpki-client