Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
File:                     B9E54455BBADEE4051F79D907B7453E95F13B467.mft (raw, json)
Hash identifier:          20VueMFjP8uxnPF4JOuG2igBcqJsgsflpux30IctFRo=
Subject key identifier:   5A:9A:8E:27:CB:6F:B4:46:17:20:3F:D2:D4:1C:78:59:FC:EE:10:6E
Authority key identifier: B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67
Certificate issuer:       /CN=B9E54455BBADEE4051F79D907B7453E95F13B467
Certificate serial:       7BB543E586AC2E7AB900CC4245134ABC021C0901
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 04:33:21 +0000
Manifest this update:     Wed 17 Jun 2026 04:28:21 +0000
Manifest next update:     Thu 18 Jun 2026 08:11:21 +0000
Files and hashes:         1: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: /KOgzrDFq/tIyDOkqLi1nhsbulS+0UUYSYry8OoTmJg=)
                          2: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: Mm+87+26OdYLR0WzbeBFR1Yx08pPggtvOd7SnjyjkXk=)
                          3: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: 8BxjP7wp2ny7XMMIeYWn2YhapQVIdzgBdHrT8RAE1hI=)
                          4: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: wr2AUAIBj15wOmk+O8JERfUGMC5W1ujwy25yjBMhvGA=)
                          5: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: 7pPEEFuxF2xingEKFsHlopxNVPNMkufYI24t0NlMTEY=)
                          6: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: vFfmqz/S7K4aLguWPn5rp+ugEbZkxGvqsu4n1XKxUAg=)
                          7: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: 2snLe8yK3Bohn4tsm/dGVrhksjjX4tISeXo0oWw/2NQ=)
                          8: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: UedpVAHn21ooqLw8ovvpIgJ1soqSurJAxq23sQ+qlfw=)
                          9: B9E54455BBADEE4051F79D907B7453E95F13B467.crl (hash: y5UTmkmDga3rt+96IcsPVh+FYl5KNaH2nUZFz79dXh4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl
                          rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b5:43:e5:86:ac:2e:7a:b9:00:cc:42:45:13:4a:bc:02:1c:09:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E54455BBADEE4051F79D907B7453E95F13B467
        Validity
            Not Before: Jun 17 04:28:21 2026 GMT
            Not After : Jun 18 08:11:21 2026 GMT
        Subject: CN=5A9A8E27CB6FB44617203FD2D41C7859FCEE106E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:33:a6:40:18:86:99:75:ac:b4:ba:f7:0b:
                    d7:8a:e7:4a:cd:da:0a:bd:54:29:26:0a:4d:7e:c0:
                    50:92:d9:7f:82:74:ec:a4:58:af:7c:d1:8e:51:81:
                    d2:23:28:29:60:4d:23:d8:a8:ee:71:2d:b5:56:43:
                    69:a8:64:1b:d7:7b:87:01:49:bf:56:7e:3b:7e:86:
                    fe:f6:b9:c1:34:4c:d5:c3:45:2d:f6:7c:0c:60:99:
                    7b:27:d5:e8:86:d1:46:36:26:c8:6d:75:8a:fc:4f:
                    0a:9e:63:64:d7:43:0b:72:ff:3a:31:05:3c:6b:7f:
                    af:8f:3a:c1:3c:6f:fd:86:f4:e4:f1:d3:b1:a8:1a:
                    40:87:3c:66:4d:20:c1:66:54:36:32:ac:b1:cc:7d:
                    4a:f9:a8:11:c2:be:56:d8:39:b0:7c:90:d9:3a:02:
                    cb:13:6f:14:ad:26:57:c6:5f:e7:55:a1:73:35:82:
                    58:9c:0d:5f:d8:28:fe:e8:c3:2c:58:2f:3f:64:78:
                    ac:82:c1:e4:fe:f2:31:97:15:b6:ae:56:98:6a:65:
                    97:22:36:ea:ee:8a:ec:28:0a:c1:08:57:4c:e6:b2:
                    b8:19:a8:37:6c:67:07:ef:d5:92:80:31:e8:40:7c:
                    23:29:b6:b7:b0:02:58:7f:f0:f1:c6:19:32:da:54:
                    0c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9A:8E:27:CB:6F:B4:46:17:20:3F:D2:D4:1C:78:59:FC:EE:10:6E
            X509v3 Authority Key Identifier:
                keyid:B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7a:7a:58:0f:35:3d:f6:8f:ca:7d:35:80:11:9a:90:53:36:
         22:91:b7:f2:d2:d5:fd:96:76:b0:17:ba:47:07:34:11:5a:ad:
         bf:c8:f6:5d:41:29:2a:54:63:d4:96:30:7d:e5:bb:05:54:d6:
         6b:f0:2f:06:23:d6:65:58:a3:d3:c4:e1:2c:f3:07:86:e2:02:
         ac:44:70:bc:f8:ae:76:76:01:1c:00:e2:16:82:6c:8f:6d:77:
         f3:8c:66:4a:b6:f4:e0:bc:25:d2:22:10:24:5f:ab:5f:ce:58:
         cc:04:1f:0b:70:3d:f7:a5:7e:da:f6:d4:c3:28:fb:00:e2:08:
         a8:c2:00:d8:ed:82:d8:7c:78:19:d8:da:6c:fd:5d:dc:2b:30:
         ce:8d:c7:a1:e6:4d:a5:23:c0:dc:f6:0d:53:7d:d7:9e:cb:6d:
         67:4a:b9:0a:7d:fd:71:ec:d7:24:3f:d7:15:b4:54:cd:9f:e8:
         fb:b6:65:3d:d1:04:80:c1:48:c6:e0:0a:52:71:10:ff:fe:bc:
         dc:91:bb:d8:2d:9d:38:04:94:e3:29:34:c5:a0:76:87:b0:fa:
         28:6e:52:bd:46:ad:05:ad:30:03:9c:a6:ac:7a:a4:64:59:d6:
         5d:9c:ea:23:63:81:b9:c6:df:0b:07:59:6a:5f:c1:67:33:ba:
         d2:1f:a9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:47 2026 by rpki-client