Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
File:                     152D7DF6753FDF6809AF8EEC4158A0787450959B.mft (raw, json)
Hash identifier:          Lcim6klHjYo8/tgALUlfRRfOTN7Q2PmR9iCsPWjqbF4=
Subject key identifier:   84:55:F1:BE:ED:B3:06:50:91:8B:5D:7C:EE:7F:E3:05:07:DF:E1:19
Authority key identifier: 15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B
Certificate issuer:       /CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
Certificate serial:       6A6143D19719E6B101233C4D1D751738E8DC3C67
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
Manifest number:          3A
Signing time:             Sat 13 Jun 2026 15:53:48 +0000
Manifest this update:     Sat 13 Jun 2026 15:48:48 +0000
Manifest next update:     Sun 14 Jun 2026 16:17:48 +0000
Files and hashes:         1: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (hash: ESvaR1DL+/je/4olzPp2pqCkYB5DL7HxVCrwiDRPaGo=)
                          2: 323430353a326363303a353a3a2f34382d3438203d3e20313336303739.roa (hash: Epp4HAZE0W9I/EfSN4vso22uXIIi9KdQMgAH3xFapkU=)
                          3: 323430353a326363303a613a3a2f34382d3438203d3e20313336303739.roa (hash: qzb7Bo6deR1N6q5IRoWBFGvKs3rfmyZwKAyj7XUQE7w=)
                          4: 323430353a326363303a343a3a2f34382d3438203d3e20313336303739.roa (hash: c8Wu4gguWuW01scw1VmhS5njYR/LD3UEGKXOdAsPYh0=)
                          5: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: S3Lt8Yj0Bj89QV3dgVMcSiUeVm0W6yG3NUqqTsEb6WE=)
                          6: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (hash: wPZVLrH//aXJLfQ84ftaIngI3Qi0dpoJEo8RZBRr33Y=)
                          7: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (hash: It2GvpWPSLsFl7rz2mRZU7LXm27AzqHqdj3cFIXNFIk=)
                          8: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (hash: XsexSvb1l3rPkBKSGRPEjdjeUVqotRrEodOLIq5SCmw=)
                          9: 323430353a326363303a373a3a2f34382d3438203d3e20313336303739.roa (hash: DIiDAYxawgYnEH3zecu4aTkx8vuh6itbIN09fv6cnWA=)
                          10: 323430353a326363303a363a3a2f34382d3438203d3e20313336303739.roa (hash: lp+K27VKKl2AaaMMbjKOgz/UaFOEOVsMrt0Pi1dn5FI=)
                          11: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (hash: GjrYL8GtEeE9lp0HSHCaLlwAAKogLsDWrpkYpLE2hlY=)
                          12: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (hash: yWU5OjBVyfKjAUFIWMMkTc3ROsJefZZW78RQYHjdY3g=)
                          13: 152D7DF6753FDF6809AF8EEC4158A0787450959B.crl (hash: fTvmqQtN+jqU18e6bUcwsIStprzPCwwUvcRdVV3hEzU=)
                          14: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (hash: tu3AmkYv6OjKULA1Hlhe48YSBX8fxkzhYqyVPC8IjFo=)
                          15: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (hash: 26y4hHF9zZmxX4K/PcdEAhquIrXoPxj2VsyMOJ25s0o=)
                          16: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: 4PzbZRuGW4w9K+AQtbo2sSaNspynGeSFyEx3Ih4El8A=)
                          17: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (hash: 8qbIjl9zr4ylqDb4nGMqZgAdI9S2G61h5D7139k9paI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl
                          rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:61:43:d1:97:19:e6:b1:01:23:3c:4d:1d:75:17:38:e8:dc:3c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
        Validity
            Not Before: Jun 13 15:48:48 2026 GMT
            Not After : Jun 14 16:17:48 2026 GMT
        Subject: CN=8455F1BEEDB30650918B5D7CEE7FE30507DFE119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e3:cd:20:06:9e:8e:1c:8a:ce:5d:6f:27:ca:
                    79:ae:55:bb:07:57:2c:03:a0:73:17:22:0a:a2:4e:
                    8c:c3:41:e0:75:2e:1b:c8:86:6b:fd:bf:13:33:1a:
                    47:c7:a2:ca:ec:94:48:b3:88:db:4f:28:42:5b:53:
                    1f:d4:75:b9:90:76:85:ad:db:2f:cd:2c:28:cb:06:
                    80:81:11:a2:60:54:0d:b1:0f:1b:8d:a2:ce:d3:64:
                    d8:00:6a:90:2f:03:26:cb:f6:b3:81:4a:a8:c9:3d:
                    40:a0:f2:5c:54:3e:23:71:41:dc:8f:5a:7e:b0:9b:
                    6e:58:77:4a:0f:1c:0e:64:c7:d5:89:8f:92:18:51:
                    8c:10:85:f9:c1:c0:75:f0:68:b1:7a:f8:79:7e:74:
                    8d:95:8b:52:af:99:57:93:c5:7a:b6:f3:7c:2b:fe:
                    32:cd:aa:1d:49:b2:8a:c1:0a:84:ad:92:99:4d:6e:
                    3b:35:36:19:c2:ed:b4:5c:78:94:3d:c7:0b:03:c8:
                    f1:29:70:16:90:41:16:79:d9:21:90:e3:51:4b:ed:
                    f7:a8:2a:cc:6b:db:34:4c:94:f8:87:14:ba:69:4a:
                    b5:2d:61:28:48:98:03:d9:c7:38:28:00:75:46:62:
                    e1:6b:4c:3d:ba:34:b5:df:97:e2:bf:b1:68:38:ff:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:55:F1:BE:ED:B3:06:50:91:8B:5D:7C:EE:7F:E3:05:07:DF:E1:19
            X509v3 Authority Key Identifier:
                keyid:15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:3c:5a:5c:1e:0e:67:b1:36:30:90:37:26:c5:d3:07:d1:98:
         c5:c8:a4:06:c0:e6:ea:5d:20:25:12:d5:4c:30:1a:eb:fa:fb:
         64:e7:2d:6d:b7:a7:8d:0e:87:de:bd:99:69:8b:3e:fe:01:02:
         a3:5c:53:a9:6f:0d:db:9e:79:a9:1b:97:14:2c:34:a6:9f:4a:
         dc:06:f4:42:03:e7:45:d9:f0:69:b7:42:9f:27:aa:9f:cf:71:
         03:89:a8:8a:64:e4:32:92:c5:b9:a4:85:92:e1:79:92:59:6e:
         66:3b:0b:88:6a:f1:3f:e8:1d:92:4e:c0:63:2f:86:81:e8:7b:
         b8:dd:cf:25:e8:46:c1:1e:af:ac:4c:04:2f:2e:e7:a9:02:00:
         bc:92:b7:99:bf:bf:7b:23:90:ae:ea:f8:d0:de:18:3d:5d:8d:
         cd:5d:8e:f8:c4:74:5c:4c:bf:6d:d2:cb:eb:cf:60:32:fe:43:
         f7:d1:2c:a7:71:6f:b8:0c:51:10:0b:42:66:4a:a4:38:37:73:
         cf:3e:5f:80:ca:3c:73:d5:25:58:67:4d:09:8d:36:41:44:6b:
         8a:83:da:7d:12:64:95:1a:92:1a:fb:0f:c1:37:2e:29:78:6a:
         83:93:03:41:c6:54:74:ad:87:b0:7a:c2:cb:a9:2e:0d:c5:92:
         49:7a:7c:cc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUamFD0ZcZ5rEBIzxNHXUXOOjcPGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyRDdERjY3NTNGREY2ODA5QUY4RUVDNDE1OEEwNzg3
NDUwOTU5QjAeFw0yNjA2MTMxNTQ4NDhaFw0yNjA2MTQxNjE3NDhaMDMxMTAvBgNV
BAMTKDg0NTVGMUJFRURCMzA2NTA5MThCNUQ3Q0VFN0ZFMzA1MDdERkUxMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv480gBp6OHIrOXW8nynmuVbsH
VywDoHMXIgqiTozDQeB1LhvIhmv9vxMzGkfHosrslEiziNtPKEJbUx/UdbmQdoWt
2y/NLCjLBoCBEaJgVA2xDxuNos7TZNgAapAvAybL9rOBSqjJPUCg8lxUPiNxQdyP
Wn6wm25Yd0oPHA5kx9WJj5IYUYwQhfnBwHXwaLF6+Hl+dI2Vi1KvmVeTxXq283wr
/jLNqh1JsorBCoStkplNbjs1NhnC7bRceJQ9xwsDyPEpcBaQQRZ52SGQ41FL7feo
Ksxr2zRMlPiHFLppSrUtYShImAPZxzgoAHVGYuFrTD26NLXfl+K/sWg4/8XVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhFXxvu2zBlCRi1187n/jBQff4RkwHwYDVR0j
BBgwFoAUFS199nU/32gJr47sQVigeHRQlZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGU2OTNiODktNDU5Ny00MGI1LTkyYjAtYjI5OWZhNzY5YWZhLzAvMTUyRDdERjY3
NTNGREY2ODA5QUY4RUVDNDE1OEEwNzg3NDUwOTU5Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNTJEN0RGNjc1M0ZERjY4MDlBRjhFRUM0MTU4QTA3ODc0NTA5
NTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGU2OTNiODktNDU5Ny00MGI1LTky
YjAtYjI5OWZhNzY5YWZhLzAvMTUyRDdERjY3NTNGREY2ODA5QUY4RUVDNDE1OEEw
Nzg3NDUwOTU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAc8WlweDmexNjCQNybF0wfRmMXIpAbA5upd
ICUS1UwwGuv6+2TnLW23p40Oh969mWmLPv4BAqNcU6lvDdueeakblxQsNKafStwG
9EID50XZ8Gm3Qp8nqp/PcQOJqIpk5DKSxbmkhZLheZJZbmY7C4hq8T/oHZJOwGMv
hoHoe7jdzyXoRsEer6xMBC8u56kCALySt5m/v3sjkK7q+NDeGD1djc1djvjEdFxM
v23Sy+vPYDL+Q/fRLKdxb7gMURALQmZKpDg3c88+X4DKPHPVJVhnTQmNNkFEa4qD
2n0SZJUakhr7D8E3Lil4aoOTA0HGVHSth7B6wsupLg3Fkkl6fMw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:18:34 2026 by rpki-client