Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
File:                     2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft (raw, json)
Hash identifier:          elHDRKEsYUCjQkbzxJKMmZ2qoWTLzYWB/YkT50fyfdE=
Subject key identifier:   06:76:55:8C:6C:F9:C7:65:51:0F:A2:A2:57:91:69:DD:79:5E:C0:80
Authority key identifier: 2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70
Certificate issuer:       /CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
Certificate serial:       5DA0C164A415143A06063968973C1D6975AC1545
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 03:16:50 +0000
Manifest this update:     Wed 17 Jun 2026 03:11:50 +0000
Manifest next update:     Thu 18 Jun 2026 05:56:50 +0000
Files and hashes:         1: 3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa (hash: HJc5JvMy8GHohXvfOoaZGX6TD+10pfnhOdLgXA7YFDo=)
                          2: 2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl (hash: ipCNsPRErId1Ue0yKCgBb6nXU3VHr3/tYcO0lRZY4uk=)
                          3: 323430343a326363303a35383a3a2f34362d3436203d3e20313331373336.roa (hash: 2ePu3EHR90dClUt0r5HRZza+Dx4B+Kag1aBuSmuBj9s=)
                          4: 3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa (hash: NS29Duq3Ad0Oay5mRumCSue0EKVMXVW+d3uV6la1Mk4=)
                          5: 323430343a326363303a34343a3a2f34362d3436203d3e20313331373336.roa (hash: GR4L5FJqVS9TJ+dvaa8HynQA+y7YhiRBbKDogiUCsq4=)
                          6: 323430343a326363303a35343a3a2f34362d3436203d3e20313331373336.roa (hash: R7p8u3fUD9Q1PWm/nzBs05bZYIMNm4aJaBgF+3K7/6A=)
                          7: 323430343a326363303a32303a3a2f34332d3433203d3e20313331373336.roa (hash: fToGnwAHAJ5VtIANKumAt4uzlSvc7R1/Zv4oJQS4kF0=)
                          8: 3130332e3133322e31352e302f32342d3234203d3e20313331373336.roa (hash: dpRjxkyvMZSuMwoiOFiEbs0aVfBM9F5a6WoDjj2reGk=)
                          9: 3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa (hash: VaVs+XiSWxs1hEguef/hHo/bNFA4CcDh7KZrSmxpBag=)
                          10: 323430343a326363303a34383a3a2f34362d3436203d3e20313331373336.roa (hash: jZfpgRC0d5fkEjm8vD7qc9gZsnKZQYBh0EboO+Uho7s=)
                          11: 323430343a326363303a34303a3a2f34362d3436203d3e20313331373336.roa (hash: xUpoxjFUHIIvNkT92mjiWI0plg15apjL+jPNvQQ2Uk8=)
                          12: 323430343a326363303a34633a3a2f34362d3436203d3e20313331373336.roa (hash: cS+IrgZpY9aClZBoWCUDEv2Phmt7SwlOezLlcCoBSPI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl
                          rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a0:c1:64:a4:15:14:3a:06:06:39:68:97:3c:1d:69:75:ac:15:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
        Validity
            Not Before: Jun 17 03:11:50 2026 GMT
            Not After : Jun 18 05:56:50 2026 GMT
        Subject: CN=0676558C6CF9C765510FA2A2579169DD795EC080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:78:4b:d2:e9:48:8b:a5:37:d8:38:66:12:24:
                    23:38:94:d6:e6:9b:c0:57:3b:fb:21:44:5c:53:34:
                    bc:17:b2:76:8c:cb:e4:64:14:a2:13:36:c7:8e:30:
                    7b:ed:d3:a7:ef:c1:5e:e1:ac:2e:cd:e2:08:48:31:
                    5d:6c:15:e0:bf:a9:ef:5b:7c:75:53:15:08:f5:1c:
                    07:e5:a2:ce:7e:2b:3d:a2:3e:bd:c4:20:12:8e:39:
                    e5:07:9a:1b:38:aa:be:00:24:4a:ef:df:90:93:57:
                    e1:2d:62:fe:44:90:0a:d5:0f:d3:db:e1:c3:06:bc:
                    a7:f2:8f:0a:b0:c3:64:8c:5f:a4:d5:3d:95:aa:4c:
                    5a:db:16:3d:6e:d7:16:c4:33:91:be:00:fd:a8:96:
                    04:cf:60:12:49:e3:8a:52:5d:7c:81:07:82:b1:b9:
                    a1:8f:9f:58:7b:e7:02:94:f6:e2:19:5c:8f:d4:96:
                    5c:77:5a:59:cc:9c:71:9a:a2:79:95:d4:ec:7e:91:
                    3e:b6:34:23:99:2d:1c:85:ce:f0:d5:90:42:ea:f0:
                    70:dc:17:e6:3c:09:7c:81:a6:d7:5e:45:12:7c:6a:
                    99:81:2e:7e:51:da:cd:c2:cf:37:58:55:80:36:15:
                    0f:fc:da:bd:44:3f:62:9f:b2:01:dc:97:c1:fc:4f:
                    e5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:76:55:8C:6C:F9:C7:65:51:0F:A2:A2:57:91:69:DD:79:5E:C0:80
            X509v3 Authority Key Identifier:
                keyid:2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:fa:11:4e:fb:22:98:be:72:a4:9a:74:0b:23:2a:14:ae:d1:
         7d:17:d1:6d:7a:63:7a:1f:29:2d:6e:04:11:7f:cf:1a:8a:39:
         82:0c:18:58:05:7e:52:cd:2d:de:c9:11:b5:ec:dc:ff:ce:02:
         2f:bb:b7:dd:8c:0e:a6:a9:c8:8e:cb:bc:ff:a5:94:f1:e5:12:
         a3:30:2e:00:94:89:dc:e7:bb:2e:19:e4:be:e6:9a:08:02:62:
         34:7b:73:70:a6:f1:84:58:ed:a8:5e:7f:c3:e9:37:ee:7c:c9:
         fd:61:19:4d:af:68:ae:a7:a1:a5:5d:9a:7f:38:1b:1d:ad:dd:
         97:d6:92:d5:50:dc:f0:e3:c0:9d:2e:26:80:ac:06:7d:80:c1:
         14:eb:d4:82:b8:e2:d7:76:ee:8b:a5:92:cb:3a:a5:ec:67:8a:
         8a:70:c7:0b:a4:b6:91:51:96:e4:f4:f6:1c:48:b1:ee:ba:2f:
         c5:95:38:b8:4a:12:e6:88:87:e0:e2:f4:4f:20:21:c9:0e:95:
         39:7d:a2:43:ee:bb:3f:23:25:9a:08:f0:a4:c2:23:18:6e:17:
         6f:3d:14:8b:f3:1b:da:89:df:d3:cf:7f:64:82:14:67:48:0e:
         29:b8:ac:90:0a:fb:3c:d6:88:8c:8f:29:69:06:6c:78:46:9d:
         ac:e0:7f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:14:13 2026 by rpki-client