Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
File:                     F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft (raw, json)
Hash identifier:          ar2roYiScYA6m11Vg5/H6QlYnQJnZR4MK9But/hNZEM=
Subject key identifier:   3F:BD:BC:4A:5C:57:6A:72:21:22:5A:42:35:CD:F4:63:36:C8:2C:9F
Authority key identifier: F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF
Certificate issuer:       /CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF
Certificate serial:       76A8CB0D7DAE001AD486ED38723F809AF8E04D2D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 17:55:51 +0000
Manifest this update:     Tue 16 Jun 2026 17:50:51 +0000
Manifest next update:     Wed 17 Jun 2026 19:49:51 +0000
Files and hashes:         1: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: RCVkQO3x+P4RF48TeYaUmpS+R/Zp+Q7sEuYMIANrgmM=)
                          2: F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl (hash: qTp5Rg13kCb65UdzqjUU3H0zQ4O3b1yAg1U9wkK5euU=)
                          3: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: 64HGWL2CzebN7GmYL8lPadZ2nwJ3zX055oQRPQondo0=)
                          4: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: JVzJjBAyxQLaPhKhqz1LXrJdrQUjLBthYVZyc/xVxg0=)
                          5: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: 5CWw2ztPAElFuqMvrZ+eExbk4B2mKb785wpbROO/cwI=)
                          6: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: DQ6rpEJu+zPKG4c6tffclYxCxiCj2KQBdnnwehsPRoM=)
                          7: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: c0E9xb18G6dDWSOYbp1L8pfGiJXjXDV9gaUGsFzHbYc=)
                          8: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: PHP1IFXfqbi+BOlMH5y7xyleYHrhQYI+Lt+NZxh64LQ=)
                          9: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: rEzu4P6oExwIZaANS5DV2R8BJmVkjCXI7g7sPguv5ho=)
                          10: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: C2/pGzPkMt5Vzcyvrqnbj1Bb56h29NNTc3/kAwJYyFk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl
                          rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 19:49:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a8:cb:0d:7d:ae:00:1a:d4:86:ed:38:72:3f:80:9a:f8:e0:4d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF
        Validity
            Not Before: Jun 16 17:50:51 2026 GMT
            Not After : Jun 17 19:49:51 2026 GMT
        Subject: CN=3FBDBC4A5C576A7221225A4235CDF46336C82C9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1e:37:41:fd:68:0b:a0:fc:b2:d8:28:82:77:
                    6c:d3:93:63:4d:4f:78:3e:7f:9f:f8:b7:cd:61:a4:
                    84:ac:f8:34:44:ad:e8:57:18:7f:22:5c:63:a4:92:
                    87:de:61:a0:a7:c7:92:01:50:14:69:33:50:f5:2c:
                    51:7d:11:a8:1d:62:90:a0:49:12:31:d2:2e:9b:92:
                    35:d9:43:4d:3f:49:29:d2:be:a3:b2:00:9e:1d:41:
                    ca:34:5a:56:34:0d:dd:07:0a:62:32:68:dd:1e:4f:
                    84:fd:f9:50:ab:d2:6e:96:44:54:ac:e4:89:19:6b:
                    5d:ff:e5:ba:8e:b8:05:45:a1:be:60:be:3f:81:6e:
                    d5:f2:ae:3c:dc:22:25:1a:2b:bd:22:69:12:e9:0c:
                    35:11:60:95:d5:44:1a:3b:6b:5e:98:79:d6:3f:47:
                    83:4c:6d:64:db:97:04:80:a6:81:ae:89:6e:e9:76:
                    fe:31:d7:d9:1d:ca:e5:3a:8a:ff:16:2d:65:d6:2d:
                    45:8e:57:f8:51:2f:7f:df:a3:18:fe:17:5c:9a:89:
                    1e:de:7f:30:e5:72:04:be:e1:2b:69:0e:d5:e0:e6:
                    66:41:c7:c2:e3:7a:cb:7e:29:f5:03:f8:37:d4:39:
                    8c:88:78:99:3a:08:f2:70:01:92:a5:f8:d4:4c:94:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BD:BC:4A:5C:57:6A:72:21:22:5A:42:35:CD:F4:63:36:C8:2C:9F
            X509v3 Authority Key Identifier:
                keyid:F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:bc:d8:46:f8:17:29:66:cc:b9:35:40:90:30:b6:0f:19:53:
         14:7d:a0:a9:1d:94:22:f1:0c:f6:65:45:1a:d4:92:a1:04:dc:
         11:71:89:04:29:09:da:47:a3:d8:12:69:67:a7:95:75:04:18:
         10:60:a1:0b:75:19:56:cc:ca:69:63:69:c9:1f:52:51:2d:5d:
         8e:5a:e9:7d:d2:c0:42:2f:55:ef:1c:08:39:9d:05:4c:fc:f2:
         3d:ba:14:37:5d:a7:2d:95:46:4f:ac:52:d1:2b:be:ad:85:a0:
         d5:6b:ce:f7:41:44:9d:35:91:c5:16:06:f4:7a:d4:3e:19:6d:
         dc:22:de:69:1c:ff:df:9a:3b:36:c2:e2:c8:a7:f2:80:be:61:
         6d:50:9d:56:02:7e:bf:79:d9:f9:20:b1:4c:8a:ca:73:af:5b:
         6e:85:09:ba:32:32:20:ea:4f:a0:62:2f:e2:16:a9:2c:f1:db:
         7a:9e:ce:93:40:d0:99:b8:e7:4a:b6:f2:7e:68:9b:52:38:4d:
         c5:23:74:ed:35:05:47:21:b8:cb:4b:8b:48:c5:6d:2d:bd:f1:
         d6:e6:eb:18:6f:8f:08:7a:d2:24:de:e8:c6:55:c0:2a:a4:be:
         f9:ab:06:65:3e:51:35:7e:9f:96:23:d6:7b:93:f6:77:92:7b:
         de:07:3f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:42:24 2026 by rpki-client