Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
File:                     4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft (raw, json)
Hash identifier:          F2gVN7Q1MLUVrcrtpvS309NI4z8lCJ2gBVEMDMxOlrI=
Subject key identifier:   8D:25:72:ED:06:A2:D3:02:55:14:3A:F2:13:24:CF:37:97:BD:95:CC
Authority key identifier: 4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58
Certificate issuer:       /CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58
Certificate serial:       0C0519ABB8D7BBA4AA4282847A1DEB67AA6F2444
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 04:43:38 +0000
Manifest this update:     Wed 17 Jun 2026 04:38:38 +0000
Manifest next update:     Thu 18 Jun 2026 05:30:38 +0000
Files and hashes:         1: 4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl (hash: 0aqWP9lFkekVRlbDn/YKh3JMRgYBszgeXGgpRtZezDo=)
                          2: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (hash: 6Vy3iy991tbMeWN8XgwIw7kSD92akdQ0AseMbxbKJxY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl
                          rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:05:19:ab:b8:d7:bb:a4:aa:42:82:84:7a:1d:eb:67:aa:6f:24:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58
        Validity
            Not Before: Jun 17 04:38:38 2026 GMT
            Not After : Jun 18 05:30:38 2026 GMT
        Subject: CN=8D2572ED06A2D30255143AF21324CF3797BD95CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:d4:d0:0c:49:d2:79:04:0e:10:e9:5c:33:
                    48:d6:d7:2c:60:72:ce:be:57:36:72:13:e8:43:31:
                    3b:25:52:c1:2d:3a:6d:c9:1e:9c:93:2c:61:8d:1a:
                    ba:d7:c6:03:5b:7e:85:5a:fb:45:d3:c1:b4:3b:a9:
                    3e:a5:5b:fc:d5:4c:d4:02:64:18:d4:b5:ee:37:05:
                    29:d6:07:e6:7a:65:83:75:1d:6c:08:1d:f7:00:0b:
                    d0:46:89:0b:dd:ea:58:ef:c6:b7:36:7a:1d:19:de:
                    5f:cc:14:ee:66:d4:50:a8:9d:3c:42:e1:f9:19:93:
                    01:be:4a:5f:18:92:d5:09:7a:0c:08:da:7c:77:20:
                    e0:bf:3c:04:23:9f:cf:1b:21:92:cd:05:83:29:68:
                    fd:5c:73:fd:66:dd:35:97:bf:a0:83:d0:b8:e7:ce:
                    45:d0:f2:0c:72:8c:3c:e8:c6:3a:6a:36:37:51:40:
                    cd:fa:3a:0e:d5:7e:8b:84:40:43:3b:a2:72:5a:f7:
                    c8:6f:51:aa:4c:2d:f2:c9:18:f0:d5:7a:8e:4d:6b:
                    96:fd:35:c9:70:d3:00:44:80:b9:5a:f9:b6:0f:a6:
                    25:34:80:63:9d:aa:22:4e:be:2e:50:fe:ed:4a:ab:
                    eb:20:dc:69:26:b8:b5:79:08:b6:f9:9b:ca:78:49:
                    1c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:25:72:ED:06:A2:D3:02:55:14:3A:F2:13:24:CF:37:97:BD:95:CC
            X509v3 Authority Key Identifier:
                keyid:4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:d6:3c:0a:d4:3b:cf:91:30:7c:52:65:4a:42:18:87:b2:5c:
         23:68:03:59:dc:65:22:3d:32:0a:d2:a7:da:7d:c9:6b:a8:75:
         c6:d9:22:55:fd:93:08:42:5d:88:67:11:be:56:60:76:22:96:
         b2:3a:19:5c:ec:36:f4:c6:87:07:02:5e:b1:2b:21:63:ea:e5:
         85:ff:86:b4:a5:7f:50:6a:d6:ef:56:9a:41:e3:2e:08:74:2d:
         a7:ab:ef:01:3d:99:c3:28:bb:d3:c1:2d:18:a1:c5:d8:00:4e:
         4f:dd:b0:5a:8a:31:99:b6:5b:7a:98:9d:79:00:80:f5:aa:ba:
         0a:ca:3d:27:61:13:c7:9c:da:ab:84:41:10:ac:44:aa:ea:bc:
         34:73:6f:20:20:86:2c:cf:3e:52:23:45:ce:18:1d:08:73:38:
         f9:a9:89:2e:44:0f:fa:77:7b:66:fb:c6:b6:32:7e:60:b1:e9:
         82:8a:56:72:e2:63:29:04:9a:51:70:bc:5a:06:c2:e8:54:b3:
         01:80:c9:a5:f2:55:ef:cb:57:d8:4b:ba:36:0c:74:f8:0d:c0:
         2e:19:02:be:ef:5f:5e:ab:af:aa:39:41:fc:04:de:23:f3:8e:
         b8:2e:3c:71:28:5c:ea:15:8b:57:14:29:d3:e5:5b:57:be:4b:
         56:ef:15:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:42:53 2026 by rpki-client