Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft
File:                     9796934CE983E32FE16AC8EC0968FB6FF0339712.mft (raw, json)
Hash identifier:          6xr7iIOOWxgRHMMD6xQ7idOVWf2KQBrkaDXhlbdzjps=
Subject key identifier:   8D:4B:D9:80:FC:7D:93:24:B9:6F:A2:9A:59:85:5C:04:D0:37:3D:FC
Authority key identifier: 97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12
Certificate issuer:       /CN=9796934CE983E32FE16AC8EC0968FB6FF0339712
Certificate serial:       2B2D0C3DB0FFDF97F4600776A49A8117FB66CBDD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 02:05:15 +0000
Manifest this update:     Wed 17 Jun 2026 02:00:15 +0000
Manifest next update:     Thu 18 Jun 2026 02:22:15 +0000
Files and hashes:         1: 3130332e39302e32372e302f32342d3234203d3e20313332363733.roa (hash: gEjgmPi52YAqYyRKLzVAHY/tcddAmwneB2Joo9b5lCU=)
                          2: 3130332e3233322e3234302e302f32342d3234203d3e203633343937.roa (hash: TDOsoHO/HMJ3+M/IDdZkOYM5yQ6eYeDxjPpemNYDfKc=)
                          3: 3130332e3233322e3234322e302f32342d3234203d3e203633343937.roa (hash: CyXCnh6Eu/KCDGsGPBvecfzZa94iTRYuLOf5EOeQnK4=)
                          4: 3130332e3233322e3234332e302f32342d3234203d3e203633343937.roa (hash: dKhNn6GJjJO6VU2o0VhUMT3uGr0zEWCIpRqbnuOjsu4=)
                          5: 9796934CE983E32FE16AC8EC0968FB6FF0339712.crl (hash: xUQ0h9EhZ20R2SOirEH7btRK+g/5ZkQY6lTN4/CugJk=)
                          6: 3130332e3235302e3139392e302f32342d3234203d3e203633343937.roa (hash: 90gI7sKaQLOikXOS30SwmXL0rMP42rJQ2sx3CKH87jQ=)
                          7: 3130332e39302e32352e302f32342d3234203d3e203633343937.roa (hash: y59gW5BEgEi3F+rl6LRjNXAc9apuX+ON4CV36/Ae45k=)
                          8: 3130332e39302e32362e302f32342d3234203d3e203633343937.roa (hash: yEBegNseO4WhgSgnMf0UD1P9unzjG8GGfBUDaVupNxw=)
                          9: 3130332e39302e32342e302f32342d3234203d3e20313332363733.roa (hash: rNgJ1hrCOEzVkRLQiZgbFHzGeuIdRSxk2VHfwHrqS1k=)
                          10: 3130332e3233322e3234322e302f32332d3233203d3e203633343937.roa (hash: UWBZ8HDVUh8vSiS9fwmZD70vxv5kj8iLpVqFbVQF6Ag=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.crl
                          rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 02:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2d:0c:3d:b0:ff:df:97:f4:60:07:76:a4:9a:81:17:fb:66:cb:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9796934CE983E32FE16AC8EC0968FB6FF0339712
        Validity
            Not Before: Jun 17 02:00:15 2026 GMT
            Not After : Jun 18 02:22:15 2026 GMT
        Subject: CN=8D4BD980FC7D9324B96FA29A59855C04D0373DFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3e:2d:b4:d1:d2:cd:64:26:c8:7f:ba:e8:2a:
                    a2:2e:f5:50:29:2d:d7:c2:4c:3e:16:fa:eb:ac:27:
                    1c:9f:a5:a4:9e:5f:eb:da:ff:49:f7:cd:0a:23:30:
                    68:de:be:c2:5c:45:a4:11:6c:d2:4f:21:52:78:9c:
                    59:a9:d8:f3:dc:46:4a:b7:ad:e5:39:4b:a4:69:ca:
                    da:25:54:5d:0b:8e:9b:af:ee:57:50:be:62:11:4c:
                    2f:2b:d6:13:25:50:48:ae:0f:6e:86:47:4c:e1:af:
                    e6:32:b0:ce:60:c5:db:81:4e:fc:39:6a:c3:41:15:
                    dc:d3:e5:e2:13:c8:03:26:25:33:86:0b:cb:56:a0:
                    08:0e:93:b1:b1:43:ee:e0:12:43:ec:1f:4a:ed:af:
                    f4:20:5f:ba:8f:0f:30:c3:1a:2a:d8:06:86:f9:43:
                    4d:f5:d3:01:37:ff:cc:0f:b9:8f:f9:29:1f:44:ff:
                    3d:0d:a4:2a:0f:c9:9f:f1:35:12:cc:80:34:1b:88:
                    7b:0c:db:ad:82:c4:6f:8f:cb:c3:cb:c4:92:e6:c8:
                    dc:7f:cc:e2:54:ea:f4:f5:0b:c6:31:1b:93:a3:ef:
                    59:9d:fd:38:fb:a2:e1:fe:df:d7:0f:63:6d:a0:9b:
                    f1:8e:5a:af:a1:c4:a1:8f:22:3c:81:e5:63:91:35:
                    c6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4B:D9:80:FC:7D:93:24:B9:6F:A2:9A:59:85:5C:04:D0:37:3D:FC
            X509v3 Authority Key Identifier:
                keyid:97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f4:e1:01:3c:83:75:e1:55:04:4b:cd:37:15:56:9b:62:80:
         1b:5a:44:48:f6:ae:58:92:31:d5:15:b5:40:f6:d1:83:43:80:
         70:22:6b:30:0f:f6:76:17:ed:09:ce:5c:80:44:8a:f3:ac:c7:
         71:27:f6:d8:a9:4f:a0:78:d1:bd:9b:e1:61:d0:81:cd:e8:2c:
         b6:84:29:fc:13:56:cc:82:fe:27:02:75:63:d6:7d:b3:e8:e0:
         cc:a1:38:6c:82:fc:64:b6:49:bd:93:aa:8d:8b:fa:3b:1d:a3:
         7e:75:f4:4d:1a:8c:a3:10:14:9f:ab:a6:d6:2c:8a:ee:1d:a1:
         ac:e8:df:f8:4b:57:5b:5a:4e:e8:56:ef:4c:c9:fe:60:0c:8d:
         3d:1d:98:da:7d:22:95:e1:72:f0:c0:54:8a:f2:e4:20:37:c4:
         29:22:64:42:c5:bd:28:25:60:5c:fd:30:cf:23:02:9f:24:5b:
         5d:a8:f6:fd:2e:ca:78:7a:83:16:65:59:29:c0:59:9d:e6:ba:
         97:fe:93:ce:7c:5b:0c:8e:29:e0:01:18:1b:22:ba:54:c5:1c:
         ec:80:7b:94:d2:bf:89:55:4d:72:95:09:ae:aa:7a:e0:87:cb:
         9e:3e:45:d8:3f:ad:af:20:36:2b:75:29:b1:93:30:77:d9:22:
         ad:f7:fc:61
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKy0MPbD/35f0YAd2pJqBF/tmy90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5NjkzNENFOTgzRTMyRkUxNkFDOEVDMDk2OEZCNkZG
MDMzOTcxMjAeFw0yNjA2MTcwMjAwMTVaFw0yNjA2MTgwMjIyMTVaMDMxMTAvBgNV
BAMTKDhENEJEOTgwRkM3RDkzMjRCOTZGQTI5QTU5ODU1QzA0RDAzNzNERkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwPi200dLNZCbIf7roKqIu9VAp
LdfCTD4W+uusJxyfpaSeX+va/0n3zQojMGjevsJcRaQRbNJPIVJ4nFmp2PPcRkq3
reU5S6RpytolVF0Ljpuv7ldQvmIRTC8r1hMlUEiuD26GR0zhr+YysM5gxduBTvw5
asNBFdzT5eITyAMmJTOGC8tWoAgOk7GxQ+7gEkPsH0rtr/QgX7qPDzDDGirYBob5
Q0310wE3/8wPuY/5KR9E/z0NpCoPyZ/xNRLMgDQbiHsM262CxG+Py8PLxJLmyNx/
zOJU6vT1C8YxG5Oj71md/Tj7ouH+39cPY22gm/GOWq+hxKGPIjyB5WORNcYxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjUvZgPx9kyS5b6KaWYVcBNA3PfwwHwYDVR0j
BBgwFoAUl5aTTOmD4y/hasjsCWj7b/AzlxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTE2MzNiOGUtMGRmOS00NGFjLTljYWUtZDZmNjc2NWE1MmM5LzAvOTc5NjkzNENF
OTgzRTMyRkUxNkFDOEVDMDk2OEZCNkZGMDMzOTcxMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85Nzk2OTM0Q0U5ODNFMzJGRTE2QUM4RUMwOTY4RkI2RkYwMzM5
NzEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE2MzNiOGUtMGRmOS00NGFjLTlj
YWUtZDZmNjc2NWE1MmM5LzAvOTc5NjkzNENFOTgzRTMyRkUxNkFDOEVDMDk2OEZC
NkZGMDMzOTcxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD704QE8g3XhVQRLzTcVVptigBtaREj2rliS
MdUVtUD20YNDgHAiazAP9nYX7QnOXIBEivOsx3En9tipT6B40b2b4WHQgc3oLLaE
KfwTVsyC/icCdWPWfbPo4MyhOGyC/GS2Sb2Tqo2L+jsdo3519E0ajKMQFJ+rptYs
iu4doazo3/hLV1taTuhW70zJ/mAMjT0dmNp9IpXhcvDAVIry5CA3xCkiZELFvSgl
YFz9MM8jAp8kW12o9v0uynh6gxZlWSnAWZ3mupf+k858WwyOKeABGBsiulTFHOyA
e5TSv4lVTXKVCa6qeuCHy54+Rdg/ra8gNit1KbGTMHfZIq33/GE=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:50 2026 by rpki-client