Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
File:                     F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft (raw, json)
Hash identifier:          1OQqQyuz3zkDpksGjHgh79xyZ8bX7zbPB95WfogAD5o=
Subject key identifier:   A8:E8:E2:D9:3E:AA:BB:35:4D:FD:E3:19:1B:6A:8E:23:EA:0A:52:9C
Authority key identifier: F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58
Certificate issuer:       /CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458
Certificate serial:       6815D83EFE14996F6315F4161AA3FB1D1FECD7A2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 17:30:19 +0000
Manifest this update:     Tue 16 Jun 2026 17:25:19 +0000
Manifest next update:     Wed 17 Jun 2026 18:29:19 +0000
Files and hashes:         1: F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl (hash: oow96NkYrP2XPpao/4KOfrvsUfpNfKCxLnyOX6AjsyE=)
                          2: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: R/xEQgEo02t46B8xsXrO/lgKY9Y/AGOBiAw+WzSuWJA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl
                          rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:15:d8:3e:fe:14:99:6f:63:15:f4:16:1a:a3:fb:1d:1f:ec:d7:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458
        Validity
            Not Before: Jun 16 17:25:19 2026 GMT
            Not After : Jun 17 18:29:19 2026 GMT
        Subject: CN=A8E8E2D93EAABB354DFDE3191B6A8E23EA0A529C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:35:e9:ca:f7:f6:e3:90:a3:32:96:92:b2:a4:
                    3d:c4:88:e5:79:a3:d4:10:b5:c0:d7:2e:dc:3e:4f:
                    34:98:fa:b7:5d:45:fc:e8:b2:ff:64:d5:8f:dd:e5:
                    92:2c:4a:98:a8:1b:47:23:23:73:86:06:2b:9c:ec:
                    e3:d6:7c:0c:fc:e1:41:01:e2:b9:61:d9:41:6c:fb:
                    64:0c:ec:c8:43:62:9e:1c:f6:3c:27:ca:91:fe:1b:
                    5a:d8:4c:7d:f2:ba:03:d4:69:7f:77:0e:47:87:29:
                    0e:78:51:be:04:96:b7:20:79:37:28:e9:39:bd:1e:
                    f7:48:6e:59:91:e5:23:71:9f:01:fc:5f:44:41:8d:
                    ef:f0:28:22:1b:29:14:52:5b:db:0d:4c:14:ef:ff:
                    a3:32:8f:19:1e:e4:f4:68:3d:d0:18:55:37:9c:96:
                    60:48:55:5f:7b:1d:81:35:fc:fe:58:03:e3:57:ea:
                    1a:d2:a9:fd:b0:f9:31:12:20:9a:fd:35:8e:76:5c:
                    94:36:82:05:8a:55:1c:9b:cb:cd:bb:a1:b7:27:7d:
                    b9:c3:da:25:3f:4f:da:b2:d4:0c:43:cb:22:97:90:
                    90:aa:ec:20:34:53:15:e2:0b:7b:d5:27:77:2c:9e:
                    10:0d:a5:d6:a7:f8:e1:3c:cc:cc:b0:85:8e:0f:14:
                    b4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E8:E2:D9:3E:AA:BB:35:4D:FD:E3:19:1B:6A:8E:23:EA:0A:52:9C
            X509v3 Authority Key Identifier:
                keyid:F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e6:eb:ed:ed:41:f8:21:18:61:e7:30:0f:bc:4a:08:0d:ae:
         24:09:0a:fb:cf:19:20:9e:f5:11:8b:c4:83:85:aa:3d:ba:09:
         a0:e7:49:52:fc:26:7a:d5:fc:a6:6b:72:7d:c5:0b:25:58:f2:
         bf:55:94:b2:15:94:ab:33:47:eb:7f:0b:a3:8d:85:8b:54:5e:
         ad:f0:fd:12:73:d3:22:24:4d:c4:46:62:3d:d0:47:fc:5c:e0:
         62:55:89:a5:c2:c0:f9:11:e4:60:f0:e9:b8:d9:e2:a6:45:b2:
         82:18:e0:90:51:b8:fa:bf:ba:d0:09:25:97:ca:08:8f:b7:07:
         22:d8:58:38:cc:82:99:30:36:ed:9b:15:d0:f4:ca:05:db:8d:
         23:9a:ab:9c:a8:01:7a:e4:72:ef:5d:24:ec:14:ca:6b:44:b1:
         dd:a9:70:3a:c1:8c:44:d9:75:67:61:03:fd:50:e7:55:f3:62:
         8a:0b:73:ad:f6:d2:69:52:56:a5:1f:21:ac:b1:51:91:e6:c6:
         46:6a:2d:53:8e:6d:da:a2:96:d9:8a:ba:37:c2:34:6f:74:c5:
         fa:a5:e3:f1:43:29:f3:3d:79:20:ee:e1:24:f0:87:2b:33:29:
         1b:5f:36:40:81:28:20:0b:ae:9f:a9:8d:f8:9d:1b:ec:a2:b9:
         74:ab:82:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:48 2026 by rpki-client