Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
File:                     69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft (raw, json)
Hash identifier:          /YuZMROak9jlV9z0aVIDZVHpDjyMkDMzRh2Nvcn1GLA=
Subject key identifier:   67:4C:34:DC:C4:3D:C1:A6:F7:AB:16:CD:9A:AD:3A:49:26:8C:E0:54
Authority key identifier: 69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D
Certificate issuer:       /CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
Certificate serial:       595790079340C2DA25A4EFA4424CCCE3F9CAD89B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
Manifest number:          3A
Signing time:             Sun 14 Jun 2026 03:32:08 +0000
Manifest this update:     Sun 14 Jun 2026 03:27:08 +0000
Manifest next update:     Mon 15 Jun 2026 03:47:08 +0000
Files and hashes:         1: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: S3vlimdvoGzFuAyUKAon3zByGdBKiazihI8BHyvXGC8=)
                          2: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: z+PDM1yaJVso/7iy8s/DYFAcGnjvjuuUqet4qK7is+I=)
                          3: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: 3ex6+M1Mdtsc4EjQuuzwJkgMQ9mnmgEROmDyzDTwmbw=)
                          4: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: cjnevU0RPzXKOiUMI3NVUlG7JVEKvWFFOPDxZT7zvG0=)
                          5: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: G+PtaUwDO5r5hMHQJK1W4RibPlp9/hiGTwpahVF+du8=)
                          6: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: /ARpDaobiYOepxRHR1PDX5TMsKlHHu4YXqHKwEPmRk8=)
                          7: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: 9or0Aovq+itDbFnRJWHEFOrI8Bwnt6OpiiswZ3Ku8uc=)
                          8: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: nMOG+6n+KLcdsuMUUFRu80+hEtB8VuNBpV2dkQOcKbY=)
                          9: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4wept2TXybZZ4wiG2lTGiLdJKO6+UiKFaeUDDPHh8cw=)
                          10: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: v3ZYWa8XXb+DFvl8j2lAq20FkxITb0PL+31yaFuYI5A=)
                          11: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: JaMj7Mn/vinF3SqmQ06RkAsyunCmsAh4LYSl4fBlc2I=)
                          12: 69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl (hash: 0YEfrdYiHh3OLNxnUcniM37qd6eRElQcGT1/6v5eDuU=)
                          13: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: WD6WZpSz8UlJoAksSemqODUiQFTWMxl5dgMtTtpGDTY=)
                          14: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: K2rJXObunbVeGUGmNLr3mwtBf8bkZX6YYlP1we9FNao=)
                          15: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: AXYnJAEv7z2tUD33+NaHrltSBMuBOMW49EVRFoSQzz8=)
                          16: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: GY27HpG2WJNhWravikGEHrDTrV6iGWCs3DNw3rStizU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl
                          rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Jun 2026 03:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:57:90:07:93:40:c2:da:25:a4:ef:a4:42:4c:cc:e3:f9:ca:d8:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
        Validity
            Not Before: Jun 14 03:27:08 2026 GMT
            Not After : Jun 15 03:47:08 2026 GMT
        Subject: CN=674C34DCC43DC1A6F7AB16CD9AAD3A49268CE054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:76:e0:18:ad:b9:d8:46:90:a6:46:aa:a7:
                    75:ff:01:42:ce:3a:e2:27:90:d2:1f:b3:95:6b:84:
                    59:9a:c7:75:4f:b7:3a:74:81:64:7c:4e:d2:d7:2a:
                    9e:ac:a2:31:9a:21:98:ef:63:e1:f6:cf:55:9d:b2:
                    4b:ee:c0:ac:96:75:8c:d8:a1:cb:d7:84:bf:15:80:
                    0c:e7:8c:8a:e6:5f:bd:52:b2:4a:a1:15:f9:b6:06:
                    f1:35:44:8c:37:65:e7:9a:9a:9a:eb:a3:5c:de:4f:
                    5b:32:ae:22:7b:59:cf:e8:04:2a:01:11:86:a3:88:
                    b1:8c:85:29:63:e5:cb:07:f5:e7:ff:61:d3:eb:7d:
                    0e:6c:bd:04:b7:ea:c6:46:96:db:23:74:f7:6e:f3:
                    4b:50:f0:71:76:6d:63:d5:7a:b7:64:6b:c7:77:df:
                    4c:b5:a8:9e:b7:a5:24:2b:3c:97:32:30:6a:de:39:
                    3a:1f:4e:e1:30:cb:07:2d:0c:d6:dd:86:22:a2:16:
                    75:0e:e7:3f:f5:f0:4c:89:f5:ae:be:61:61:40:0b:
                    a6:81:d3:7c:8b:5e:51:da:21:07:c5:a7:a8:3c:49:
                    8f:95:6f:25:53:c6:b3:59:e0:0e:9c:c4:97:b7:a1:
                    c7:c7:8d:36:4f:c2:31:2b:43:cf:68:c3:21:22:4d:
                    e3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4C:34:DC:C4:3D:C1:A6:F7:AB:16:CD:9A:AD:3A:49:26:8C:E0:54
            X509v3 Authority Key Identifier:
                keyid:69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:29:ae:3c:34:67:a4:ae:4f:28:96:aa:60:3a:bc:f8:6f:3a:
         bf:b0:63:58:d7:bf:7f:7b:e3:33:73:74:cf:4c:7a:da:32:56:
         de:ad:36:00:c0:a7:fb:fa:f8:af:59:f1:bd:4f:3c:f1:23:31:
         72:67:33:7b:04:18:2b:81:68:27:93:e1:fc:e2:42:06:32:50:
         f5:9a:ba:b6:5f:ad:2d:aa:cd:94:fa:76:31:c1:2f:56:f3:cb:
         15:0f:7f:79:6e:c5:28:7b:30:33:1b:41:94:d3:9f:a9:4f:51:
         9d:2b:c3:b0:c5:e0:20:58:af:8a:5e:15:81:64:01:e4:d2:a0:
         ab:31:53:87:83:61:e1:f8:e7:4b:b8:5c:fd:40:42:27:a6:ef:
         1f:50:48:f2:23:9c:1e:16:9e:3e:99:8c:65:38:db:63:f6:c9:
         f0:e3:8d:0b:02:e8:15:98:b9:f3:dc:32:db:c4:eb:02:a9:bb:
         f4:e4:1f:32:d0:4c:2c:51:06:c0:de:f4:37:58:ff:8a:33:38:
         9b:b6:d8:54:03:f4:85:ba:c2:24:54:3b:02:44:f4:d4:ae:8e:
         cf:47:bf:fe:d2:81:23:dc:01:f6:ce:f2:45:98:2f:a8:77:8e:
         53:7a:da:54:07:6a:d8:44:e1:8e:0c:57:4f:83:7f:78:41:be:
         74:56:36:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:22:03 2026 by rpki-client