Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft
File:                     950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft (raw, json)
Hash identifier:          +W548emWz3d/MHuFevwEeUAQctdZDazPp66OO0xo3vI=
Subject key identifier:   FD:0B:8A:72:BA:1A:2D:19:60:23:C3:79:DB:66:41:DC:6F:21:48:E8
Authority key identifier: 95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51
Certificate issuer:       /CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751
Certificate serial:       2B85A7B6BB29437C4831482A0FA3C484C436B18E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft
Manifest number:          3D
Signing time:             Wed 17 Jun 2026 00:59:12 +0000
Manifest this update:     Wed 17 Jun 2026 00:54:12 +0000
Manifest next update:     Thu 18 Jun 2026 03:39:12 +0000
Files and hashes:         1: 3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (hash: Ko0biNHo/OilJd2E0SwGMCh23IyoKfHyT2KDez8VfH4=)
                          2: 950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl (hash: qMkXvf2FDnXirC5WRRbG3+R+6JgywtE+tL6L+xtZnkM=)
                          3: 3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (hash: 2Og4FIysb2wd35eqOCjNVfXf+ZPGg3kEvtQOXJnk+xE=)
                          4: 3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa (hash: viFyM1HFUzcMqtq2FKm6xB7dBBL2CbC6fte+ULEjCo4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl
                          rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:85:a7:b6:bb:29:43:7c:48:31:48:2a:0f:a3:c4:84:c4:36:b1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751
        Validity
            Not Before: Jun 17 00:54:12 2026 GMT
            Not After : Jun 18 03:39:12 2026 GMT
        Subject: CN=FD0B8A72BA1A2D196023C379DB6641DC6F2148E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0b:bd:da:6b:e2:82:0e:dc:5b:44:c1:fc:e6:
                    f9:73:bf:72:4c:ed:06:f4:b5:f4:4a:ce:48:3f:ed:
                    79:c0:9e:ed:a6:35:63:09:97:8e:82:18:c5:2c:c5:
                    4e:97:50:c4:97:1b:19:46:4a:35:c3:1f:62:7e:31:
                    ab:7b:58:7d:85:2c:ca:49:55:6f:05:60:75:d5:0c:
                    68:5c:95:64:e2:ee:b1:a6:2b:06:74:05:06:7d:cf:
                    4a:dd:78:42:c9:4a:46:b5:3b:48:ae:1e:2e:6f:ee:
                    39:32:0d:7c:dc:d7:bc:48:61:8a:52:38:49:2f:4f:
                    c3:37:05:7a:c8:cb:6d:d7:4a:f0:86:11:bf:9a:b4:
                    8d:14:78:8e:8f:60:73:9f:97:ac:c7:7b:74:50:2e:
                    45:9f:42:00:e7:1e:24:4a:13:f4:a5:9f:4c:be:84:
                    af:d9:d5:e4:84:f2:8e:a2:1f:db:1e:6b:bd:ef:ca:
                    d6:69:55:87:34:52:09:da:de:f2:e5:8f:3f:80:21:
                    05:c6:bc:62:69:a6:10:7b:a2:be:ec:ea:3b:7e:a5:
                    b0:53:43:07:6c:95:91:0d:01:ae:e3:28:a3:ef:24:
                    de:26:c8:8c:58:3d:d6:f5:0f:16:6f:09:8e:f6:ac:
                    75:3d:7f:ea:ec:80:3d:f2:21:41:4e:81:48:5e:02:
                    b4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0B:8A:72:BA:1A:2D:19:60:23:C3:79:DB:66:41:DC:6F:21:48:E8
            X509v3 Authority Key Identifier:
                keyid:95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:5e:ea:9a:71:c7:7a:13:96:85:67:5a:34:d9:38:ab:60:af:
         7e:90:25:dc:c5:b5:88:e8:ea:cd:80:24:ae:4e:07:6c:d4:1a:
         af:1a:2a:96:f8:c4:ed:8e:fe:5c:6b:ad:12:14:43:e1:b3:3e:
         cf:1f:2f:6f:00:6d:58:49:3a:5d:08:0e:ed:38:72:b6:f2:b9:
         d2:eb:57:9d:20:d5:ef:b9:4b:e8:f4:8f:49:ce:6f:b4:ed:e0:
         15:f3:2a:e1:52:a2:07:f7:ed:77:40:7c:5d:f7:10:8c:3b:1f:
         89:ad:7d:f6:f0:cf:a3:61:8d:5e:a4:8a:f0:13:1b:d6:1d:68:
         71:f4:04:9b:bf:ea:c2:d0:e7:51:33:fc:eb:6b:1a:1d:ea:0c:
         0d:e4:c8:78:54:44:16:47:b7:e8:be:55:b1:32:43:95:82:67:
         15:46:51:2e:fa:5d:95:fe:1b:de:f7:75:4b:b3:8d:08:dd:0f:
         09:49:e0:04:41:d0:f7:18:e7:8a:e4:b0:31:fa:63:93:da:77:
         6c:07:6a:2c:39:05:a4:93:52:c0:5a:33:86:55:fa:6e:a8:90:
         6e:8e:cd:a2:84:67:aa:73:24:86:ac:dd:8a:40:fc:8b:eb:2b:
         09:dc:0a:f0:7c:b9:77:11:2a:64:6c:30:99:c4:a9:c4:e8:15:
         26:18:31:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:41 2026 by rpki-client