Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.mft
File:                     F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.mft (raw, json)
Hash identifier:          b7RE3VyBkPvphQyViTqXh/fOtOpPyhssA0OJdAMgc6M=
Subject key identifier:   6E:77:84:BF:FE:9B:8D:6C:49:B9:81:9D:11:3F:FF:5E:CF:90:28:81
Authority key identifier: F1:6B:E3:A9:B7:66:75:8F:C8:A8:BC:C6:C3:9C:03:0D:AC:AC:4B:05
Certificate issuer:       /CN=F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05
Certificate serial:       11EAAE83DDE99721E6CB12301E19253484BC3A64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 06:25:36 +0000
Manifest this update:     Wed 17 Jun 2026 06:20:36 +0000
Manifest next update:     Thu 18 Jun 2026 07:08:36 +0000
Files and hashes:         1: 3138322e3235352e302e302f32342d3234203d3e203436303439.roa (hash: 7bXVA/8iKzHW2goX8s5TN83Nnl+bwbqA5Mzdabq2gRs=)
                          2: 323030313a6466303a62353a3a2f34382d3438203d3e203436303439.roa (hash: iSXepSaji0Ngod6jslH8stHOdAzHpNjQb/ERYLB+XCg=)
                          3: 3138322e3235352e322e302f32342d3234203d3e203436303439.roa (hash: 0s5xd9MbczadFUl8oTbSMq42SIuihW/8vWukriq8a6Y=)
                          4: F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.crl (hash: XeX8kuEz8+BE23u1/FCt4H54+XWoEH/bOGQTSj20l2w=)
                          5: 3138322e3235352e312e302f32342d3234203d3e203436303439.roa (hash: 1tjKipqGfWvYkfnGMYECfs44JQSvHqwqfZ7oob2o/Tk=)
                          6: 3138322e3235352e372e302f32342d3234203d3e203436303439.roa (hash: qO64Q8UNUq+QHu+VrDJNRoztL1fzJemtam8ebw5yaOk=)
                          7: 3138322e3235352e352e302f32342d3234203d3e203436303439.roa (hash: 4iIC5dTSSOHG7WohTDarSFqaU/UIdRWZkfNrc2u6Td4=)
                          8: 3138322e3235352e342e302f32342d3234203d3e203436303439.roa (hash: bXPFzsNIFwl2sXE17WVZeShIHhG6xoVWHAa5bfjoQXU=)
                          9: 3138322e3235352e302e302f32322d3232203d3e203436303439.roa (hash: fzgf1QrAYO+Q/+T7U9QNA8O+kmp8Cz8Ay/r21tNo/s0=)
                          10: 3138322e3235352e332e302f32342d3234203d3e203436303439.roa (hash: O60jQ6cpm038TMH4xpuT5hKyHap9AncU2y4k9WTXvcE=)
                          11: 3138322e3235352e362e302f32342d3234203d3e203436303439.roa (hash: wkCrLAzIOFiqo3nrGvWo+81ok/jPKjY3CFZlglcyZZg=)
                          12: 3138322e3235352e342e302f32322d3232203d3e203436303439.roa (hash: eR+lhfvEfsCbkZyel3U1uF16yYqju330yZp1HKcIBbc=)
                          13: 3138322e3235352e302e302f32312d3231203d3e203436303439.roa (hash: 68JdGKM6ZwG4A/0Zkbk1apejyZHCrOC3INqucMNem4k=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.crl
                          rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ea:ae:83:dd:e9:97:21:e6:cb:12:30:1e:19:25:34:84:bc:3a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05
        Validity
            Not Before: Jun 17 06:20:36 2026 GMT
            Not After : Jun 18 07:08:36 2026 GMT
        Subject: CN=6E7784BFFE9B8D6C49B9819D113FFF5ECF902881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:4a:f7:ee:8c:c9:4f:86:5b:dc:42:fb:88:
                    79:75:5f:03:b6:b5:36:8b:ce:61:74:ce:63:96:70:
                    76:a1:22:b4:6a:ff:a1:80:04:d2:df:b4:3c:e0:f2:
                    25:5f:08:e8:41:de:bc:7b:61:bd:ce:d1:62:fd:a1:
                    2b:f5:b6:cc:de:21:b8:98:a4:b4:c5:64:51:df:0a:
                    6d:8d:cd:34:62:b6:48:f9:b0:48:50:6c:ca:7e:d1:
                    a2:e3:21:56:09:56:4e:f6:08:19:d0:0b:9c:b5:1a:
                    b2:b9:79:19:4a:87:67:ed:ab:5a:92:56:d9:9c:aa:
                    92:db:f9:73:d7:55:88:0d:ba:b4:72:46:9b:cd:06:
                    7e:fa:4b:d5:21:50:07:45:14:5b:f2:e8:d3:3f:67:
                    90:fd:84:60:54:1c:64:e4:71:b1:6a:e8:5e:af:fc:
                    f7:d0:55:63:43:6f:01:78:84:b3:34:e0:96:81:0a:
                    d8:2d:8d:10:04:a2:50:14:c6:20:47:fc:4c:0c:5e:
                    30:9a:ac:db:19:0b:e5:ab:4a:b1:65:65:51:39:4c:
                    29:47:84:47:f4:20:8c:60:dd:65:bb:32:49:67:e9:
                    ca:8b:2c:8a:f4:1b:ff:7f:2d:f3:af:2f:9c:cb:70:
                    8c:ff:b8:91:18:c8:52:37:17:9d:d3:31:b6:4e:7c:
                    59:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:77:84:BF:FE:9B:8D:6C:49:B9:81:9D:11:3F:FF:5E:CF:90:28:81
            X509v3 Authority Key Identifier:
                keyid:F1:6B:E3:A9:B7:66:75:8F:C8:A8:BC:C6:C3:9C:03:0D:AC:AC:4B:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a0:0b:f7:c6:18:27:1c:5c:85:3e:a7:1b:2d:af:00:f9:2f:
         a9:6a:25:d9:f8:e7:2e:ab:e6:a5:d4:55:08:62:be:c0:00:54:
         b3:2a:21:b7:11:24:03:5a:de:c4:90:79:62:db:14:71:58:e1:
         8b:b6:66:6b:b8:47:50:ac:31:21:31:3d:5d:9c:f0:d4:e8:6a:
         8e:7e:74:14:70:c8:41:f8:a1:5e:f4:da:8a:de:56:68:0a:78:
         0d:75:e2:b9:c1:fd:e8:96:b8:e1:5e:2e:01:3a:51:ad:21:fa:
         2e:2f:1b:89:1f:cd:71:82:e1:d1:98:fb:ba:18:0f:3b:f7:21:
         82:47:ee:60:9a:b7:55:7d:9a:13:27:e4:00:58:7a:41:7f:5f:
         06:12:cc:2c:c3:cf:15:88:7d:13:da:73:7f:01:93:f4:2b:db:
         c6:55:7f:00:05:ab:d0:38:bb:6d:4e:a6:ad:0e:9b:c1:db:03:
         d9:53:ff:2f:ae:49:dc:df:72:bb:5b:ba:83:7d:78:4f:56:7b:
         4e:4c:14:fe:bb:8b:85:b2:f6:de:8e:3d:6c:bb:3f:50:9f:82:
         a2:50:32:34:14:42:3d:6b:8f:01:c0:b5:ed:b3:5e:00:db:81:
         77:bc:9d:17:a6:5d:46:64:f8:fb:b8:e5:3d:8e:31:76:41:fd:
         b5:50:b7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:33:21 2026 by rpki-client