Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
File:                     51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft (raw, json)
Hash identifier:          mAA/XYuvvbWdOdZ3QsdwY91HfuPFwK3R7qJJJWQPLIg=
Subject key identifier:   EB:FE:2A:CE:DC:3A:4B:D5:1D:07:92:B0:8C:E1:57:C9:85:2F:99:3A
Authority key identifier: 51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F
Certificate issuer:       /CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F
Certificate serial:       0DB3C2FBCE6D857915B05607D77B4341583B4700
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 17:20:06 +0000
Manifest this update:     Tue 16 Jun 2026 17:15:06 +0000
Manifest next update:     Wed 17 Jun 2026 18:50:06 +0000
Files and hashes:         1: 32372e3132312e38352e302f32342d3234203d3e203535363532.roa (hash: DKemgkGfRSsQDIb9t6Dxr8FxG7VecmyFhyl+wtA42dc=)
                          2: 32372e3132312e38302e302f32342d3234203d3e203535363532.roa (hash: z6jlGimYEU42w1AAv4WTGHl72QqTJEBb6/46niNS0MM=)
                          3: 32372e3132312e38332e302f32342d3234203d3e203535363532.roa (hash: 55Pgfc5CdrPo/JwquxlSz80gSkyEAvnuVuTU02sK+3E=)
                          4: 32372e3132312e38362e302f32342d3234203d3e203535363532.roa (hash: 6P6QYPdFuq7LsAFOi2tnnEJSwJf9ZQyZm5LNXr5+r6s=)
                          5: 32372e3132312e38322e302f32342d3234203d3e203535363532.roa (hash: vIEcjw77CIphQaDAYPHv49OItt3hihjyRmA9crPFzrg=)
                          6: 32372e3132312e38312e302f32342d3234203d3e203535363532.roa (hash: Ep8qTK0NDLlbE6SNKdL/U9iSghCg+fI8OoOZxYByFbw=)
                          7: 32372e3132312e38342e302f32342d3234203d3e203535363532.roa (hash: /sdcPpV2u273vAuDs0a3qzoz4mqv4YYBgqRWOUy8CPE=)
                          8: 51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl (hash: U8/2cgOJeYqEVJd7I6DErSarHII408p0xcyzWsJoj7Y=)
                          9: 32372e3132312e38372e302f32342d3234203d3e203535363532.roa (hash: clpAyiJg+CNdKPltuUkUa0iDMohvDb510aZlE3T5fdM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl
                          rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:50:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b3:c2:fb:ce:6d:85:79:15:b0:56:07:d7:7b:43:41:58:3b:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F
        Validity
            Not Before: Jun 16 17:15:06 2026 GMT
            Not After : Jun 17 18:50:06 2026 GMT
        Subject: CN=EBFE2ACEDC3A4BD51D0792B08CE157C9852F993A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ef:bc:e7:fb:14:01:45:d0:24:1e:54:f8:8a:
                    b8:74:ae:f4:28:2a:5d:39:b0:08:9e:3f:e8:ba:c8:
                    97:a1:47:e1:e1:53:83:6d:eb:80:2a:b9:96:f0:ac:
                    6d:4b:0d:c9:df:f2:e9:04:37:ff:60:94:3d:db:5a:
                    12:b3:2c:92:fb:7d:6a:02:86:d1:3f:12:c1:2e:68:
                    0f:71:d2:23:de:aa:8a:16:45:f4:5a:93:4f:0e:ce:
                    d5:05:b7:fb:d0:a9:4e:29:68:c7:b0:4d:ac:d5:55:
                    48:9e:dd:a2:99:d7:2b:1e:9c:f2:e4:19:2f:aa:40:
                    9f:16:77:99:97:68:8b:65:17:e5:f2:b4:a2:c3:39:
                    44:b3:23:05:c1:15:64:3e:63:eb:8a:ed:fd:e3:c9:
                    af:5a:3d:65:41:6a:90:a5:3b:42:a3:31:4f:90:4c:
                    33:9f:31:34:03:73:63:39:64:09:d5:b9:77:2b:5e:
                    6b:05:d6:0b:1c:56:51:2c:26:25:56:2a:a4:f4:e1:
                    c5:f7:de:08:bc:07:95:4d:61:bb:3f:2a:45:25:24:
                    ea:5e:bc:1b:e7:1a:95:ca:10:34:75:60:9d:df:71:
                    0a:f9:9f:d9:f1:fd:ac:64:b2:cf:e3:a7:b6:17:16:
                    c7:43:3a:62:fb:c7:52:6c:c8:7e:2c:ea:54:f0:47:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FE:2A:CE:DC:3A:4B:D5:1D:07:92:B0:8C:E1:57:C9:85:2F:99:3A
            X509v3 Authority Key Identifier:
                keyid:51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ff:ac:38:34:1f:f7:bc:43:de:1f:41:7c:19:ea:a2:92:ea:
         25:a2:19:3c:45:76:a9:b1:94:45:ef:99:80:c1:11:c0:e9:31:
         3d:2d:af:1d:08:70:e1:1c:95:e6:a4:68:76:06:56:da:2b:44:
         60:ad:81:40:f1:42:b3:41:b4:cc:2c:a0:bc:f0:75:40:9c:02:
         bb:34:d6:e1:07:8e:ae:9e:e2:19:95:3c:89:55:82:04:06:f2:
         16:de:01:36:b0:11:83:1d:db:de:98:63:ee:af:1b:be:1b:11:
         b2:78:6e:05:0b:15:9b:18:28:4e:0d:68:61:11:82:f0:d9:73:
         81:7a:34:0e:86:aa:38:b8:67:31:1d:f2:d9:0e:b2:72:d3:f2:
         78:07:b4:28:1c:8f:7e:b4:b8:13:de:28:25:68:d8:ee:6b:ff:
         d2:32:41:06:ab:58:20:cc:96:95:b5:fe:da:4e:a9:ba:2e:61:
         ca:82:42:84:16:b2:b8:f6:18:a3:fe:51:7b:54:fe:08:f9:86:
         a1:94:df:38:d2:d0:3a:46:f2:4a:75:72:6f:83:3d:04:03:50:
         8e:fd:56:ab:e1:40:3b:cf:8f:0e:b5:04:8b:08:80:e8:b6:20:
         82:f3:24:21:28:0b:cd:c9:5a:61:53:fd:b6:59:ad:fd:ce:82:
         9e:de:c1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:54 2026 by rpki-client