Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft
File:                     5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft (raw, json)
Hash identifier:          mxzVzhh09BE4qnQIFBqJIc3COdHbKrSXBi85kTWdNas=
Subject key identifier:   92:8B:02:C5:B2:2E:31:56:5C:C8:9D:CF:E3:B3:24:9F:5A:A7:22:75
Authority key identifier: 5D:77:8C:6B:5A:83:CF:E3:42:83:BD:94:95:BB:B4:8B:E3:D5:95:63
Certificate issuer:       /CN=5D778C6B5A83CFE34283BD9495BBB48BE3D59563
Certificate serial:       57ADCB00CB308F3438B0E210F305F411EDE79FBA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 19:22:46 +0000
Manifest this update:     Sat 13 Jun 2026 19:17:46 +0000
Manifest next update:     Sun 14 Jun 2026 22:01:46 +0000
Files and hashes:         1: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: M9GmOl7DSf3JgqEI4OyXiGmMeRs5OMlGvZJmwiVp3yA=)
                          2: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: WcflqBWiLgPAZ9Y0v7/46V6GV1t5xWnWDOoYXcwaOd8=)
                          3: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o74QhQczERNJ9zjSUZ37A/5NOrH2tv7P/NXYzzpKIyQ=)
                          4: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: KDqog2rfiubYaTHJcE3FAsBqz6lLLEZTtq7kD9KAXRw=)
                          5: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: pW9Xq+VRLYCTvIh/TcwaaDaFgakUuCARpznvzAbxTXo=)
                          6: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: BrA2AYWTFSxj+vqtiSjtdleZMLMTR+csvmqEcgKBW48=)
                          7: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: YZJGRKgbn++QjdW/BYBy5zi4Iey6oxaZnIjLCUOoVQY=)
                          8: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: FSc1aeAh2Rt+5JPB4WOEH2O9AvnjApvUD4AoU6qwI3k=)
                          9: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: xLjlTIflH6sc0X3Sbj2zzWpljnqqaMPM3eUOug3XrMk=)
                          10: 5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl (hash: OBsTZt6jyvLHGSJUmlL/ecm5hLDrzxGlIW9optLIvoA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl
                          rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ad:cb:00:cb:30:8f:34:38:b0:e2:10:f3:05:f4:11:ed:e7:9f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D778C6B5A83CFE34283BD9495BBB48BE3D59563
        Validity
            Not Before: Jun 13 19:17:46 2026 GMT
            Not After : Jun 14 22:01:46 2026 GMT
        Subject: CN=928B02C5B22E31565CC89DCFE3B3249F5AA72275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:34:59:5f:ca:bb:b1:47:32:9f:09:b3:18:4f:
                    cf:80:d5:c9:a9:8d:22:ca:67:b5:4a:29:5d:19:0f:
                    06:ca:69:b3:67:92:96:09:5a:98:c5:d8:d5:25:5f:
                    36:39:2a:5c:a7:cb:6e:5f:b8:0b:f2:a4:ce:44:1d:
                    59:f4:5a:63:19:0f:a7:00:36:21:53:2c:0d:9c:af:
                    79:7e:6f:1e:6e:91:25:37:0e:cd:79:6a:dc:a7:8a:
                    31:3f:f8:89:43:b5:f2:0e:26:70:45:4a:a2:b9:20:
                    45:33:c0:f4:46:75:7f:df:1b:90:ac:66:a2:03:d0:
                    df:a3:a2:a4:92:1a:da:f2:64:c0:9c:0f:36:93:97:
                    51:6e:f7:27:dc:78:9a:f5:23:9e:6a:7e:33:12:41:
                    0f:8f:75:ae:91:3f:18:4c:7a:77:e4:5e:b2:0c:c8:
                    cc:d0:80:69:27:a3:45:e2:6e:76:7f:fd:bd:43:4c:
                    f8:1c:ba:f1:17:12:ed:20:eb:68:56:c5:ce:37:9a:
                    e9:1e:06:4b:04:c6:a5:a6:59:0e:c0:81:bd:71:af:
                    ba:ce:37:7a:4e:fa:eb:76:b0:91:1e:c2:9e:57:ff:
                    47:d2:f5:70:ae:b5:67:2d:dc:55:86:bb:62:a2:2b:
                    0d:1d:a0:52:f9:50:89:ce:97:80:3a:16:14:f3:0f:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8B:02:C5:B2:2E:31:56:5C:C8:9D:CF:E3:B3:24:9F:5A:A7:22:75
            X509v3 Authority Key Identifier:
                keyid:5D:77:8C:6B:5A:83:CF:E3:42:83:BD:94:95:BB:B4:8B:E3:D5:95:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c8:ce:88:12:5f:1b:25:2d:5c:90:91:85:de:d8:01:3b:24:
         9f:2c:80:ff:8a:f1:a6:d8:7f:d0:9b:ca:bf:5e:a4:89:ba:5f:
         40:41:de:7b:ff:21:df:6d:91:11:af:a4:94:59:6d:b7:e0:dc:
         40:5c:e0:25:4f:98:de:3a:e6:bf:1f:32:a6:25:62:72:e7:5c:
         1a:44:d2:13:e7:26:b0:00:8a:25:4a:e3:df:99:22:ee:06:ec:
         07:74:fb:fa:1a:61:44:b9:a0:6d:30:df:b3:42:6e:4b:c0:d6:
         26:8f:e0:6d:b4:fb:ea:3d:f0:a4:6b:e9:67:ad:0f:ed:a5:7e:
         9d:90:a1:8c:ce:3b:fb:d9:29:ea:de:61:de:b1:a9:25:2e:fd:
         de:89:84:99:c5:1d:de:a7:36:9f:a8:f9:96:19:83:bb:85:4f:
         d4:9b:5b:a1:93:53:a0:37:ad:e4:15:57:9c:da:55:77:16:25:
         b2:bd:13:db:a4:68:93:33:7d:69:27:df:d9:90:93:30:50:b3:
         3a:66:27:07:40:40:a1:8c:de:6a:7a:d5:d7:29:71:05:85:73:
         a5:28:2f:53:6b:8c:1a:3f:e7:21:1c:fb:8e:a3:ac:3c:34:f3:
         3d:40:91:cf:72:f0:ed:fd:36:4f:7e:63:4a:bd:aa:c0:21:8d:
         df:41:41:fc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUV63LAMswjzQ4sOIQ8wX0Ee3nn7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ3NzhDNkI1QTgzQ0ZFMzQyODNCRDk0OTVCQkI0OEJF
M0Q1OTU2MzAeFw0yNjA2MTMxOTE3NDZaFw0yNjA2MTQyMjAxNDZaMDMxMTAvBgNV
BAMTKDkyOEIwMkM1QjIyRTMxNTY1Q0M4OURDRkUzQjMyNDlGNUFBNzIyNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8NFlfyruxRzKfCbMYT8+A1cmp
jSLKZ7VKKV0ZDwbKabNnkpYJWpjF2NUlXzY5Klyny25fuAvypM5EHVn0WmMZD6cA
NiFTLA2cr3l+bx5ukSU3Ds15atynijE/+IlDtfIOJnBFSqK5IEUzwPRGdX/fG5Cs
ZqID0N+joqSSGtryZMCcDzaTl1Fu9yfceJr1I55qfjMSQQ+Pda6RPxhMenfkXrIM
yMzQgGkno0XibnZ//b1DTPgcuvEXEu0g62hWxc43mukeBksExqWmWQ7Agb1xr7rO
N3pO+ut2sJEewp5X/0fS9XCutWct3FWGu2KiKw0doFL5UInOl4A6FhTzD8rBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUkosCxbIuMVZcyJ3P47Mkn1qnInUwHwYDVR0j
BBgwFoAUXXeMa1qDz+NCg72Ulbu0i+PVlWMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjYwNjcxOGYtZjRjNi00Nzc1LTg5NTctOTlkMmJkNjY2MzYzLzAvNUQ3NzhDNkI1
QTgzQ0ZFMzQyODNCRDk0OTVCQkI0OEJFM0Q1OTU2My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81RDc3OEM2QjVBODNDRkUzNDI4M0JEOTQ5NUJCQjQ4QkUzRDU5
NTYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjYwNjcxOGYtZjRjNi00Nzc1LTg5
NTctOTlkMmJkNjY2MzYzLzAvNUQ3NzhDNkI1QTgzQ0ZFMzQyODNCRDk0OTVCQkI0
OEJFM0Q1OTU2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACTIzogSXxslLVyQkYXe2AE7JJ8sgP+K8abY
f9Cbyr9epIm6X0BB3nv/Id9tkRGvpJRZbbfg3EBc4CVPmN465r8fMqYlYnLnXBpE
0hPnJrAAiiVK49+ZIu4G7Ad0+/oaYUS5oG0w37NCbkvA1iaP4G20++o98KRr6Wet
D+2lfp2QoYzOO/vZKereYd6xqSUu/d6JhJnFHd6nNp+o+ZYZg7uFT9SbW6GTU6A3
reQVV5zaVXcWJbK9E9ukaJMzfWkn39mQkzBQszpmJwdAQKGM3mp61dcpcQWFc6Uo
L1NrjBo/5yEc+46jrDw08z1Akc9y8O39Nk9+Y0q9qsAhjd9BQfw=
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:25:45 2026 by rpki-client