Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft
File:                     A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft (raw, json)
Hash identifier:          qXSIHs2FYgpX2j47YRoSX0snCPvZWIvvCCQMspP8Y7g=
Subject key identifier:   F7:99:82:48:3D:22:8C:CE:AF:77:FB:55:1F:A9:57:15:1E:CA:3D:61
Authority key identifier: A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77
Certificate issuer:       /CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977
Certificate serial:       03792638294F866D2662CD2AB894BC19377C5DA9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft
Manifest number:          3D
Signing time:             Wed 17 Jun 2026 05:29:34 +0000
Manifest this update:     Wed 17 Jun 2026 05:24:34 +0000
Manifest next update:     Thu 18 Jun 2026 09:24:34 +0000
Files and hashes:         1: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: TlXm5FUEfPUbwvDslESvInZ7QzJfvEoxUutevfTlhzM=)
                          2: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl (hash: 4qpgsCLZnrYIafs9yxhgpK0mpPBmhkTQck4doQN0aPc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl
                          rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 04:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:79:26:38:29:4f:86:6d:26:62:cd:2a:b8:94:bc:19:37:7c:5d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977
        Validity
            Not Before: Jun 17 05:24:34 2026 GMT
            Not After : Jun 18 09:24:34 2026 GMT
        Subject: CN=F79982483D228CCEAF77FB551FA957151ECA3D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:71:6e:53:18:18:84:1c:f0:6e:2b:a5:30:91:
                    27:0d:0e:02:b1:4e:47:6d:10:83:ec:b2:4c:aa:6b:
                    a4:15:a4:99:f0:64:b5:9f:8f:c1:f8:00:17:45:31:
                    0e:7b:5a:0b:41:ed:dd:9a:77:53:f2:25:96:02:56:
                    a3:f3:bf:52:21:bc:3e:ef:d0:f5:40:df:1d:59:ae:
                    56:53:10:e0:b0:21:8a:4f:77:0a:0b:10:bf:db:60:
                    b9:c4:37:03:7c:09:a0:ba:d8:19:c3:f2:d3:31:79:
                    b3:ce:37:70:d4:e4:78:77:a1:de:1f:e5:56:cd:fd:
                    d4:c4:3a:de:77:aa:65:e7:71:b5:1c:3d:61:e1:57:
                    58:43:e0:b2:a7:80:6e:00:c2:60:21:ec:f6:b0:03:
                    95:1b:b0:d6:e4:b5:22:7c:a5:ff:b7:0c:7f:7b:ba:
                    63:fb:ea:c3:96:3b:be:e5:e2:d8:14:0f:3b:fe:26:
                    37:58:40:88:b2:2f:93:90:f2:7b:3d:a0:8b:dd:14:
                    d5:26:65:b4:c8:74:9e:49:79:42:af:12:03:28:6f:
                    74:b9:23:3f:c9:bc:05:fc:de:58:98:24:69:24:77:
                    64:ae:ab:bf:ab:07:41:ed:1a:78:9c:df:01:f7:96:
                    c1:e4:d7:4d:96:72:61:68:31:2d:af:ee:d3:c3:00:
                    db:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:99:82:48:3D:22:8C:CE:AF:77:FB:55:1F:A9:57:15:1E:CA:3D:61
            X509v3 Authority Key Identifier:
                keyid:A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c6:4c:89:20:25:8d:79:c6:90:f5:5c:8e:28:2b:18:0f:32:
         0a:f6:5a:e8:e4:9f:73:6d:c3:5e:59:5a:00:0f:e5:80:17:23:
         ca:d5:db:90:3a:83:8b:9d:4d:36:c8:3a:6b:21:0e:b5:21:fd:
         72:21:02:f4:e1:4a:a9:c2:87:35:49:b5:58:97:8f:f9:f8:b5:
         57:0a:75:11:d9:5b:0b:93:6d:32:9e:b0:c5:89:27:f5:c4:e0:
         c7:6b:b9:99:aa:00:09:ce:be:87:39:a5:9a:d4:7a:20:d6:25:
         17:46:e1:42:3f:39:e4:5e:39:11:f2:3f:1a:76:a8:41:ba:99:
         40:84:40:c1:c8:ab:18:18:63:2a:25:72:38:25:bd:b3:3e:c2:
         eb:b2:6c:75:c3:61:dc:1d:61:a5:00:cf:6a:29:53:52:f4:ca:
         43:a1:f7:17:5d:68:8d:cc:25:8d:d4:14:c8:49:b6:5a:d7:c6:
         80:99:4e:1a:81:cc:09:7e:a4:03:71:5a:e7:c2:af:94:1c:ac:
         e5:d5:b9:59:2d:e3:93:4c:fd:b9:32:63:2a:9b:a8:93:2e:db:
         c5:18:73:9e:da:18:0a:35:63:59:b1:77:1f:3b:08:cc:92:5a:
         82:a5:ff:23:78:35:a7:1a:f1:ab:cb:60:da:0c:6f:d5:61:b1:
         43:07:fd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:03:09 2026 by rpki-client