Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft
File:                     99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft (raw, json)
Hash identifier:          c554OBiykwq/uwkGqVcZbheEWIkNaUmHfQF8iciYCWc=
Subject key identifier:   E1:B5:6A:40:06:2E:9A:1F:77:45:36:E1:99:CB:40:00:F5:1C:9B:79
Authority key identifier: 99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14
Certificate issuer:       /CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114
Certificate serial:       6C045EB524E3E8B275C5E77B9E930F22B08E807C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft
Manifest number:          3D
Signing time:             Wed 17 Jun 2026 01:24:31 +0000
Manifest this update:     Wed 17 Jun 2026 01:19:31 +0000
Manifest next update:     Thu 18 Jun 2026 04:31:31 +0000
Files and hashes:         1: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: 1WfqYJr02F29QOUCZ6xp1/2AhdQJ8yOTJYEJy36lRu4=)
                          2: 99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl (hash: hXPVW8iVljLuN4M+TYlfCdK43eJwiZAdSa/qLqq6vBo=)
                          3: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: tUZ9VWyUlsFczruGbwl8Yg390oqsEtKgB6XaTjzW6Po=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl
                          rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:04:5e:b5:24:e3:e8:b2:75:c5:e7:7b:9e:93:0f:22:b0:8e:80:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114
        Validity
            Not Before: Jun 17 01:19:31 2026 GMT
            Not After : Jun 18 04:31:31 2026 GMT
        Subject: CN=E1B56A40062E9A1F774536E199CB4000F51C9B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:c9:b8:83:6e:d7:89:01:c8:f2:a8:ad:c2:
                    68:cb:fe:dc:a6:18:2b:82:f5:4d:e9:82:15:a2:11:
                    85:d2:bd:68:71:39:6c:78:94:39:00:57:e4:d5:04:
                    46:54:a9:34:7b:09:e0:cb:e6:65:64:2d:97:8e:af:
                    cb:b1:28:8e:4e:7d:55:49:5f:8f:1f:c3:3d:ee:4d:
                    59:96:35:71:a3:89:34:48:16:1b:ff:34:73:ba:1b:
                    e3:4a:da:62:66:43:01:4a:70:98:1d:6f:60:f4:6a:
                    7e:e5:58:eb:96:51:52:2d:c6:eb:8a:22:03:d5:39:
                    74:21:e6:0e:3d:62:f8:e6:2b:5d:33:39:9b:9e:67:
                    4a:cc:db:03:14:7b:06:67:8e:68:bb:4e:c5:d9:9f:
                    10:ac:3c:ff:18:73:16:4a:5d:1e:d5:f5:ce:20:c8:
                    d3:5f:0c:05:3d:6f:a1:64:e9:15:86:8d:32:4b:6c:
                    52:df:44:ca:a5:ad:9d:70:af:30:c8:fe:7c:df:fb:
                    8b:ac:33:f3:1f:8b:54:0b:ac:57:1a:28:36:7e:b7:
                    97:a7:d1:80:b5:74:14:c4:53:e3:ea:df:93:84:b0:
                    07:0f:ea:89:93:be:2c:e4:14:ff:d4:c4:6c:4d:be:
                    96:fc:54:bd:d2:3d:a0:86:23:ca:b3:34:69:3e:42:
                    05:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B5:6A:40:06:2E:9A:1F:77:45:36:E1:99:CB:40:00:F5:1C:9B:79
            X509v3 Authority Key Identifier:
                keyid:99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d6:55:55:4d:40:aa:03:1c:78:87:f5:95:2e:d5:1a:cf:19:
         78:24:32:be:52:76:fd:9c:ad:8c:31:2a:83:e3:3b:d2:8e:1b:
         d4:b6:87:df:68:5c:04:a3:3a:51:39:ca:d2:b1:68:ef:19:ed:
         b6:ac:83:f4:53:42:dd:71:ae:30:3e:1d:a2:0a:eb:3b:39:c7:
         a7:c6:e2:0e:64:cb:ee:85:65:ae:53:6c:bd:cb:4d:d8:85:ce:
         50:3a:dd:18:a0:74:19:f3:ac:ec:5a:5f:0f:5c:83:c3:9d:fb:
         10:e4:4c:1e:2c:6c:a2:86:ee:dd:2b:f0:ce:5e:aa:42:c5:7f:
         32:2d:8c:d4:20:94:2c:95:32:f3:ae:74:50:fb:15:36:87:de:
         62:fd:eb:8d:f0:d6:8b:b5:bf:74:80:b7:7f:d5:f2:a9:61:56:
         db:2e:38:a5:12:7c:8f:b6:02:fc:5d:e3:01:d4:d7:95:5c:d2:
         a6:ed:8f:a5:f1:4f:4c:07:b3:99:87:77:30:7f:21:78:cb:6d:
         45:11:ae:06:0c:15:78:c5:bc:99:ee:64:7f:1d:e8:a5:47:e9:
         23:4b:2c:e2:3c:8f:6f:92:ef:4c:b4:c2:39:ae:43:94:64:e8:
         d2:30:7e:86:93:bd:43:f2:4d:c8:20:bd:f9:cf:c8:58:2e:7c:
         2d:52:be:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:31:44 2026 by rpki-client