Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft
File:                     C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft (raw, json)
Hash identifier:          gUZEYZXVeSLFd6K15ShtnukYCLfW95vfeeieXr3ex6A=
Subject key identifier:   57:07:23:4D:40:81:F8:36:81:1F:F5:A1:5E:E7:5B:73:6E:07:60:43
Authority key identifier: C9:E3:CF:72:C3:47:D2:8B:4B:43:0D:B7:37:BE:80:CB:01:72:B1:06
Certificate issuer:       /CN=C9E3CF72C347D28B4B430DB737BE80CB0172B106
Certificate serial:       5A8204F6D9B95D109F92A94BF73817AC2A5BA810
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 23:42:43 +0000
Manifest this update:     Tue 16 Jun 2026 23:37:43 +0000
Manifest next update:     Thu 18 Jun 2026 02:30:43 +0000
Files and hashes:         1: 323430353a6334303a3a2f33332d3333203d3e20313338383837.roa (hash: f40WyqcJUx5CaPP5/qa5LhPHXzQ7tY9s/CnE73Q55+U=)
                          2: 323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa (hash: G3HPmbrylByhe8P0W3+v8DhwstU+DtkeFukqMhA3cww=)
                          3: C9E3CF72C347D28B4B430DB737BE80CB0172B106.crl (hash: dXLR+wZssQ68o+28LRqxeyw4ri7RmCt0nvCTApUA2tI=)
                          4: 3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa (hash: /ia91hqzHCBrX/q+7Rzu1zW0X5ukwcV1dwBpHbDRCBI=)
                          5: 323430353a6334303a313030303a3a2f33362d3336203d3e20313338383837.roa (hash: itrmPgVHPMZm/0dP8jD7iKpiUgp5FDGwLgZlfdM0s6I=)
                          6: 3130332e3134312e32312e302f32342d3234203d3e20313338383837.roa (hash: 8JilOY3M6bmQigsj4ZkeI5e01YAdQG7yCEbyKOb2XWU=)
                          7: 323430353a6334303a363030303a3a2f33362d3336203d3e20313338383837.roa (hash: LdrXXHPkIXvu63segAbWDO8C0FmCk2NoI4rodpf99hs=)
                          8: 3130332e3134312e32302e302f32332d3233203d3e20313338383837.roa (hash: h0aJP09uXJR7/Jgpd677SbGBA5UD7o/TwIMtte0LAII=)
                          9: 323430353a6334303a3a2f33322d3332203d3e20313338383837.roa (hash: O6flVT/BjgsdY42z9V2dLz5E/e2Z/+dSUp+QehcFeRU=)
                          10: 323430353a6334303a343030303a3a2f33362d3336203d3e20313338383837.roa (hash: Uw2DZXWdsbdLxITCw50MdBG6P/SrnICAOddefwFUHEU=)
                          11: 323430353a6334303a3a2f33362d3336203d3e20313338383837.roa (hash: rp6/R1Wlz48G+rpBFS/l32yNHFJy7R2P6b7HlLCGNqQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.crl
                          rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 02:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:82:04:f6:d9:b9:5d:10:9f:92:a9:4b:f7:38:17:ac:2a:5b:a8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9E3CF72C347D28B4B430DB737BE80CB0172B106
        Validity
            Not Before: Jun 16 23:37:43 2026 GMT
            Not After : Jun 18 02:30:43 2026 GMT
        Subject: CN=5707234D4081F836811FF5A15EE75B736E076043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4f:9e:07:97:64:f0:22:11:8b:d4:60:86:1a:
                    4f:ea:87:76:e4:4a:82:52:64:e6:ab:66:36:94:21:
                    4f:40:de:0f:5f:6d:df:9c:1d:b2:87:f6:80:9b:40:
                    00:5a:03:6f:7b:d4:1d:47:90:57:02:1c:cc:a6:3a:
                    ed:f5:03:8b:ad:1a:0c:be:52:7e:9a:f9:84:62:3f:
                    29:09:c5:ea:14:2c:9c:1c:67:8a:cf:29:d4:cb:02:
                    ce:f3:eb:6b:db:c5:c5:19:a1:5c:37:92:be:09:5c:
                    76:22:bd:39:3b:94:1f:13:15:36:4d:49:41:57:d3:
                    12:9b:e7:80:88:10:b6:cd:9f:bf:a2:a7:6a:d8:06:
                    d1:49:75:e9:ef:86:d2:34:08:53:2c:b1:b0:da:26:
                    84:72:0c:41:06:68:0d:ad:9d:9d:c0:56:11:77:f0:
                    96:0d:bd:cc:9a:67:ff:54:90:05:37:bf:0a:4e:55:
                    e5:17:8b:7e:d8:e9:86:b4:c1:5d:0c:61:94:90:4c:
                    b1:94:32:d5:1a:db:78:5c:c1:37:81:6d:8b:dc:92:
                    72:77:c8:17:4b:f2:ac:d5:fb:bc:d6:14:7d:77:76:
                    9f:3b:cf:f2:90:a8:c7:2e:f3:05:90:76:9a:3f:06:
                    6d:8e:18:4a:41:b7:9e:68:1f:e0:91:54:73:2a:6a:
                    90:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:07:23:4D:40:81:F8:36:81:1F:F5:A1:5E:E7:5B:73:6E:07:60:43
            X509v3 Authority Key Identifier:
                keyid:C9:E3:CF:72:C3:47:D2:8B:4B:43:0D:B7:37:BE:80:CB:01:72:B1:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c7:a7:a6:b5:19:91:1f:a2:eb:7b:72:fd:83:66:d5:54:9f:
         7c:dc:0e:d9:d1:45:73:92:7c:18:02:da:3b:b9:50:f2:9a:ba:
         54:02:63:b8:97:9d:2b:f3:a6:26:03:92:eb:8e:a5:6e:a4:47:
         7a:ea:17:7e:e9:d3:5a:db:20:63:92:f5:d7:a3:51:8c:59:11:
         e6:03:2a:82:07:2b:21:b1:db:50:d4:19:5a:e1:97:34:a6:ed:
         49:30:13:02:86:02:30:a9:ce:7d:ed:ad:66:94:dd:c9:e7:fb:
         ac:5c:17:bf:a1:8e:75:f1:9b:3a:01:3f:9d:83:72:2c:dc:af:
         5a:36:74:e2:b1:09:2a:f3:a1:2c:41:13:12:ec:9f:db:f4:f1:
         9a:b6:79:be:32:a1:b3:40:6e:4e:c4:3b:05:58:79:be:74:6c:
         56:d8:f2:5b:2f:12:13:e6:ea:ce:95:e2:13:68:46:da:31:d1:
         75:fb:c1:bd:2f:bd:81:d1:11:0a:98:04:52:0d:ae:1e:b4:fa:
         df:a5:68:6c:14:fb:fc:36:59:9c:33:40:56:f9:c7:c8:b2:b9:
         45:54:c6:3f:a2:e7:33:d5:bb:01:2d:0d:ab:c8:98:5a:31:15:
         71:95:a3:92:09:31:93:85:0c:1d:35:5c:70:c4:88:e2:8e:84:
         1a:0b:2b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:24 2026 by rpki-client