Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft
File:                     1FF488AB707220858C10BA99E5944DE409195015.mft (raw, json)
Hash identifier:          yqVSm0ho8JZd/7n43GZBGEmWRw47Sea+xGCgz/Fouvc=
Subject key identifier:   08:C1:54:23:73:E3:54:AC:34:80:C1:3C:C3:80:5C:0C:18:A4:9F:68
Authority key identifier: 1F:F4:88:AB:70:72:20:85:8C:10:BA:99:E5:94:4D:E4:09:19:50:15
Certificate issuer:       /CN=1FF488AB707220858C10BA99E5944DE409195015
Certificate serial:       7376E1C08A3FB9964C302E60027D851FDBE25591
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 04:48:46 +0000
Manifest this update:     Wed 17 Jun 2026 04:43:46 +0000
Manifest next update:     Thu 18 Jun 2026 07:58:46 +0000
Files and hashes:         1: 3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa (hash: 6EwDqg7LpLZJUkIylUyUl3veH/xN6XvmcMqV9SdWGwQ=)
                          2: 1FF488AB707220858C10BA99E5944DE409195015.crl (hash: NmpvmTnC6eWAVI1aROaIiRxEeqOnLB/ruFrP8yJ2CKo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.crl
                          rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:76:e1:c0:8a:3f:b9:96:4c:30:2e:60:02:7d:85:1f:db:e2:55:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF488AB707220858C10BA99E5944DE409195015
        Validity
            Not Before: Jun 17 04:43:46 2026 GMT
            Not After : Jun 18 07:58:46 2026 GMT
        Subject: CN=08C1542373E354AC3480C13CC3805C0C18A49F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a0:9f:77:2b:3e:79:5a:3d:ca:22:db:28:3a:
                    89:db:cb:89:bc:b6:44:e0:4f:f7:98:45:ab:19:71:
                    26:d1:ad:4f:b6:29:c5:25:07:88:a6:b8:ce:cb:a2:
                    3c:f2:a6:cf:d1:65:cd:c2:23:10:e4:f6:43:23:82:
                    a6:a4:4d:2f:29:c2:eb:49:d2:65:a7:08:78:84:af:
                    ba:91:78:a9:f5:3f:4f:51:9e:86:61:e1:90:ac:0b:
                    30:4a:d3:53:ac:a4:08:f1:9c:5b:b3:bf:3d:db:cf:
                    cc:a3:8c:5c:47:f6:1a:6d:da:ec:4f:26:d8:54:ee:
                    c1:4e:1d:e9:57:05:c2:b4:7d:e1:af:3b:0e:8c:f1:
                    4b:1f:8f:56:2f:97:0e:f0:84:2c:8b:d2:df:8b:23:
                    9f:c8:62:95:3b:0a:37:16:44:ac:61:58:27:4a:4b:
                    0d:a1:32:71:f9:b0:84:bb:d6:ec:d8:52:d1:21:e1:
                    bb:8d:0a:92:88:19:2d:b1:ef:ae:b4:00:8f:bf:7f:
                    be:2d:a6:25:38:9c:b7:8b:48:eb:d0:c8:b6:12:f5:
                    7b:ec:ac:8b:ad:7f:36:ea:11:13:fb:e0:50:22:3e:
                    b7:18:e5:a0:d9:71:ca:fe:3a:bf:8d:1e:f6:1c:a3:
                    a2:2b:5f:4d:f4:32:dc:51:cc:39:74:93:a3:2e:c9:
                    f9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C1:54:23:73:E3:54:AC:34:80:C1:3C:C3:80:5C:0C:18:A4:9F:68
            X509v3 Authority Key Identifier:
                keyid:1F:F4:88:AB:70:72:20:85:8C:10:BA:99:E5:94:4D:E4:09:19:50:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:7d:20:7a:c6:84:93:56:8f:58:39:5e:d8:2f:33:9d:11:ce:
         87:e5:47:b5:30:a1:f3:be:c7:84:3e:d0:49:df:c5:9c:83:7e:
         29:59:ec:9e:67:03:a1:b4:51:9d:85:64:37:b4:7d:b0:f1:93:
         27:b5:b4:0a:43:4f:66:0e:ec:35:ba:4c:f4:cb:07:b6:8f:28:
         00:7e:6e:ca:66:06:27:fe:67:f1:41:4b:cf:63:d9:6f:36:26:
         a6:84:f8:e6:f1:d9:19:29:fd:92:15:69:11:59:00:c8:9c:e9:
         04:6f:3c:6c:30:6c:27:50:a5:2a:3a:11:43:38:41:60:ce:79:
         6f:33:f3:6a:4f:5e:bc:7e:ed:06:cd:ba:26:ce:5c:c0:cd:40:
         71:ef:8c:a7:4e:77:32:d9:4e:5e:25:eb:6e:fc:ef:f4:52:0f:
         9f:5b:be:bc:d8:da:97:28:2a:36:b4:68:01:fd:28:70:3d:62:
         ca:be:58:fd:22:d0:c9:f9:ed:2f:51:ac:d4:36:af:3c:e2:e0:
         85:a7:e3:96:83:09:98:62:cb:8a:9c:67:6e:9d:f9:9f:3e:6e:
         0c:b7:b3:6a:01:65:45:02:ee:2a:38:94:8f:08:fa:c3:01:a4:
         7e:63:4c:d6:1c:06:47:06:94:04:3a:a3:56:e1:12:45:3c:64:
         ba:16:49:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:43:53 2026 by rpki-client