Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.mft
File:                     F0EB208891BC3271A7761F7969A4F4B152C4F0E5.mft (raw, json)
Hash identifier:          sCZUABaHB1iJOIutzcvirv9VXfCmVVfw8CC7EQeIM+E=
Subject key identifier:   64:FF:4B:7E:E4:E3:16:8D:B1:90:F4:E9:C8:50:F1:8F:3A:5A:E5:93
Authority key identifier: F0:EB:20:88:91:BC:32:71:A7:76:1F:79:69:A4:F4:B1:52:C4:F0:E5
Certificate issuer:       /CN=F0EB208891BC3271A7761F7969A4F4B152C4F0E5
Certificate serial:       296C594D91F88D8470EF546F642EC83793886BC8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 06:56:18 +0000
Manifest this update:     Wed 17 Jun 2026 06:51:18 +0000
Manifest next update:     Thu 18 Jun 2026 10:33:18 +0000
Files and hashes:         1: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (hash: PCd+knmr04J6Gzr/RkHIouax9jjuHK8/vfxjUSI6hdw=)
                          2: F0EB208891BC3271A7761F7969A4F4B152C4F0E5.crl (hash: 0JLiDn6gf1WoYck7gS5rXxuLqQCH64HVYNz/y7iXkFo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.crl
                          rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6c:59:4d:91:f8:8d:84:70:ef:54:6f:64:2e:c8:37:93:88:6b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0EB208891BC3271A7761F7969A4F4B152C4F0E5
        Validity
            Not Before: Jun 17 06:51:18 2026 GMT
            Not After : Jun 18 10:33:18 2026 GMT
        Subject: CN=64FF4B7EE4E3168DB190F4E9C850F18F3A5AE593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:de:92:1f:a1:40:4a:7f:b0:1f:94:d5:61:d8:
                    85:2b:b5:84:20:85:7e:f8:af:4c:be:2b:55:f4:4e:
                    cf:09:2b:f0:1d:3a:2b:96:5a:bd:18:f6:5c:92:4f:
                    a9:c9:de:79:b2:dc:87:20:ad:4f:88:81:b6:b4:72:
                    a1:ce:a6:24:c0:78:e1:72:23:8a:d5:01:55:08:d6:
                    21:4d:dd:07:a5:a7:48:8b:f1:f8:1a:cd:b1:60:3f:
                    a0:46:6b:48:40:e3:9b:67:f7:67:bb:70:ec:14:84:
                    b5:0f:be:fc:27:14:61:3d:75:f5:04:1a:8a:7a:77:
                    9f:2a:b6:38:06:dd:b5:fd:24:dd:03:31:ec:77:08:
                    a2:c4:f6:b0:8e:f7:80:f7:4b:02:f3:10:71:a0:27:
                    9d:95:a8:44:9d:8d:15:d3:80:c6:43:4d:0a:6f:ea:
                    97:e8:c0:d8:30:06:a2:e1:5b:72:bf:e9:ea:a9:cb:
                    be:bb:ec:1d:a5:91:e1:6c:35:af:de:65:cb:36:0d:
                    40:2d:f3:f1:d6:59:50:c2:2f:e4:64:83:c2:a3:a2:
                    bd:5a:2b:0d:99:55:2c:9e:c0:9b:a1:bf:41:8d:a2:
                    8c:41:aa:31:e4:90:42:25:6f:aa:44:50:51:79:26:
                    7a:fb:d3:6e:8a:49:aa:0f:37:37:a5:73:3b:0d:c5:
                    fb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FF:4B:7E:E4:E3:16:8D:B1:90:F4:E9:C8:50:F1:8F:3A:5A:E5:93
            X509v3 Authority Key Identifier:
                keyid:F0:EB:20:88:91:BC:32:71:A7:76:1F:79:69:A4:F4:B1:52:C4:F0:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1e:34:6a:e4:9b:62:ec:63:55:78:6c:d0:fb:26:0f:51:da:
         20:cd:80:f0:6a:d5:eb:6d:68:3b:27:f8:98:f4:90:bc:2f:c5:
         bd:5c:9f:a9:4e:16:09:21:bf:f7:f3:5b:c6:00:ea:b7:2a:d9:
         4e:fc:db:e5:9d:67:31:69:6b:9e:6b:08:74:c5:3f:53:a3:69:
         2b:09:6e:ad:67:a6:0f:89:d8:06:69:ca:92:9e:45:8e:a3:54:
         e5:84:c6:52:33:62:e0:6d:b7:8d:55:ec:a1:9d:5b:98:ab:34:
         75:bb:e7:e7:23:95:e9:f7:37:f0:05:7c:04:27:dc:2c:ce:34:
         ca:39:59:da:0f:b9:16:cd:61:81:97:96:5a:3d:09:df:89:dc:
         55:1a:15:74:62:0e:87:b0:5b:11:e2:25:49:52:99:07:72:0c:
         f9:6f:38:ee:27:d5:30:3b:2e:6b:1b:3f:df:a5:b0:de:3d:20:
         14:b2:52:34:c4:ee:61:b9:a2:de:5f:c8:91:27:a0:f2:86:23:
         3e:5b:dd:d8:b8:fb:cd:ac:d9:87:74:d9:f5:e4:cc:07:87:be:
         a5:0b:aa:f2:9a:f0:77:97:22:4f:7b:2c:57:40:86:3c:33:b3:
         9a:24:0b:cb:fb:4b:cb:f0:b2:c4:12:28:13:91:bb:8d:e5:08:
         30:dc:43:ce
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKWxZTZH4jYRw71RvZC7IN5OIa8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBFQjIwODg5MUJDMzI3MUE3NzYxRjc5NjlBNEY0QjE1
MkM0RjBFNTAeFw0yNjA2MTcwNjUxMThaFw0yNjA2MTgxMDMzMThaMDMxMTAvBgNV
BAMTKDY0RkY0QjdFRTRFMzE2OERCMTkwRjRFOUM4NTBGMThGM0E1QUU1OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3pIfoUBKf7AflNVh2IUrtYQg
hX74r0y+K1X0Ts8JK/AdOiuWWr0Y9lyST6nJ3nmy3IcgrU+Igba0cqHOpiTAeOFy
I4rVAVUI1iFN3Qelp0iL8fgazbFgP6BGa0hA45tn92e7cOwUhLUPvvwnFGE9dfUE
Gop6d58qtjgG3bX9JN0DMex3CKLE9rCO94D3SwLzEHGgJ52VqESdjRXTgMZDTQpv
6pfowNgwBqLhW3K/6eqpy7677B2lkeFsNa/eZcs2DUAt8/HWWVDCL+Rkg8Kjor1a
Kw2ZVSyewJuhv0GNooxBqjHkkEIlb6pEUFF5Jnr7026KSaoPNzelczsNxfvxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZP9LfuTjFo2xkPTpyFDxjzpa5ZMwHwYDVR0j
BBgwFoAU8OsgiJG8MnGndh95aaT0sVLE8OUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzNiOGNlYWItZmI1Yy00MGE5LWI4ODktMmQxODg5YTUwMDRiLzAvRjBFQjIwODg5
MUJDMzI3MUE3NzYxRjc5NjlBNEY0QjE1MkM0RjBFNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMEVCMjA4ODkxQkMzMjcxQTc3NjFGNzk2OUE0RjRCMTUyQzRG
MEU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNiOGNlYWItZmI1Yy00MGE5LWI4
ODktMmQxODg5YTUwMDRiLzAvRjBFQjIwODg5MUJDMzI3MUE3NzYxRjc5NjlBNEY0
QjE1MkM0RjBFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGgeNGrkm2LsY1V4bND7Jg9R2iDNgPBq1ett
aDsn+Jj0kLwvxb1cn6lOFgkhv/fzW8YA6rcq2U782+WdZzFpa55rCHTFP1OjaSsJ
bq1npg+J2AZpypKeRY6jVOWExlIzYuBtt41V7KGdW5irNHW75+cjlen3N/AFfAQn
3CzONMo5WdoPuRbNYYGXllo9Cd+J3FUaFXRiDoewWxHiJUlSmQdyDPlvOO4n1TA7
LmsbP9+lsN49IBSyUjTE7mG5ot5fyJEnoPKGIz5b3di4+82s2Yd02fXkzAeHvqUL
qvKa8HeXIk97LFdAhjwzs5okC8v7S8vwssQSKBORu43lCDDcQ84=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:47 2026 by rpki-client