Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
File:                     0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft (raw, json)
Hash identifier:          wvQVc66SuxFw6FcPfFDeZuos8gjPs1AygNimTE75TMk=
Subject key identifier:   AB:B8:8A:5A:8E:C3:10:B4:F8:68:37:65:54:5F:B8:1A:B7:C0:CA:3E
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Certificate issuer:       /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial:       2A34B0E2154CEC3F89EDBA87B5D0E02B5FD46B06
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
Manifest number:          3D
Signing time:             Wed 17 Jun 2026 07:06:30 +0000
Manifest this update:     Wed 17 Jun 2026 07:01:30 +0000
Manifest next update:     Thu 18 Jun 2026 08:25:30 +0000
Files and hashes:         1: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: 2FalOm0wymIUOR6b6eMABH/GePb1gQsHB2PkapVhslQ=)
                          2: 3130332e31312e39392e302f32342d3234203d3e203535363533.roa (hash: tgMOLRKHLk6AeegSxwagm//NkkSHrRBSK1EEwqWmlG0=)
                          3: 3130332e31312e39362e302f32342d3234203d3e203535363533.roa (hash: Ou8COM1+4QBZTfW7oPb8lvGJwrPW2b9YrMH3Sw2uBUo=)
                          4: 3130332e31312e39372e302f32342d3234203d3e203535363533.roa (hash: QXGWZFsc9f71b86soW4vxADReeKw3WdzjpJwgfFCmCI=)
                          5: 3230322e35322e31322e302f32342d3234203d3e203535363533.roa (hash: gb1IwBwgBC3bVtPwvnx/RPu7Ia6Ag29mP7Tz4sfDgHE=)
                          6: 34332e3234392e3134322e302f32342d3234203d3e203535363533.roa (hash: nVmldivYscT9yIlUPfak+eYDC8xGQfjxxTwl5kvmf58=)
                          7: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 7kCoo2bMrWx+NgrVIZTs8BnZTFozYrI1Yx+Eu/FeGxM=)
                          8: 31342e3130322e3135332e302f32342d3234203d3e203535363532.roa (hash: 4TVT+M+1OynDiPmgdYeocC5p7/VKvqBlsqaUMV+uRAs=)
                          9: 34332e3234392e3134302e302f32342d3234203d3e203535363533.roa (hash: 2k2h/lLJh4y28GreNoFDXEw9j2lKUZ4eXzUUiII60sQ=)
                          10: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: UIaj9X3lfb9VOoNSMQt3FPXNkkUvi5Cnj1c6MU0v1/8=)
                          11: 0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl (hash: P5UWvKPR5Cx7vUazt3wzK9sJ8LcFkLBSS19JmjPONsw=)
                          12: 34332e3234392e3134312e302f32342d3234203d3e203535363533.roa (hash: Bc5YFcqICb+bh4tRwH4x3D73YQXCDozUg5+ESseoBXI=)
                          13: 3230322e35322e31352e302f32342d3234203d3e203535363533.roa (hash: VHZA3TuBf4nLKV2pTnmQZgiFCXveS7LsJ0nVeKIEvQQ=)
                          14: 34332e3234392e3134332e302f32342d3234203d3e203535363533.roa (hash: qdZ5s/RPKJd1zWpn0OA8oOkj/7C1tf+45M/HrbWmTwI=)
                          15: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: aTFM/g9W9unRb/uZnofVUS9SPuRIxxAlxUviQTXpEaI=)
                          16: 3230322e35322e31342e302f32342d3234203d3e203535363533.roa (hash: +X2AKDLUi7EEV0pZEa+LT88OPryzNndvmpim+oMxEjk=)
                          17: 3230322e35322e31332e302f32342d3234203d3e203535363533.roa (hash: RTunN5WvZPwzhuRDaOCGYBctUeKdomE1xa5xw2crzZk=)
                          18: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: M9ZVVTNiZw+8g7eKubBdE5bO++zVmlUills7R3bh+8E=)
                          19: 31342e3130322e3135342e302f32342d3234203d3e203535363533.roa (hash: 2xEncKZB7XKpCLMYg2xigci5uudnJs/KRQjGyEQoyfA=)
                          20: 31342e3130322e3135352e302f32342d3234203d3e203535363533.roa (hash: t0eDmBySGGi3M6vpcaHWuK77uuciFXZsi3Bv2CvN2vw=)
                          21: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: HPeBWQRE7Nzk6K93OWZYdv8ZiGkz5Xm/tDmbLAYTX/8=)
                          22: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: wL/pHkWZYlSpOpNVjgz7YgIvq4xTapnBHJvFGC824+g=)
                          23: 3130332e31312e39382e302f32342d3234203d3e203535363533.roa (hash: 1Ar9cC6jZkLzAdlFLEVr635I57ciOymkfzzDC1PNwsE=)
                          24: 31342e3130322e3135322e302f32342d3234203d3e203535363533.roa (hash: 7m1lsj+R46fwy5EhA0AVTVR6lA5VWMrVBvJWrnKZtRo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
                          rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:34:b0:e2:15:4c:ec:3f:89:ed:ba:87:b5:d0:e0:2b:5f:d4:6b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
        Validity
            Not Before: Jun 17 07:01:30 2026 GMT
            Not After : Jun 18 08:25:30 2026 GMT
        Subject: CN=ABB88A5A8EC310B4F8683765545FB81AB7C0CA3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:c9:64:1b:53:8a:92:a9:e7:0e:e6:b0:59:
                    8d:0b:ff:1a:0e:eb:5a:00:99:5b:35:45:43:35:65:
                    24:03:01:1a:57:46:d5:1a:16:ec:89:68:35:3c:85:
                    ca:0d:3a:e8:2a:30:e2:b7:dd:50:ad:7f:65:52:31:
                    74:ac:75:6b:05:34:ea:cd:62:b0:da:8b:22:26:39:
                    34:bc:e0:06:44:53:5a:4c:52:b4:ef:e5:06:af:a3:
                    2e:cb:09:f0:5a:49:99:09:c7:7b:a0:91:07:87:d6:
                    a7:62:5b:12:1f:fa:75:8a:d8:28:bf:76:8a:f8:32:
                    c8:58:c4:8b:4e:4e:ef:26:b3:59:ba:52:e0:9b:c4:
                    54:6f:22:3a:24:55:fd:84:e2:98:e3:fc:0d:b3:b3:
                    c6:f3:3f:f5:65:49:d6:ae:ad:16:fb:3d:aa:7d:5e:
                    f4:a9:ac:3c:72:e9:30:97:29:5a:47:05:72:46:58:
                    98:5b:a8:b5:5e:8d:9d:18:8e:d4:8a:b5:d8:0a:ed:
                    de:4e:c3:c7:a0:2e:40:ea:ef:72:9b:5c:fe:f1:ff:
                    05:72:2a:54:cc:40:9b:cc:3e:16:c7:c1:78:e9:42:
                    1b:2a:08:e6:ca:4e:71:23:72:a4:92:09:b9:38:c0:
                    88:07:8b:db:a1:94:cd:e6:80:e9:1c:9e:32:77:d9:
                    b2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B8:8A:5A:8E:C3:10:B4:F8:68:37:65:54:5F:B8:1A:B7:C0:CA:3E
            X509v3 Authority Key Identifier:
                keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d3:3b:9f:c3:03:13:b4:e2:8a:ce:72:c0:27:e0:af:e3:9e:
         8b:e6:4e:2c:7b:b3:07:a5:aa:04:a4:7c:65:fc:65:50:79:59:
         11:ec:1c:14:fd:a5:0b:4b:3d:a5:b0:86:53:8d:4d:98:2d:50:
         53:f6:34:4c:f2:e8:59:24:86:82:b2:57:f3:b0:7a:c0:5a:e2:
         ab:97:5e:f6:e9:6a:b5:50:df:87:db:d7:0d:2c:32:d5:46:11:
         bf:af:02:ed:81:2f:d3:43:73:fe:b6:22:d0:d1:02:a4:f7:ff:
         b9:a6:76:20:67:b9:4d:4d:95:a9:b8:d2:86:a5:91:78:82:46:
         d6:b7:12:6d:7d:bc:10:8e:82:d3:ab:3e:7a:c6:19:a2:1b:ed:
         7d:d7:41:18:0a:5e:5c:9c:48:2f:8c:b5:ab:39:d2:67:af:7a:
         c2:6e:e2:09:95:79:00:6d:f4:97:37:4e:ad:96:24:c2:bd:91:
         3e:a2:d3:98:ca:69:bf:9c:18:12:49:67:87:85:5b:d6:af:2f:
         36:cf:5c:16:cf:79:43:6a:6a:5d:20:31:f7:dd:d7:91:99:8d:
         c9:0b:ea:24:04:06:38:1e:a2:71:93:13:c6:6a:83:50:c9:34:
         97:f9:4d:47:de:0a:35:c3:ee:e4:29:ba:6e:e2:b3:63:2f:c9:
         1a:1c:d3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:28 2026 by rpki-client