Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft
File:                     5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft (raw, json)
Hash identifier:          wDQMPPtvDxgG2OIeDhQE4BY1pMc525NRPVa+F69Vo20=
Subject key identifier:   A2:D4:AD:7D:51:61:8E:9F:25:21:44:44:99:27:C1:76:29:6E:2F:A6
Authority key identifier: 5F:13:D6:48:5B:05:8C:0C:1D:31:D7:0E:67:C5:C2:C5:B2:76:74:73
Certificate issuer:       /CN=5F13D6485B058C0C1D31D70E67C5C2C5B2767473
Certificate serial:       49852BD2DAC118195BEC2D7BE2375C2861F4C4CA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft
Manifest number:          3F
Signing time:             Wed 17 Jun 2026 10:05:13 +0000
Manifest this update:     Wed 17 Jun 2026 10:00:13 +0000
Manifest next update:     Thu 18 Jun 2026 13:08:13 +0000
Files and hashes:         1: 3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa (hash: x30oT/Lrnap20G4fAn+tMYY1/fn7+IpyTEVsCdXHJyU=)
                          2: 3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa (hash: qiIo+SN3MC7vwCLrsPjubqqbgVImtRMedDlPEjqNz+c=)
                          3: 323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa (hash: KKf4Jl2OsQd3MJnMUlr/HfdddutYB5E1WPKkn8EgV+Y=)
                          4: 5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl (hash: WEgK1/jmjeeVWnW1V97bbKChDFjRh1V4VycevepTQ1s=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl
                          rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:85:2b:d2:da:c1:18:19:5b:ec:2d:7b:e2:37:5c:28:61:f4:c4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F13D6485B058C0C1D31D70E67C5C2C5B2767473
        Validity
            Not Before: Jun 17 10:00:13 2026 GMT
            Not After : Jun 18 13:08:13 2026 GMT
        Subject: CN=A2D4AD7D51618E9F252144449927C176296E2FA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9a:87:bb:e6:69:d7:c8:66:a8:e1:85:6d:12:
                    63:65:34:0e:0b:e1:1f:05:16:9a:88:2d:e9:1a:af:
                    9d:ab:8b:85:8a:9a:1f:47:be:07:10:48:6a:93:e3:
                    f0:b2:79:0e:26:22:c0:9c:2f:ef:80:63:0c:5e:bd:
                    fe:c8:66:3b:53:8b:f8:70:d1:23:cb:c3:61:38:81:
                    5b:57:38:31:b5:4b:2a:8d:e5:43:bc:c1:95:b0:62:
                    c7:2a:66:36:50:d2:93:30:c3:b2:49:18:03:99:4b:
                    47:5f:3a:f0:0c:04:0c:5a:23:d2:3c:e9:36:8d:eb:
                    30:f8:f1:2a:9f:56:5b:ae:ea:6a:42:a9:ce:6a:83:
                    f7:d3:01:30:13:a7:df:8d:28:95:70:d7:af:79:88:
                    06:14:86:81:8e:60:23:a4:d9:e9:c9:f6:32:9a:2a:
                    39:74:c8:42:d5:af:26:5b:21:65:73:eb:f7:4b:7a:
                    a9:27:b3:cc:35:1c:4d:6f:ef:62:fd:46:e8:12:66:
                    4f:7d:49:8b:7f:8a:9b:5e:69:c1:36:05:8a:5e:11:
                    3c:0d:06:58:f6:86:74:cd:9d:b8:e4:5a:df:ee:a2:
                    ab:3f:cd:ef:e7:66:bb:f1:a5:9a:52:f1:65:e7:8d:
                    c4:c7:ba:fe:b1:16:fd:1d:75:84:9f:72:f2:3e:72:
                    74:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D4:AD:7D:51:61:8E:9F:25:21:44:44:99:27:C1:76:29:6E:2F:A6
            X509v3 Authority Key Identifier:
                keyid:5F:13:D6:48:5B:05:8C:0C:1D:31:D7:0E:67:C5:C2:C5:B2:76:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f2:a9:ba:88:86:66:b7:60:9d:62:28:80:84:5b:65:20:57:
         09:07:f7:5e:37:dc:66:c5:c7:a7:31:4a:ca:2e:cb:06:e2:2c:
         1a:05:22:9f:ab:3d:77:b7:06:72:dc:93:7d:e0:e0:60:36:54:
         a7:c5:39:9c:dc:bc:d7:ed:b5:e4:66:b5:47:08:37:1f:de:f5:
         27:3c:59:30:c4:a4:cb:fd:03:39:96:b4:e6:8f:4d:31:21:70:
         b3:4d:43:aa:b3:84:b3:5d:11:3e:05:8e:97:37:af:fe:d0:4d:
         a2:93:75:07:cb:91:e4:7b:36:3b:5f:40:fa:91:2a:22:32:b3:
         a5:08:63:96:32:cc:d6:d4:66:10:3c:c0:1c:30:a7:f0:ee:c4:
         bc:04:4d:56:3f:ac:74:49:b5:c3:4f:49:92:60:b1:fe:df:2f:
         b3:26:1e:43:6c:a3:ff:bd:8d:20:6b:0f:2a:0e:37:be:bb:e7:
         60:fe:34:a5:01:24:75:2f:fd:ad:dd:dc:0c:41:77:b1:6e:10:
         92:3f:94:6e:62:3c:81:20:b9:4b:5e:d1:69:ef:7e:61:1e:7e:
         24:91:a6:62:b8:77:2c:9d:35:6c:f3:db:c1:79:2e:fe:88:91:
         99:b9:96:ca:a0:d8:6b:57:ce:84:89:15:fd:d1:cc:ec:83:7a:
         64:e8:d4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:42:39 2026 by rpki-client