Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft
File:                     59A9AB370F753D82771987E2FD7CA19578E11D07.mft (raw, json)
Hash identifier:          abTVTC3rCycMZ8f6CYvIcqfxviKz0AbXIT6RzkEMkfI=
Subject key identifier:   B9:64:77:2D:70:6E:8B:E5:47:FD:FA:34:14:E4:87:B9:26:56:C4:D4
Authority key identifier: 59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07
Certificate issuer:       /CN=59A9AB370F753D82771987E2FD7CA19578E11D07
Certificate serial:       5E1C7E9A264AE3C8CB806BDAADCF8D34E8AFEA04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 12:49:52 +0000
Manifest this update:     Tue 16 Jun 2026 12:44:52 +0000
Manifest next update:     Wed 17 Jun 2026 15:53:52 +0000
Files and hashes:         1: 3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa (hash: fcfvoG+f+IeB/aOvvSuH4jigNm/P9oaHKcA8ozVTJ2c=)
                          2: 3130332e3134352e3134362e302f32342d3234203d3e20313430303038.roa (hash: 97CqSuEAmLm9b7GhTnzhH7E+h2iIk2MyDfPBWHarXus=)
                          3: 3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa (hash: UPB/qBUFP9GqScWdxOKoCFaWZdy0EEvs2yjoMI9jaZ0=)
                          4: 59A9AB370F753D82771987E2FD7CA19578E11D07.crl (hash: TPNldy+zLAQ+qIgOI239Q96gNohT/duuI7zIYRjLVE8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl
                          rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 15:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1c:7e:9a:26:4a:e3:c8:cb:80:6b:da:ad:cf:8d:34:e8:af:ea:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59A9AB370F753D82771987E2FD7CA19578E11D07
        Validity
            Not Before: Jun 16 12:44:52 2026 GMT
            Not After : Jun 17 15:53:52 2026 GMT
        Subject: CN=B964772D706E8BE547FDFA3414E487B92656C4D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5b:0c:df:fb:29:a9:21:2a:93:0f:ef:18:5f:
                    f4:f7:c9:56:77:4f:50:b8:48:17:26:5d:17:6c:1b:
                    e3:7e:e1:8e:c0:db:f4:aa:8b:17:f4:44:56:ee:8d:
                    53:78:44:99:5b:70:06:ba:d6:7c:89:76:a8:31:63:
                    84:29:d9:b2:33:f4:11:a4:07:60:cc:13:ec:7c:fa:
                    e6:1a:97:b7:c4:46:3c:ee:60:ca:6c:59:e7:4f:85:
                    77:80:90:33:22:c3:0a:1e:ca:03:2f:59:29:bb:96:
                    f3:56:98:a7:5f:e6:97:6c:09:61:5a:32:20:d8:b3:
                    39:92:34:ea:a7:82:3c:60:1e:93:a7:d8:8f:28:a1:
                    0e:21:18:71:93:10:14:7e:aa:c7:c3:1d:70:ca:af:
                    2d:78:7c:9e:39:ae:9f:6f:c2:3e:03:57:c3:24:ee:
                    56:a1:41:ba:db:30:50:a7:bb:32:f3:bf:a8:cb:8a:
                    87:6f:d8:d1:16:94:89:28:fd:1c:37:27:23:54:04:
                    63:b0:85:9e:a5:83:fe:0f:19:83:94:c6:8e:da:ab:
                    b1:a0:16:6e:f1:37:4b:ad:62:fc:2f:de:e7:b3:3d:
                    c4:da:8e:07:d0:18:09:da:0d:f8:8f:6e:d4:b5:fe:
                    d1:ff:fa:f5:21:f0:15:14:89:0e:1d:10:69:79:52:
                    04:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:64:77:2D:70:6E:8B:E5:47:FD:FA:34:14:E4:87:B9:26:56:C4:D4
            X509v3 Authority Key Identifier:
                keyid:59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3b:28:34:95:a3:81:17:3b:78:36:e9:f5:c3:97:db:41:19:
         63:ab:0e:de:fa:dd:9e:4e:63:ce:19:16:23:48:1e:ec:77:9f:
         4e:14:7d:b8:2b:46:fe:02:74:c6:b6:0a:59:3a:c5:ba:96:d0:
         39:ba:7b:92:57:c0:aa:a2:a6:3b:3e:70:78:ce:c5:07:8f:da:
         69:31:0e:e0:43:7a:f2:24:4e:7b:d3:87:00:c7:d2:bb:c6:06:
         8d:19:02:70:ff:f7:43:04:19:ec:02:d7:d9:7e:10:e8:81:c7:
         b2:de:fe:a9:48:3b:54:85:08:7a:64:61:df:28:ec:fd:fb:af:
         37:1d:db:fd:d6:a2:6d:45:3d:d5:a4:0f:5c:7e:76:45:e7:b3:
         a5:a2:98:42:92:b2:f3:7c:73:b2:2c:65:66:f8:5f:86:77:04:
         c4:35:ff:7a:b0:6e:1b:85:0e:46:a1:5a:5d:5a:25:40:e9:d9:
         c5:a3:66:29:c8:34:39:1c:f9:39:7a:1c:f8:46:67:0b:04:23:
         75:bd:4e:ca:12:b5:43:69:df:75:e5:37:7e:b6:8a:e5:65:25:
         2b:b9:e1:90:8c:42:ba:66:81:8f:fc:74:89:62:e7:20:f8:8c:
         a2:a0:d1:3b:ed:ba:8b:ad:70:0e:8e:95:f5:95:e9:06:15:09:
         af:01:ad:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:37 2026 by rpki-client