Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
File:                     1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft (raw, json)
Hash identifier:          F/U/Kp7vIW21KFAGJUfp+sIOD+5+tgp62ye6XR+jVTU=
Subject key identifier:   FF:25:38:39:D7:6D:94:D0:AE:05:D2:25:10:98:E7:3E:FB:25:59:07
Authority key identifier: 1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A
Certificate issuer:       /CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
Certificate serial:       5E80EA69DBF93FCDBE61A71B80F6E61663210B5F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 00:59:06 +0000
Manifest this update:     Wed 17 Jun 2026 00:54:06 +0000
Manifest next update:     Thu 18 Jun 2026 01:22:06 +0000
Files and hashes:         1: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: /fa1hwZEt68IrXwKEonGaCZwd1oMYZDyXJq4KeJo86E=)
                          2: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: KWc9OTSiXvMZVJYcyeDQq+tc4s6Lq68tyd9neBf4i2s=)
                          3: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: a4IK1VqkQFifgbVqGFjspnePVTV/YkKjfKoaIwFfqZw=)
                          4: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: 3Pur9J/K8W30/vvGHGXc6KHgwQgQ4wEAxcFN1o16NNI=)
                          5: 1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl (hash: Xt6prJIA3ixQata/7Ifnr2BY1b0hbBvwnSdsiLVJ+4s=)
                          6: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: an5beHJBQCXe1O6nJramlD3hI7Qm5QXG3JLpnD/aNxM=)
                          7: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: a6L02/ltQd6+ySj9pYMUEWkvYU4L6ZYKU3OEQlZp5vg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl
                          rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 01:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:80:ea:69:db:f9:3f:cd:be:61:a7:1b:80:f6:e6:16:63:21:0b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
        Validity
            Not Before: Jun 17 00:54:06 2026 GMT
            Not After : Jun 18 01:22:06 2026 GMT
        Subject: CN=FF253839D76D94D0AE05D2251098E73EFB255907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:fb:ee:67:dc:c3:ac:37:e1:50:e5:64:87:
                    70:9d:0d:d1:a0:06:cb:01:6b:24:52:c7:bb:b0:a4:
                    aa:c8:91:8a:a4:69:96:8c:87:f9:f0:58:c3:71:6f:
                    bf:70:da:3d:30:2e:6e:31:a5:b3:69:bb:6b:ef:24:
                    e5:d7:6e:8a:f0:d6:91:c8:39:94:c4:bf:d6:bc:c7:
                    e0:9b:45:f8:f7:b0:08:fe:08:0d:83:20:a9:30:32:
                    f9:67:71:a7:62:3e:3d:a1:e6:b1:d9:74:93:41:b1:
                    f3:b9:1e:1b:57:ab:b8:1d:c4:31:ca:34:7d:98:64:
                    86:2b:e0:35:7f:c8:55:0a:0c:4a:ff:dc:b6:dc:b5:
                    94:ba:5e:f9:e3:d1:27:1f:54:84:77:af:c6:7e:4e:
                    b3:fa:65:e2:05:57:b8:4a:00:d9:e5:09:43:d2:eb:
                    31:bd:e4:13:ce:a0:75:14:f6:89:07:ab:31:50:a7:
                    cd:47:05:ef:df:f3:a2:bd:51:b0:ef:0b:7f:b8:c0:
                    18:0e:aa:bb:32:7c:f1:ae:b6:3a:35:a6:a9:3f:c4:
                    64:0a:88:f8:67:c2:3e:99:5c:70:ea:c2:e8:f2:3f:
                    d1:23:fc:8e:f6:2b:c4:62:b3:09:be:20:70:ef:0a:
                    36:71:bb:f7:61:f3:62:29:2b:53:32:8a:5e:ad:c4:
                    e5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:25:38:39:D7:6D:94:D0:AE:05:D2:25:10:98:E7:3E:FB:25:59:07
            X509v3 Authority Key Identifier:
                keyid:1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:15:31:10:c8:9f:e7:46:89:2d:1f:11:4f:3c:2f:d5:5c:5e:
         6e:09:4e:57:51:53:63:60:bf:89:4d:81:c3:18:87:f4:56:de:
         ec:e7:a9:74:01:84:bb:15:ab:c1:6c:6b:9b:9c:ee:4b:7f:6b:
         90:59:c9:1f:2b:ae:f3:ee:44:db:4c:6d:72:16:5c:57:7b:6f:
         84:a3:f5:f7:3e:fa:82:e3:d9:75:ff:66:85:fa:b4:ef:26:49:
         58:54:ea:38:74:61:5a:49:ff:88:68:b3:ce:fd:43:ea:74:f5:
         70:3e:29:61:06:db:d5:24:05:77:ab:37:1b:21:6a:a5:e4:1a:
         96:f6:48:bc:17:c2:a4:ce:c0:7f:ba:fd:1c:d0:a5:84:53:d9:
         52:65:e2:6f:d7:c9:22:a4:69:2f:07:20:e8:b5:f0:c7:ed:9d:
         19:1d:f8:6f:b2:f5:30:f3:68:3a:e5:4c:bd:2f:a4:94:89:68:
         1f:da:a7:78:c0:b6:fa:7b:28:59:14:8a:b9:3d:75:16:66:58:
         79:41:25:c9:01:4d:3d:86:95:27:eb:05:d2:43:4f:54:ab:44:
         fd:87:bd:52:1d:3b:30:8c:e4:73:34:9f:5f:e4:40:bd:45:21:
         d5:9a:ca:60:52:c1:93:e0:97:64:b2:d2:c9:f3:ae:66:7d:1e:
         35:f3:0e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:10 2026 by rpki-client