Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft
File:                     530B657BC2C884CC14953B48E6700F4395D4AE66.mft (raw, json)
Hash identifier:          vD8bd5IewefuftyZrTpCOeJCiHB7HC4c14vBCJvE3XM=
Subject key identifier:   CE:D8:75:92:F6:31:53:CE:E1:3F:7B:3D:4D:39:D8:66:0B:3F:29:99
Authority key identifier: 53:0B:65:7B:C2:C8:84:CC:14:95:3B:48:E6:70:0F:43:95:D4:AE:66
Certificate issuer:       /CN=530B657BC2C884CC14953B48E6700F4395D4AE66
Certificate serial:       5021857D2A8EE4FD044524EA74D61A1EBD2C86C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 17:35:24 +0000
Manifest this update:     Tue 16 Jun 2026 17:30:24 +0000
Manifest next update:     Wed 17 Jun 2026 18:05:24 +0000
Files and hashes:         1: 3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa (hash: hHEDiD3x1jCZU7rbFxON3QBOnaHax4YzsCxjk1ivhKM=)
                          2: 530B657BC2C884CC14953B48E6700F4395D4AE66.crl (hash: /Ah34SvLFNEzon6wESlv1qX1hneSgGD/e8SXLPXHlkg=)
                          3: 3130332e39312e3134382e302f32342d3234203d3e20313530393139.roa (hash: twC7JvDoInB/4rtJFFg+lB4BVq30Kkq/oNt5ibEPmaY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.crl
                          rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:21:85:7d:2a:8e:e4:fd:04:45:24:ea:74:d6:1a:1e:bd:2c:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530B657BC2C884CC14953B48E6700F4395D4AE66
        Validity
            Not Before: Jun 16 17:30:24 2026 GMT
            Not After : Jun 17 18:05:24 2026 GMT
        Subject: CN=CED87592F63153CEE13F7B3D4D39D8660B3F2999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f8:2a:1c:79:ed:52:91:d5:12:95:cf:68:fc:
                    aa:9e:d1:87:c1:27:92:ce:15:f5:4d:41:f4:6e:be:
                    a9:71:1b:ca:52:64:b1:0f:62:a7:1a:1f:db:78:bc:
                    2e:bf:6f:49:3c:2c:11:6e:96:4b:4f:d9:dd:a1:de:
                    71:69:88:d8:6d:32:8b:08:b6:4c:89:9e:9c:b5:af:
                    0b:03:6d:c6:75:2c:6a:2f:cf:0b:ff:1a:10:5a:ee:
                    bd:c6:ba:36:63:32:6f:13:20:89:47:a5:54:b6:04:
                    07:67:66:ef:68:78:4a:bb:5a:f0:69:a9:ee:98:6e:
                    be:f1:04:5a:dd:78:9b:96:cf:5d:13:47:14:cc:28:
                    c9:59:e5:41:16:cc:6c:60:65:85:5c:d2:54:14:10:
                    9a:3b:7b:77:1e:01:4f:e9:87:3d:63:f3:04:29:95:
                    59:7f:e7:51:05:33:2d:ce:85:4b:a7:8a:6e:4c:7e:
                    90:74:cd:ef:5d:56:f7:70:a9:7d:76:a9:11:38:ae:
                    4a:c3:ae:fd:9f:3f:8b:f1:2a:10:e2:64:b2:55:38:
                    10:c5:32:42:1d:49:8d:bf:ae:2a:d2:aa:ea:50:75:
                    04:97:59:90:92:b1:90:34:21:88:de:6b:12:63:a3:
                    8d:63:74:f5:3c:b2:6a:85:54:f7:8a:b3:51:c7:e7:
                    e9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D8:75:92:F6:31:53:CE:E1:3F:7B:3D:4D:39:D8:66:0B:3F:29:99
            X509v3 Authority Key Identifier:
                keyid:53:0B:65:7B:C2:C8:84:CC:14:95:3B:48:E6:70:0F:43:95:D4:AE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:aa:8e:97:2c:3d:25:5f:17:1a:55:b8:39:4c:c7:87:8b:37:
         57:c4:08:aa:47:45:a0:36:8d:d6:ee:b7:d8:64:83:d1:db:3a:
         91:65:94:bb:b3:6e:54:2f:94:a8:df:1a:5f:dc:b3:d4:73:4e:
         19:7d:88:15:ae:2e:67:2b:4c:f5:fb:99:44:d9:7f:29:0a:e3:
         20:01:cf:42:b9:10:91:c5:05:36:8f:9a:5e:3b:3f:34:90:d0:
         5b:0b:2b:31:69:b8:79:15:2b:5d:d6:b1:f1:74:cf:e6:ca:c3:
         f2:32:0b:32:39:13:5d:2c:e4:c6:aa:4f:67:43:6b:74:3d:b7:
         3c:99:6d:cc:61:00:0c:ae:9e:17:9b:98:e3:d6:47:6e:38:4c:
         f8:24:8f:08:e5:ad:d6:db:62:30:88:a9:f4:0f:cb:16:74:a5:
         08:f5:18:36:db:d0:ab:13:e0:4a:90:9c:70:5c:c4:66:74:dc:
         74:e2:9b:ef:f8:1d:59:40:27:12:cd:a0:34:03:fa:4f:2d:d8:
         85:54:af:c7:57:6c:ed:ba:87:6f:b1:7a:bd:8c:99:82:6e:0e:
         f1:44:c4:03:82:0d:27:ad:1a:af:dd:05:01:e3:b9:12:ac:86:
         a4:fc:2d:41:5f:41:c9:20:d7:15:c0:e4:a1:ce:12:b1:b7:b1:
         d2:95:82:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:31:42 2026 by rpki-client