Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft
File:                     354106638019F94606F5ABA3A90FEB87A8A7FA76.mft (raw, json)
Hash identifier:          QHKQpCEgBBW334u/QYxFrXwy2zEvqcGtrg5FI7DJHds=
Subject key identifier:   ED:2B:46:18:92:20:F5:E1:2B:44:37:FB:3C:02:0A:67:4F:C1:57:D5
Authority key identifier: 35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76
Certificate issuer:       /CN=354106638019F94606F5ABA3A90FEB87A8A7FA76
Certificate serial:       4CBD0B7B581B4A9C4AA132AC5DEDE0BC81807CBE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 04:17:57 +0000
Manifest this update:     Wed 17 Jun 2026 04:12:57 +0000
Manifest next update:     Thu 18 Jun 2026 05:18:57 +0000
Files and hashes:         1: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: ikR4B1sB9IhhiTpM9SD6KX5Vk82b9oPtczvgaIgOyo8=)
                          2: 354106638019F94606F5ABA3A90FEB87A8A7FA76.crl (hash: B3pTfWhfIe+PubKSWDQyFfT90eZAOde3+PpnDevN9Yk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.crl
                          rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:bd:0b:7b:58:1b:4a:9c:4a:a1:32:ac:5d:ed:e0:bc:81:80:7c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=354106638019F94606F5ABA3A90FEB87A8A7FA76
        Validity
            Not Before: Jun 17 04:12:57 2026 GMT
            Not After : Jun 18 05:18:57 2026 GMT
        Subject: CN=ED2B46189220F5E12B4437FB3C020A674FC157D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:98:ec:09:19:0e:e8:25:25:c4:1b:a8:7f:73:
                    40:3b:4d:55:55:67:74:90:7b:7a:e7:17:0e:8f:e3:
                    a2:df:43:f7:6c:f0:78:e8:0e:91:67:fa:d8:02:b4:
                    bf:80:bf:d1:1e:1b:41:a0:a4:8a:58:4b:69:46:24:
                    c7:e7:29:57:91:cc:44:74:e4:e7:be:49:ea:97:6a:
                    b9:96:d1:d5:21:ce:c1:43:f0:27:74:18:05:9a:20:
                    fd:00:e0:cf:06:0f:12:1f:af:da:af:c6:7b:91:32:
                    93:79:58:5d:73:51:0f:cd:6a:fe:90:7b:2f:7f:61:
                    4f:f5:17:b2:dc:e9:d2:64:e0:ad:82:80:50:2b:48:
                    18:f0:ef:74:ee:71:eb:aa:91:0e:30:4c:20:f1:ef:
                    bd:ce:c2:0a:3b:b1:26:99:1f:c6:dc:a1:e3:1a:0a:
                    dd:58:02:a1:94:f4:69:8a:c3:67:ef:6c:28:15:e1:
                    3f:86:1d:a8:4a:51:ae:c0:97:57:74:f8:c7:e6:b0:
                    b3:f6:6e:7a:c4:38:05:09:e3:ac:93:fe:71:a5:bf:
                    7e:12:14:93:c2:9a:6f:aa:1f:90:e0:96:4f:fb:d3:
                    7d:6a:7b:7d:b5:35:d0:11:49:39:5d:97:7d:71:59:
                    45:ba:07:e9:28:38:65:4c:dd:4f:95:fc:5e:91:bf:
                    d2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2B:46:18:92:20:F5:E1:2B:44:37:FB:3C:02:0A:67:4F:C1:57:D5
            X509v3 Authority Key Identifier:
                keyid:35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:01:79:45:ca:8b:16:cb:ad:d5:32:ef:ad:90:b5:d4:51:ff:
         e7:3c:ab:7a:2a:c5:a1:31:e5:7d:22:0b:a6:0f:51:cb:9c:53:
         a6:95:ad:44:77:53:90:e1:a8:84:82:a5:c4:8f:83:19:8c:2c:
         af:89:ed:61:78:13:1f:de:b6:ca:de:e5:87:36:b5:f4:2e:e9:
         ce:99:7b:1d:4f:5a:aa:e5:3b:5f:06:f1:ab:75:7e:a1:90:d5:
         b5:de:b9:59:d8:b3:5a:5f:6c:fe:e4:79:b4:56:e9:b6:5a:63:
         cb:59:53:b3:7c:bb:9b:1b:3d:38:06:82:bb:10:68:ce:50:22:
         c6:d7:07:7e:eb:20:1c:ec:d2:4d:58:b9:58:f9:f3:f3:70:91:
         0f:71:00:2c:1d:bd:a5:13:f8:bc:4d:f1:f3:02:4b:17:32:0c:
         9c:35:43:94:eb:bc:b1:2e:7c:56:63:d3:13:dc:1f:f9:f1:a0:
         60:31:65:3d:61:9f:c2:ad:db:69:68:1f:ac:0f:6a:b7:22:4f:
         fb:2c:a1:69:b8:59:9a:2a:e5:9c:ad:16:49:6c:8a:91:50:9d:
         7a:d7:69:30:cb:00:82:d8:45:9a:9d:45:6d:39:7c:02:d2:42:
         68:82:c2:2d:56:cd:cd:3e:a6:f2:da:cf:d1:8a:71:a2:1e:f3:
         79:91:34:49
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTL0Le1gbSpxKoTKsXe3gvIGAfL4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU0MTA2NjM4MDE5Rjk0NjA2RjVBQkEzQTkwRkVCODdB
OEE3RkE3NjAeFw0yNjA2MTcwNDEyNTdaFw0yNjA2MTgwNTE4NTdaMDMxMTAvBgNV
BAMTKEVEMkI0NjE4OTIyMEY1RTEyQjQ0MzdGQjNDMDIwQTY3NEZDMTU3RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWmOwJGQ7oJSXEG6h/c0A7TVVV
Z3SQe3rnFw6P46LfQ/ds8HjoDpFn+tgCtL+Av9EeG0GgpIpYS2lGJMfnKVeRzER0
5Oe+SeqXarmW0dUhzsFD8Cd0GAWaIP0A4M8GDxIfr9qvxnuRMpN5WF1zUQ/Nav6Q
ey9/YU/1F7Lc6dJk4K2CgFArSBjw73TuceuqkQ4wTCDx773Owgo7sSaZH8bcoeMa
Ct1YAqGU9GmKw2fvbCgV4T+GHahKUa7Al1d0+MfmsLP2bnrEOAUJ46yT/nGlv34S
FJPCmm+qH5Dglk/7031qe321NdARSTldl31xWUW6B+koOGVM3U+V/F6Rv9KNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU7StGGJIg9eErRDf7PAIKZ0/BV9UwHwYDVR0j
BBgwFoAUNUEGY4AZ+UYG9aujqQ/rh6in+nYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGQ5MDZmYzAtNDM2My00ZjQ2LTliMTQtNWMxYWI4MjVhMzM1LzAvMzU0MTA2NjM4
MDE5Rjk0NjA2RjVBQkEzQTkwRkVCODdBOEE3RkE3Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zNTQxMDY2MzgwMTlGOTQ2MDZGNUFCQTNBOTBGRUI4N0E4QTdG
QTc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ5MDZmYzAtNDM2My00ZjQ2LTli
MTQtNWMxYWI4MjVhMzM1LzAvMzU0MTA2NjM4MDE5Rjk0NjA2RjVBQkEzQTkwRkVC
ODdBOEE3RkE3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKgBeUXKixbLrdUy762QtdRR/+c8q3oqxaEx
5X0iC6YPUcucU6aVrUR3U5DhqISCpcSPgxmMLK+J7WF4Ex/etsre5Yc2tfQu6c6Z
ex1PWqrlO18G8at1fqGQ1bXeuVnYs1pfbP7kebRW6bZaY8tZU7N8u5sbPTgGgrsQ
aM5QIsbXB37rIBzs0k1YuVj58/NwkQ9xACwdvaUT+LxN8fMCSxcyDJw1Q5TrvLEu
fFZj0xPcH/nxoGAxZT1hn8Kt22loH6wParciT/ssoWm4WZoq5ZytFklsipFQnXrX
aTDLAILYRZqdRW05fALSQmiCwi1Wzc0+pvLaz9GKcaIe83mRNEk=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:13:36 2026 by rpki-client