Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
File:                     9EDB723FFE084B9B87B5B0A108574335936817FB.mft (raw, json)
Hash identifier:          WUFtdm6Mt2tWT4Md3zFEvnaZjaaNBQ/jy+pEZyaQL/U=
Subject key identifier:   11:E9:C1:21:91:82:E9:BD:73:20:1E:47:7D:7D:55:6F:31:33:36:4D
Authority key identifier: 9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB
Certificate issuer:       /CN=9EDB723FFE084B9B87B5B0A108574335936817FB
Certificate serial:       56536195DD1C29CBF4548DEA699909446C8F8F8F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 18:00:58 +0000
Manifest this update:     Tue 16 Jun 2026 17:55:58 +0000
Manifest next update:     Wed 17 Jun 2026 20:47:58 +0000
Files and hashes:         1: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: TKijjNdinkZx0yUPQ2piNtCq6wNxlLJwsDj7lMp8o1A=)
                          2: 9EDB723FFE084B9B87B5B0A108574335936817FB.crl (hash: r/v8TqubJO2x0zoyNxVPt8VsN1/enTehiffU3KimYew=)
                          3: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: i1PCAoIZ8GEBtvqZu9y6RsJ/+cUgKfG+tpL6n+2MQ0w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl
                          rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 20:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:53:61:95:dd:1c:29:cb:f4:54:8d:ea:69:99:09:44:6c:8f:8f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDB723FFE084B9B87B5B0A108574335936817FB
        Validity
            Not Before: Jun 16 17:55:58 2026 GMT
            Not After : Jun 17 20:47:58 2026 GMT
        Subject: CN=11E9C1219182E9BD73201E477D7D556F3133364D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:60:67:5c:31:eb:24:29:f4:32:a9:20:30:62:
                    2f:3b:fc:da:46:a0:6c:c6:d5:0d:84:12:cb:e1:72:
                    21:67:a4:e5:b2:11:93:ee:c3:f1:11:21:70:fe:61:
                    88:a7:a8:31:c1:11:f6:bf:65:68:31:71:53:c0:8a:
                    e7:5a:29:2f:42:42:97:0b:dd:89:fc:1f:2d:8a:1f:
                    be:e5:61:78:1a:43:f8:9d:ae:4c:f6:4e:b7:96:a2:
                    5c:87:84:1f:04:b9:2a:07:aa:dc:8f:41:2b:a0:73:
                    5a:77:14:37:91:f6:c8:14:2f:cf:df:37:f4:b4:13:
                    a7:d7:65:44:a1:92:0c:73:a2:d1:b1:b6:f1:10:65:
                    55:a7:d8:16:67:a0:53:e5:71:fe:3b:58:90:54:4b:
                    5d:82:db:46:8a:40:0c:4a:a1:83:4c:28:2e:c9:52:
                    67:69:85:f7:94:4e:23:80:6c:83:82:70:ef:5d:0b:
                    ad:bd:3a:d4:d4:0a:41:33:b0:cd:1c:61:82:df:cb:
                    e5:be:21:b0:8a:ea:1d:c2:3a:9e:e6:3b:ca:f4:2c:
                    59:46:65:7d:01:6d:69:a5:5c:eb:0d:84:32:e8:6a:
                    1c:f7:d8:d3:2f:8c:cb:1d:db:55:2e:31:5f:db:26:
                    13:9b:aa:2d:72:a5:1c:b1:9a:0e:3c:ad:b0:62:d8:
                    06:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E9:C1:21:91:82:E9:BD:73:20:1E:47:7D:7D:55:6F:31:33:36:4D
            X509v3 Authority Key Identifier:
                keyid:9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:0b:07:70:51:96:3e:b2:fc:d3:9f:48:b9:7d:ea:77:4c:eb:
         e2:4b:46:32:94:e5:89:4c:3e:6b:9c:9b:98:b1:ca:84:32:e5:
         da:80:f1:c9:fd:04:cd:b1:41:8f:1b:ad:84:a5:ab:e3:53:8a:
         6e:e4:3e:24:01:d7:4a:a8:b4:71:81:3a:74:da:a7:7b:29:8f:
         23:4a:e5:7a:d8:d2:bb:53:ac:42:24:2a:48:9a:a7:35:71:46:
         97:d7:d2:bd:64:1e:c2:1e:31:d4:26:74:fc:cb:a6:95:6f:b4:
         b6:f7:ed:db:67:f0:df:a6:cd:ae:f0:95:3e:44:fc:8d:3b:8a:
         5c:b1:bb:f1:5b:78:3f:9b:fb:14:97:3e:d6:c1:7a:ad:bc:b1:
         a2:33:92:0e:84:12:0e:9e:09:14:c4:7e:15:32:49:d9:d6:c1:
         73:b7:5d:89:82:36:88:71:f3:e1:5f:03:24:53:2d:44:01:c2:
         fa:84:6a:e1:b7:b5:0b:bb:2b:52:29:c0:3e:3d:a0:9a:6b:ab:
         98:14:21:f1:59:bb:ab:af:ee:ce:02:0b:f0:0e:e0:8c:47:53:
         86:a9:82:1e:9d:9e:da:0e:3c:e0:72:6e:b1:30:79:d1:f0:ed:
         4f:78:45:86:a6:d3:b2:b4:a9:28:d6:92:2e:1c:69:89:01:87:
         f0:bb:63:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:40:55 2026 by rpki-client