Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft
File:                     8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft (raw, json)
Hash identifier:          XdCMNaCwut7NK4iDgcfIm+Twq2ZYZkb33Pz1ekR+1Ns=
Subject key identifier:   67:4F:A7:E2:5C:61:F2:33:E6:56:41:DA:99:54:CE:86:F1:C3:D6:18
Authority key identifier: 8F:C6:CD:0E:7E:E1:3F:AE:7E:B8:F7:4C:BF:3D:39:8E:E3:4F:03:BB
Certificate issuer:       /CN=8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB
Certificate serial:       165302383B91BFD883B6D7DE03C330BD6678B3EA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 17:50:45 +0000
Manifest this update:     Tue 16 Jun 2026 17:45:45 +0000
Manifest next update:     Wed 17 Jun 2026 21:32:45 +0000
Files and hashes:         1: 8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.crl (hash: mnJ+sBOYX/EszgI25vgQf1Rn2lG8LZtXMpHmcBjtFUk=)
                          2: 3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa (hash: 3eBDLV5ffWUDrJGtZH95s4QphGUZB6+B7Vc+acd6df4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.crl
                          rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 21:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:53:02:38:3b:91:bf:d8:83:b6:d7:de:03:c3:30:bd:66:78:b3:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB
        Validity
            Not Before: Jun 16 17:45:45 2026 GMT
            Not After : Jun 17 21:32:45 2026 GMT
        Subject: CN=674FA7E25C61F233E65641DA9954CE86F1C3D618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:36:e9:d5:0d:d0:dc:27:f5:d1:3d:fd:e4:85:
                    fe:44:2e:ac:41:db:27:0b:fb:70:1a:52:04:fe:d3:
                    0d:18:75:dd:b7:10:86:ff:0e:11:66:e7:60:23:de:
                    58:3b:09:83:57:a5:29:6b:96:17:99:43:b7:33:d4:
                    13:a9:2b:4e:5d:21:37:09:4a:fd:2a:5a:6e:06:a2:
                    ce:97:36:47:46:26:e9:2c:e4:b7:e2:ad:6a:5f:b6:
                    d4:e6:aa:b0:90:2e:bf:e8:c0:64:82:71:55:82:2e:
                    5c:b9:02:d5:3c:4c:56:a7:99:f0:08:dc:8b:a7:73:
                    cc:81:91:d0:7a:01:39:9f:9b:4b:8b:a5:fa:fa:b8:
                    fd:25:42:fc:5f:fb:b5:61:ca:d0:1d:e1:75:bd:91:
                    7d:ca:19:a3:a9:5b:03:a5:ce:eb:4a:89:0c:fc:ad:
                    6f:d0:bf:a9:b8:6a:72:08:87:3b:f1:f6:38:f5:6e:
                    e7:8c:21:bb:27:9c:cd:d0:0e:af:47:7a:a3:93:cc:
                    96:9f:ec:ae:a1:45:f5:f7:7b:1e:c7:8f:8b:99:ab:
                    6b:9c:b7:c3:61:c6:68:90:14:5a:b6:42:81:35:98:
                    72:b2:4d:d2:2a:4d:3b:81:e4:22:80:2b:b6:22:66:
                    a9:91:42:a7:bd:22:83:ee:00:e4:31:d5:63:93:01:
                    4f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4F:A7:E2:5C:61:F2:33:E6:56:41:DA:99:54:CE:86:F1:C3:D6:18
            X509v3 Authority Key Identifier:
                keyid:8F:C6:CD:0E:7E:E1:3F:AE:7E:B8:F7:4C:BF:3D:39:8E:E3:4F:03:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0f:5b:59:e2:fa:ce:e5:f8:db:2b:35:f8:06:36:26:43:b0:
         30:1b:0a:3d:b6:84:86:76:8d:d2:ca:8e:6e:3d:61:d0:ce:94:
         e0:13:be:06:81:d3:2f:76:82:5a:a8:45:bc:82:0c:0d:88:b3:
         ff:bb:f6:c5:c5:57:b4:95:4a:63:38:1e:f7:a4:f9:d1:d0:b1:
         70:86:f6:77:3e:7f:0b:a6:1b:7c:4b:0e:84:80:2a:62:96:e5:
         2e:0d:e9:04:79:70:61:09:c4:5d:80:a9:ac:7c:91:d3:42:38:
         6d:97:11:75:2b:fe:b5:11:88:10:a2:41:8e:74:5c:d0:ce:b6:
         af:d2:9b:11:b6:d1:1a:6f:47:d7:83:80:a5:9c:a1:ab:12:e2:
         2b:88:0d:24:52:0d:97:65:70:c0:a1:2a:5d:84:a4:f6:cb:fe:
         b9:f5:a7:0a:21:31:84:fb:f0:40:0c:a4:2c:ec:bf:79:b8:96:
         4e:93:01:e3:3c:92:ca:a5:01:15:d6:65:4c:10:b1:a5:20:27:
         80:6f:12:68:2b:ba:73:b7:4b:00:98:be:87:b8:e0:1a:06:fd:
         bd:14:cc:6d:ee:a4:00:bb:73:1a:1f:71:89:dc:ee:db:51:14:
         c7:a0:1b:a9:1f:b0:12:d4:6a:c9:e2:6b:df:87:06:ad:db:9c:
         85:12:27:50
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFlMCODuRv9iDttfeA8MwvWZ4s+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDNkNEMEU3RUUxM0ZBRTdFQjhGNzRDQkYzRDM5OEVF
MzRGMDNCQjAeFw0yNjA2MTYxNzQ1NDVaFw0yNjA2MTcyMTMyNDVaMDMxMTAvBgNV
BAMTKDY3NEZBN0UyNUM2MUYyMzNFNjU2NDFEQTk5NTRDRTg2RjFDM0Q2MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNNunVDdDcJ/XRPf3khf5ELqxB
2ycL+3AaUgT+0w0Ydd23EIb/DhFm52Aj3lg7CYNXpSlrlheZQ7cz1BOpK05dITcJ
Sv0qWm4Gos6XNkdGJuks5LfirWpfttTmqrCQLr/owGSCcVWCLly5AtU8TFanmfAI
3Iunc8yBkdB6ATmfm0uLpfr6uP0lQvxf+7VhytAd4XW9kX3KGaOpWwOlzutKiQz8
rW/Qv6m4anIIhzvx9jj1bueMIbsnnM3QDq9HeqOTzJaf7K6hRfX3ex7Hj4uZq2uc
t8NhxmiQFFq2QoE1mHKyTdIqTTuB5CKAK7YiZqmRQqe9IoPuAOQx1WOTAU+DAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZ0+n4lxh8jPmVkHamVTOhvHD1hgwHwYDVR0j
BBgwFoAUj8bNDn7hP65+uPdMvz05juNPA7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTFmMjlhYmEtNmQ3Yy00NDM1LTk1M2MtNjA0OTg4NzMxNTk2LzAvOEZDNkNEMEU3
RUUxM0ZBRTdFQjhGNzRDQkYzRDM5OEVFMzRGMDNCQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84RkM2Q0QwRTdFRTEzRkFFN0VCOEY3NENCRjNEMzk4RUUzNEYw
M0JCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFmMjlhYmEtNmQ3Yy00NDM1LTk1
M2MtNjA0OTg4NzMxNTk2LzAvOEZDNkNEMEU3RUUxM0ZBRTdFQjhGNzRDQkYzRDM5
OEVFMzRGMDNCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEwPW1ni+s7l+NsrNfgGNiZDsDAbCj22hIZ2
jdLKjm49YdDOlOATvgaB0y92glqoRbyCDA2Is/+79sXFV7SVSmM4Hvek+dHQsXCG
9nc+fwumG3xLDoSAKmKW5S4N6QR5cGEJxF2Aqax8kdNCOG2XEXUr/rURiBCiQY50
XNDOtq/SmxG20RpvR9eDgKWcoasS4iuIDSRSDZdlcMChKl2EpPbL/rn1pwohMYT7
8EAMpCzsv3m4lk6TAeM8ksqlARXWZUwQsaUgJ4BvEmgrunO3SwCYvoe44BoG/b0U
zG3upAC7cxofcYnc7ttRFMegG6kfsBLUasnia9+HBq3bnIUSJ1A=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:08 2026 by rpki-client