Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft
File:                     04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft (raw, json)
Hash identifier:          yuHbCJsYvrzJVEl3V6Y9FahCT9gZrjC37dhaVoslFYc=
Subject key identifier:   28:64:B0:6A:50:07:C9:CD:94:86:0A:DD:88:CF:8E:AD:5C:92:3B:BC
Authority key identifier: 04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4
Certificate issuer:       /CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4
Certificate serial:       2CB550D650D84571EACEB3FFD7347E2C8E6A8F00
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft
Manifest number:          3A
Signing time:             Sun 14 Jun 2026 00:53:55 +0000
Manifest this update:     Sun 14 Jun 2026 00:48:55 +0000
Manifest next update:     Mon 15 Jun 2026 02:48:55 +0000
Files and hashes:         1: 3130332e3135332e3134392e302f32342d3234203d3e203634333030.roa (hash: 5vV5ZfJoSxF8YdCtjpH1p1DLAYvEvLGC91Wktf8Mw9c=)
                          2: 04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl (hash: 2YgiZbuzo2Pj6VVhsIST85xPs3LAUIR8jrwGjsobeW0=)
                          3: 3130332e3135332e3134382e302f32342d3234203d3e203634333030.roa (hash: dl9xVM2rxfLjhJqwGW0G8h/VTUN1oUgBuq0Qw5n8Lwg=)
                          4: 3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa (hash: BrjeraCPyUffk29JD70GjyNah0k3nj4heiQybdMxnEQ=)
                          5: 323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa (hash: 6uG8JEAg5YXu68O6z0VK1/htvcExMqCS4aozBNgJO50=)
                          6: 323430363a343563303a3a2f33332d3438203d3e203634333030.roa (hash: 0XuhY+T94wXhxTCvmTzUJVF+dBVIx5FGQo4RfqmReyU=)
                          7: 323430363a343563303a3a2f33322d3332203d3e203634333030.roa (hash: 1M4q1NFllsSsvSfNvwTitiKk8jnGm1cKfR4Eial5H4E=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl
                          rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Jun 2026 02:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b5:50:d6:50:d8:45:71:ea:ce:b3:ff:d7:34:7e:2c:8e:6a:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4
        Validity
            Not Before: Jun 14 00:48:55 2026 GMT
            Not After : Jun 15 02:48:55 2026 GMT
        Subject: CN=2864B06A5007C9CD94860ADD88CF8EAD5C923BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a4:67:9c:53:42:96:b0:6b:20:ce:00:2b:92:
                    31:ba:66:30:70:e5:f2:79:f5:6b:f5:63:2a:1d:fe:
                    d6:06:3c:59:ec:50:b2:71:e9:21:92:d7:84:8a:9d:
                    25:05:76:fd:dd:6d:90:5e:72:7d:db:1f:72:f8:0b:
                    e6:f9:cc:cd:bc:7c:f0:67:18:35:6f:65:81:92:d5:
                    00:b1:cb:10:21:69:45:33:5e:75:db:b0:c0:19:92:
                    57:0f:41:cb:5b:85:09:26:d1:dd:e1:dd:6f:ae:b7:
                    71:e7:1e:a5:15:7a:94:13:62:07:48:4a:bc:ad:22:
                    c4:3f:f7:2a:87:f3:4d:e3:37:19:b2:ed:24:03:41:
                    56:85:81:7f:89:00:d7:8f:2b:48:87:40:37:8c:3b:
                    74:16:c9:62:e4:86:09:16:14:11:08:df:41:60:0a:
                    29:71:76:35:12:4b:13:49:43:07:91:28:80:d3:15:
                    f1:b9:0c:5d:ec:d5:fa:31:fc:3e:43:cd:ab:49:e1:
                    18:b8:16:77:f9:80:06:ce:3a:a5:29:c2:e3:a2:d9:
                    8f:7b:57:58:20:bd:ca:c4:64:d1:c4:e7:50:92:a4:
                    bf:b8:4f:66:41:f7:be:84:ba:c3:a6:28:13:1c:9a:
                    e1:35:e1:cc:33:10:20:7d:71:e8:89:be:0e:8f:3a:
                    8b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:64:B0:6A:50:07:C9:CD:94:86:0A:DD:88:CF:8E:AD:5C:92:3B:BC
            X509v3 Authority Key Identifier:
                keyid:04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:1d:9e:3c:00:ef:61:b8:b1:de:1d:4e:da:0c:66:8f:83:dd:
         ff:1b:29:c5:33:2c:64:09:0b:25:0f:5f:72:54:95:71:51:f9:
         cc:a8:4d:c4:d9:08:cd:ff:b3:8f:5c:3b:7a:fc:8b:e8:25:74:
         95:c4:2e:be:81:4d:3b:18:c3:90:a2:e6:c8:fe:85:04:ed:fd:
         72:db:f8:1e:36:be:e3:61:de:82:04:fb:f7:cf:9e:1b:5a:49:
         11:3d:c5:c2:c8:d9:37:9c:08:d2:f2:08:c8:8a:a3:0f:74:00:
         8f:8c:8a:df:46:44:4b:33:47:34:1f:c7:77:a3:3a:90:4a:51:
         52:b1:87:d2:5f:aa:fb:54:f0:dd:d5:9e:7c:02:97:0b:dd:72:
         39:c3:b5:70:cd:75:ed:36:c8:33:d1:e2:4b:93:1b:04:14:22:
         e2:55:bb:2f:6b:e4:7e:51:ab:b7:92:10:32:09:ec:d3:6e:85:
         8d:19:ad:17:d0:34:ac:c0:bf:10:4a:f3:11:b9:f8:cc:e5:6c:
         72:0c:93:b5:e9:8c:21:c7:9a:9b:b9:c1:15:e8:f8:b5:f4:86:
         5c:1a:fb:65:10:72:53:99:3b:b0:e9:4b:f8:fa:0e:62:73:2c:
         4b:46:08:7f:a6:f1:66:79:1e:3b:10:53:ca:41:99:b4:a6:8a:
         30:c6:eb:8b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULLVQ1lDYRXHqzrP/1zR+LI5qjwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDREQjQ3NTVDNzVBODMxQ0Q5MTgxN0U2QTlCN0U0RTFF
RDJERjJENDAeFw0yNjA2MTQwMDQ4NTVaFw0yNjA2MTUwMjQ4NTVaMDMxMTAvBgNV
BAMTKDI4NjRCMDZBNTAwN0M5Q0Q5NDg2MEFERDg4Q0Y4RUFENUM5MjNCQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmpGecU0KWsGsgzgArkjG6ZjBw
5fJ59Wv1Yyod/tYGPFnsULJx6SGS14SKnSUFdv3dbZBecn3bH3L4C+b5zM28fPBn
GDVvZYGS1QCxyxAhaUUzXnXbsMAZklcPQctbhQkm0d3h3W+ut3HnHqUVepQTYgdI
SrytIsQ/9yqH803jNxmy7SQDQVaFgX+JANePK0iHQDeMO3QWyWLkhgkWFBEI30Fg
CilxdjUSSxNJQweRKIDTFfG5DF3s1fox/D5DzatJ4Ri4Fnf5gAbOOqUpwuOi2Y97
V1ggvcrEZNHE51CSpL+4T2ZB976EusOmKBMcmuE14cwzECB9ceiJvg6POovRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKGSwalAHyc2UhgrdiM+OrVySO7wwHwYDVR0j
BBgwFoAUBNtHVcdagxzZGBfmqbfk4e0t8tQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTQzMDRiNjQtMjg5OS00ODMwLTljM2MtMzc1ODRhMzI3ZTFlLzAvMDREQjQ3NTVD
NzVBODMxQ0Q5MTgxN0U2QTlCN0U0RTFFRDJERjJENC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wNERCNDc1NUM3NUE4MzFDRDkxODE3RTZBOUI3RTRFMUVEMkRG
MkQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQzMDRiNjQtMjg5OS00ODMwLTlj
M2MtMzc1ODRhMzI3ZTFlLzAvMDREQjQ3NTVDNzVBODMxQ0Q5MTgxN0U2QTlCN0U0
RTFFRDJERjJENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACgdnjwA72G4sd4dTtoMZo+D3f8bKcUzLGQJ
CyUPX3JUlXFR+cyoTcTZCM3/s49cO3r8i+gldJXELr6BTTsYw5Ci5sj+hQTt/XLb
+B42vuNh3oIE+/fPnhtaSRE9xcLI2TecCNLyCMiKow90AI+Mit9GREszRzQfx3ej
OpBKUVKxh9JfqvtU8N3VnnwClwvdcjnDtXDNde02yDPR4kuTGwQUIuJVuy9r5H5R
q7eSEDIJ7NNuhY0ZrRfQNKzAvxBK8xG5+MzlbHIMk7XpjCHHmpu5wRXo+LX0hlwa
+2UQclOZO7DpS/j6DmJzLEtGCH+m8WZ5HjsQU8pBmbSmijDG64s=
-----END CERTIFICATE-----
Generated at Sun Jun 14 10:22:04 2026 by rpki-client