Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
File:                     488A458129866D0E7DBFF7668D82664F584F8541.mft (raw, json)
Hash identifier:          HRO/AUFQ+8bStcCVDNppfhKtcCFcCaDYAUK10bTqfLk=
Subject key identifier:   90:72:BA:CD:73:D3:D8:58:82:E0:C6:C6:9E:F0:4D:F4:EE:2A:0C:01
Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41
Certificate issuer:       /CN=488A458129866D0E7DBFF7668D82664F584F8541
Certificate serial:       72C028F4EBADC3F878EFA38907DCA410595EBE77
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 20:44:17 +0000
Manifest this update:     Tue 16 Jun 2026 20:39:17 +0000
Manifest next update:     Wed 17 Jun 2026 23:28:17 +0000
Files and hashes:         1: 488A458129866D0E7DBFF7668D82664F584F8541.crl (hash: Qjz4gh7TdyOAVqIH3hKmWX+mTj5rU3D5bIuUxbQsgVQ=)
                          2: 3130312e35302e31372e302f32342d3234203d3e20313331313138.roa (hash: PFfkqIsqIUsjwmUd9ei8zQ4zYaZHPfsMYrmE63f1ou0=)
                          3: 323430353a383138303a3a2f33322d3438203d3e20313335343738.roa (hash: H13662R2JsQ6xsWPNm8piREclR+MKAOjI1IQH6H0ptk=)
                          4: 3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa (hash: +JXr82FpG/6Wt8qvldpnb4fgmcqGxYhFwHI7evACCBg=)
                          5: 3130312e35302e31362e302f32342d3234203d3e20313331313137.roa (hash: oN+sl0Dox7b9G17/qNLZ11JOxDe7lTDnIlNYUqfGpaY=)
                          6: 3131362e3230362e3234302e302f32322d3234203d3e2034373837.roa (hash: Yz2BU+sizR5MaKXnmTSXZbcNfxY4e6NTRVofqsdo3Mc=)
                          7: 3130312e35302e31362e302f32302d3234203d3e2034373837.roa (hash: +b5NqaJS6v9hXzvZigHVYiJMJdXpHZYJPG2i54V2Zkg=)
                          8: 3130312e35302e32312e302f32342d3234203d3e20313338313338.roa (hash: oYKv/Tz7NXAZVTkC/rNO1pYrMZcGeymiJs7AyGifqxg=)
                          9: 3130312e3132382e36362e302f32332d3234203d3e20313335343738.roa (hash: 1H3PSuEvCc4YKCR6kgpSZidVqJxCnAhidJTquYvi5XY=)
                          10: 3230322e3135382e302e302f31372d3234203d3e2034373837.roa (hash: WW8sIJ6AThc6GzaZsxU3S0vSQEeSjQOfDUvBVqio138=)
                          11: 3230322e3135382e35302e302f32332d3234203d3e2034373837.roa (hash: QPI+dREhzvsIigpY59BOgb1O27ZG4A0uLzoVwlmd6ns=)
                          12: 3130312e35302e32302e302f32342d3234203d3e20313336313038.roa (hash: EDCshkdLjSQa8Tly9uBitRYcw264uiv+JqjzXRSvnDM=)
                          13: 3130312e3132382e36342e302f31392d3234203d3e20313335343738.roa (hash: 5id0QnfcKsnw0+S9ulptOtQBEWbR8UG/S4Owh/B9W74=)
                          14: 3231302e3231302e3132382e302f31382d3234203d3e2034373837.roa (hash: cChkhgKm+2KNkrgQft7uIxPkb8RhfpDlI+RUTMMAntw=)
                          15: 323030313a6431303a393430303a3a2f33382d3438203d3e20313335343738.roa (hash: noWOl6fVub87P1/SVgYHH5T2hrSTXsrQ+oEMt1rrpNg=)
                          16: 3130312e35302e31382e302f32342d3234203d3e203338353038.roa (hash: 8PlxVCA9cCDGMuR64vfddEL6IDG5jHV1vCDU29KjPwk=)
                          17: 323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa (hash: G3pU6symkaZdSMicPc79FGi+dBVSw2ehAYC4dr25SgE=)
                          18: 3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa (hash: wbehxlGBOFZ5POFNUace0mPfuERAJPSvGNjotR14fdE=)
                          19: 3130332e36312e3234382e302f32322d3234203d3e20313335343738.roa (hash: ARl4ZAaC9Jes/owyoPp7apbT6NpWz6hu9CZFgWsDZ/w=)
                          20: 3132352e3230382e3132382e302f31382d3234203d3e2034373837.roa (hash: aox2X7SgWnRXu8G+kGHpNIJb4RAjQYMcZgSqdVFmhhE=)
                          21: 3130312e3132382e36342e302f32332d3234203d3e20313335343738.roa (hash: cNsXz0HEcLxttb5xDjo+VflY5ICv7Vrpe3SghZW7FwU=)
                          22: 34352e3132362e38302e302f32322d3234203d3e20313335343738.roa (hash: b2lWOoaou2J1YIxknocGyrbJm7waL5thO0MNRGLl9mc=)
                          23: 323030313a6431303a3a2f33322d3438203d3e2034373837.roa (hash: 14/1HVNOXsDEYMMhgV/UFslejkV/yr/QLEVbg8K0YaE=)
                          24: 3130312e3132382e36362e302f32332d3233203d3e20313335343738.roa (hash: KiBzwdkwkvBjgtXV0cM+MD3JNlJOyrjNhlEWrqegSSU=)
                          25: 323430353a383138303a3a2f33322d3332203d3e2034373837.roa (hash: UAYb+1HjfSmt5R+QlsY+ZQQtQPafl+SlPKPY7/wXU0Q=)
                          26: 3130312e3132382e36342e302f32332d3233203d3e20313335343738.roa (hash: t2MsMuM/1YQ0d1jlVRk+UQIkBTqKfcyfuzkWNhKm+2Y=)
                          27: 3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa (hash: mML8Y06xC1Ba28dmIO2VE5Ln2tzvvZV3niqEU4AWOB4=)
                          28: 3130312e3132382e36342e302f31382d3234203d3e20313335343738.roa (hash: 99+LHdnDZ+xXSQ4fS/K7+l08VVwSgr8ZFAwx6f4ta24=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl
                          rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 23:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c0:28:f4:eb:ad:c3:f8:78:ef:a3:89:07:dc:a4:10:59:5e:be:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541
        Validity
            Not Before: Jun 16 20:39:17 2026 GMT
            Not After : Jun 17 23:28:17 2026 GMT
        Subject: CN=9072BACD73D3D85882E0C6C69EF04DF4EE2A0C01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:5a:da:b0:74:99:37:a9:80:79:ae:9c:0c:fd:
                    81:e8:dd:11:16:06:11:35:cc:b0:6e:36:70:d9:f9:
                    a2:e1:ae:22:9a:c5:31:21:9a:ee:cf:1b:bf:e1:40:
                    29:51:b6:04:d7:77:e5:b4:75:38:3b:65:bb:93:fc:
                    63:49:63:3c:f7:5a:e5:1b:09:2d:58:48:d3:a2:60:
                    68:a6:42:4d:7f:27:93:c2:c2:94:45:c0:a4:88:cf:
                    f2:34:ce:85:57:d8:68:fa:0b:90:d2:30:7b:b2:c8:
                    dd:2f:57:ef:cb:4c:69:15:90:23:4a:11:2a:e2:b1:
                    0f:86:57:7f:06:f9:3d:79:0d:98:c6:3f:37:47:b2:
                    87:4e:6b:87:c6:0b:0d:4e:fd:26:8d:ab:0c:dd:00:
                    76:b7:f9:c9:da:3b:4e:3f:41:60:4e:31:d5:ca:eb:
                    49:8e:28:d5:78:24:23:c8:8c:a8:23:d3:5c:4a:8c:
                    75:50:4a:8f:60:14:91:87:0a:58:ab:77:90:2c:d4:
                    eb:66:d5:10:27:16:83:48:65:07:65:19:24:2c:73:
                    68:fd:b2:e8:1f:83:7a:bc:44:3b:5a:e7:08:22:00:
                    d5:d8:5c:75:5c:1c:3c:98:d5:ac:46:d4:72:59:37:
                    8e:90:fd:2d:e7:fa:70:71:39:75:4e:ac:17:93:47:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:72:BA:CD:73:D3:D8:58:82:E0:C6:C6:9E:F0:4D:F4:EE:2A:0C:01
            X509v3 Authority Key Identifier:
                keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:01:14:89:27:60:97:c9:1d:0b:a2:88:7a:60:f7:f8:e9:d2:
         b6:2b:9b:8e:e0:ac:29:75:b5:c6:6d:5b:f0:9a:0c:39:62:a9:
         7b:74:f9:2b:a1:39:52:ee:d3:6b:a3:45:b0:84:78:dd:0a:d1:
         20:ef:1c:d3:d2:1b:c6:72:27:8a:dd:00:b2:32:46:d2:01:12:
         2c:da:63:03:ae:76:8a:a0:17:fa:17:ef:c7:ce:7f:05:33:bc:
         93:c9:09:a1:35:f4:55:b1:0d:75:d5:34:29:3b:97:8b:4c:2d:
         a3:0d:50:67:a6:56:6e:64:80:ba:34:f6:df:d2:b4:c6:43:81:
         c3:3b:34:ca:56:79:e9:a7:cd:70:03:e4:10:57:bc:08:b3:34:
         96:27:ae:81:a6:e7:f7:56:dd:f9:22:5d:45:34:59:34:78:fe:
         b0:34:b7:64:41:81:2d:84:cd:cb:d0:6d:55:9f:d6:59:6c:90:
         0b:78:3a:21:eb:db:04:a6:0c:23:c6:29:73:ab:6b:98:7b:78:
         76:c9:8e:c1:14:3d:bc:cf:7a:ec:64:cd:e8:8d:23:59:39:a4:
         52:b4:8c:25:ea:34:21:42:ee:35:de:20:49:48:12:e5:86:35:
         bc:1b:c1:12:a0:e4:94:08:d4:82:6a:1a:3f:3b:c7:49:91:07:
         b7:7f:9a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:26:47 2026 by rpki-client