Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
File:                     A9BFA348A050E46482F4E00C605FF9961247FC64.mft (raw, json)
Hash identifier:          zbIvb7rCrKTl81iOJVp+y6sxvQacD2BDLBPnycPJyfs=
Subject key identifier:   5A:03:15:AE:DC:AC:38:B3:B6:64:50:1B:6D:01:7D:FA:97:45:74:5D
Authority key identifier: A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64
Certificate issuer:       /CN=A9BFA348A050E46482F4E00C605FF9961247FC64
Certificate serial:       0425D88F6725D05D55CADABCBFF126C125299D9A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
Manifest number:          3A
Signing time:             Sat 13 Jun 2026 20:23:59 +0000
Manifest this update:     Sat 13 Jun 2026 20:18:59 +0000
Manifest next update:     Sun 14 Jun 2026 22:44:59 +0000
Files and hashes:         1: 3131312e39322e3137302e302f32342d3234203d3e203233363731.roa (hash: UwBVAcKHZ4f4hQBOzL0Sd4Fm5LmC4c+ionV2pYmo7/o=)
                          2: 3131312e39322e3137312e302f32342d3234203d3e203233363731.roa (hash: LSQJykz8Xa8OUBE1CJt+TyLaezRgkEysTciohkEfAhc=)
                          3: 3131312e39322e3136372e302f32342d3234203d3e203233363731.roa (hash: 7eo+DUwzfso/gGHNjcQAtGfgWMCxkON/A6PVQqojzIw=)
                          4: 3131312e39322e3137342e302f32332d3234203d3e203233363731.roa (hash: w12lGkVliS3y+76XSl6gzHQHimzilNFu+hS9Qt8ntF0=)
                          5: 323430333a623230303a3a2f33322d3438203d3e203233363731.roa (hash: 2aLawRYLy3KCYufu2NaJ3HYybrz6F8WpwigQMHaYOu8=)
                          6: 3131312e39322e3136352e302f32342d3234203d3e203233363731.roa (hash: H7aX+6aTRF1Nj4kzc1OuSxt8gZOvC6ixFR9qSLZfj6Q=)
                          7: 323430333a623230303a613939633a3a2f34382d3438203d3e203338353036.roa (hash: XAeIzu631fi3CwuOFGNDoY933yMIfsvYuPPKWulTcYM=)
                          8: A9BFA348A050E46482F4E00C605FF9961247FC64.crl (hash: dVwkDoBo9UXDfxXdgQI658msxtO3np5Lg4a6CmWlRq4=)
                          9: 3131312e39322e3136382e302f32342d3234203d3e203233363731.roa (hash: Zs7TRnZe5BNsoAw7Vlg7d8WTD6Yej6D1y1DZK+qwGSo=)
                          10: 3131312e39322e3136342e302f32342d3234203d3e203233363731.roa (hash: wNQ3Qkv9biOpVvnJgROiOoJs/1gZSgV49b5TXX2+3Z4=)
                          11: 323430333a623230303a3166653a3a2f34382d3438203d3e203233363731.roa (hash: r6fMNtgJIoHgjV3DFpNsgQ1H8cmQbjMCcbKig24MDXk=)
                          12: 3230322e3136392e3232342e302f32302d3234203d3e203233363731.roa (hash: 4ByDuJtt3A8/OMYgUMLRW5zT+7DYjf2+SVe78YDt8J8=)
                          13: 3131312e39322e3136362e302f32342d3234203d3e203233363731.roa (hash: ZVviuvnexquFN2F18kLTWUBNgOrAM1n1Wa8GZF9ayTM=)
                          14: 3131312e39322e3137342e302f32342d3234203d3e203233363731.roa (hash: GuV6Rg2wTEoGKg9NRtGF/nlE2uCUCHsreSMW9u/k6bA=)
                          15: 323430333a623230303a3233303a3a2f34382d3438203d3e203233363731.roa (hash: GGTpraPioXOfseSGJKXessD1JJQRRiypizczW1Hzdy0=)
                          16: 323430333a623230303a3233373a3a2f34382d3438203d3e203233363731.roa (hash: S+jEWzFEnfshlynIM2/L8ivR0r7b8KQ+/HC/tf13JGI=)
                          17: 3131312e39322e3136322e302f32342d3234203d3e203338353036.roa (hash: 2dlHVfZFD/szRhd8hUNYHiAVCewx+xASxFEiirRYGTg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl
                          rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 22:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:25:d8:8f:67:25:d0:5d:55:ca:da:bc:bf:f1:26:c1:25:29:9d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9BFA348A050E46482F4E00C605FF9961247FC64
        Validity
            Not Before: Jun 13 20:18:59 2026 GMT
            Not After : Jun 14 22:44:59 2026 GMT
        Subject: CN=5A0315AEDCAC38B3B664501B6D017DFA9745745D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:f7:65:28:80:67:8f:b1:d0:7d:ef:23:2a:
                    9b:83:21:ac:ba:cb:37:ac:0c:2f:24:a8:80:84:5e:
                    f2:e7:b7:8a:10:90:9e:fb:cc:76:d4:48:97:a8:18:
                    5b:44:0f:68:bb:ba:c0:f6:c1:26:43:61:ee:74:18:
                    0a:e7:5e:81:bc:ed:44:c9:46:af:b2:a9:04:d5:40:
                    a1:37:5a:4e:49:5c:69:49:81:dc:a5:33:bc:53:e8:
                    a5:25:63:ec:17:f1:04:be:ad:6c:04:3b:9d:45:08:
                    a8:31:3b:68:4e:ca:5e:e3:1f:1b:09:03:cb:9b:be:
                    0b:1a:9e:50:3f:1a:1f:ba:80:dc:17:ba:bc:5b:10:
                    34:94:d9:e0:d9:52:fd:00:a8:ea:77:82:fb:cb:fa:
                    fe:62:bb:be:4b:46:75:9a:23:12:48:ad:c3:1b:ad:
                    9e:3a:0b:2b:cf:82:f9:68:ae:1c:a2:00:fc:d1:0c:
                    3d:1c:09:c9:d5:22:3d:f7:20:27:ee:c7:2c:f0:2b:
                    fe:43:09:44:58:27:62:dd:96:f9:fb:d6:48:9a:7f:
                    ad:aa:9d:9d:c4:d1:17:b9:8d:31:44:db:95:a7:d2:
                    88:91:a6:4c:77:d3:d0:cc:35:4e:7d:08:b5:3c:2c:
                    30:be:56:3c:b6:05:a6:42:3f:22:9c:1f:b7:2e:63:
                    cb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:03:15:AE:DC:AC:38:B3:B6:64:50:1B:6D:01:7D:FA:97:45:74:5D
            X509v3 Authority Key Identifier:
                keyid:A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:72:94:8e:92:ad:b5:ec:e2:0f:67:2e:4f:08:c7:42:0c:67:
         90:32:ae:35:80:65:ab:32:cc:9e:c5:87:c1:5c:d8:c2:8a:3e:
         c3:b3:da:bd:88:08:6d:5c:18:a8:67:2d:8e:d8:e1:2a:9d:f3:
         b1:82:db:9c:14:63:98:c8:d2:32:e3:7d:a2:f8:73:16:f5:aa:
         fc:a3:09:28:49:52:01:b8:9e:56:63:c8:e9:8b:27:a2:9c:3c:
         56:26:7c:f5:84:b0:15:49:cb:14:2f:4d:a6:f5:40:dc:39:1a:
         95:e9:ef:3f:b3:24:46:33:bf:b1:28:e9:07:df:26:87:b5:95:
         c9:7b:46:70:e4:1f:6c:a2:01:2b:ab:b8:91:63:17:3b:00:7d:
         27:33:7a:b4:37:a5:fc:98:04:df:bf:8a:2c:37:78:64:1e:85:
         b4:64:69:27:da:2c:b6:21:24:d0:a1:d3:59:4b:53:96:42:2f:
         b3:a1:77:07:96:97:1c:2d:e1:30:be:76:96:eb:a2:6e:fa:dd:
         bc:66:38:16:61:40:a3:b6:21:98:8c:f1:97:d1:8a:9a:36:91:
         8b:06:48:47:ca:02:9b:9b:d1:9c:32:10:98:f4:ad:8c:a9:44:
         2f:3b:a1:4b:cf:aa:63:fe:8a:4c:3f:df:95:85:95:bb:58:c3:
         9e:72:c2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 16:11:17 2026 by rpki-client