Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft
File:                     0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft (raw, json)
Hash identifier:          CkO55jHd+MD5mCX3PdVlA6l9p+mkt3v+dIh/jOgnu5c=
Subject key identifier:   6C:0A:1B:E5:CD:28:FE:54:DC:10:96:3C:83:37:7F:03:B2:18:57:16
Authority key identifier: 0B:CB:AF:8D:D0:B6:39:1E:71:5B:01:36:3D:7C:9B:A2:D5:5E:3A:6B
Certificate issuer:       /CN=0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B
Certificate serial:       6C0245B837AF6447B488FF60F6387774A5928CD0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 16:34:17 +0000
Manifest this update:     Tue 16 Jun 2026 16:29:17 +0000
Manifest next update:     Wed 17 Jun 2026 19:53:17 +0000
Files and hashes:         1: 3130332e3235312e34342e302f32332d3233203d3e20313331373735.roa (hash: L72MNFWs2/TCwq6F2L6j0rz6XVlkqh9uNTreRhurkKw=)
                          2: 0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl (hash: VcXRXgzIvaMOJiOyLERYhFkUM79MdPPq7ZhkkLDR3CU=)
                          3: 3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa (hash: nvDEHVXbGDG+kKml4fz3Sd8nG2pVg2Fj1k1Un7attMA=)
                          4: 3230322e37342e3233382e302f32342d3234203d3e20313331373735.roa (hash: eGNJ1n8bDbQmoRq42DR0txAWzu8nV66h2S77nx17RKM=)
                          5: 3130332e31362e3139382e302f32332d3233203d3e20313331373735.roa (hash: sxS8L7umdKtGUeT2wWhEoM1JoZ/BT1Jv1zxeZbH381g=)
                          6: 3230322e37342e3233362e302f32342d3234203d3e20313331373735.roa (hash: CL+9kkFdZB1yJCIEMLA3vz2l4BhvC9xFNrhK/p8qNDc=)
                          7: 3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa (hash: EDtByMK6TjQp0hyoWNPeAL24hwV2DhNIgESuhbW7CKA=)
                          8: 3130332e31362e3139392e302f32342d3234203d3e20313331373735.roa (hash: Aj2bJsLbEDIrOPmhvglJ6dR9+tL1DPZS/JEdmKKswFk=)
                          9: 3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa (hash: Ht0VezJ4KIWCDr66hCxSQYWb1Dq0K65XBemGOv1TcQc=)
                          10: 3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa (hash: QzYDwyPq+ZTPv+eibCiOEvPDQMFXiIE8GpKBHMdWRXQ=)
                          11: 3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa (hash: zqcics87PZHEsmOvrEn/LcF+KjiPqSCgEE2g8ZVSVI0=)
                          12: 3130332e3235312e34342e302f32342d3234203d3e20313331373735.roa (hash: 2gQ9649f0ndaTmtOcqaJrXV4bKlAfn8pEGxSt46Gu58=)
                          13: 3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa (hash: uPncvP1Okkrf/KpwWjJFMH8U1aVMZjmRtyTj19SObI0=)
                          14: 3230322e37342e3233392e302f32342d3234203d3e20313331373735.roa (hash: A4kpcsQqVoWwVBNEfjq/CynxKvKVE62mleHwZXUsKos=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl
                          rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 19:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:02:45:b8:37:af:64:47:b4:88:ff:60:f6:38:77:74:a5:92:8c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B
        Validity
            Not Before: Jun 16 16:29:17 2026 GMT
            Not After : Jun 17 19:53:17 2026 GMT
        Subject: CN=6C0A1BE5CD28FE54DC10963C83377F03B2185716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:14:f1:c0:45:cf:3c:a0:d6:0c:59:61:b7:
                    a2:15:49:6d:1f:8d:a2:24:34:09:5d:89:30:3a:de:
                    f4:e0:1c:91:92:11:42:94:e8:9c:bf:ca:87:9f:8f:
                    2d:21:3a:26:f7:a3:32:83:bd:d6:c8:50:d1:ca:30:
                    63:80:04:72:0b:44:5d:73:cb:86:66:81:87:12:ec:
                    9b:9b:65:63:cb:a7:eb:7b:d3:e4:db:a2:5c:2e:dd:
                    b4:56:21:9c:3f:a9:28:9b:69:10:54:fd:cc:8d:4d:
                    da:8d:9d:54:79:78:ed:27:b8:f4:08:9a:2d:3b:6a:
                    de:4a:60:41:03:b6:cd:f2:21:4c:fd:c7:e0:6a:69:
                    df:05:99:ec:bc:ab:ac:c5:af:76:16:83:89:9f:63:
                    fe:80:13:c7:e9:78:07:88:54:fe:34:1c:7e:8a:fb:
                    12:80:00:96:c1:a7:7f:ab:91:bd:93:f6:4c:48:59:
                    22:fb:17:ab:37:cd:cc:3c:33:fd:b7:8c:85:13:5e:
                    f7:95:ec:91:0e:25:24:0a:aa:6d:22:3a:ec:fc:cb:
                    c9:53:93:31:d1:55:1c:1f:87:84:52:2c:9c:55:c7:
                    c9:3c:a0:4d:1a:e9:42:b2:05:2e:65:55:c5:f2:d2:
                    af:29:85:18:0a:bd:bd:61:75:d9:10:0d:15:93:0c:
                    5b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0A:1B:E5:CD:28:FE:54:DC:10:96:3C:83:37:7F:03:B2:18:57:16
            X509v3 Authority Key Identifier:
                keyid:0B:CB:AF:8D:D0:B6:39:1E:71:5B:01:36:3D:7C:9B:A2:D5:5E:3A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:a8:b1:8a:15:d4:b1:7e:37:5b:96:2d:25:23:f9:a2:05:93:
         f8:a2:0a:b7:7d:81:62:3c:55:2b:a6:af:c2:42:29:2f:00:29:
         2a:3b:4c:5a:aa:c8:2e:06:b1:1a:2f:d1:e6:f2:e3:38:3d:a3:
         d0:af:f3:90:be:2c:c1:af:bc:5d:40:d0:39:79:31:8e:a0:8b:
         db:73:1d:c3:6f:6c:7d:60:f0:f8:31:57:dd:75:71:13:8a:1b:
         b9:c4:bc:ee:8d:73:43:1a:50:4e:4b:e8:87:93:08:fb:51:04:
         e0:48:e5:38:af:d7:af:8d:54:db:a1:63:2c:f0:aa:11:79:98:
         90:35:b2:12:eb:6f:01:ff:0a:f9:46:68:c9:4d:cb:e4:14:ba:
         3b:ad:43:28:5d:2b:f4:eb:29:df:06:68:ed:ea:78:34:9f:1b:
         f3:70:73:9e:90:25:be:65:21:cb:ca:f3:6b:f9:ae:e2:05:7c:
         6b:e0:50:52:b6:88:a0:75:38:f6:62:98:50:b4:1c:3e:5d:11:
         3b:98:60:15:a1:45:c5:e0:9f:41:7c:a2:2c:80:cd:e1:d2:10:
         75:fd:af:ad:ce:af:90:39:61:49:a3:a0:fb:78:fd:da:9f:14:
         3b:f2:97:5d:82:84:85:18:60:00:36:94:7d:bb:7d:02:e3:47:
         38:0c:32:c0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbAJFuDevZEe0iP9g9jh3dKWSjNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJDQkFGOEREMEI2MzkxRTcxNUIwMTM2M0Q3QzlCQTJE
NTVFM0E2QjAeFw0yNjA2MTYxNjI5MTdaFw0yNjA2MTcxOTUzMTdaMDMxMTAvBgNV
BAMTKDZDMEExQkU1Q0QyOEZFNTREQzEwOTYzQzgzMzc3RjAzQjIxODU3MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4BTxwEXPPKDWDFlht6IVSW0f
jaIkNAldiTA63vTgHJGSEUKU6Jy/yoefjy0hOib3ozKDvdbIUNHKMGOABHILRF1z
y4ZmgYcS7JubZWPLp+t70+Tbolwu3bRWIZw/qSibaRBU/cyNTdqNnVR5eO0nuPQI
mi07at5KYEEDts3yIUz9x+Bqad8Fmey8q6zFr3YWg4mfY/6AE8fpeAeIVP40HH6K
+xKAAJbBp3+rkb2T9kxIWSL7F6s3zcw8M/23jIUTXveV7JEOJSQKqm0iOuz8y8lT
kzHRVRwfh4RSLJxVx8k8oE0a6UKyBS5lVcXy0q8phRgKvb1hddkQDRWTDFsJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbAob5c0o/lTcEJY8gzd/A7IYVxYwHwYDVR0j
BBgwFoAUC8uvjdC2OR5xWwE2PXybotVeOmswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWViOThjZWQtYWYxOC00YmZmLWFkNzEtNzNkMmIwYzlkOGE5LzAvMEJDQkFGOERE
MEI2MzkxRTcxNUIwMTM2M0Q3QzlCQTJENTVFM0E2Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQkNCQUY4REQwQjYzOTFFNzE1QjAxMzYzRDdDOUJBMkQ1NUUz
QTZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWViOThjZWQtYWYxOC00YmZmLWFk
NzEtNzNkMmIwYzlkOGE5LzAvMEJDQkFGOEREMEI2MzkxRTcxNUIwMTM2M0Q3QzlC
QTJENTVFM0E2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAL2osYoV1LF+N1uWLSUj+aIFk/iiCrd9gWI8
VSumr8JCKS8AKSo7TFqqyC4GsRov0eby4zg9o9Cv85C+LMGvvF1A0Dl5MY6gi9tz
HcNvbH1g8PgxV911cROKG7nEvO6Nc0MaUE5L6IeTCPtRBOBI5Tiv16+NVNuhYyzw
qhF5mJA1shLrbwH/CvlGaMlNy+QUujutQyhdK/TrKd8GaO3qeDSfG/Nwc56QJb5l
IcvK82v5ruIFfGvgUFK2iKB1OPZimFC0HD5dETuYYBWhRcXgn0F8oiyAzeHSEHX9
r63Or5A5YUmjoPt4/dqfFDvyl12ChIUYYAA2lH27fQLjRzgMMsA=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:11 2026 by rpki-client