Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft
File:                     5645F0B82898A2A9A354AB086BC696E81297553D.mft (raw, json)
Hash identifier:          jILD5cEUz6jCSgmoyZXsE1ixk7wV10Uox0JnLP+3f6Y=
Subject key identifier:   3C:32:33:B5:82:CE:2E:2D:83:D0:04:6D:38:B5:FE:B1:A2:55:DD:DC
Authority key identifier: 56:45:F0:B8:28:98:A2:A9:A3:54:AB:08:6B:C6:96:E8:12:97:55:3D
Certificate issuer:       /CN=5645F0B82898A2A9A354AB086BC696E81297553D
Certificate serial:       57DD2F079EB679CCF4636D9A55E16310A2DCE49A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 10:00:01 +0000
Manifest this update:     Wed 17 Jun 2026 09:55:01 +0000
Manifest next update:     Thu 18 Jun 2026 13:53:01 +0000
Files and hashes:         1: 3130332e36372e36392e302f32342d3234203d3e20313531393938.roa (hash: qeHJ1PkAaAN+foqEt/Aw5gnh3414OQ8lq2kg+Oj23CQ=)
                          2: 5645F0B82898A2A9A354AB086BC696E81297553D.crl (hash: 4OQppo2Flzytd1IHTXI9c8hgmYWTPTaMvIn4o2YDGT8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.crl
                          rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:dd:2f:07:9e:b6:79:cc:f4:63:6d:9a:55:e1:63:10:a2:dc:e4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5645F0B82898A2A9A354AB086BC696E81297553D
        Validity
            Not Before: Jun 17 09:55:01 2026 GMT
            Not After : Jun 18 13:53:01 2026 GMT
        Subject: CN=3C3233B582CE2E2D83D0046D38B5FEB1A255DDDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:0c:68:04:32:87:19:58:45:fb:0e:78:57:
                    f1:67:b5:45:2c:f6:6c:f8:ae:92:6a:42:77:20:6b:
                    cc:e1:59:69:30:f7:bb:7d:04:66:90:37:fe:9b:c1:
                    01:15:d5:4f:f7:6f:2b:59:af:e0:f5:d9:ab:c6:70:
                    2b:14:27:65:34:b3:3e:b5:f2:ab:6b:d8:9c:22:eb:
                    62:67:28:66:46:69:5b:63:4a:9b:2e:5b:b6:9e:a2:
                    54:27:2a:3a:c6:60:41:87:4d:e5:82:00:21:fb:4a:
                    aa:0f:ce:34:46:b0:5a:b8:18:5f:36:99:de:65:ec:
                    9b:d7:18:d1:7c:21:da:5d:ac:84:50:dc:94:4c:45:
                    04:98:ae:b8:58:39:cc:2f:58:88:17:0c:90:e9:65:
                    cb:56:b7:e8:95:ad:ca:46:3f:78:d3:98:a4:23:c1:
                    53:7b:68:24:38:bd:59:b2:a5:4e:83:14:f4:2c:a4:
                    c4:4d:80:5d:09:ec:98:f5:76:3b:b2:56:5e:a7:1e:
                    46:9c:d2:46:a4:76:3b:1c:e5:e7:98:bf:45:c7:b1:
                    0e:2f:7b:d1:4b:94:79:67:f0:15:81:f9:7e:17:f7:
                    f4:40:89:c4:7d:69:5e:bb:32:59:f9:9e:a8:d2:7c:
                    de:9c:32:bd:8f:09:38:f3:0c:1e:10:92:74:52:74:
                    67:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:32:33:B5:82:CE:2E:2D:83:D0:04:6D:38:B5:FE:B1:A2:55:DD:DC
            X509v3 Authority Key Identifier:
                keyid:56:45:F0:B8:28:98:A2:A9:A3:54:AB:08:6B:C6:96:E8:12:97:55:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:71:da:b8:2c:66:9d:ce:ea:cc:41:50:39:d3:41:fa:1a:54:
         10:68:14:ef:79:f5:ed:21:40:03:e4:5d:19:50:d7:7c:e4:90:
         50:15:fe:db:33:59:12:f3:c5:b9:38:a4:31:4e:e9:40:87:22:
         c9:eb:c5:08:e8:38:ff:49:b1:2c:94:c3:bb:32:c8:63:d1:52:
         67:24:42:53:cf:4d:aa:8f:24:e7:bc:1e:3b:e3:76:cd:19:75:
         96:0f:bd:ed:80:9a:65:59:27:54:1f:b0:9d:60:3c:45:da:d2:
         59:55:4e:5d:4f:47:56:0d:ec:44:54:52:bf:72:02:18:19:75:
         85:5c:0c:4a:c1:e6:fd:d2:e5:0c:03:38:c1:5a:6e:0d:b2:d7:
         0b:f1:dc:b3:71:53:1f:73:b2:d6:b4:8a:83:58:62:14:dd:3f:
         18:86:ba:d5:d6:15:c2:3e:49:c3:54:4e:16:eb:e8:50:b8:90:
         c3:60:42:84:6b:af:6f:55:cc:ac:4d:d6:d0:46:60:be:e6:8a:
         7b:be:29:4d:96:8f:29:f5:4d:3c:52:cb:68:29:e5:f6:52:d0:
         c7:4c:8d:6c:16:78:35:f3:98:0c:03:17:18:26:87:d1:98:f6:
         6d:85:0d:b1:66:90:2c:95:2e:2c:da:a0:00:8a:6c:cf:4f:b7:
         62:fb:5d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:32:51 2026 by rpki-client