Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft
File:                     95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft (raw, json)
Hash identifier:          wAe/foRSgpOPQU6jIoyYNUhn9T4YX8G+nmbtAG3gkKE=
Subject key identifier:   DE:C8:0D:96:A1:A4:FE:F9:A8:64:A7:F1:CC:3A:EE:CE:33:07:1A:D2
Authority key identifier: 95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36
Certificate issuer:       /CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36
Certificate serial:       6A8430B1E4B37AD41A2F5243CC1E2DC38838D9E6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 00:38:42 +0000
Manifest this update:     Wed 17 Jun 2026 00:33:42 +0000
Manifest next update:     Thu 18 Jun 2026 01:15:42 +0000
Files and hashes:         1: 95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl (hash: Wc13PlDNroH+yIDU04JyRrzqoOqlRSxSOL1IFdxutCE=)
                          2: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: 0J9oKNbFkC4ek4+yIhYejI4HBbjKDbQ0B3Yfg4Dgqy4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl
                          rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 01:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:84:30:b1:e4:b3:7a:d4:1a:2f:52:43:cc:1e:2d:c3:88:38:d9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36
        Validity
            Not Before: Jun 17 00:33:42 2026 GMT
            Not After : Jun 18 01:15:42 2026 GMT
        Subject: CN=DEC80D96A1A4FEF9A864A7F1CC3AEECE33071AD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:81:61:28:b0:e8:28:db:5e:20:5b:23:eb:8c:
                    31:09:c8:6f:44:2a:9a:2e:d0:65:1e:17:3c:58:1e:
                    ea:91:d0:75:c6:89:8b:85:ba:45:85:c4:9b:ea:c8:
                    89:fc:b8:57:3f:54:f5:22:1b:9d:09:54:61:65:4e:
                    65:fb:0b:5b:12:9d:0d:e9:af:32:18:50:1a:9f:b7:
                    78:54:7f:4f:59:2b:7a:b9:83:a3:61:e4:29:4c:f6:
                    48:db:94:08:b9:48:d6:73:17:4f:98:2b:33:7c:43:
                    79:bf:01:ea:06:29:27:03:4e:e4:b0:10:58:1e:6d:
                    5b:b2:f3:a8:86:ee:a8:30:e3:47:78:78:a4:00:4f:
                    db:1b:5e:66:a5:3a:c5:b0:1b:b3:ef:f5:4f:62:e6:
                    eb:49:df:35:cc:b8:af:13:f8:0f:e3:46:b9:0c:fa:
                    ca:c8:43:f1:98:32:4d:cf:f7:6b:f0:59:74:0c:c4:
                    ad:d1:43:2d:c2:54:a4:1b:49:f3:c1:20:1e:9f:a6:
                    ea:58:c9:e0:16:64:2e:bd:9b:a7:fe:bd:6b:5c:a5:
                    c3:81:5b:fc:44:50:90:7c:3c:77:44:2b:55:f8:90:
                    c2:07:42:0f:08:4d:10:06:c8:d8:1c:50:d6:07:85:
                    b5:89:13:d8:94:75:c3:1b:3f:41:16:34:10:ce:ad:
                    57:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C8:0D:96:A1:A4:FE:F9:A8:64:A7:F1:CC:3A:EE:CE:33:07:1A:D2
            X509v3 Authority Key Identifier:
                keyid:95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:45:cb:fc:80:53:8a:93:42:8a:d8:3b:25:c3:f9:13:5f:c5:
         40:a0:37:97:03:4e:a3:c9:3a:66:39:53:5f:9c:16:32:e6:6f:
         4f:ec:c2:e2:85:fa:d3:5d:60:73:a8:c1:bf:d3:26:1d:44:aa:
         a8:23:32:67:0c:20:b7:26:d9:c4:59:32:f9:48:85:ed:e2:b0:
         af:35:0f:da:69:0e:b4:d8:2d:82:5f:c4:13:87:f1:5c:aa:7a:
         15:42:96:be:cb:89:a7:f1:da:eb:71:81:cc:56:a3:b1:ee:c0:
         4b:d4:47:09:d8:bb:f4:64:94:10:70:e3:f1:5c:7f:48:d9:f6:
         af:7d:0a:a1:e4:44:4d:5c:3e:9d:8d:46:6b:24:4d:39:2d:32:
         74:51:39:fb:41:4b:43:ff:b3:0b:3e:72:36:d1:c9:86:2d:1d:
         f3:57:ee:f3:b4:6f:44:6f:fb:ed:70:18:a9:ea:fb:af:af:dc:
         d2:5b:b6:cd:4c:78:77:7c:33:a2:97:16:ca:28:f2:90:9d:24:
         1c:1a:0f:c7:a0:ce:3a:45:42:95:04:74:c0:2b:80:f4:d4:84:
         ec:d6:83:79:ed:cc:9f:37:11:0c:3c:d2:8c:d0:73:77:ae:57:
         5e:34:7a:ee:3e:97:e5:d2:60:e5:a6:14:93:69:84:31:6f:9e:
         dc:1c:d9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:42:59 2026 by rpki-client