Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft
File:                     548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft (raw, json)
Hash identifier:          l4yReMQtVTBkABxABUoo5O7WXBqpX5CVu0OfW5wYIe8=
Subject key identifier:   07:2E:51:5E:C4:FE:AF:37:AB:8B:A7:D3:C4:35:EF:7B:19:43:20:B9
Authority key identifier: 54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E
Certificate issuer:       /CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E
Certificate serial:       2122B9DF96F4D79DBC0B5447616323F6DC8FCA00
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft
Manifest number:          3F
Signing time:             Tue 16 Jun 2026 23:27:30 +0000
Manifest this update:     Tue 16 Jun 2026 23:22:30 +0000
Manifest next update:     Thu 18 Jun 2026 02:28:30 +0000
Files and hashes:         1: 34352e3132332e3134312e302f32342d3234203d3e20313532303439.roa (hash: z7b5wYvP0ol8wMsB+eUBC4JsGZJCfnyyWM+aWZV2US0=)
                          2: 34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa (hash: WXJAvvrLyVsCEeqVhO/3ROtMMzsfMOa0TSLjg89eRJQ=)
                          3: 548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl (hash: +hp5CA2KjUE3fhYIZQBZJa9GsqDVJ1/l2saD0KpRJZc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl
                          rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 02:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:22:b9:df:96:f4:d7:9d:bc:0b:54:47:61:63:23:f6:dc:8f:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E
        Validity
            Not Before: Jun 16 23:22:30 2026 GMT
            Not After : Jun 18 02:28:30 2026 GMT
        Subject: CN=072E515EC4FEAF37AB8BA7D3C435EF7B194320B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:a6:98:2b:db:90:41:c8:09:9a:9a:0e:e1:
                    b2:53:e6:3f:63:0b:be:fb:8b:52:4a:94:02:9b:c4:
                    37:b4:02:ba:37:54:5e:8d:f6:69:0c:6d:db:73:7d:
                    c4:f8:76:ae:61:19:ed:ca:da:93:0c:48:3d:dd:59:
                    4e:3c:d9:12:40:54:65:77:ff:84:a4:b0:97:54:9b:
                    72:5a:0c:56:c9:b5:53:06:42:58:35:72:ff:2b:cf:
                    c0:5c:ca:25:cf:ff:09:9e:88:94:5d:4f:b2:60:c0:
                    8f:09:02:6b:fe:52:5a:c3:58:37:56:9b:0d:43:54:
                    01:98:55:58:d2:5c:e0:b0:5e:ad:91:bb:e1:ce:09:
                    99:6b:b4:a7:70:b8:36:8e:36:c3:2f:70:89:04:f2:
                    88:83:f8:1f:ed:e8:a6:8d:f2:3c:45:b1:fa:f8:91:
                    0e:9e:c2:03:d1:2b:37:0c:f4:a7:3c:0d:ac:c8:58:
                    a7:12:58:34:77:e4:4a:50:46:cc:41:fc:33:2c:ac:
                    44:a9:a3:80:ac:e0:35:97:ec:f5:07:7f:f7:73:0f:
                    14:e2:2c:47:15:16:02:3e:62:4b:54:a4:2d:15:ec:
                    36:ff:44:ca:dd:16:72:41:1e:8a:a7:f3:77:4c:84:
                    07:2e:96:d1:78:30:76:0d:b8:55:7c:2a:48:cc:d7:
                    0a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2E:51:5E:C4:FE:AF:37:AB:8B:A7:D3:C4:35:EF:7B:19:43:20:B9
            X509v3 Authority Key Identifier:
                keyid:54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8f:97:04:9d:9e:af:04:1a:6e:38:07:62:e3:aa:9d:f1:11:
         23:69:a8:6b:ca:c3:cd:2a:47:7b:15:9a:72:bb:ae:a0:38:75:
         87:bc:bd:19:dc:d3:3d:42:93:91:8e:b3:ac:ff:0b:f2:75:e2:
         da:d0:c1:26:3c:90:e6:c5:13:4f:1c:4f:b1:22:e3:d2:aa:71:
         33:62:2e:46:27:13:03:04:38:f9:01:62:45:1d:e1:0c:93:90:
         04:c6:de:99:4e:55:cb:b2:bd:85:ca:0a:44:cb:48:31:52:87:
         cf:3a:2d:92:c6:e8:d8:65:3f:cf:20:dc:b8:af:0c:83:ec:db:
         17:3f:a8:d2:a3:80:31:56:76:3f:1b:83:a7:d1:dc:11:b0:42:
         d6:c3:9d:e4:07:5f:a5:63:d3:96:e7:db:ee:3d:eb:83:d2:c4:
         7e:30:70:1b:80:9c:dc:60:0a:9b:57:77:9d:95:66:49:68:0b:
         bc:c8:ef:f1:7f:60:d5:5a:3b:40:4c:ee:d9:85:c2:d4:de:3b:
         e7:db:5f:15:6c:5c:11:de:9d:78:13:e9:ed:49:98:a5:45:9f:
         21:6f:84:0d:bb:e2:b9:41:be:d4:a0:de:6f:22:95:25:ac:2d:
         e5:2a:aa:12:a5:e6:12:22:4b:bc:c7:21:6a:50:9a:b8:7d:94:
         16:ad:77:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:31:44 2026 by rpki-client