Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.mft
File:                     42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.mft (raw, json)
Hash identifier:          wZIQHne5BVPCvP8aK8EFcluriNXnIPvVR9/schkJpIc=
Subject key identifier:   CC:97:E2:FE:EA:ED:A3:00:6F:FB:9B:0B:DD:2E:E3:7E:A7:88:78:BD
Authority key identifier: 42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1
Certificate issuer:       /CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1
Certificate serial:       390248DA0F9A9AC2024973C4ECFCC1449E462317
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.mft
Manifest number:          2A
Signing time:             Tue 02 Jun 2026 08:45:51 +0000
Manifest this update:     Tue 02 Jun 2026 08:40:51 +0000
Manifest next update:     Wed 03 Jun 2026 11:01:51 +0000
Files and hashes:         1: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: 56ijIHqqSk8c3H2LMkosuLNrhIdcVODmDTdn5RdBAs8=)
                          2: 42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl (hash: J3xLBCuBrU6Tro3iSI2Gj5DVvZMbi5iDAZlv4Ms0ivI=)
                          3: 3130332e3131322e3133362e302f32332d3234203d3e20313337333330.roa (hash: ipxVmEqkSY/rUg/MEVdJsexLgVL9kwLODWYNxKifMEM=)
                          4: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: SZaF9BZHsjDhigmYn8b3CzFda4W8ebb0Hsx2Q1oeRzY=)
                          5: 3130332e3131322e3133392e302f32342d3234203d3e20313531353831.roa (hash: WaKqkDc0ouK52ognaeUSTfkx6wRBT7bM1uvEek+pi80=)
                          6: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: +s6V7chW9BCXF4RH6IIvUTuhlAIQMIfTLqTnQxtzFJc=)
                          7: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: fIOsFhpM6mZ0ay8plNzxJPKpFufwY8tJJSS7oqgYcsg=)
                          8: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: U+8f/Sf5BM6B7EOHAfWHJW9sCVbf0kmnz38ZyKkQBbw=)
                          9: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: 8Y/jKSd9kB6rjelE/LuXNaRhi6lyjXnEf6P9Z4FudkE=)
                          10: 323430323a616134303a31363a3a2f34382d3438203d3e20313337333330.roa (hash: iJPAgEFu6DCGypmIkX2ltTGkjNhSTUKEXQCloAvrJiM=)
                          11: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: uvzX2Nd7Q12fzL8hXRUKfJ8C5BrMMOuiXcXxFdsf69M=)
                          12: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: HFFKls9pbtJi4XHEKOJXiwkAPqHmAac8HcpirmppgTA=)
                          13: 3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa (hash: Jh4153SJST+gW7ANpBClYWYl7VxXrPgYyKcYuMFYuuU=)
                          14: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: RrGdV1XJliqI0gjX2CQr8vQRm5fbhat+4A8nvsBfMc4=)
                          15: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: hPHF5L92/aZrD7rqbkjSlybCZ3IaJkVfsaRnuRXTb98=)
                          16: 323430323a616134303a31373a3a2f34382d3438203d3e20313337333330.roa (hash: PzVQp6aiBVjvP/U3zMamfQ4iCuLzihXX4daqicDx2RI=)
                          17: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: zcOeMXhbAw1VfW5yDv78FmXwagz7024FcemSV86aock=)
                          18: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: UAQHvTVxmZwgYkJuLSjYOTuU32z2mP4v9bphLMi1a7U=)
                          19: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: EyxfIo7OAQWw1MGLf2hnboQwKWhY+SI5HwClxhLsbJg=)
                          20: 3130332e3131322e3133382e302f32342d3234203d3e20313531303433.roa (hash: 1nDbB6+AlusMuURwAYqPorAzAwV73/N5BpxeWl1cVko=)
                          21: 323430323a616134303a31393a3a2f34382d3438203d3e20313337333330.roa (hash: gYXFaD7OGmClPvYCCEB+y8CETc4wKwqYJyHyDsAQ7W4=)
                          22: 323430323a616134303a32303a3a2f34382d3438203d3e20313337333330.roa (hash: 4YpgCEixPvb9hTNqvAoLsU4GXNDjvT+0cAD6SPzANag=)
                          23: 3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (hash: 1pbALgF0SkUZYTyq7Q3+9rGtyF7anFJiYf8hrsRL7Ws=)
                          24: 323430323a616134303a31383a3a2f34382d3438203d3e20313337333330.roa (hash: PeJ7812iCAFwEL4RVyYBQ7zi2tNf/qvlV66+P1JlSLA=)
                          25: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: b9GNtI2wwQoxk4bwsvnVud13Q339KjqEN4XsWPttMMU=)
                          26: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: BtxyQFIMeQoYghqIIfr/UnzQN/CuXgQAOmeT+u78ExM=)
                          27: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: rWbxH2hGryRmSB5HYIpvciYR1+m4YkNKhkM3GZ73zEs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl
                          rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:02:48:da:0f:9a:9a:c2:02:49:73:c4:ec:fc:c1:44:9e:46:23:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1
        Validity
            Not Before: Jun  2 08:40:51 2026 GMT
            Not After : Jun  3 11:01:51 2026 GMT
        Subject: CN=CC97E2FEEAEDA3006FFB9B0BDD2EE37EA78878BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0d:b5:26:5b:be:3f:a5:52:84:f5:55:fd:ad:
                    aa:e8:d7:d4:5a:e8:a5:0d:8f:f1:cc:eb:89:2b:62:
                    b9:38:00:4b:a9:0e:68:02:1c:b7:61:be:b1:62:77:
                    aa:68:a9:9e:5e:62:91:12:ee:88:05:c1:00:18:4e:
                    f4:36:c2:47:3a:35:3c:c3:fa:3a:37:f7:75:e2:e4:
                    fb:ad:5e:df:61:21:f5:96:2f:9f:b5:1a:da:96:76:
                    53:e6:a4:fc:b0:bd:84:73:c2:14:c3:fa:37:5f:47:
                    58:58:e3:2a:a3:01:10:38:dd:37:cd:d6:8e:8f:f0:
                    92:ec:03:be:db:94:3d:c9:3f:22:16:6c:9d:0f:17:
                    a6:a2:16:1d:1a:f7:eb:0d:93:fe:d2:08:75:6e:43:
                    c7:dd:1b:ed:15:f1:e6:1a:fc:b1:d0:db:0d:6a:74:
                    fd:f2:2b:b4:e1:2d:cd:7e:40:99:a6:d7:b7:28:e2:
                    6e:1a:31:20:11:27:5f:0b:e3:da:3c:ca:6a:47:9d:
                    7b:67:25:79:67:50:46:71:72:c5:12:a8:bf:0d:e6:
                    64:4b:16:d9:f7:39:55:aa:ae:c9:0b:d7:8f:ad:ac:
                    1c:79:e5:f2:a9:c3:0f:81:d1:ae:44:e5:f1:8b:8f:
                    27:0d:53:47:d6:ca:98:d6:94:70:06:11:29:f3:a6:
                    7e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:97:E2:FE:EA:ED:A3:00:6F:FB:9B:0B:DD:2E:E3:7E:A7:88:78:BD
            X509v3 Authority Key Identifier:
                keyid:42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:59:f1:74:90:da:dd:2f:b5:0d:6b:5f:d1:54:b9:23:65:c2:
         45:f6:fb:c8:c4:d1:62:87:bb:a3:5d:39:a7:5e:07:36:ca:6a:
         b0:a6:02:4b:49:cf:36:ff:62:b7:86:09:fb:30:8b:e9:59:3e:
         01:53:3a:79:d6:44:83:9d:40:93:ff:09:e1:ed:9f:eb:4c:a3:
         10:31:66:51:db:c8:73:5e:5c:83:98:a6:53:0b:55:ba:aa:9d:
         28:2b:89:ae:01:cf:87:12:e8:31:25:c4:c8:56:30:2a:a5:e8:
         d4:cc:c5:bd:12:75:8a:44:2e:2c:7d:0f:5a:7c:af:bb:bd:3e:
         58:10:72:a0:b8:3b:40:2c:a3:45:f8:ee:90:8b:b6:5a:d4:a6:
         7b:78:3c:7f:b4:24:e4:2b:ba:41:06:18:16:68:74:0f:06:6f:
         38:1f:c5:8a:86:b9:de:91:a1:eb:5c:83:75:70:dd:52:8d:ae:
         58:39:62:aa:24:d2:2a:ca:9d:a5:96:6c:24:45:19:2f:38:45:
         c1:1b:42:13:ae:dc:c4:a5:a5:42:d3:ff:df:b8:c1:18:82:8c:
         c2:70:72:96:f3:9a:ce:de:ef:f7:bd:81:3d:d0:4a:c3:8c:02:
         9a:00:e9:7e:04:c7:ff:cb:fc:23:77:11:81:9e:dd:2f:e0:d7:
         af:1c:72:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:18:58 2026 by rpki-client