Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft
File:                     993E93A0664A9D902D978F3596929ADCAC0D2885.mft (raw, json)
Hash identifier:          6FTE71wtEGVZal8YeJ4P24OKDExZAtWJOg7W50g9Fxs=
Subject key identifier:   3B:EB:32:CA:1B:93:C8:95:83:90:6A:5C:5A:C2:CB:72:74:DF:A7:01
Authority key identifier: 99:3E:93:A0:66:4A:9D:90:2D:97:8F:35:96:92:9A:DC:AC:0D:28:85
Certificate issuer:       /CN=993E93A0664A9D902D978F3596929ADCAC0D2885
Certificate serial:       6E89CB5607BC411C5D67467C23687C624B8080C7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 16:09:30 +0000
Manifest this update:     Tue 02 Jun 2026 16:04:30 +0000
Manifest next update:     Wed 03 Jun 2026 19:47:30 +0000
Files and hashes:         1: 3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (hash: 5aAX0IVwi9Xgk1AjsNPK5oymgMFcjVvUxV24RP5spu8=)
                          2: 993E93A0664A9D902D978F3596929ADCAC0D2885.crl (hash: 8QTk50AWygVKhXt++TiOiVCDXbj7bl7iCF4U2Agpvpc=)
                          3: 3130332e38352e3131362e302f32332d3234203d3e203633383734.roa (hash: poDQZ/2rD8eLtkNhMBfgdpUsz7sf37vpupMVDHqtCB8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.crl
                          rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 19:47:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:89:cb:56:07:bc:41:1c:5d:67:46:7c:23:68:7c:62:4b:80:80:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993E93A0664A9D902D978F3596929ADCAC0D2885
        Validity
            Not Before: Jun  2 16:04:30 2026 GMT
            Not After : Jun  3 19:47:30 2026 GMT
        Subject: CN=3BEB32CA1B93C89583906A5C5AC2CB7274DFA701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:83:42:19:77:5f:f1:ed:91:b0:ba:65:5c:50:
                    08:47:ac:e8:e4:37:35:d2:9f:66:9b:f4:5d:eb:ba:
                    a9:34:70:40:0d:ca:ac:f6:0e:8b:1e:e0:a1:64:51:
                    11:20:db:83:5e:bc:de:99:3d:70:2a:3f:37:7e:69:
                    1a:33:a0:39:82:47:dd:7e:1c:7f:5e:d7:87:e8:17:
                    d6:41:25:51:e5:d6:6f:22:d3:8a:2c:96:48:59:49:
                    be:d7:9d:8e:0d:c5:51:56:6b:58:d9:11:b6:30:3e:
                    cc:f5:52:17:f7:f8:24:50:c0:93:64:a1:0a:63:b3:
                    80:90:bb:ea:13:de:da:00:e7:33:6f:33:63:95:07:
                    bc:ca:72:7d:c8:9c:ff:bc:1f:fd:f6:fe:73:13:99:
                    ae:54:5b:4f:93:06:7e:10:c4:95:6c:a1:9c:88:bd:
                    5d:8e:5c:55:89:ce:35:35:41:c1:c3:b8:87:1e:8e:
                    54:cc:ee:ec:1e:2c:07:f5:88:01:8e:cc:d3:b7:7d:
                    eb:5a:43:90:5f:83:44:63:5c:8c:f9:53:39:a0:1e:
                    af:4b:f8:b3:6f:e3:ee:06:bb:03:74:b3:9d:74:8e:
                    d2:52:85:68:d5:09:66:25:23:0e:3e:28:92:1e:24:
                    98:40:9f:94:63:9e:7d:88:2e:72:6b:b5:0b:77:48:
                    71:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EB:32:CA:1B:93:C8:95:83:90:6A:5C:5A:C2:CB:72:74:DF:A7:01
            X509v3 Authority Key Identifier:
                keyid:99:3E:93:A0:66:4A:9D:90:2D:97:8F:35:96:92:9A:DC:AC:0D:28:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c0:15:71:94:7d:02:69:c2:6e:83:48:8c:d9:52:4c:59:ac:
         ce:61:aa:59:9c:6b:5f:4e:47:19:f5:7f:2d:7e:0e:9e:e9:03:
         65:cd:70:aa:1a:f7:d4:09:b4:a0:8d:3f:af:66:a7:a3:59:cd:
         a8:7e:58:d4:ea:3a:62:48:c3:65:4b:f2:43:5b:c5:d3:a7:b4:
         01:6b:8c:98:3c:45:5f:21:61:4e:62:f1:73:f8:40:75:c9:6e:
         e8:2e:3c:d0:61:16:bc:35:5b:01:c8:ba:95:f2:ea:0f:42:17:
         0e:50:23:fb:11:d0:ca:ff:36:68:58:be:b5:ca:fc:ae:74:82:
         6c:dc:b6:1c:fb:85:23:32:16:5b:0a:f9:7f:47:f8:26:b6:aa:
         e4:06:98:3c:50:0c:59:f5:22:26:93:cc:f1:bb:2e:3e:92:f0:
         f6:f8:43:b0:de:70:01:83:66:58:78:66:95:79:c9:cd:30:d0:
         35:25:a6:90:73:13:67:ab:2b:35:b1:ca:f0:52:cf:ba:a3:eb:
         f2:2b:8f:e5:16:a1:aa:60:6d:30:64:81:8e:52:ab:0b:d5:5a:
         18:5d:6a:00:ef:31:16:e4:85:84:84:6a:5a:04:28:26:66:7c:
         d3:dc:bb:d0:cc:7b:2b:3c:ee:a8:33:b9:96:9c:34:44:c8:cf:
         ad:ea:69:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:26:55 2026 by rpki-client