Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
File:                     C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft (raw, json)
Hash identifier:          Tv3YVGpUar2OIsDlOLfTGd236mGR5z8Jh/hjQ+NTMrs=
Subject key identifier:   9C:ED:3D:EA:39:28:0F:77:EE:DA:53:51:F2:41:97:54:EA:6C:A3:8C
Authority key identifier: C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9
Certificate issuer:       /CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
Certificate serial:       70CC031468F09B90BF47C4F04D82F957A7BD7637
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
Manifest number:          2B
Signing time:             Wed 03 Jun 2026 01:16:17 +0000
Manifest this update:     Wed 03 Jun 2026 01:11:17 +0000
Manifest next update:     Thu 04 Jun 2026 03:35:17 +0000
Files and hashes:         1: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: GPynHByObMVja2DkXkj4DTeAw6Zu/eMPLF3FIx9zUPw=)
                          2: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: ykRVY1EBIN+ucKdlxDLDuc2SEVpBAQD0eYMAZuEgryE=)
                          3: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: WqJlVr9FXIRfRfoifCa2GdwTJsz5m8eNFT1ExD1lr/o=)
                          4: C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl (hash: D+VmTX4k5zqT6ZhFn/n95sTn0AkIDu1GyT3V4TJC+GU=)
                          5: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: eKAt3iHXo2lgEa5TxrbQhnXVdOLFjM4blG/eTgED9F0=)
                          6: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: RkOZ4BqJISFweILCm3wRYadHRRUC1NJILvlksQQiLxk=)
                          7: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: fi/7+4zEIqvSpKlVqvbMDeqY2YCrGnjUpksCJ4fAKrA=)
                          8: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: g2Ud6J6HCNFfVncrEeujGYDFgaSbLTIo6wU1RvlC+Tc=)
                          9: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: j1suU85D1/7FjlJvr2yGn6MbcsgwWHNmUCiTqlRJqgg=)
                          10: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: 9h4BjIyizuthkQUuXWWv2bNzQm5B95LJDNd0MLV8X24=)
                          11: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: YRJhcs0eQNvvPgXOg+gQPByywRt+Knf6CLtlmsMwkjM=)
                          12: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: YSFAL2tW6cTVQfgDTgZL8q+MB0PvmVYIYCi98VnDYcA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl
                          rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:cc:03:14:68:f0:9b:90:bf:47:c4:f0:4d:82:f9:57:a7:bd:76:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
        Validity
            Not Before: Jun  3 01:11:17 2026 GMT
            Not After : Jun  4 03:35:17 2026 GMT
        Subject: CN=9CED3DEA39280F77EEDA5351F2419754EA6CA38C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d9:70:9d:5f:a1:cc:1f:5a:85:6f:c8:df:46:
                    39:05:57:a0:d6:52:03:6e:98:e2:05:98:04:39:07:
                    2e:0c:6a:5e:dc:70:53:55:51:b7:40:7c:64:46:78:
                    ed:89:d1:c6:37:b1:ce:f1:5a:d2:e8:94:52:c4:6f:
                    b7:40:f6:8e:da:fd:c0:d9:fd:cf:cc:b9:35:09:12:
                    f3:aa:b6:ce:d0:ee:a9:7d:c7:d7:e2:06:ee:87:1b:
                    df:08:25:e6:af:db:36:1f:99:2e:c0:42:99:be:30:
                    f2:bb:1e:2f:ac:ff:af:32:2a:6f:99:eb:56:37:51:
                    9c:c5:8b:a5:04:7a:25:30:6c:aa:e7:40:bc:3a:73:
                    95:38:eb:88:8f:e4:5b:1a:60:95:60:8f:a3:6c:33:
                    b1:6b:e0:5e:ff:d1:df:7d:35:12:81:b3:4f:36:25:
                    6a:aa:38:cb:8e:f4:13:15:48:05:c9:e0:05:f7:1a:
                    17:a6:fa:e0:5e:65:4e:81:a8:21:be:c7:9d:77:25:
                    f8:de:17:2d:1c:80:a5:90:6c:51:1d:e2:2a:87:85:
                    c4:11:a4:9f:f1:a1:bc:db:da:9f:2f:6b:57:f9:d5:
                    2f:e2:4e:96:e0:65:83:8d:52:a6:bf:5d:12:c1:4a:
                    f3:c3:8f:d1:01:45:29:bd:cf:71:a5:68:81:b9:3f:
                    6e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:ED:3D:EA:39:28:0F:77:EE:DA:53:51:F2:41:97:54:EA:6C:A3:8C
            X509v3 Authority Key Identifier:
                keyid:C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a8:22:d9:1c:01:77:0a:3e:9f:8d:cf:4f:31:ce:f0:52:98:
         b8:12:6a:1f:1f:60:8b:3d:70:73:c4:fa:2f:52:11:b5:b5:a5:
         d2:33:98:5f:9c:90:2c:fb:5e:49:64:92:33:69:c7:07:5b:bd:
         b1:40:a5:89:98:ac:14:ae:eb:eb:03:a7:e3:a8:15:72:20:4e:
         b2:1c:d6:c4:30:6d:7b:c9:4b:f5:09:a7:47:2a:c0:5f:f7:c3:
         f3:56:c4:1c:cf:fe:94:ec:1d:19:5c:f4:4f:ae:a7:78:68:ef:
         22:2b:97:7b:4a:02:94:76:f1:e0:ec:2a:c4:4a:18:a0:db:50:
         d4:18:a7:ef:cf:2d:6f:2b:fd:dd:4b:1a:7b:93:8e:65:11:2d:
         18:e6:08:93:c6:5b:05:c0:04:99:8c:e7:a5:e7:02:c0:e6:31:
         00:0b:74:9f:1d:2e:de:ec:3b:69:5d:97:8f:81:1e:d3:4e:2a:
         1f:a8:da:d8:1a:63:dc:f6:0c:d7:8e:8b:b4:39:4c:e9:92:6d:
         09:bb:d6:16:db:9f:15:e1:0b:b3:6c:d3:73:08:09:d8:24:aa:
         cf:5c:48:70:12:5d:5f:11:c9:a2:98:e8:60:74:16:1a:de:9d:
         9e:0d:57:50:26:ca:01:02:35:9f:93:06:16:35:bc:da:b6:f1:
         5c:ab:74:4a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcMwDFGjwm5C/R8TwTYL5V6e9djcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc2RkFFNzBFNzE0NjQ0OTZFRjRGQThFRUVGMERGNUM5
MzEyQzdDOTAeFw0yNjA2MDMwMTExMTdaFw0yNjA2MDQwMzM1MTdaMDMxMTAvBgNV
BAMTKDlDRUQzREVBMzkyODBGNzdFRURBNTM1MUYyNDE5NzU0RUE2Q0EzOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH2XCdX6HMH1qFb8jfRjkFV6DW
UgNumOIFmAQ5By4Mal7ccFNVUbdAfGRGeO2J0cY3sc7xWtLolFLEb7dA9o7a/cDZ
/c/MuTUJEvOqts7Q7ql9x9fiBu6HG98IJeav2zYfmS7AQpm+MPK7Hi+s/68yKm+Z
61Y3UZzFi6UEeiUwbKrnQLw6c5U464iP5FsaYJVgj6NsM7Fr4F7/0d99NRKBs082
JWqqOMuO9BMVSAXJ4AX3Ghem+uBeZU6BqCG+x513JfjeFy0cgKWQbFEd4iqHhcQR
pJ/xobzb2p8va1f51S/iTpbgZYONUqa/XRLBSvPDj9EBRSm9z3GlaIG5P251AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnO096jkoD3fu2lNR8kGXVOpso4wwHwYDVR0j
BBgwFoAUx2+ucOcUZElu9PqO7vDfXJMSx8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTdhMmQyNWItY2IxOC00NWJlLTlmYTEtMTU0Y2ExNTc5MjIzLzAvQzc2RkFFNzBF
NzE0NjQ0OTZFRjRGQThFRUVGMERGNUM5MzEyQzdDOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNzZGQUU3MEU3MTQ2NDQ5NkVGNEZBOEVFRUYwREY1QzkzMTJD
N0M5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTdhMmQyNWItY2IxOC00NWJlLTlm
YTEtMTU0Y2ExNTc5MjIzLzAvQzc2RkFFNzBFNzE0NjQ0OTZFRjRGQThFRUVGMERG
NUM5MzEyQzdDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC+oItkcAXcKPp+Nz08xzvBSmLgSah8fYIs9
cHPE+i9SEbW1pdIzmF+ckCz7XklkkjNpxwdbvbFApYmYrBSu6+sDp+OoFXIgTrIc
1sQwbXvJS/UJp0cqwF/3w/NWxBzP/pTsHRlc9E+up3ho7yIrl3tKApR28eDsKsRK
GKDbUNQYp+/PLW8r/d1LGnuTjmURLRjmCJPGWwXABJmM56XnAsDmMQALdJ8dLt7s
O2ldl4+BHtNOKh+o2tgaY9z2DNeOi7Q5TOmSbQm71hbbnxXhC7Ns03MICdgkqs9c
SHASXV8RyaKY6GB0FhrenZ4NV1AmygECNZ+TBhY1vNq28VyrdEo=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:50:14 2026 by rpki-client