Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
File:                     C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft (raw, json)
Hash identifier:          EYuAe2p/HQAOPDvoM7Vh8qtYPkbIaXTCqsvHdUNUSbQ=
Subject key identifier:   DC:61:F9:53:3D:FE:6E:70:C7:6C:9A:08:10:10:28:F0:01:34:23:CC
Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9
Certificate issuer:       /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9
Certificate serial:       0EDC1B85AF9E27999C67AA9D83C0A2BF3888C735
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
Manifest number:          2A
Signing time:             Tue 02 Jun 2026 11:18:59 +0000
Manifest this update:     Tue 02 Jun 2026 11:13:59 +0000
Manifest next update:     Wed 03 Jun 2026 13:46:59 +0000
Files and hashes:         1: 323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa (hash: CqP8eUG+XNHe2ZRDBQbbiW1JHTmz7eUiEFlYMZh4rHY=)
                          2: 323430303a343661303a33343a3a2f34382d3438203d3e20313437313337.roa (hash: FpuosyUSWMTfhk1yjPzRRle4FSUaLD0RRnI3/i081xk=)
                          3: 323430303a343661303a33313a3a2f34382d3438203d3e20313437313337.roa (hash: oQlQCcGSIyApZwe0zh02JHB8NgdLlqCqb+hc+WKLBAk=)
                          4: 323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (hash: OzuliA2N8wNt6MGtPujtGB6U6rXsRoWhjjYaeaS0yAs=)
                          5: 323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa (hash: 8i1yDAIM/jiddL2Dyt3x+4fTdzbaN44q0VQUxOtuXgI=)
                          6: 323430303a343661303a323a3a2f34382d3438203d3e20313437313337.roa (hash: +c41dutgFT2ZE2lEvbuAaTazQUEb6UW8ui2Kg7nMrVo=)
                          7: 323430303a343661303a31303a3a2f34382d3438203d3e20313437313337.roa (hash: Xtekq0XfiyDF84CgG01kPnBfk5gv3roxTAHumf4Y5lY=)
                          8: 323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa (hash: RZNwhsdWPwHsJ1753q7l7RVtxdL0EUNu722JNRatZoc=)
                          9: 323430303a343661303a33353a3a2f34382d3438203d3e20313437313337.roa (hash: 1xZJhr0aQYYOOzMLyDygpRTMMvY7vsa9JEcRlTrt0Lw=)
                          10: 323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa (hash: UT1h2LMTjTQJ7ZJ7JztoMi17EHjsbtJIUvBVi8DlKSo=)
                          11: 3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (hash: WVnSwWyfbHb1cF4zK3nfAh3+4mXKYVShqhzNFGYV1/4=)
                          12: 323430303a343661303a31333a3a2f34382d3438203d3e20313437313337.roa (hash: /GIxYy0vSq64HynAB2s2ChjySqHSwoYFUlMZoPK4jfs=)
                          13: 323430303a343661303a333a3a2f34382d3438203d3e20313437313337.roa (hash: gfbcpg+SVHwH5IjoNRXSMVdGISaiGt5LV1khyRPoF44=)
                          14: 323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa (hash: 5IqA+aFlD3C+qm5E4iE8TertLT23UTTXA9Svn7QpuMk=)
                          15: 323430303a343661303a3a2f33322d3438203d3e20313437313337.roa (hash: O05Ps8hAd8rr0CaoB90NQsqUuO2fcg1LWgMOuLkP0To=)
                          16: 323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa (hash: zV398UgRTlptT97Qc1/wsPkzfK97ViGntlsJokWgHgg=)
                          17: 323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa (hash: +wm/VK77fHrWVU/ZkF+Uqbjn7YBt3NYF+N/EiT1H9LU=)
                          18: 323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa (hash: rrbo9gFfKTg6spECSvy8Q2yWG7nEl4xu5sTVFZ6rz7o=)
                          19: 323430303a343661303a32323a3a2f34382d3438203d3e20313437313337.roa (hash: Z17KOPUimeqYA1aZq3SNkRhgncaUQxfgpGD5Ws+TmaM=)
                          20: 323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa (hash: VEWKVQt8y/8GPWkN8tAdK8b4mgUdgFzyKGEQfkduN98=)
                          21: 323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa (hash: 5SgJA7bdr6raZ7Mqjwc8wZqhlg7dpVjh8FGcFa+U5rk=)
                          22: 323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa (hash: 0dcMygO+Bc+TXcrUgmdBEdxgQ/GML+71SETcyrBroSo=)
                          23: 323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa (hash: R1kE9uKrZbeLkgzHC7e5BusLmDv674DkMdgzbBvwhAw=)
                          24: 323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa (hash: OLNk+VWdGI1qmIPu8Drgqpmv6WGw5uCOToriZ5VHa9w=)
                          25: 323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa (hash: QdXCuvjo6r6bGTPWedrJUM8DCfGtVmTE0qQwjHkmDQ4=)
                          26: 323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa (hash: AMjnyAEfiOVxNwyzM8O6HXzZGTxkgyap27aKj3W6Skk=)
                          27: 323430303a343661303a32393a3a2f34382d3438203d3e20313437313337.roa (hash: HLJY57d7qqR9FiGfUIjlFjjQrGocl/3YC5fSm+HtD9U=)
                          28: 3130332e3137372e392e302f32342d3234203d3e20313437313337.roa (hash: LiXvBI/+0aSmpVLjojfaeEmHB07g7RdwE9fmn4IWLtc=)
                          29: 323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa (hash: b3pQDI/eP+0SwgVnsmQmkeZ1d2w8eSJ1YWWJnGvXDz8=)
                          30: 323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa (hash: bUiGB1W7Se2nx9Nc64eycOugCZo681BWG/duCoJZWeI=)
                          31: 323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa (hash: cACJn3CN44BJInMN2D1DUzz5f/u9M8K8ZaV5c704i0c=)
                          32: 323430303a343661303a313a3a2f34382d3438203d3e20313437313337.roa (hash: 9y9riMr8hw8IaD+ig1yYTfIKYToP3AFvgLBOvq0dUqA=)
                          33: 323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa (hash: 5JKbjJnU69SJlm4fg3FPZyCqBIfVS060Z1KnNVEVtkw=)
                          34: 323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (hash: AzVrbmw1D35LXqWCeqtZ4xDM2Ov824Fl8I4Xi69Tl/A=)
                          35: 323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa (hash: sk3ZxSGwRUSHyuGSOaKTetRq+YknC9DBGmC5NH67SNI=)
                          36: 323430303a343661303a31373a3a2f34382d3438203d3e20313437313337.roa (hash: MuOtiRCK+tp6U+hzr1x3k/1BlmKfEwjNnXDtMTn3C54=)
                          37: 323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa (hash: RgFmlKKxmL5ut1KmXAx7XdZwngIvPGxFdbg1RlK2QKc=)
                          38: 323430303a343661303a3a2f34382d3438203d3e20313437313337.roa (hash: 0HDp+vfD+4sT/TKrDDPYxk4/65tF4UinBvnW6pYSahU=)
                          39: C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl (hash: 3W8mjK2OePb/QarvyojrVRaI06szHBW0aFOBWBEEV9A=)
                          40: 323430303a343661303a363a3a2f34382d3438203d3e20313437313337.roa (hash: ysVciOe07++0v5Vr1hzLx8fA/0jTLiYdiUqf/6pXrkA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl
                          rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:dc:1b:85:af:9e:27:99:9c:67:aa:9d:83:c0:a2:bf:38:88:c7:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9
        Validity
            Not Before: Jun  2 11:13:59 2026 GMT
            Not After : Jun  3 13:46:59 2026 GMT
        Subject: CN=DC61F9533DFE6E70C76C9A08101028F0013423CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1b:a2:40:47:73:b2:af:28:ab:1c:bf:59:1e:
                    77:a9:c2:b6:09:63:6c:57:5f:89:18:0c:8f:ba:93:
                    35:d4:d2:31:aa:0a:c2:93:6b:43:e7:51:67:91:86:
                    9b:fc:c6:5b:5b:b8:98:bc:de:f6:18:35:53:80:d3:
                    5b:a2:0b:84:89:7d:7b:d7:d9:06:35:45:fe:a6:6b:
                    53:4b:49:7d:ca:f9:1c:02:73:ec:ce:d7:a9:2e:2f:
                    5c:76:d3:78:49:fd:a4:12:99:20:e6:0f:1e:e5:db:
                    30:7b:38:ce:d6:a6:3a:02:50:42:63:3f:cc:06:ee:
                    73:a5:d8:7c:9e:f5:16:84:7b:13:6e:d2:aa:30:d9:
                    21:e5:23:0c:5b:4d:f8:cd:f1:7c:04:63:d4:a9:4f:
                    68:6b:a6:54:89:b2:5e:b1:2f:b6:6f:95:33:8c:39:
                    ab:cd:92:1c:7a:ac:8e:64:11:c8:b8:b4:39:73:1f:
                    64:94:17:95:50:3d:10:ac:83:8c:47:3d:a9:a8:55:
                    10:d8:b6:dc:66:49:10:a8:e6:1f:7c:62:ce:f9:14:
                    6f:6a:6b:cb:3f:19:2b:f1:cf:92:92:f8:77:c3:c2:
                    a4:b6:f7:ff:b5:63:c5:c2:24:63:b5:04:6d:ba:64:
                    15:4b:37:84:e1:d9:51:10:23:9d:dc:89:1b:0c:0d:
                    78:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:61:F9:53:3D:FE:6E:70:C7:6C:9A:08:10:10:28:F0:01:34:23:CC
            X509v3 Authority Key Identifier:
                keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:3d:7d:b3:94:21:0b:04:60:47:7f:f5:c8:ad:f7:0c:5d:d2:
         6a:0a:5e:2c:b7:84:68:d9:1c:3d:f8:9c:fe:7b:66:f4:ef:32:
         54:b6:c9:6e:24:2e:06:67:a6:b7:e0:a0:13:3a:53:39:5e:db:
         cd:5f:75:c4:63:2c:8f:be:a5:eb:46:eb:d1:c9:90:51:f2:8d:
         a2:17:2e:4d:7a:53:0e:b3:99:09:0c:49:4e:75:5d:c4:04:e8:
         f5:21:d2:b4:20:1d:ff:68:ff:d5:5b:9b:73:fc:ef:ef:76:da:
         05:2b:0b:c3:8c:f2:43:b8:2a:70:7e:a7:13:2b:05:a8:dc:5f:
         78:7d:e6:6a:06:4c:78:e4:07:dd:12:ac:4b:06:25:70:bf:48:
         ae:48:b6:89:de:31:fc:00:1f:c0:e6:9c:e5:20:1b:76:0a:05:
         0d:a5:ed:21:e6:eb:5e:d3:a7:b1:e3:70:ef:68:81:a3:cc:09:
         ac:d9:a1:9a:45:73:99:a8:09:b6:43:da:e8:63:b7:0f:43:c6:
         d4:70:cf:db:13:50:21:d8:42:47:c3:43:85:f9:69:b9:40:59:
         df:69:a6:09:c4:2c:0f:b6:2d:20:c6:9a:25:04:ed:af:e2:1d:
         24:f8:ed:38:62:2e:ce:c8:1a:0b:43:9a:e2:12:bb:a1:b7:01:
         da:ba:1c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:57:36 2026 by rpki-client