Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
File:                     3E2F6BF0D403588302286670BF848A78CBDFCC03.mft (raw, json)
Hash identifier:          7I4ZzWiEYDlOlZPvyfGnAt9Na4udrjEK2yCGmBqLi8s=
Subject key identifier:   96:FB:5E:E7:50:51:3F:80:35:18:C6:FB:AD:23:6B:B3:46:3A:9E:64
Authority key identifier: 3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03
Certificate issuer:       /CN=3E2F6BF0D403588302286670BF848A78CBDFCC03
Certificate serial:       1F9AD0D63B89FCE6D5E57942B25028099138F58A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 13:57:08 +0000
Manifest this update:     Tue 02 Jun 2026 13:52:08 +0000
Manifest next update:     Wed 03 Jun 2026 16:45:08 +0000
Files and hashes:         1: 3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa (hash: /MFUfSDFxjyUNAWC9nKYACUnYExfFRRhHuhwdWcwusA=)
                          2: 3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa (hash: rIYPSEZBQY119pZKRCgQ7fA+t5XlH5FXxB4mSA7mWtU=)
                          3: 3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa (hash: KaRNE9dqQ7RSBfTQU4dvi8JpMAiXvlNB1zGB1/yX/kk=)
                          4: 3E2F6BF0D403588302286670BF848A78CBDFCC03.crl (hash: VjU0+ZevOCSNbkUyTvqLrM8fKMlt9rgbUdUGmxYFiHk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl
                          rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 16:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9a:d0:d6:3b:89:fc:e6:d5:e5:79:42:b2:50:28:09:91:38:f5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E2F6BF0D403588302286670BF848A78CBDFCC03
        Validity
            Not Before: Jun  2 13:52:08 2026 GMT
            Not After : Jun  3 16:45:08 2026 GMT
        Subject: CN=96FB5EE750513F803518C6FBAD236BB3463A9E64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:28:ed:0b:19:ad:3d:ed:7c:af:3a:f2:79:f6:
                    f3:1e:d1:d7:29:5c:d6:6e:9c:81:bf:46:05:c8:5c:
                    fe:ff:16:f5:e4:f0:a0:64:98:50:ac:0a:49:43:53:
                    94:a6:1c:a7:d1:eb:5e:25:71:d2:0d:ac:71:d2:c0:
                    de:d0:64:64:d9:c6:5f:71:c5:98:7b:64:5f:9d:50:
                    64:f0:da:b5:91:22:97:21:62:d1:53:79:66:97:25:
                    4c:30:98:00:f3:b5:4a:e0:48:46:4f:d2:78:2b:38:
                    e2:0b:94:f8:80:8c:b9:39:4b:2c:39:fa:3e:60:8f:
                    c2:1e:81:cf:dd:c1:d2:00:03:97:a7:53:fb:f3:30:
                    bf:cb:39:df:4d:59:66:cf:7f:a6:24:c4:a9:ca:6b:
                    65:26:61:9b:d4:5e:67:60:bb:ac:76:fe:45:e8:44:
                    6c:87:84:69:eb:2e:b3:81:64:63:b5:ff:1b:ef:73:
                    ba:39:91:d2:9f:38:2a:ca:5c:26:70:09:fa:91:e7:
                    70:3d:be:b3:7d:6c:9d:46:60:2a:62:39:1a:16:d1:
                    b0:a3:ce:30:d1:39:05:fe:00:f9:7c:de:ea:0e:7f:
                    7a:21:66:09:ed:2c:61:0c:85:db:fa:bf:2c:85:8b:
                    9f:21:a7:5e:d4:ff:dc:13:6f:82:06:b6:0c:a0:84:
                    3c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FB:5E:E7:50:51:3F:80:35:18:C6:FB:AD:23:6B:B3:46:3A:9E:64
            X509v3 Authority Key Identifier:
                keyid:3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:13:6f:ab:ea:ee:51:a1:e1:6c:69:20:09:b7:29:9c:da:d9:
         fc:88:10:4d:e0:f8:2b:cf:c7:c9:f9:21:52:26:7c:0d:98:a8:
         50:8a:22:73:36:d2:9b:39:fe:76:4a:bc:69:ba:49:61:f5:5c:
         38:74:18:69:93:79:46:0c:99:ce:a4:89:db:65:b5:a0:0e:91:
         c3:db:a7:c4:88:2c:5a:44:ac:90:88:a8:2d:15:ef:3f:23:ea:
         04:a8:13:78:f1:60:39:e1:2f:51:3f:b4:55:02:de:ea:2c:aa:
         d5:46:19:79:0d:10:70:7d:ec:3a:54:15:d0:8a:37:62:b3:8c:
         98:a4:2a:ad:08:11:8f:bd:49:71:be:9e:8c:99:45:5c:aa:7f:
         93:be:6e:5d:d7:f7:82:3f:0b:78:21:8d:19:46:c0:0c:a5:5c:
         0b:2f:79:e2:c2:c0:4d:c0:81:bf:68:95:97:17:85:3c:95:ea:
         41:c3:1d:3e:4f:a8:0b:a9:a8:10:25:da:7d:40:dd:e8:f0:a9:
         17:ec:37:47:7f:d5:b2:e8:2e:da:ac:1e:a9:57:04:15:3f:c6:
         3a:ec:46:1a:2a:41:14:79:76:6f:2e:a8:33:39:23:eb:9f:ea:
         5b:17:0d:49:e3:e4:53:51:b7:d9:11:25:59:87:c2:6f:f4:89:
         71:aa:11:1f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUH5rQ1juJ/ObV5XlCslAoCZE49YowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UyRjZCRjBENDAzNTg4MzAyMjg2NjcwQkY4NDhBNzhD
QkRGQ0MwMzAeFw0yNjA2MDIxMzUyMDhaFw0yNjA2MDMxNjQ1MDhaMDMxMTAvBgNV
BAMTKDk2RkI1RUU3NTA1MTNGODAzNTE4QzZGQkFEMjM2QkIzNDYzQTlFNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpKO0LGa097XyvOvJ59vMe0dcp
XNZunIG/RgXIXP7/FvXk8KBkmFCsCklDU5SmHKfR614lcdINrHHSwN7QZGTZxl9x
xZh7ZF+dUGTw2rWRIpchYtFTeWaXJUwwmADztUrgSEZP0ngrOOILlPiAjLk5Syw5
+j5gj8Iegc/dwdIAA5enU/vzML/LOd9NWWbPf6YkxKnKa2UmYZvUXmdgu6x2/kXo
RGyHhGnrLrOBZGO1/xvvc7o5kdKfOCrKXCZwCfqR53A9vrN9bJ1GYCpiORoW0bCj
zjDROQX+APl83uoOf3ohZgntLGEMhdv6vyyFi58hp17U/9wTb4IGtgyghDyFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUlvte51BRP4A1GMb7rSNrs0Y6nmQwHwYDVR0j
BBgwFoAUPi9r8NQDWIMCKGZwv4SKeMvfzAMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzZlZTdhNWYtNTEyMS00MTgxLWE2MzUtMTIxYjZlNjlhZDU5LzAvM0UyRjZCRjBE
NDAzNTg4MzAyMjg2NjcwQkY4NDhBNzhDQkRGQ0MwMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zRTJGNkJGMEQ0MDM1ODgzMDIyODY2NzBCRjg0OEE3OENCREZD
QzAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZlZTdhNWYtNTEyMS00MTgxLWE2
MzUtMTIxYjZlNjlhZDU5LzAvM0UyRjZCRjBENDAzNTg4MzAyMjg2NjcwQkY4NDhB
NzhDQkRGQ0MwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB4Tb6vq7lGh4WxpIAm3KZza2fyIEE3g+CvP
x8n5IVImfA2YqFCKInM20ps5/nZKvGm6SWH1XDh0GGmTeUYMmc6kidtltaAOkcPb
p8SILFpErJCIqC0V7z8j6gSoE3jxYDnhL1E/tFUC3uosqtVGGXkNEHB97DpUFdCK
N2KzjJikKq0IEY+9SXG+noyZRVyqf5O+bl3X94I/C3ghjRlGwAylXAsveeLCwE3A
gb9olZcXhTyV6kHDHT5PqAupqBAl2n1A3ejwqRfsN0d/1bLoLtqsHqlXBBU/xjrs
RhoqQRR5dm8uqDM5I+uf6lsXDUnj5FNRt9kRJVmHwm/0iXGqER8=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:12:26 2026 by rpki-client