Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/777E6650C707BC53014C9FB0600EB998ECDCCEC8.mft
File:                     777E6650C707BC53014C9FB0600EB998ECDCCEC8.mft (raw, json)
Hash identifier:          VY2C8eAunql+UQTz2Ci07Ann2OPzpyqOioEt2mcoJLc=
Subject key identifier:   C9:28:DC:88:6D:FD:16:AE:28:B2:DA:6D:3B:14:4C:06:E5:20:16:4B
Authority key identifier: 77:7E:66:50:C7:07:BC:53:01:4C:9F:B0:60:0E:B9:98:EC:DC:CE:C8
Certificate issuer:       /CN=777E6650C707BC53014C9FB0600EB998ECDCCEC8
Certificate serial:       78A5AAD3FFAAC6039EF7237232E8E1495D7D7312
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/777E6650C707BC53014C9FB0600EB998ECDCCEC8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/777E6650C707BC53014C9FB0600EB998ECDCCEC8.mft
Manifest number:          2A
Signing time:             Tue 02 Jun 2026 12:35:31 +0000
Manifest this update:     Tue 02 Jun 2026 12:30:31 +0000
Manifest next update:     Wed 03 Jun 2026 15:04:31 +0000
Files and hashes:         1: 34392e3233362e3232312e302f32342d3234203d3e203535363638.roa (hash: kUY/trD5SzOua3DH7I+aiE3wqd906VbIQXUCa7Df3Fw=)
                          2: 34392e3233362e3231392e302f32342d3234203d3e203535363638.roa (hash: N4CNzqMOfbc6s9D9dxTBw6cQhYZdI6ENGkNNSJtrxFo=)
                          3: 777E6650C707BC53014C9FB0600EB998ECDCCEC8.crl (hash: xu3VM30nSWWOq/X7T85/cUTzLFw35XtquXN+d2YV2Yc=)
                          4: 34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (hash: OBjymGBPtqF6toUtxnYBK5T5zwUl52/5/S4t9wRi6y8=)
                          5: 34392e3233362e3231382e302f32342d3234203d3e203535363638.roa (hash: +ZIa0KhDj8uf45EUbFyaY5vNynFPEA5qRACRf3VUrto=)
                          6: 34392e3233362e3232302e302f32342d3234203d3e203535363638.roa (hash: VSXo27K5+OQztE5BPtBUW6kT5AUOJhLdph3Z+DKZPtk=)
                          7: 34392e3233362e3232322e302f32342d3234203d3e203535363638.roa (hash: oeW0RwhGsz5EG1bU+HY7QVSWYIPWRw7fyQ1Gt+bPbxM=)
                          8: 34392e3233362e3232332e302f32342d3234203d3e203535363638.roa (hash: mXTHiSZhWwuA+h0ucYRbux0aL56T66j7S5mrCfu31Vs=)
                          9: 34392e3233362e3231362e302f32342d3234203d3e203535363638.roa (hash: lDQTD85G9jwPPCWBQxg22r69/Vd9yFoTaZejo/W0n+o=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/777E6650C707BC53014C9FB0600EB998ECDCCEC8.crl
                          rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/777E6650C707BC53014C9FB0600EB998ECDCCEC8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/777E6650C707BC53014C9FB0600EB998ECDCCEC8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a5:aa:d3:ff:aa:c6:03:9e:f7:23:72:32:e8:e1:49:5d:7d:73:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777E6650C707BC53014C9FB0600EB998ECDCCEC8
        Validity
            Not Before: Jun  2 12:30:31 2026 GMT
            Not After : Jun  3 15:04:31 2026 GMT
        Subject: CN=C928DC886DFD16AE28B2DA6D3B144C06E520164B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:be:3f:fe:94:e0:28:44:18:d4:3d:c1:75:
                    41:80:30:98:ac:f1:33:0e:6e:87:e8:05:1b:10:dd:
                    9e:92:5a:c3:d1:4c:db:22:52:16:6a:e7:5e:2a:c9:
                    76:63:2c:c5:52:82:c6:47:bf:4a:9e:e3:45:ab:81:
                    0f:61:ef:13:65:54:4c:66:a1:66:ad:da:2e:8a:38:
                    0c:82:a9:fa:0b:70:ac:b7:28:24:07:6f:df:1a:d3:
                    f1:ae:93:0d:12:6d:d5:b6:5f:fa:47:8b:c4:30:17:
                    6a:d1:f4:88:92:64:8f:eb:ea:d4:57:2f:27:cf:5e:
                    4b:91:aa:1f:b0:bb:12:8a:33:a7:2f:15:a6:4b:08:
                    31:4f:db:29:90:33:71:b9:d7:ec:41:fe:cc:7d:8a:
                    68:88:14:b4:1a:60:3b:83:a6:8a:31:70:b1:d4:e0:
                    55:d2:11:0e:62:ed:d4:06:50:30:ea:7f:2e:78:12:
                    9c:67:88:41:a2:3c:42:4b:d7:92:1b:f8:33:0e:a9:
                    e7:f7:41:bc:d0:a1:d4:c2:92:bd:f6:e5:c4:5f:b6:
                    57:e4:ca:fc:8b:22:5d:02:04:57:58:b9:17:73:a6:
                    5f:6a:20:bf:a5:f0:a8:05:0a:4e:1b:42:37:5d:70:
                    fb:3f:d7:90:bf:9f:6c:83:91:3f:ea:3b:02:43:28:
                    5e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:28:DC:88:6D:FD:16:AE:28:B2:DA:6D:3B:14:4C:06:E5:20:16:4B
            X509v3 Authority Key Identifier:
                keyid:77:7E:66:50:C7:07:BC:53:01:4C:9F:B0:60:0E:B9:98:EC:DC:CE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/777E6650C707BC53014C9FB0600EB998ECDCCEC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/777E6650C707BC53014C9FB0600EB998ECDCCEC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/777E6650C707BC53014C9FB0600EB998ECDCCEC8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ed:33:05:b7:de:7d:88:c3:18:65:9f:61:ab:3a:87:66:a0:
         db:56:7a:d9:7d:9e:8c:6f:80:ec:bc:ec:56:e7:78:77:44:c3:
         59:9e:84:49:54:35:b8:72:b7:3a:93:fe:89:03:e6:3c:c6:f2:
         fb:75:11:22:90:a4:db:53:c6:3d:d9:f0:a8:4c:a8:81:28:1a:
         08:94:63:b4:40:4b:a7:97:5b:30:42:08:ff:ea:0b:43:0f:a9:
         68:94:b4:2a:b4:43:00:cf:09:aa:96:62:f0:35:de:79:82:f2:
         7b:f0:64:61:4f:58:96:ea:1a:e3:54:22:b8:05:99:12:e7:df:
         4a:c2:3f:22:fe:51:b5:7e:92:80:58:2f:f6:71:72:eb:c0:a2:
         fa:e7:fa:e1:05:49:b0:a4:06:97:89:79:bf:74:56:81:9f:1f:
         cf:8f:ec:91:42:74:1f:a7:41:90:5e:d5:13:b9:cb:8b:59:9d:
         c3:f9:7d:6b:e2:83:e2:00:63:f6:69:df:1c:40:06:fa:24:e8:
         e2:26:df:41:18:f5:ce:49:55:57:50:5e:5c:e9:32:cc:9c:47:
         a3:27:6f:13:26:d8:26:8b:c1:67:48:31:03:0f:7c:6a:fb:8f:
         53:4d:69:7f:ca:35:93:23:23:3e:6a:28:79:2f:08:bc:35:55:
         94:13:cd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:08:19 2026 by rpki-client