Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
File:                     EC59C36AB88A35CEA64B4ED019F2F05317672299.mft (raw, json)
Hash identifier:          DqsVpZI4u0eR5V4kJWc7Ze1+ip7L8CN01bmyPfGIhwM=
Subject key identifier:   C6:A7:F5:DD:18:A0:EF:A4:E7:74:53:A0:32:CB:E6:C2:E4:2A:DC:24
Authority key identifier: EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
Certificate issuer:       /CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Certificate serial:       3C10E0AA4CA48A5C86A5E51DB512A9917ACFDBEE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 18:27:17 +0000
Manifest this update:     Tue 02 Jun 2026 18:22:17 +0000
Manifest next update:     Wed 03 Jun 2026 20:34:17 +0000
Files and hashes:         1: 3230322e3132372e39362e302f32302d3234203d3e203137393130.roa (hash: +dGVRe6EsrE8x8JkrbEl5y9M3KyI6+RObwSg+1Gl944=)
                          2: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: nvBOhOQVzXAnJ4HGpau+WjYJtRHl8i2975iE/qVl3BQ=)
                          3: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: n+eUGlNoGxyXiKbu/ITCTX0cNeFjGes4nvyKs6e972Y=)
                          4: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: +30yZ3DQ/J4gQPQfBONcQspdy36OErhmpY2jH4HzLiQ=)
                          5: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: YPwGvhjJSaspOvLgrZ3Fyf5ldBDtpaa3xSbfWjcGrDA=)
                          6: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: AfPj1/WANHCA8ksluVDxgnesb53b+Rlio8ADTE+u1pQ=)
                          7: 3231302e37392e3230382e302f32302d3234203d3e203137393130.roa (hash: 5vaZfShfqgbUD5UrW2OwsFkdXsmnoUQ2LgDSdBEsxKs=)
                          8: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: Ju2Rnafj0JXyXCFyRIYbsuCCwhT0mQqqDAAoegLW2lk=)
                          9: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: 57swP2LUwPdheqaXWgJ8pT9nt0r4LCH8JoFCbrhNwuw=)
                          10: EC59C36AB88A35CEA64B4ED019F2F05317672299.crl (hash: 7kOZCqxdnQ2bsnOao2cz81s7p4TXvlOVFUWYpOg2myI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
                          rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:10:e0:aa:4c:a4:8a:5c:86:a5:e5:1d:b5:12:a9:91:7a:cf:db:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
        Validity
            Not Before: Jun  2 18:22:17 2026 GMT
            Not After : Jun  3 20:34:17 2026 GMT
        Subject: CN=C6A7F5DD18A0EFA4E77453A032CBE6C2E42ADC24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0a:c0:12:83:e3:b7:b0:5a:26:9f:ca:ae:eb:
                    17:e0:e6:7e:89:ee:15:b2:14:d3:e5:9f:32:5b:3d:
                    20:e7:f8:bb:e0:a2:75:0e:b2:ac:9e:c3:dd:eb:d8:
                    5c:1a:84:0f:97:5a:d5:bc:e5:fa:5b:40:04:d7:77:
                    37:af:e0:df:84:f8:8b:e3:30:64:50:d3:07:a7:ab:
                    0f:40:69:25:7f:72:3e:d4:6c:4a:e2:1d:49:d6:67:
                    be:12:77:8b:07:5c:a7:0f:f7:a2:ae:23:a4:88:1d:
                    1b:10:f0:d5:d8:f4:40:02:ff:f9:bd:a2:4c:e2:e7:
                    35:ee:85:fe:3f:33:e6:a3:45:22:20:c4:5c:f7:e6:
                    cf:19:85:a5:2d:de:a3:cc:99:40:92:45:e8:25:f3:
                    89:02:68:1d:dc:cf:d3:2f:de:db:82:3b:73:55:af:
                    31:0c:72:ea:a5:a0:1b:d2:c9:19:44:b5:f2:0f:f7:
                    46:46:fe:ff:76:7f:b0:52:de:da:91:a7:8b:38:75:
                    73:38:3e:78:86:81:dd:97:49:22:58:15:d1:7b:db:
                    68:6f:89:d4:cb:30:1a:9b:1a:61:fe:76:73:a1:6d:
                    8b:72:9e:43:73:3d:f3:2e:e0:73:06:87:e0:0e:13:
                    5f:04:b2:c7:2e:5a:58:06:2d:8b:53:f9:69:4f:61:
                    95:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A7:F5:DD:18:A0:EF:A4:E7:74:53:A0:32:CB:E6:C2:E4:2A:DC:24
            X509v3 Authority Key Identifier:
                keyid:EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:62:46:23:78:1d:c1:10:20:3b:c8:23:b9:05:35:4c:c7:37:
         03:74:97:7d:e4:93:c0:51:6c:f7:c9:d0:f1:17:6f:42:98:9f:
         67:f7:f5:01:2c:f2:31:23:ac:a4:0d:b3:e6:db:f5:d9:57:53:
         27:05:1c:87:72:c4:35:f2:a1:8c:f9:cc:13:f5:61:e9:9e:65:
         f1:62:93:88:2d:6a:9b:a2:7a:f1:3c:8c:60:d2:7b:3e:2e:3d:
         c3:00:5d:3c:49:18:dd:4d:8e:2b:aa:fe:d6:fd:a2:92:e2:21:
         cc:5b:5f:c4:fe:9a:dd:78:7b:55:93:0b:01:a6:d2:0c:c1:5b:
         b8:7b:25:72:87:50:0e:56:24:b6:04:09:8d:b0:ae:35:44:e5:
         a7:28:a7:88:fd:d1:63:26:e1:fc:00:df:04:7d:90:1d:34:ac:
         24:6d:69:94:b5:71:d9:ca:63:36:c6:73:60:72:ef:bd:45:61:
         ec:98:d4:18:6f:c5:6e:73:fc:83:80:9d:9a:14:4c:67:64:ba:
         3a:c6:0f:6c:b0:df:b2:40:b4:be:db:d6:22:bc:cd:93:cc:e7:
         f9:c2:a4:30:43:ca:f5:73:57:c8:a2:93:5c:68:2f:44:ef:01:
         d1:1f:21:26:14:1a:06:40:b7:a1:14:31:44:58:ce:9a:eb:d1:
         60:83:c9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:50:08 2026 by rpki-client