Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft
File:                     955AF2D41C7C84BFE354F8648EE3271584452C79.mft (raw, json)
Hash identifier:          MxsXFcxlCc5tC2/4JaYQD3CjP9cExBNO+K/HSDmnAXE=
Subject key identifier:   F7:64:B2:5D:C9:12:86:96:8D:FA:45:CB:2E:CD:46:99:F3:26:0C:E2
Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79
Certificate issuer:       /CN=955AF2D41C7C84BFE354F8648EE3271584452C79
Certificate serial:       561D741BFCEE6C686C32D3E1364DCF468C4101CC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 20:09:24 +0000
Manifest this update:     Tue 02 Jun 2026 20:04:24 +0000
Manifest next update:     Wed 03 Jun 2026 23:33:24 +0000
Files and hashes:         1: 323430313a616530303a616530303a3a2f34382d3438203d3e203338373533.roa (hash: dQ8tK3k6r/gWHgBqbXs5io1cy3kNSahbUhSfYpJudRo=)
                          2: 3131392e3131302e38372e302f32342d3234203d3e203338373533.roa (hash: ySHK+nWej5tqupmo6WHGptxjH/SwTNnndW9y6saEl2U=)
                          3: 34352e3131352e36372e302f32342d3234203d3e203338373533.roa (hash: V3VFTjfw6JHfDwNHfBqmwL7xYBI+P1o53RpZqP/oI5k=)
                          4: 32372e3133312e322e302f32332d3233203d3e203338373533.roa (hash: ty7Vf4qg1FcZefRWuagmSuJdA+UHNoaYjSnBxf4OMW8=)
                          5: 323430313a616530303a313a3a2f34382d3438203d3e203338373533.roa (hash: Yp4AlMzcVYyyGS+YY72MKg5SMHdwjMcmGiC3OjnXSZQ=)
                          6: 3131392e3131302e38362e302f32332d3233203d3e203338373533.roa (hash: VbGlDKmfsC8jdy2jwLyJDuEE3d/2hqyMHnfS47Nzs2E=)
                          7: 3131392e3131302e38332e302f32342d3234203d3e203338373533.roa (hash: GZ7Uu5Cd3gy1df3D7E/NxnBWJ42fVnNtK0T5SRhmyoc=)
                          8: 32372e3133312e332e302f32342d3234203d3e203338373533.roa (hash: bvIhfLTgotvNL+zfXHv7PfJdHYoUAw6+uQUpeSW7PKI=)
                          9: 3130332e32392e372e302f32342d3234203d3e203338373533.roa (hash: T+6o3LsskU9pUcY2np2MTGtm0iO95SeTipZV3v378h8=)
                          10: 3131392e3131302e38302e302f32332d3233203d3e203338373533.roa (hash: +JMH80bsLIkCS5v6dDtyjKwltx2AvocnKHMKTZid7A0=)
                          11: 32372e3133312e302e302f32332d3233203d3e203338373533.roa (hash: Ig7Y8d/z0WMmUiX2C4TSUSSE7SskBjCHoUm5fDhMqMc=)
                          12: 3130332e32392e352e302f32342d3234203d3e203338373533.roa (hash: 8M0+y9ZbVtGJPFkP1eoXpxiSSeAXHiaaKDfENMCVk0E=)
                          13: 3130332e32392e342e302f32342d3234203d3e203338373533.roa (hash: tzKAtY8BxjnA04N/9bfLtmxGKRQm8v8NUAfl6dFIxI8=)
                          14: 34352e3131352e36342e302f32332d3233203d3e203338373533.roa (hash: qA5izsUhsz93UcxLKKPJd1LGCBwCjh+E68bqfDzbYt4=)
                          15: 3131392e3131302e38322e302f32332d3233203d3e203338373533.roa (hash: 8djfFrPJnnmzCe+N8ldBuVcXTxgsoV0diYsMqks41bU=)
                          16: 3131392e3131302e38362e302f32342d3234203d3e203338373533.roa (hash: dEcCBjd/hf/7KAnj0lD2p2pYFcHVtqE8eCbjlnZdwFc=)
                          17: 3131392e3131302e38342e302f32332d3233203d3e203338373533.roa (hash: IKby/u1RLpU+dZ8RtWXhozIHTlm5TTaBHizWUFj4J4s=)
                          18: 955AF2D41C7C84BFE354F8648EE3271584452C79.crl (hash: CqktYBaMGpQ5C/QTWf+nxYMXNL4hKByznEJJMgf6vm8=)
                          19: 32372e3133312e312e302f32342d3234203d3e203338373533.roa (hash: 0ujMcCdmbSHFPa+orQdB/PxCKLq7qgCAwvDBt82XgQ8=)
                          20: 32372e3133312e352e302f32342d3234203d3e203338373533.roa (hash: jEBHuFwyUPhLyetq8AZ0j6MkcWDGQIC2Ql8z9hlScDY=)
                          21: 323430313a616530303a3a2f33322d3438203d3e203338373533.roa (hash: DoHKNn4cb3vp5YQSHqZMksp+KViD5ZdqVczEp981xag=)
                          22: 34352e3131352e36342e302f32342d3234203d3e203338373533.roa (hash: DqzG24Vg8g2xb67c7EJxvNA8CN9DoJSM8FWnsHw+np8=)
                          23: 3131392e3131302e38352e302f32342d3234203d3e203338373533.roa (hash: tNLY8u6A/k+8Q7IpBt5/zBkDDVLxVjw0s0mCnDnTLQ0=)
                          24: 34352e3131352e36362e302f32332d3233203d3e203338373533.roa (hash: zLsQw1FEcLnSjAXmcuRquA4wY30IBvPwX1kp1wMBj0w=)
                          25: 3130332e31362e3131322e302f32322d3234203d3e20313331373730.roa (hash: e/RIuX0l5WSZ+goWBIIIdVXX9DXWsnBm69sxMsOldTQ=)
                          26: 3130332e32392e362e302f32332d3233203d3e203338373533.roa (hash: sqwIaOfOaX1bFZfZsGIMM4uY/0vqfO+Fp9lx2PYjNcc=)
                          27: 34352e3131352e36362e302f32342d3234203d3e203338373533.roa (hash: qRwwmBsknDfOtkgT9DU89mbMerOBSmUMAPghIOd0vu4=)
                          28: 323430313a616530303a383a3a2f34382d3438203d3e203338373533.roa (hash: +arfhaqnvHvQCyZFxXy4+1jvqLY0KJc/vVBqN1YJZjk=)
                          29: 34352e3131352e36352e302f32342d3234203d3e203338373533.roa (hash: 0vqlBHk+tbUaLZBiq8YRfD6O3wmF77fIbLPXgx+HHxc=)
                          30: 3131392e3131302e38302e302f32342d3234203d3e203338373533.roa (hash: mngZWmSvxtg8XkrQIx/PcuHaMVAzgmLQEy7bJgPf7l8=)
                          31: 323430313a616530303a3130313a3a2f34382d3438203d3e203338373533.roa (hash: vmxBRwNdmgzibUSpFXO78tLcpgGuVVRF9GhyVBoLpGs=)
                          32: 32372e3133312e342e302f32342d3234203d3e203338373533.roa (hash: 5enVXM16FAeRB9TOwd6lPWeoTI/DTYje7oBg0vJxZHM=)
                          33: 3130332e32392e362e302f32342d3234203d3e203338373533.roa (hash: B9Lq0FKw6JB0oaVN4KMWdTKg9HTIN6KM/W4hJySHpXw=)
                          34: 32372e3133312e302e302f32342d3234203d3e203338373533.roa (hash: e977YWIWm/BXV1wJwh2j4S4MW5uCFqiX6zu8rAGZQFA=)
                          35: 32372e3133312e322e302f32342d3234203d3e203338373533.roa (hash: xfAoj7rZJvH0vMBOqYAZBDPQcNu1Ewca8iDluWuIjw8=)
                          36: 32372e3133312e372e302f32342d3234203d3e203338373533.roa (hash: 6lROY1Ar+V8VDfpGSML6QiI8zQ9aBGOnUU2JJVyM6Rs=)
                          37: 32372e3133312e342e302f32332d3233203d3e203338373533.roa (hash: NHwGHAqnRCVzryyOErVysZqTBFNCvmT2DiyKJEQAiWs=)
                          38: 323430313a616530303a3a2f34382d3438203d3e203338373533.roa (hash: aStDmp310WlBA0VZRXWeth1+G9laMEVxTxGcBViXPnQ=)
                          39: 3131392e3131302e38322e302f32342d3234203d3e203338373533.roa (hash: B63fkwaYfUz9tKQ4umMG4OVNdG59sSyO4xk3JON/0lE=)
                          40: 32372e3133312e362e302f32332d3234203d3e203338373533.roa (hash: jQf1kANsNHJX1nCJag+APOxLVQdFCjlHLHz5L35eSyk=)
                          41: 3130332e32392e342e302f32332d3233203d3e203338373533.roa (hash: FVSiUEDFZfDs+nDBEwOrT/i8cGsjdaNwXLqjPbA6tTA=)
                          42: 3131392e3131302e38312e302f32342d3234203d3e203338373533.roa (hash: P5gsR9Ip6eN3JpS9Gh6vSjhBTUMLL/b9godXTE25dwM=)
                          43: 323430313a616530303a3130303a3a2f34382d3438203d3e203338373533.roa (hash: oh5UARl100A3pOurULLJsgNfOZqW71w6y5q3NLG8JtU=)
                          44: 3131392e3131302e38342e302f32342d3234203d3e203338373533.roa (hash: PtWJtmRhyQ2yPeW/tjptx/9+8uOyz/tIzSW1+zYn5P8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl
                          rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1d:74:1b:fc:ee:6c:68:6c:32:d3:e1:36:4d:cf:46:8c:41:01:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79
        Validity
            Not Before: Jun  2 20:04:24 2026 GMT
            Not After : Jun  3 23:33:24 2026 GMT
        Subject: CN=F764B25DC91286968DFA45CB2ECD4699F3260CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:60:02:09:30:a1:db:1b:76:2f:a6:75:22:06:
                    82:38:d4:e4:9c:36:98:5c:f6:27:18:74:38:71:4e:
                    17:93:82:44:a9:fd:18:a8:df:01:6a:8e:09:cf:41:
                    8d:2c:a2:80:64:09:aa:82:49:24:aa:7a:5d:46:0c:
                    e4:16:14:fa:d7:d3:8f:4b:57:84:6b:2c:1c:cd:6f:
                    ce:72:49:d1:ce:1a:d9:d1:f8:6f:41:7f:e1:b6:8b:
                    f5:f7:c4:d3:4e:dc:c0:80:11:9d:ef:eb:f2:ba:aa:
                    0a:67:a1:6a:a6:2f:b3:85:15:a9:47:c7:6c:8d:92:
                    3c:a3:ad:9c:7c:39:fb:61:f6:66:93:38:e2:5c:11:
                    3f:75:e4:d1:1f:c2:5a:84:4c:80:68:b3:c3:ba:8a:
                    fe:27:10:82:20:22:3b:3a:6f:cc:de:c3:e7:4e:58:
                    34:0a:4c:b7:cc:53:f6:89:d0:58:16:75:ce:50:aa:
                    45:b1:91:32:51:3a:99:c5:d9:56:2a:0d:20:8d:f6:
                    25:75:3b:1a:34:1a:fa:79:70:18:1d:e5:6e:62:98:
                    35:27:6b:eb:89:c3:c5:9f:da:fd:3b:ba:90:85:a4:
                    6b:60:29:04:06:27:bb:15:56:e6:59:b8:2b:ba:3a:
                    66:b3:06:f3:ef:03:0c:6e:30:f7:fd:4a:b8:67:27:
                    9c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:64:B2:5D:C9:12:86:96:8D:FA:45:CB:2E:CD:46:99:F3:26:0C:E2
            X509v3 Authority Key Identifier:
                keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:78:77:d9:ab:f3:e9:4c:41:6e:81:8f:fb:15:7b:dd:0e:9f:
         96:32:ce:1b:1a:18:2e:ab:4d:fb:0e:ff:a4:5f:08:f7:9a:2a:
         70:39:71:4e:1c:a0:59:03:36:3a:01:ae:96:4b:11:2f:32:cb:
         cc:59:a7:0f:ff:79:55:7a:c7:8a:9a:85:30:ba:80:5e:38:1e:
         6a:53:46:6f:f0:de:bc:a8:b0:2e:60:b4:76:bc:2f:31:dc:c3:
         03:c4:76:a5:16:33:4f:10:e9:1f:ba:0e:4d:87:61:a6:b7:e0:
         f8:43:b3:ac:0d:eb:a1:cc:fe:9b:7a:fb:ee:70:47:5b:3a:4f:
         9c:ed:16:0a:6d:3e:ee:3b:cd:47:be:72:e4:fd:30:1b:fe:64:
         fe:02:c6:99:25:61:e3:1f:ed:2a:d2:4c:85:75:95:31:94:2d:
         70:41:7e:80:de:d4:f0:c7:0d:41:e0:dc:47:6d:10:bb:5e:61:
         a3:12:35:14:0f:99:8a:6f:41:b8:22:2e:96:6c:c5:30:da:97:
         ce:53:ea:d4:c6:7f:15:75:25:97:9a:a3:3b:8f:18:f9:6c:9e:
         99:4c:72:c3:3c:4f:b4:30:4d:e0:e0:9f:b4:14:3f:a4:62:56:
         e5:d9:08:94:4f:6b:e3:e3:5d:f5:30:c7:3a:b8:51:fe:2a:03:
         bc:1e:75:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:46:53 2026 by rpki-client