Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft
File:                     C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft (raw, json)
Hash identifier:          K9svVU2teRamyaqfBMQ4Y5HBPsIwr49GiqK01lByMpg=
Subject key identifier:   12:4B:58:21:39:5D:21:06:47:10:8F:4B:AB:FA:BA:65:5C:98:8D:27
Authority key identifier: C9:E3:CF:72:C3:47:D2:8B:4B:43:0D:B7:37:BE:80:CB:01:72:B1:06
Certificate issuer:       /CN=C9E3CF72C347D28B4B430DB737BE80CB0172B106
Certificate serial:       68AD30770F3C0DCA53DAADB0BF30722A5A3ED895
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 17:30:58 +0000
Manifest this update:     Tue 02 Jun 2026 17:25:58 +0000
Manifest next update:     Wed 03 Jun 2026 20:33:58 +0000
Files and hashes:         1: 3130332e3134312e32312e302f32342d3234203d3e20313338383837.roa (hash: 8JilOY3M6bmQigsj4ZkeI5e01YAdQG7yCEbyKOb2XWU=)
                          2: 323430353a6334303a343030303a3a2f33362d3336203d3e20313338383837.roa (hash: Uw2DZXWdsbdLxITCw50MdBG6P/SrnICAOddefwFUHEU=)
                          3: 323430353a6334303a3a2f33332d3333203d3e20313338383837.roa (hash: f40WyqcJUx5CaPP5/qa5LhPHXzQ7tY9s/CnE73Q55+U=)
                          4: 3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa (hash: /ia91hqzHCBrX/q+7Rzu1zW0X5ukwcV1dwBpHbDRCBI=)
                          5: 3130332e3134312e32302e302f32332d3233203d3e20313338383837.roa (hash: h0aJP09uXJR7/Jgpd677SbGBA5UD7o/TwIMtte0LAII=)
                          6: 323430353a6334303a3a2f33362d3336203d3e20313338383837.roa (hash: rp6/R1Wlz48G+rpBFS/l32yNHFJy7R2P6b7HlLCGNqQ=)
                          7: 323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa (hash: G3HPmbrylByhe8P0W3+v8DhwstU+DtkeFukqMhA3cww=)
                          8: 323430353a6334303a363030303a3a2f33362d3336203d3e20313338383837.roa (hash: LdrXXHPkIXvu63segAbWDO8C0FmCk2NoI4rodpf99hs=)
                          9: 323430353a6334303a3a2f33322d3332203d3e20313338383837.roa (hash: O6flVT/BjgsdY42z9V2dLz5E/e2Z/+dSUp+QehcFeRU=)
                          10: 323430353a6334303a313030303a3a2f33362d3336203d3e20313338383837.roa (hash: itrmPgVHPMZm/0dP8jD7iKpiUgp5FDGwLgZlfdM0s6I=)
                          11: C9E3CF72C347D28B4B430DB737BE80CB0172B106.crl (hash: C6FO2m7rYfyjleYm/B4LYYI5AtUq448i4GBWaFEn/lI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.crl
                          rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ad:30:77:0f:3c:0d:ca:53:da:ad:b0:bf:30:72:2a:5a:3e:d8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9E3CF72C347D28B4B430DB737BE80CB0172B106
        Validity
            Not Before: Jun  2 17:25:58 2026 GMT
            Not After : Jun  3 20:33:58 2026 GMT
        Subject: CN=124B5821395D210647108F4BABFABA655C988D27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:5f:97:8f:0c:a5:e5:86:59:76:45:3a:89:
                    a3:32:db:90:6c:e3:c2:ea:69:7e:44:63:7f:4a:48:
                    3d:ad:cf:e0:52:70:5a:42:d9:05:1c:a2:9c:36:10:
                    c6:d0:64:3d:d5:eb:8c:2d:14:7f:d3:f4:47:2d:81:
                    e1:2d:4c:4b:4b:15:74:10:62:a2:ea:1b:31:96:9d:
                    a5:24:b0:29:c3:89:d4:c0:69:2e:35:40:f4:d0:e2:
                    9e:b5:96:9b:ea:17:81:47:e2:0e:e1:d9:09:1a:a2:
                    82:04:f9:44:2c:b5:31:23:7e:0d:72:12:1c:77:30:
                    bc:37:91:09:b0:21:6f:67:49:00:a7:ed:24:82:aa:
                    86:10:ed:b5:50:87:60:b8:b3:46:49:fc:ad:ba:89:
                    ca:88:b4:f2:64:bf:db:41:a6:03:b8:96:1f:2a:9e:
                    94:7b:ff:b0:fa:a0:c4:ef:8f:b9:9e:ed:1c:6a:6e:
                    9c:28:70:85:f8:ae:c7:f2:01:4b:ed:2a:0e:16:71:
                    ee:f9:8f:d5:17:e7:31:11:c7:8e:7b:82:a0:1a:b8:
                    05:fd:2e:3d:ad:6d:4f:c7:aa:db:5a:9e:dc:20:72:
                    19:9a:58:ee:c6:88:f8:6d:89:ad:8f:fe:22:33:f1:
                    83:1f:eb:fd:ae:80:fa:42:24:9b:e6:bc:15:89:0b:
                    75:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4B:58:21:39:5D:21:06:47:10:8F:4B:AB:FA:BA:65:5C:98:8D:27
            X509v3 Authority Key Identifier:
                keyid:C9:E3:CF:72:C3:47:D2:8B:4B:43:0D:B7:37:BE:80:CB:01:72:B1:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:3d:6a:52:15:ed:1e:27:f9:75:6c:0c:88:5a:78:d5:3d:67:
         c0:b0:59:b6:1c:f0:3b:2a:ce:6b:e2:a1:21:91:59:25:5f:5c:
         66:43:f2:98:95:a1:32:df:ad:66:c7:a8:9d:e0:5d:23:7a:f9:
         90:d9:fa:39:37:52:ab:54:ce:78:69:24:9c:5d:6b:0e:d6:ce:
         ea:92:14:c8:58:f7:6d:16:f8:fd:e4:68:47:49:19:04:5a:11:
         f3:1a:ec:12:7b:e0:09:b3:5e:9c:bc:0e:ba:84:21:93:bf:89:
         33:e0:56:8b:5d:d6:95:90:fb:e5:dd:0b:de:49:ce:77:06:b4:
         47:f8:e4:4b:a2:e7:bd:e0:4b:92:28:6d:9e:71:5d:90:04:1f:
         e5:57:19:1e:db:76:df:32:34:b1:6b:5d:f7:d0:c0:16:4e:10:
         a1:2f:62:64:88:91:70:ea:27:17:99:9a:2b:1b:10:ed:98:5d:
         f3:d8:37:32:6e:ad:9d:2b:d3:82:7e:44:ea:58:fe:17:1c:ac:
         51:ed:1c:ab:58:03:be:4a:06:34:a8:56:7e:e4:df:96:47:06:
         47:c9:20:f8:ae:af:a4:d4:6a:92:66:a0:dd:aa:56:94:a5:96:
         02:5d:6f:d7:16:bd:d1:2a:75:bc:86:1f:41:f2:bc:bb:d6:4b:
         ab:8c:00:f6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaK0wdw88DcpT2q2wvzByKlo+2JUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlFM0NGNzJDMzQ3RDI4QjRCNDMwREI3MzdCRTgwQ0Iw
MTcyQjEwNjAeFw0yNjA2MDIxNzI1NThaFw0yNjA2MDMyMDMzNThaMDMxMTAvBgNV
BAMTKDEyNEI1ODIxMzk1RDIxMDY0NzEwOEY0QkFCRkFCQTY1NUM5ODhEMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHR1+Xjwyl5YZZdkU6iaMy25Bs
48LqaX5EY39KSD2tz+BScFpC2QUcopw2EMbQZD3V64wtFH/T9EctgeEtTEtLFXQQ
YqLqGzGWnaUksCnDidTAaS41QPTQ4p61lpvqF4FH4g7h2QkaooIE+UQstTEjfg1y
Ehx3MLw3kQmwIW9nSQCn7SSCqoYQ7bVQh2C4s0ZJ/K26icqItPJkv9tBpgO4lh8q
npR7/7D6oMTvj7me7RxqbpwocIX4rsfyAUvtKg4Wce75j9UX5zERx457gqAauAX9
Lj2tbU/HqttantwgchmaWO7GiPhtia2P/iIz8YMf6/2ugPpCJJvmvBWJC3XtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEktYITldIQZHEI9Lq/q6ZVyYjScwHwYDVR0j
BBgwFoAUyePPcsNH0otLQw23N76AywFysQYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzA3Yzg4ZGEtMmI1Ni00ODdlLTllZmUtNTcxMTcwYjEwMjg2LzAvQzlFM0NGNzJD
MzQ3RDI4QjRCNDMwREI3MzdCRTgwQ0IwMTcyQjEwNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DOUUzQ0Y3MkMzNDdEMjhCNEI0MzBEQjczN0JFODBDQjAxNzJC
MTA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA3Yzg4ZGEtMmI1Ni00ODdlLTll
ZmUtNTcxMTcwYjEwMjg2LzAvQzlFM0NGNzJDMzQ3RDI4QjRCNDMwREI3MzdCRTgw
Q0IwMTcyQjEwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALE9alIV7R4n+XVsDIhaeNU9Z8CwWbYc8Dsq
zmvioSGRWSVfXGZD8piVoTLfrWbHqJ3gXSN6+ZDZ+jk3UqtUznhpJJxdaw7WzuqS
FMhY920W+P3kaEdJGQRaEfMa7BJ74AmzXpy8DrqEIZO/iTPgVotd1pWQ++XdC95J
zncGtEf45Eui573gS5IobZ5xXZAEH+VXGR7bdt8yNLFrXffQwBZOEKEvYmSIkXDq
JxeZmisbEO2YXfPYNzJurZ0r04J+ROpY/hccrFHtHKtYA75KBjSoVn7k35ZHBkfJ
IPiur6TUapJmoN2qVpSllgJdb9cWvdEqdbyGH0HyvLvWS6uMAPY=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:58:17 2026 by rpki-client