Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
File:                     108BD2ED0D3114613C2725256398C38B9DBAD520.mft (raw, json)
Hash identifier:          qtBN2OaeTF9bgSb8E9L9BU8AgxJpcT1BVnPshW2EI7c=
Subject key identifier:   9F:DE:37:D1:3D:FA:32:73:8E:5C:41:67:05:EC:73:2A:4F:F4:06:C1
Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20
Certificate issuer:       /CN=108BD2ED0D3114613C2725256398C38B9DBAD520
Certificate serial:       2E31725635C39FFD993D8958A39D2362C039FC78
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
Manifest number:          42
Signing time:             Fri 19 Jun 2026 20:05:11 +0000
Manifest this update:     Fri 19 Jun 2026 20:00:11 +0000
Manifest next update:     Sat 20 Jun 2026 20:09:11 +0000
Files and hashes:         1: 3131392e31302e3137382e302f32342d3234203d3e203234353330.roa (hash: GxTOWueUzacQJLW8/Lw/u7dSqU8jy6t+nHDrIvlJlj4=)
                          2: 3131392e31302e3138302e302f32332d3233203d3e203234353330.roa (hash: J3mFc+blOdqx9rOGug3IYw5ONv5fbpx/wInrtP6ubZ8=)
                          3: 3131392e31302e3138302e302f32342d3234203d3e203234353330.roa (hash: 0ou1MA6qNBtVm99WbTegwqF+NpmPqc1Ktrk0OHI11U4=)
                          4: 108BD2ED0D3114613C2725256398C38B9DBAD520.crl (hash: v9jf/jISZWBCc9VLWs3Q1+pdPIyowhoCYXeWztS7Gk4=)
                          5: 3131392e31302e3137362e302f32342d3234203d3e203234353330.roa (hash: jhVYi1rtAR5MxAuCXQ51AbZzQNRaKl8p9WMw+ffrY1g=)
                          6: 3131392e31302e3137362e302f32312d3231203d3e203234353330.roa (hash: M2e4yYR/RlmXdndzlSbI4SF0SK1f8bM5s0bETw7ewlU=)
                          7: 323430313a643934303a653066663a3a2f34382d3438203d3e203234353330.roa (hash: 3AOdmgKzkbZxwPp2bCxMQYnSsnvXDmSvwUIaP+cc8u8=)
                          8: 323430313a643934303a3a2f33322d3332203d3e203234353330.roa (hash: GNdi5uU7mmpbww293clFlNy9lTQ5KrlF2tYcTj15jTw=)
                          9: 3131392e31302e3137362e302f32312d3234203d3e203234353330.roa (hash: CprlVpIAhuZZ+TvberfWR+fBEc8FklJHg5e3Yj9s2YM=)
                          10: 3131392e31302e3138322e302f32342d3234203d3e203234353330.roa (hash: QDeYOiv+3vHs+MEBjUuMwoTIYLRTIqwHuQD6t1530Iw=)
                          11: 3131392e31302e3138322e302f32332d3233203d3e203234353330.roa (hash: P1NOd8bnXDoe1Us3SAeiUo7ByuV/RRZY5l/EMzT/C1k=)
                          12: 3131392e31302e3137362e302f32322d3232203d3e203234353330.roa (hash: lhKQdAX20mlvRL5BGbA0faxy+2IyoM1d90NTGWc0wAA=)
                          13: 3131392e31302e3138312e302f32342d3234203d3e203234353330.roa (hash: ybxkb0B+hs5pt/EvlpkTwH/9ZJ1gNWd/AVaEY/3TjMw=)
                          14: 3131392e31302e3137392e302f32342d3234203d3e203234353330.roa (hash: 4xOrTa7LOQthmjAbRy6Dje8YDXSs3QUpwJ2MSJFD6BE=)
                          15: 3131392e31302e3138302e302f32322d3232203d3e203234353330.roa (hash: QQz19AU/3ag6WIvOpz+6vMYYG0ifu3LuEG3RYnhZW1o=)
                          16: 3131392e31302e3137372e302f32342d3234203d3e203234353330.roa (hash: HA8oysbBANlVY/UvbExuOyGu423Ies7m420JK3DCo1o=)
                          17: 3131392e31302e3137382e302f32332d3233203d3e203234353330.roa (hash: PwM3oQKmuXyEeAOnaDonlOle/IcF5DW+Zh/RIO3hM04=)
                          18: 3131392e31302e3138332e302f32342d3234203d3e203234353330.roa (hash: DRkP4Rbo/CCQujXep36UcLsFucXNff21TtbLk7RG9SM=)
                          19: 3131392e31302e3137362e302f32332d3233203d3e203234353330.roa (hash: 0NwKpcPERLvBE69Wt/igLsf2q1CoJnvxAbw3+CiCst8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl
                          rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 20:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:31:72:56:35:c3:9f:fd:99:3d:89:58:a3:9d:23:62:c0:39:fc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520
        Validity
            Not Before: Jun 19 20:00:11 2026 GMT
            Not After : Jun 20 20:09:11 2026 GMT
        Subject: CN=9FDE37D13DFA32738E5C416705EC732A4FF406C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f3:50:cf:08:bb:c0:20:2c:b2:88:6d:b4:83:
                    28:65:43:48:ed:42:e9:38:9b:f0:85:3a:1c:2b:09:
                    37:27:14:bf:e4:aa:0c:d5:51:81:01:a9:08:bf:e7:
                    ae:58:df:78:28:c4:7c:2f:96:a5:af:b8:47:b4:b6:
                    70:f5:7c:44:31:2d:95:60:5a:1c:f4:f1:5b:e6:04:
                    ca:2f:b1:37:1d:13:33:0b:1c:77:94:35:83:8e:ae:
                    bd:b4:d0:8c:89:f9:bc:31:e9:c9:cc:84:16:db:38:
                    e7:a9:f7:3a:17:b6:bd:1d:2c:19:40:83:79:ec:90:
                    66:1b:c0:06:f0:81:32:ca:88:ab:c6:fe:d9:d6:ff:
                    3a:15:2c:1b:ab:5a:e7:df:66:03:21:1f:98:6e:c1:
                    9c:20:5f:bb:6b:63:c5:63:1a:86:2e:46:19:9b:9a:
                    cd:be:f0:89:57:e1:59:29:fa:8e:72:d7:87:f4:ef:
                    4a:81:01:23:40:71:51:7d:5e:2e:7b:07:47:d4:15:
                    c2:6a:2c:bc:37:13:a7:6e:c9:a4:ce:a2:fd:3b:7f:
                    a2:5d:0f:60:5f:0d:d6:e1:06:c3:26:b4:9f:70:a2:
                    1c:1f:e5:b2:ac:f5:16:3f:c6:be:72:6f:1a:7a:17:
                    bc:35:e0:79:c3:d4:1a:79:53:dc:e1:c6:b0:8a:99:
                    ae:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DE:37:D1:3D:FA:32:73:8E:5C:41:67:05:EC:73:2A:4F:F4:06:C1
            X509v3 Authority Key Identifier:
                keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:76:d1:0a:62:df:54:5e:8b:86:e1:8a:c4:ce:f7:96:43:3d:
         27:7f:da:04:1b:dc:15:af:19:59:41:0e:2b:78:45:8d:6f:f3:
         06:a8:4d:07:bc:c0:ec:dd:12:3f:ed:bb:bc:1d:85:08:02:01:
         a2:08:d2:95:bc:44:d4:5d:6d:6e:50:17:32:96:da:fa:32:2a:
         f4:30:2a:c5:b4:6b:7f:3d:45:db:9e:e1:fa:23:d6:80:36:1a:
         e7:68:e4:37:67:4c:c0:e4:9e:1e:10:af:c4:e5:9c:d0:19:fc:
         ca:7b:a0:df:cb:c1:fb:65:f2:f3:8c:07:d8:34:52:a6:3e:93:
         c5:34:28:11:87:db:14:2e:51:2f:21:91:9d:36:72:0a:6e:14:
         85:75:cd:90:8e:4f:94:ef:9f:1e:ae:4c:5f:7e:40:5f:bf:c9:
         ca:42:ca:c2:05:c3:eb:7e:21:ae:1e:95:24:f8:71:b1:16:76:
         3b:13:41:ee:85:58:88:84:20:90:7b:4e:2d:31:de:5b:88:bb:
         88:8c:54:f1:be:c4:11:f9:5c:ff:2e:5d:d4:83:20:ab:8c:3c:
         d2:cd:3e:01:51:ab:dc:10:6a:43:76:ed:d6:8f:da:86:a8:fc:
         ae:f5:af:71:20:08:71:e3:cc:41:46:a5:65:5b:39:16:03:c7:
         d4:60:aa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:21:47 2026 by rpki-client