Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft
File:                     E83F205BF306DAF53F99D7D0596E19991D122A75.mft (raw, json)
Hash identifier:          u2O48ZYM5LLZJElvgF+TFyICEuCTxSz+KC06eIIMA5U=
Subject key identifier:   67:DF:65:7B:CA:66:DA:AE:45:A1:BA:A4:8A:93:7B:14:88:FF:98:B8
Authority key identifier: E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75
Certificate issuer:       /CN=E83F205BF306DAF53F99D7D0596E19991D122A75
Certificate serial:       654D12975549AA84BA209A5DFB59B45B683624CA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft
Manifest number:          3F
Signing time:             Thu 18 Jun 2026 01:33:43 +0000
Manifest this update:     Thu 18 Jun 2026 01:28:43 +0000
Manifest next update:     Fri 19 Jun 2026 05:25:43 +0000
Files and hashes:         1: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: qr0g5LVzrVb3dBi48fKGU2IZ+49TkkVc1Y82FpKn5Mk=)
                          2: E83F205BF306DAF53F99D7D0596E19991D122A75.crl (hash: H7IqDj1CocAxj9KWZLZcWYsVPwo/jUtYW7B1UNMu77Y=)
                          3: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: hxtIKOBEaXvvEhPlm4EoLMj05xZmKO9tH3GRDWA9ERg=)
                          4: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: 4/4i0yLfh0SYWVvIB+ls28jcDhOwmL2zwW2k6ffDKik=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl
                          rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 05:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4d:12:97:55:49:aa:84:ba:20:9a:5d:fb:59:b4:5b:68:36:24:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E83F205BF306DAF53F99D7D0596E19991D122A75
        Validity
            Not Before: Jun 18 01:28:43 2026 GMT
            Not After : Jun 19 05:25:43 2026 GMT
        Subject: CN=67DF657BCA66DAAE45A1BAA48A937B1488FF98B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:70:6e:5c:2e:b0:ad:61:71:43:43:e7:91:
                    5d:63:0b:37:75:b5:9f:02:e8:b9:b1:0e:7e:f7:63:
                    cd:ee:80:a6:f6:9d:0a:cc:69:b0:85:90:5f:72:37:
                    f1:ef:22:0d:90:90:82:ec:d0:20:c9:c7:d5:e8:cb:
                    e3:54:f4:99:25:27:3d:b4:c2:1a:92:5d:fc:a5:8a:
                    e3:2f:96:d1:39:1d:de:fb:86:dd:af:cc:2e:bf:b3:
                    a0:d4:b8:5f:32:5b:f5:de:be:87:a1:5c:9b:07:b6:
                    c0:00:9e:11:92:49:d9:bb:78:a2:8c:93:7c:13:51:
                    1b:22:ca:cc:36:b1:6d:96:cd:aa:10:98:77:b7:e5:
                    3e:b7:26:13:a8:73:ca:63:ed:25:9d:8f:33:99:9b:
                    8e:b9:60:47:fe:0b:ee:4a:51:2e:c3:9b:d1:c1:1f:
                    19:d6:55:3e:2c:9a:88:b4:61:78:2b:f7:f7:62:1d:
                    b4:00:a8:ad:f1:a5:be:6f:95:c1:0e:90:3d:c7:e7:
                    f3:f4:a3:c7:17:04:d2:3f:26:48:11:5e:84:2d:39:
                    67:bf:57:81:94:0a:74:4c:eb:50:72:8a:c2:32:0c:
                    a0:32:e5:b2:85:85:25:25:37:33:4c:ef:58:bb:a9:
                    f1:89:c0:66:fc:d6:50:6c:28:7f:20:f9:b5:32:e9:
                    de:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DF:65:7B:CA:66:DA:AE:45:A1:BA:A4:8A:93:7B:14:88:FF:98:B8
            X509v3 Authority Key Identifier:
                keyid:E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:09:0c:23:ee:1c:c7:d4:9e:49:57:75:14:f8:66:50:f7:d8:
         bc:3f:28:00:55:fb:fc:e3:7a:57:e4:ed:a8:9c:fb:d9:53:01:
         bb:4b:c3:fe:98:d0:89:96:1c:d4:35:1c:b5:2c:c7:76:57:be:
         c7:6c:e5:fd:3a:9f:c0:64:25:92:e2:6b:30:48:57:64:53:4d:
         3f:d4:3b:9c:40:79:5e:f9:66:91:34:5a:45:fa:33:57:a4:b4:
         0b:73:43:26:42:7d:20:7b:b4:f4:bb:b9:8a:83:62:d0:0a:84:
         b8:8c:f8:7b:33:24:8b:e9:66:a6:df:74:7e:a2:fa:82:a6:9b:
         da:78:71:55:16:bf:53:fe:a2:5d:69:61:24:7a:c7:b9:2e:e4:
         92:d4:41:a6:71:a9:ff:cd:80:94:4d:e1:c3:db:cb:2a:d1:68:
         5e:8d:23:6a:95:7d:c2:6a:8f:7b:81:2d:28:c8:a6:c3:02:07:
         0e:18:15:d7:c6:79:d8:52:37:12:6d:50:94:86:bc:7f:1b:a7:
         ae:74:67:c3:44:d2:36:a6:55:ac:b0:b5:70:36:d5:0f:89:49:
         c5:c1:d8:8b:b4:e6:69:b9:fb:58:87:07:9d:c2:a9:21:ca:94:
         2c:54:f2:3f:a4:97:9c:35:5a:43:da:af:15:86:42:3e:9d:d3:
         36:03:54:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 19:03:17 2026 by rpki-client