Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft
File:                     70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft (raw, json)
Hash identifier:          i6WdnbSXfD/QaU2r0A2is7PQZEjtmRpoOn0Xvozf3U0=
Subject key identifier:   66:1D:87:B5:08:7B:E7:45:E1:8C:9D:70:55:36:EA:5A:36:B7:43:00
Authority key identifier: 70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E
Certificate issuer:       /CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E
Certificate serial:       021463DF0CBE00A2C0D637DDA2E33DF8089284B6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft
Manifest number:          3F
Signing time:             Wed 17 Jun 2026 22:04:16 +0000
Manifest this update:     Wed 17 Jun 2026 21:59:16 +0000
Manifest next update:     Fri 19 Jun 2026 01:50:16 +0000
Files and hashes:         1: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: Nx3fcumdsqRiUqwqQ3R1jk6NstvkzNg1p4gYbPnIgK4=)
                          2: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: 7ih/cC2+LAsXqVPNvC5gz44ZBDPBatRFoOMXqptl20I=)
                          3: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl (hash: 4wYkHKxecqtfENeqcLuCkusqQJnqHLF0SDeRG/ENp4k=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl
                          rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 01:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:14:63:df:0c:be:00:a2:c0:d6:37:dd:a2:e3:3d:f8:08:92:84:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E
        Validity
            Not Before: Jun 17 21:59:16 2026 GMT
            Not After : Jun 19 01:50:16 2026 GMT
        Subject: CN=661D87B5087BE745E18C9D705536EA5A36B74300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:15:92:69:e5:97:2a:ec:04:c1:87:25:e1:36:
                    b2:2a:ed:46:1a:f5:f6:7e:09:e8:54:b2:39:15:dd:
                    47:69:9d:6b:60:f9:36:7f:26:49:8f:98:da:92:73:
                    e7:55:b5:71:00:9d:ca:fe:48:a4:a6:7c:19:f3:23:
                    5f:83:ea:55:d8:51:83:49:84:71:c1:b5:87:88:c0:
                    d9:e3:1e:17:96:38:77:3e:d9:88:fa:5c:82:ed:40:
                    1d:25:83:13:07:86:8d:32:ca:b5:c6:62:8e:b7:32:
                    7b:bc:fc:52:75:d9:32:fd:53:23:91:79:4c:a1:d2:
                    7f:1d:6b:11:64:7f:c6:8f:2f:be:73:f9:2c:9a:2b:
                    12:a4:1f:c6:94:2a:a1:2d:af:4c:43:96:f0:0a:d9:
                    59:87:cb:de:a3:d4:0c:f1:19:e3:ca:e2:57:04:c9:
                    84:f8:65:6a:5f:6b:9f:5a:c9:e8:d3:92:d8:a5:3d:
                    f9:7f:f4:ba:ba:58:d6:e9:04:93:82:d9:e2:3b:ac:
                    53:ef:0d:da:eb:38:e2:20:02:a6:23:24:09:ff:18:
                    49:95:f8:f4:01:ca:c6:3e:2d:ce:e1:3e:2a:b1:29:
                    ef:3b:9d:8f:ef:fb:4d:46:3d:3a:98:f4:3a:16:77:
                    0a:ef:90:54:33:17:9a:4f:ea:d0:aa:e3:05:59:86:
                    e1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1D:87:B5:08:7B:E7:45:E1:8C:9D:70:55:36:EA:5A:36:B7:43:00
            X509v3 Authority Key Identifier:
                keyid:70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:84:07:d2:c6:d7:0c:ae:86:23:0b:e2:60:85:4e:f7:b4:de:
         4e:95:cf:95:04:3d:a5:0e:9c:97:fa:05:4d:ce:f1:a2:54:81:
         23:b2:0e:e4:12:b8:b4:4e:08:96:9b:7d:29:ab:14:8c:4b:89:
         49:9a:9a:3c:5c:bb:74:f9:d5:4b:04:7d:5f:c9:ff:7d:ff:ba:
         f2:a8:f2:c1:c3:de:68:e9:da:1b:02:f2:d0:ac:79:70:11:3b:
         28:10:5c:08:0b:7a:12:fe:69:8a:18:70:a1:8f:5d:9d:db:ac:
         1a:b9:7e:c4:41:e7:17:ce:35:a0:66:81:bd:3b:b0:9e:12:c1:
         f4:9e:71:b0:a4:d2:6f:37:ed:40:a9:b0:f1:31:37:38:90:69:
         90:56:b5:93:aa:6b:dd:41:e4:cf:15:59:6c:bf:5b:5f:74:77:
         88:25:6d:d1:e5:23:57:b6:d5:97:91:9e:8b:a2:ae:48:e9:d7:
         11:f8:fe:f9:87:35:43:6f:d4:f9:62:f5:a3:d2:90:cb:b3:c8:
         21:7d:38:5a:19:1d:94:81:2b:6f:4e:ca:58:53:b2:c0:b2:4d:
         86:d6:31:36:17:40:5f:cb:cb:dc:6b:3b:f6:68:d0:bb:99:15:
         3b:11:93:f7:22:e9:53:6f:6e:39:d3:ce:b0:f7:79:cb:10:41:
         b2:ea:26:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:12:08 2026 by rpki-client