Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft
File:                     C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft (raw, json)
Hash identifier:          ujzDcKQ/+1EipbTHTH6D8Ky42b0miTZag/I9DYkxnCY=
Subject key identifier:   42:B9:8E:74:F6:A0:60:1D:B0:86:81:C0:5F:5B:9D:4B:85:AD:7E:68
Authority key identifier: C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA
Certificate issuer:       /CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA
Certificate serial:       40F5A722C2FBA42B2BF8EAF8A855619CE0948B1F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft
Manifest number:          3F
Signing time:             Wed 17 Jun 2026 21:43:50 +0000
Manifest this update:     Wed 17 Jun 2026 21:38:50 +0000
Manifest next update:     Fri 19 Jun 2026 01:24:50 +0000
Files and hashes:         1: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: HZspwOVsQwVfgqob+tdF/VYwOu0qjgbpMvggc2B5G9U=)
                          2: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl (hash: D1qoP29Ut04GcoSQrJKGZQtEvR8SU36YXHGHtWZOgck=)
                          3: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: jKcMmkxCrjthwE2DnIqjL6jc1f5PWi5F1NKZnZH2qVE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl
                          rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 01:24:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f5:a7:22:c2:fb:a4:2b:2b:f8:ea:f8:a8:55:61:9c:e0:94:8b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA
        Validity
            Not Before: Jun 17 21:38:50 2026 GMT
            Not After : Jun 19 01:24:50 2026 GMT
        Subject: CN=42B98E74F6A0601DB08681C05F5B9D4B85AD7E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:98:bf:b5:34:d8:1c:23:2d:67:1f:c7:4c:
                    b8:8e:97:0e:16:92:24:fa:b0:33:f3:e7:29:e4:ef:
                    c0:9f:fc:0c:6f:41:6c:ca:37:b1:f9:8f:8a:1e:66:
                    e7:a4:99:80:c9:ff:94:3b:ec:a6:26:e2:ac:b3:ae:
                    df:e7:bb:4e:05:55:5d:99:40:f0:62:de:90:37:23:
                    54:7a:f8:9a:0a:8b:d1:b5:82:5b:d5:99:ea:f9:f4:
                    ee:9b:3c:b9:09:3f:be:2c:13:f8:d9:53:03:87:23:
                    28:2a:94:68:9e:e1:f3:96:a9:8b:2d:41:3d:c8:4a:
                    19:d6:45:a9:12:93:a2:a7:99:61:61:58:89:d2:12:
                    7b:4e:5d:99:b3:85:08:c9:aa:de:53:16:0d:ab:58:
                    35:06:2b:3f:82:db:49:27:d2:12:42:f3:9b:2f:12:
                    8d:37:8d:0f:96:2f:1a:6f:2a:57:93:c0:11:9d:3a:
                    06:1f:b8:c0:1a:83:ea:98:49:ac:8d:c4:cf:f6:d1:
                    7a:5e:bf:89:ee:f6:c3:74:62:d3:bc:f9:ee:6b:74:
                    09:ef:7f:f2:b2:8e:ce:ac:58:46:d3:51:52:b6:ec:
                    64:ab:6e:b9:91:8c:29:a2:59:05:e0:ad:e8:a4:5f:
                    85:d1:d7:fc:4b:48:a0:74:ea:64:4b:11:c1:3b:5f:
                    65:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B9:8E:74:F6:A0:60:1D:B0:86:81:C0:5F:5B:9D:4B:85:AD:7E:68
            X509v3 Authority Key Identifier:
                keyid:C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:33:c5:5f:51:ee:8f:3c:bf:5f:2b:d9:6d:5e:cd:84:1f:41:
         cb:9b:af:a4:22:c8:b7:0d:a7:82:49:c4:19:55:24:bf:df:4d:
         66:28:b5:18:38:12:cd:f6:e5:f7:33:c1:9e:12:31:ee:e4:45:
         d0:8c:51:73:47:6f:25:cd:1b:34:35:ca:db:64:90:08:e5:9c:
         66:13:f9:50:15:87:33:40:da:f4:0b:44:5d:63:78:74:13:45:
         59:b9:be:2c:ed:ac:19:35:dc:e3:98:2e:c1:3e:c1:91:c3:92:
         d9:09:41:2a:90:f6:1b:05:ae:f2:1e:f8:59:ab:db:4b:1e:90:
         22:25:f9:b6:66:a0:19:02:e1:6f:b5:d6:1e:07:a2:80:f2:a3:
         ba:12:07:58:f8:12:f5:44:72:a6:5a:69:fa:06:ae:3a:11:6a:
         14:07:a7:3f:d7:9a:65:9b:8b:86:0f:5c:8f:22:ed:77:9e:76:
         3b:cb:f0:d0:84:7e:7e:3e:ac:c6:dc:bd:9c:8e:cc:23:f7:ee:
         86:5b:9f:2c:35:9b:be:cb:8c:b8:8b:a7:0c:f9:bf:4a:21:d8:
         51:9c:29:0d:1b:1f:de:43:3d:b9:3c:9f:64:e0:2d:e1:d2:dd:
         6a:fd:b4:fb:ef:5f:f8:bf:34:0e:3e:0b:5c:b6:cb:91:b4:55:
         91:6e:50:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:16:00 2026 by rpki-client