Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
File:                     68A727878748F40EF62D744B06303F71A6B3F75C.mft (raw, json)
Hash identifier:          Gal6oCWbmhQpYOxpZi2ise5n9eq3FNWwZtoMQMaFLJI=
Subject key identifier:   D1:32:01:F5:FC:43:8E:3E:41:D6:16:88:18:34:3A:5E:D2:2E:F5:2C
Authority key identifier: 68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C
Certificate issuer:       /CN=68A727878748F40EF62D744B06303F71A6B3F75C
Certificate serial:       25FB27AF5052352FFF065B488714B45CA219BFA9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
Manifest number:          36
Signing time:             Thu 11 Jun 2026 15:45:35 +0000
Manifest this update:     Thu 11 Jun 2026 15:40:35 +0000
Manifest next update:     Fri 12 Jun 2026 19:35:35 +0000
Files and hashes:         1: 68A727878748F40EF62D744B06303F71A6B3F75C.crl (hash: UcCbGNnxNeQPDgLboBYaLRJ2koFnpSyr9W1RNkH0+Z0=)
                          2: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: S8QwzcFeryIcuSdPBiMnAYW7dqUXcBjtqFkLeF9/BcE=)
                          3: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: IbAFzZACUnD6lwBQxPhQqMDiyphOZDVL6AMwxKGfiyQ=)
                          4: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: PvN2AuvxpSJAs/KNp18Hx71tEJNrxtBQ9MHqNXHlPGI=)
                          5: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: CeqXPBLKTKcb4QWFvGgnRWapqG6f1Vmt1NBorMo+v2c=)
                          6: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: WRqUfw4kkLNha7EwV7NENaJIZvhb1ikV9t5ePDUcyD4=)
                          7: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: 6s+J2D1xc+Un9FBlPt0gue96vFI4b8yX8woz+h6eFQo=)
                          8: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: c+NnvyqB3knbtuO7KdhM0hJjec2wwtXVinOUBhE4/24=)
                          9: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: hz0u1O8torhSAEu0GK+s8W9famRD261lcziOb/ZySjc=)
                          10: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: gR1DTuGl5zoFpulg1oigiYRS4tO3/p7LnE5jaqD1jaU=)
                          11: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: ghKRefxmMKmKlt978ds7tp9D7g1WWsJyZmES+glyEMw=)
                          12: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: r2ZYiFd01bWs0eEN9nD+Mp8m+K6B0HFPjNNciuS/bGc=)
                          13: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: Tv2GPPjlGM6s70rJUxZeMrMG5Grjr8wYER/e5zbXioI=)
                          14: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: pivfi9ji1ihnIAJ1idyzgwRmHruzS5uloDq3BscV5e0=)
                          15: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: NLB3lY9DFzaCd5CKPizbBhfO5LYHEpYinHrGVDAbCes=)
                          16: 3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa (hash: vW5w5IkuRb83zA5ANSFF1CJerE321mN8QnbQgdvihxM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl
                          rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fb:27:af:50:52:35:2f:ff:06:5b:48:87:14:b4:5c:a2:19:bf:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68A727878748F40EF62D744B06303F71A6B3F75C
        Validity
            Not Before: Jun 11 15:40:35 2026 GMT
            Not After : Jun 12 19:35:35 2026 GMT
        Subject: CN=D13201F5FC438E3E41D6168818343A5ED22EF52C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:22:91:cf:c4:ea:a8:73:d6:65:58:28:41:
                    8a:53:16:bf:b6:6f:b5:35:75:2c:de:00:e1:c0:7c:
                    eb:8a:52:94:01:4d:69:52:2a:2b:cb:7d:0f:53:46:
                    13:b5:d7:01:26:97:cb:1e:98:90:0f:b0:8b:cc:47:
                    31:95:17:b1:41:ec:5d:f1:13:5e:42:98:f8:7d:4b:
                    6e:28:c0:da:01:2f:9a:a7:d3:9b:10:96:f1:47:23:
                    1d:20:06:d0:c6:86:be:36:59:d2:f8:58:d5:04:f5:
                    a5:db:de:fa:51:27:eb:1a:96:6d:43:ae:cf:1b:2f:
                    2a:a0:3e:90:be:16:31:f0:f6:80:aa:a5:75:b9:f9:
                    2a:d2:b1:7c:98:b7:a8:86:de:c0:5a:b0:d6:0a:a0:
                    08:1e:5f:8b:c6:41:d1:a9:e5:4a:e6:85:e0:5c:68:
                    f6:3d:1d:7d:cb:1a:5b:97:50:61:64:68:c9:c1:ef:
                    84:03:57:48:ea:1b:5e:f6:75:97:de:39:51:70:6f:
                    cf:a1:b7:f7:01:bc:8f:a2:65:8a:6b:54:f3:92:f9:
                    6b:ca:40:52:a9:e4:42:ac:4a:99:30:b4:ba:f9:9c:
                    15:c4:b3:ba:6a:86:fd:cb:05:d1:f0:77:58:04:d1:
                    15:d1:84:11:fb:36:de:13:2f:94:40:58:3d:99:fa:
                    a8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:32:01:F5:FC:43:8E:3E:41:D6:16:88:18:34:3A:5E:D2:2E:F5:2C
            X509v3 Authority Key Identifier:
                keyid:68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5b:70:c4:2c:ae:de:0a:d6:88:de:dc:2e:05:66:31:b8:e4:
         70:fc:13:b9:55:b1:51:59:46:8d:d6:e9:b9:db:01:4c:7f:cb:
         6e:e8:f8:a3:77:7e:21:bf:bf:1c:fc:27:1f:fe:0f:15:d8:34:
         89:bb:54:5c:a7:8c:3e:59:4b:e9:e0:ce:b6:6c:e6:fe:78:46:
         94:ed:b6:53:05:6f:7f:71:82:e1:b0:06:a9:5a:58:59:ed:40:
         1f:ca:2e:04:ae:71:e2:4a:da:d8:1d:bc:a8:7c:08:e9:60:73:
         6e:cb:6a:f2:33:86:7c:0a:51:f1:e4:b2:cb:bd:e9:04:6f:65:
         a6:92:3c:3c:6d:d5:87:30:ea:3a:4f:98:fb:c9:49:b4:51:62:
         05:e7:4e:56:4c:87:67:88:ed:de:29:0c:17:a6:54:08:be:9f:
         ff:26:b5:52:e9:18:86:e2:06:12:c6:59:73:4d:7b:8d:87:ff:
         07:79:5a:fd:9b:d9:7b:8d:c6:9d:dd:0a:28:24:3d:02:1c:77:
         5c:56:03:4a:66:0c:d4:d2:92:d8:43:57:c0:e3:4a:1f:f5:f3:
         62:3d:97:0c:58:67:8c:a2:c1:24:92:7c:1b:c5:37:e5:90:ed:
         d3:19:22:0b:ff:91:b5:5a:4f:4e:e7:da:42:1b:18:c0:d6:21:
         9f:b5:d5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:04:08 2026 by rpki-client