Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
File:                     E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft (raw, json)
Hash identifier:          v1OtNarApEiAsjiIOMrgrNBlyfQjNgCjZmdNBCD+5bc=
Subject key identifier:   A9:06:37:A6:B8:EE:49:1B:56:83:32:C1:2E:63:47:6D:26:AE:45:61
Authority key identifier: E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
Certificate issuer:       /CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Certificate serial:       1D24E960ABFC2247B57B2A76A68BC69068603226
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
Manifest number:          42
Signing time:             Fri 19 Jun 2026 23:29:20 +0000
Manifest this update:     Fri 19 Jun 2026 23:24:20 +0000
Manifest next update:     Sun 21 Jun 2026 03:12:20 +0000
Files and hashes:         1: E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl (hash: OKFcZWEF1hKqpMdua5wkymFHK2FbYW8rl6rSiZrp6Jc=)
                          2: 32372e3132332e302e302f32312d3234203d3e20313339393338.roa (hash: CrDosYMbaMymGSuAwPQv1AxOjr/T7uHU3jsk81GEu9s=)
                          3: 3230322e34332e3131342e302f32332d3234203d3e20313339393338.roa (hash: zkpoPaCvym1nePddds0Q6RkGOhVKM8mr34gyM4UC8cI=)
                          4: 3130332e31382e32382e302f32322d3234203d3e20313339393338.roa (hash: I7UPuFvym8p8pJP6diQSrrFx2chmGGAd+K6o7fzpvv0=)
                          5: 3130332e31382e32382e302f32322d3234203d3e203435373036.roa (hash: Pn0Z404yzeHHtXmdQ9DEjG8okFo36OY3UkZiEWBYoXE=)
                          6: 32372e3132332e302e302f32312d3234203d3e203435373036.roa (hash: kKeNFgEWYpxJdEVxaw5r/j+gOBdLDAvajOzNPHKCcoc=)
                          7: 3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa (hash: 89cfsFLBXkB3WFs7rNpw78ZZSzujq+PLIJTF9YsulHg=)
                          8: 3230322e34332e3131342e302f32332d3234203d3e203435373036.roa (hash: PwwIV0M1bktSo20UeNkcLhDf5y3VQGfSd2Gx4evwdcY=)
                          9: 323430363a613330303a3a2f33322d3332203d3e203435373036.roa (hash: LXNYT1nV1xGIxdVsRECQ3Cj/A4MmgkuRi4tC78/lvhM=)
                          10: 3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa (hash: Jc9uidaalUxZZcIN6U2HF/YTypqnkC1z9uB0RypRbr8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
                          rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 03:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:24:e9:60:ab:fc:22:47:b5:7b:2a:76:a6:8b:c6:90:68:60:32:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
        Validity
            Not Before: Jun 19 23:24:20 2026 GMT
            Not After : Jun 21 03:12:20 2026 GMT
        Subject: CN=A90637A6B8EE491B568332C12E63476D26AE4561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:61:db:85:e7:12:2c:d3:96:62:18:e2:82:4b:
                    5c:01:7a:64:cb:e6:fd:dc:54:04:f1:8f:b8:0e:bb:
                    d5:5d:95:b6:f2:b8:2c:1d:b0:70:99:19:d2:f2:d9:
                    9d:bc:ad:91:72:7a:21:71:2b:9b:58:35:db:e1:7a:
                    c6:3b:54:01:ac:37:26:7a:89:b2:87:e4:47:39:36:
                    32:1d:f1:fc:bb:fb:82:c7:84:84:35:69:bc:6d:bc:
                    19:8c:84:0e:25:db:bc:8a:07:72:ac:3f:ea:58:65:
                    a2:27:31:d9:55:5d:4e:20:f1:da:d8:20:d6:90:44:
                    3f:79:0a:07:9f:70:42:a9:70:e6:b5:35:a5:9d:68:
                    2d:65:32:9f:16:6e:9e:92:61:79:fd:41:69:70:4a:
                    46:74:b5:67:3c:55:76:34:7c:ac:ce:a9:66:c0:20:
                    dd:29:70:db:8c:d8:e8:7a:c6:24:d0:c7:6c:11:8c:
                    78:97:29:95:d3:00:24:e6:14:2a:66:51:d1:7e:27:
                    49:0b:53:23:a5:e9:9f:40:23:78:cf:c0:0d:13:18:
                    5b:0d:0c:0d:8f:d5:43:46:b9:ac:19:83:74:0c:8d:
                    cf:9a:54:32:0b:7f:e8:45:de:10:80:3e:6a:69:1e:
                    85:ab:8e:6b:60:31:87:0c:1e:8a:84:61:44:95:45:
                    bf:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:06:37:A6:B8:EE:49:1B:56:83:32:C1:2E:63:47:6D:26:AE:45:61
            X509v3 Authority Key Identifier:
                keyid:E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4a:f5:99:e5:78:6b:9e:c6:f9:e6:f0:17:c5:0b:2c:80:21:
         a9:0b:db:e3:4d:c2:08:d6:e8:6d:79:a0:4c:d4:50:e3:44:40:
         30:e8:34:8e:41:53:e2:02:02:8a:0f:eb:1f:a9:3a:04:ef:e8:
         5a:7b:5f:fb:ed:db:7d:ca:13:91:97:f7:10:5d:22:d5:77:f1:
         da:c2:59:98:0c:79:28:37:e9:72:f5:32:1d:cc:32:7d:6c:25:
         6f:3e:d4:99:64:d7:cb:9d:37:02:5f:2a:6f:bd:09:44:56:88:
         e1:c2:b0:dd:77:90:e5:e2:03:f3:8f:d3:fc:c0:9d:eb:f8:7a:
         8b:d5:8a:8d:7f:f3:ec:4e:9c:bf:51:f9:a5:99:dd:79:34:79:
         c2:42:6f:15:62:6e:f8:7c:f3:93:19:2a:54:bf:0b:c7:89:f3:
         a2:23:ff:f4:a9:fb:b9:23:3b:c7:9f:bf:ac:2a:ff:53:da:97:
         ad:6f:ae:c6:cd:36:63:aa:f1:54:c1:db:22:51:b7:3d:a6:cf:
         2e:aa:fc:08:bd:b8:eb:1e:8e:d8:85:c3:f7:ce:7c:bc:fc:6f:
         7d:2c:e0:d4:8f:0f:4e:a9:20:a1:6e:9b:a8:5d:09:1a:cc:28:
         90:07:50:ce:16:cc:6e:c6:b7:64:cf:c6:21:ae:65:38:81:82:
         78:a6:b2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:16:06 2026 by rpki-client