Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft
File:                     D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft (raw, json)
Hash identifier:          M7lEa55ifQpBn/VgjqjCmIbfyNg8g5F3gU1cMmR1WZE=
Subject key identifier:   43:AE:04:6E:79:C6:27:12:65:41:24:F9:0A:0F:F5:88:42:00:7C:75
Authority key identifier: D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03
Certificate issuer:       /CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03
Certificate serial:       449C4CB10E04B3556B6CFEA86EEB249D3AD5D06C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft
Manifest number:          3F
Signing time:             Thu 18 Jun 2026 03:56:41 +0000
Manifest this update:     Thu 18 Jun 2026 03:51:41 +0000
Manifest next update:     Fri 19 Jun 2026 07:22:41 +0000
Files and hashes:         1: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: mldeFV7Jf6QOev5E++VL/jRK/PuO8nW0ShYwDv/SkQ8=)
                          2: D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl (hash: jVXX+3E8M7s1wvuSkoMrKCEhVYID629it+qSWat5Tak=)
                          3: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: IaAf1+vjln5sceJpZ1s3ScYLsPQRM51r/bqMTajLuUs=)
                          4: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: xFfth544qMvDawFqjY1oWbMZQMZwR8ATU9ANAJM8pNM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl
                          rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 07:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9c:4c:b1:0e:04:b3:55:6b:6c:fe:a8:6e:eb:24:9d:3a:d5:d0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03
        Validity
            Not Before: Jun 18 03:51:41 2026 GMT
            Not After : Jun 19 07:22:41 2026 GMT
        Subject: CN=43AE046E79C62712654124F90A0FF58842007C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:72:7f:35:05:75:cd:69:21:f5:bc:de:23:
                    58:53:c4:76:73:f3:4b:c4:c5:ac:9b:87:7b:29:fc:
                    73:e9:b0:e2:4f:a6:10:b4:71:fb:4e:5c:20:60:3e:
                    99:af:e5:c8:c2:d9:48:18:4d:d8:f2:85:92:06:1d:
                    27:9b:95:02:a7:fa:fc:64:6f:fa:59:f7:79:cd:3c:
                    54:f4:f6:ce:ec:60:df:2c:88:65:ca:b2:30:85:58:
                    61:6f:ae:d9:4f:35:f8:26:31:d1:1b:70:61:10:18:
                    75:f2:03:36:b9:de:cf:89:8f:bf:ab:ab:ba:4c:df:
                    59:e6:10:95:b1:32:47:aa:50:2e:f9:e7:38:05:16:
                    98:c3:74:2b:9d:eb:6d:1f:00:ee:57:9a:f2:6a:ef:
                    e0:c5:ed:de:c0:1b:d9:4e:47:0e:70:a7:c7:ca:bb:
                    5a:da:15:a0:c9:c4:7f:da:0e:4f:f7:a2:3f:57:c5:
                    3f:09:fe:8c:e3:fd:fe:25:9b:8f:14:c6:88:db:1b:
                    c6:6c:2e:0f:e8:c8:72:46:cf:18:71:94:61:6f:a0:
                    ad:76:ff:b9:3e:57:68:e5:91:34:02:fa:ee:97:42:
                    71:34:05:69:9d:74:f0:fc:3a:4c:c6:bc:9f:8f:ca:
                    bc:b5:91:17:03:83:25:92:07:5a:6c:7f:c9:f4:cf:
                    8d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AE:04:6E:79:C6:27:12:65:41:24:F9:0A:0F:F5:88:42:00:7C:75
            X509v3 Authority Key Identifier:
                keyid:D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:0d:43:2a:e8:34:93:d8:de:c1:52:da:ab:97:82:2c:17:c7:
         14:cd:52:d1:4d:ce:d0:fb:d8:ea:17:1c:a2:75:e0:d2:3c:e7:
         66:b0:a4:aa:a4:98:ae:a8:5e:2d:c5:b9:a2:53:57:fb:1b:40:
         6f:09:ef:e6:ee:3a:2a:f4:67:03:0e:f6:0d:d4:a9:18:95:ab:
         89:d5:bf:e6:e9:1a:81:f2:8f:92:fc:c5:5c:49:2b:eb:97:bb:
         c4:34:a9:1f:28:ce:2f:a9:d9:c7:b2:61:91:ab:50:df:2b:31:
         60:f0:59:29:79:6b:36:8c:3b:bc:27:85:b0:b1:92:99:87:79:
         5c:99:a1:54:e3:a0:ea:73:e5:7e:18:36:22:3f:c9:52:f5:1b:
         12:48:5b:63:61:29:c7:be:a0:05:b9:da:bb:f1:55:e2:cc:0c:
         cf:f2:6b:76:a7:87:73:c6:7a:de:01:c1:31:58:55:d4:76:43:
         02:7e:6d:66:33:51:4b:95:2a:92:5c:81:95:71:42:33:ef:34:
         78:54:93:f1:97:8a:a0:03:64:10:3e:f4:70:21:8d:ff:2f:dd:
         62:e2:d3:3b:44:e9:2b:d6:41:10:33:06:b7:d2:3f:4f:9f:bb:
         fd:34:8b:ac:bd:93:cb:bd:2e:0d:a2:4c:d3:b7:ad:48:f5:eb:
         59:5c:8c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:02 2026 by rpki-client