Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
File:                     90B9450AA39B9CD9586085EFA9EF7887EE613759.mft (raw, json)
Hash identifier:          Rw45kynRdDT22o1pwrpUosX+DiOvWzahlywnHDqWIoo=
Subject key identifier:   3B:BC:FE:F6:44:6F:64:86:90:70:90:6C:E1:D0:0D:78:D3:4F:53:F9
Authority key identifier: 90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59
Certificate issuer:       /CN=90B9450AA39B9CD9586085EFA9EF7887EE613759
Certificate serial:       2F4AA5B90AEB62604487677330B24362A06CAC99
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
Manifest number:          41
Signing time:             Fri 19 Jun 2026 13:22:01 +0000
Manifest this update:     Fri 19 Jun 2026 13:17:01 +0000
Manifest next update:     Sat 20 Jun 2026 17:00:01 +0000
Files and hashes:         1: 3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa (hash: i2oBSFPKpVqeh9es/WJHy0i/TdHRHJL5ycGj+adtwXc=)
                          2: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: J0+iHCZ4UXpTu9FbQSO8iPWMu0E+Lc3DRVGjSSCxGxw=)
                          3: 90B9450AA39B9CD9586085EFA9EF7887EE613759.crl (hash: KT1exM4upajUgdABP0M7ggCBinlfZq4+bS/FmWhV23s=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl
                          rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 17:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4a:a5:b9:0a:eb:62:60:44:87:67:73:30:b2:43:62:a0:6c:ac:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90B9450AA39B9CD9586085EFA9EF7887EE613759
        Validity
            Not Before: Jun 19 13:17:01 2026 GMT
            Not After : Jun 20 17:00:01 2026 GMT
        Subject: CN=3BBCFEF6446F64869070906CE1D00D78D34F53F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cc:06:06:89:c7:93:04:2b:69:5e:5c:39:34:
                    ba:8b:42:4d:62:c5:bf:7a:63:1a:a2:c5:8c:a2:99:
                    67:49:b8:2c:2c:ca:75:f3:a7:d8:cf:99:b1:ad:c5:
                    a9:93:d8:5c:32:76:b7:f5:32:4e:04:b6:22:3e:51:
                    38:37:87:fc:df:79:df:a7:84:d2:6f:1b:13:9b:bd:
                    09:e2:91:82:08:0c:3b:29:d0:09:a4:12:b3:84:57:
                    de:df:ec:6e:4f:d6:aa:e7:89:84:38:50:21:70:0f:
                    95:1d:45:90:cd:ae:14:ef:78:50:1f:c3:b9:71:fd:
                    26:37:5f:a6:35:99:5f:1f:ba:84:28:92:70:7b:d1:
                    32:95:a1:cf:b5:d8:b6:0e:96:b4:95:cc:ff:44:7b:
                    f7:33:cc:c1:e9:36:5c:66:c7:94:18:06:11:31:c6:
                    8a:09:96:66:8f:b4:17:d4:40:4b:4b:b6:1d:ab:c2:
                    df:0d:1d:a3:2a:70:51:79:e5:fa:da:2e:65:d2:90:
                    89:f7:f7:cc:e4:e3:08:bc:af:a8:c3:f9:4c:0f:57:
                    b4:23:8f:60:a6:75:13:8b:0a:ff:a3:6d:e8:fc:7b:
                    4e:b2:72:f3:f1:76:80:8b:ba:fa:b5:88:62:fe:d2:
                    00:01:b4:93:b8:12:6b:4a:59:0c:9a:3e:b3:55:8c:
                    9e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BC:FE:F6:44:6F:64:86:90:70:90:6C:E1:D0:0D:78:D3:4F:53:F9
            X509v3 Authority Key Identifier:
                keyid:90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:9c:88:de:74:23:a2:97:b0:63:a7:f6:2c:3d:ed:e0:db:10:
         aa:70:4b:29:f5:92:39:1f:b6:58:88:e1:20:52:eb:4f:c7:91:
         1b:58:51:8a:84:53:e3:aa:e1:c9:19:57:bc:88:0b:16:71:c4:
         d2:df:6c:1c:04:53:e7:9f:6c:23:d3:b5:87:bc:37:1c:91:a2:
         a9:61:20:03:46:1e:45:a6:3c:a1:cf:ed:a9:67:01:72:0a:69:
         37:39:dd:fc:b5:06:65:0f:77:7f:93:5d:01:96:01:5b:9d:e0:
         86:ac:a1:a3:5f:84:1a:14:b8:a8:f4:b7:6b:9f:b9:a4:9b:51:
         b5:42:a1:8e:d7:f8:e4:5a:de:ea:5f:ee:51:6e:d5:ff:95:39:
         72:92:73:d0:19:12:f8:d1:0c:b6:e0:ba:3c:eb:fe:e3:2e:42:
         c1:a2:e3:da:fc:7d:e6:87:2e:28:46:bb:be:de:06:34:47:a8:
         fd:e0:41:0c:af:c1:55:83:79:86:d1:19:f5:fc:f6:0e:c1:15:
         a5:d6:a4:e7:ea:55:3f:5b:83:14:7a:eb:5a:66:5a:65:2a:04:
         14:7c:d2:ba:89:30:44:44:f2:23:a9:ef:75:fb:90:ab:74:66:
         cc:13:ae:06:72:0c:eb:ae:52:3b:9e:be:8d:a1:9e:e2:b1:dc:
         53:d8:01:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:16:18 2026 by rpki-client