Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft
File:                     4156BE0E036363A596E1CBC310489AB801DFF941.mft (raw, json)
Hash identifier:          o8VJ0tdsQk4KEId0BI64lQdcCt/vLpdcvtc/73vLQaE=
Subject key identifier:   5C:27:3D:18:1A:78:2D:3B:5E:33:26:1A:3F:C2:46:74:CF:35:4F:B7
Authority key identifier: 41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41
Certificate issuer:       /CN=4156BE0E036363A596E1CBC310489AB801DFF941
Certificate serial:       13175E4EF53E895F0D223B532EC7164F69E092D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft
Manifest number:          2F
Signing time:             Fri 05 Jun 2026 20:10:39 +0000
Manifest this update:     Fri 05 Jun 2026 20:05:39 +0000
Manifest next update:     Sun 07 Jun 2026 00:00:39 +0000
Files and hashes:         1: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: rSHHS2SVXYFIsnKnswkfD0W9wcSIKHSwcE57Ly7QYSU=)
                          2: 4156BE0E036363A596E1CBC310489AB801DFF941.crl (hash: NOHE7cjA26SW22DR7FgQP29kztHAwFRkrgekYcyVqVY=)
                          3: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: BnEjvX1TV7mzZcLsswA7EKyiNtfAnyBE1cK3RYLFuSA=)
                          4: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: HmJs2PjyM55f07/63Txr+Z06mPwICEzHB4ScF1m3HOs=)
                          5: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: HaFV5pJV86ftGAnPRTRMjv8zuoil0malPe+dc/Qoh5c=)
                          6: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: 6peX0JDNzT6rMcQu54Lce5kAols1rJU3rJxRvgulacM=)
                          7: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fBaq5SB6brHrX1BQRg7cuUdo6I/tHMTxRcN1nuTWvWU=)
                          8: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: 80LRBswxlIwyMdrBKKN8zHcPB67XbaBw69GuBUvFeh0=)
                          9: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: 1Jti76r9T9UKwdcEcYvsPgmo/iaRRGG2B+UGXQ8BTSc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl
                          rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 00:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:17:5e:4e:f5:3e:89:5f:0d:22:3b:53:2e:c7:16:4f:69:e0:92:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4156BE0E036363A596E1CBC310489AB801DFF941
        Validity
            Not Before: Jun  5 20:05:39 2026 GMT
            Not After : Jun  7 00:00:39 2026 GMT
        Subject: CN=5C273D181A782D3B5E33261A3FC24674CF354FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b5:fe:a2:39:e1:e6:34:1c:be:50:d5:d6:8d:
                    60:00:37:35:48:06:7a:84:a0:de:b7:cb:bc:a0:f7:
                    b9:86:8a:db:4a:fe:9f:95:0c:2c:0b:55:ea:70:4f:
                    71:2c:87:f5:75:5d:48:56:11:a4:dc:0b:53:a5:9d:
                    44:d0:94:b6:3d:6d:94:b2:97:b4:39:98:4b:8f:dc:
                    50:31:11:69:f9:e6:8b:8a:2a:59:5b:4d:cb:d5:e0:
                    c8:5c:01:49:1f:00:07:3b:2a:87:32:b8:7b:f8:79:
                    d3:8d:55:dc:42:14:82:e0:fc:95:33:98:e0:e0:e3:
                    e8:9c:9b:eb:e1:e3:e4:cc:a1:72:3c:a4:43:ce:8d:
                    a5:d4:e3:6c:b3:db:bb:0d:95:24:61:c4:0c:42:ed:
                    a0:e3:24:60:30:26:4c:70:30:30:04:b1:45:19:1d:
                    be:43:29:41:b1:99:45:86:66:ba:c0:88:5d:78:af:
                    e3:18:bd:a0:a0:76:36:c3:03:2b:bd:85:82:8f:9a:
                    94:0f:80:47:aa:13:e4:44:3e:ed:0c:6a:e3:b4:64:
                    14:21:44:12:1a:cd:b7:4d:53:00:8b:db:49:72:0b:
                    54:13:ca:f0:a6:35:4e:4f:f0:ec:ab:d4:64:6a:24:
                    67:76:d2:e9:68:17:22:cf:95:17:79:e8:f4:ab:e0:
                    f6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:27:3D:18:1A:78:2D:3B:5E:33:26:1A:3F:C2:46:74:CF:35:4F:B7
            X509v3 Authority Key Identifier:
                keyid:41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:3f:b3:0c:0a:66:fb:91:c8:20:89:ef:c7:99:87:41:77:62:
         a5:8d:d9:73:56:d6:de:a0:5a:87:06:9e:25:25:10:5a:34:b6:
         12:90:eb:c8:99:83:e8:b7:49:e0:e5:2c:65:fc:3e:92:99:c5:
         ef:8e:c4:12:31:2f:2e:4f:e9:ca:26:87:82:fa:8d:7e:15:30:
         62:0d:3b:9f:ed:d4:aa:4b:ef:b4:32:15:3a:e7:dc:06:a9:34:
         ba:5c:15:d3:d4:e9:0e:18:e6:82:49:3e:28:f2:10:bd:41:72:
         84:b6:fd:4f:2e:f3:64:25:71:d1:6f:d7:e5:ef:fa:51:90:cf:
         a8:a7:9a:7e:14:5b:2d:3d:13:51:8e:dd:5f:0b:d9:3d:8b:c8:
         9b:46:28:50:ee:0a:af:01:37:30:f6:a3:54:aa:04:16:07:33:
         c0:b8:0c:21:d9:0e:3c:4d:e7:66:9d:08:31:a1:a1:f1:eb:46:
         7f:68:ad:fc:22:3c:a5:e9:b0:3a:39:94:91:0c:84:75:e8:3e:
         ab:19:e1:4d:bb:b6:57:29:cb:3b:a6:12:23:ca:0a:11:59:f6:
         eb:81:17:83:de:a8:77:09:f8:76:eb:36:e6:ec:4e:07:6b:0b:
         69:05:a7:76:9e:89:62:9e:6d:70:85:50:73:a4:9d:36:03:88:
         d8:f5:6e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:45:59 2026 by rpki-client