Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft
File:                     E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft (raw, json)
Hash identifier:          6fZK90GhOUKvZ6Y5e4zUiH8VIZfhczHs3lLegcwsWzA=
Subject key identifier:   40:3E:EC:3E:E0:4E:10:35:32:D9:47:EF:D5:76:6C:67:3E:D2:65:D6
Authority key identifier: E3:7B:9D:E7:6B:83:69:C8:6C:BD:D8:5F:17:B4:B0:8D:A3:90:39:12
Certificate issuer:       /CN=E37B9DE76B8369C86CBDD85F17B4B08DA3903912
Certificate serial:       220BAC7589E25277E73EB1E77888271E4A5F173B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft
Manifest number:          12
Signing time:             Fri 15 May 2026 17:46:42 +0000
Manifest this update:     Fri 15 May 2026 17:41:42 +0000
Manifest next update:     Sat 16 May 2026 21:04:42 +0000
Files and hashes:         1: E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl (hash: 5SImd9cVxt8WKZLFfIiqI/Sp7rOHvs64gXKg8/CPD9w=)
                          2: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: 8H0ycrYvaT3pEUwMuUYMPkeb6+nIJfK2o58CvS7laFE=)
                          3: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: oSx0cFa1nsipfiH0pkhplDWMeAxUpXV7UZUBLF8bNIo=)
                          4: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: gmD9ajpsyadNWLNIYrlzTIV+UYw18CE56nZqbLaELis=)
                          5: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: WdpYi9xOJp2Ik1RGOa6PotA1dBwWjL6rALxGb9WjneQ=)
                          6: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: PQRif44rE/vHl6KI352lV/5EM+qmOZyEEJRR83eHyBI=)
                          7: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: rS0I7oveJtn+l4aAAzlWodrD1fslAxWP3f3cXLvaPIY=)
                          8: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: n2lJ9bzcnUw6O+w0adArBpP91Kujz+/33ven90vG4LQ=)
                          9: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: D9MoAcvsSp+WiO9dOaWrzis15LUcy+CINQir9MZwMpg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl
                          rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 16 May 2026 21:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0b:ac:75:89:e2:52:77:e7:3e:b1:e7:78:88:27:1e:4a:5f:17:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E37B9DE76B8369C86CBDD85F17B4B08DA3903912
        Validity
            Not Before: May 15 17:41:42 2026 GMT
            Not After : May 16 21:04:42 2026 GMT
        Subject: CN=403EEC3EE04E103532D947EFD5766C673ED265D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f3:27:49:0d:fa:6f:b3:33:07:c2:98:51:e2:
                    bd:37:1f:b9:67:4d:d5:f6:18:44:69:3d:30:1a:76:
                    ae:1d:42:d5:64:d4:7d:0a:80:90:26:e6:10:0c:84:
                    d6:58:81:56:3e:b9:a8:b8:b0:4f:69:67:ad:54:7c:
                    fc:20:4a:2b:16:e9:74:dd:05:27:71:dd:ae:8f:1b:
                    23:86:17:9c:ac:27:e4:ed:51:8f:9c:11:32:0a:c5:
                    3e:50:65:46:09:53:d1:78:7d:17:f1:2b:12:7c:5f:
                    28:14:2c:9f:ba:43:f8:12:35:50:e8:c9:8d:5d:03:
                    50:59:8d:ba:30:c3:ad:aa:ff:c8:2a:f1:23:80:52:
                    34:22:5f:0a:fe:40:be:f0:3a:45:da:61:a7:21:3c:
                    a4:5e:9c:e1:c3:da:70:52:8d:27:c2:59:92:11:78:
                    44:d8:17:fc:5c:e0:44:cb:e5:c1:a8:9b:94:91:17:
                    ba:7d:f3:15:1e:56:af:3d:0e:3e:8b:2b:b0:4f:68:
                    fa:0a:64:92:56:c1:c1:8f:a1:61:b5:4e:38:2b:44:
                    c6:43:b7:95:cf:22:68:73:8b:ec:76:80:dd:c9:c7:
                    ab:9a:47:c5:28:32:b9:35:b2:c3:61:16:df:86:64:
                    ee:75:96:25:ab:d4:7b:dc:9c:fb:76:65:d7:18:9e:
                    98:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3E:EC:3E:E0:4E:10:35:32:D9:47:EF:D5:76:6C:67:3E:D2:65:D6
            X509v3 Authority Key Identifier:
                keyid:E3:7B:9D:E7:6B:83:69:C8:6C:BD:D8:5F:17:B4:B0:8D:A3:90:39:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:fc:da:21:01:ba:80:a8:0d:c8:2d:80:1e:ed:cd:21:09:a6:
         72:31:55:dd:96:b0:fb:ea:35:1e:8b:89:05:11:01:2d:53:87:
         ad:2f:5e:d1:8f:0a:1a:7a:42:8a:70:26:5e:11:87:41:5d:ad:
         55:31:a6:dd:7a:5a:41:64:b2:ff:25:59:f8:f2:c9:79:bd:5c:
         e4:7d:f6:a9:c9:37:2a:a7:67:1e:ed:b5:2a:5a:72:fc:73:37:
         6f:7c:28:73:91:ae:04:ba:8f:92:14:69:b8:1a:26:8a:7d:b6:
         b0:59:de:88:d8:51:98:6d:46:23:01:7e:65:12:ec:10:fb:74:
         b2:ec:b9:98:b0:31:ce:20:66:72:41:6b:2e:3d:ec:9f:6e:e4:
         a8:5a:ec:f7:5d:eb:7d:4c:cb:55:4c:6d:52:07:04:2b:0d:09:
         2d:03:64:71:3e:c3:86:f1:67:88:88:50:72:7d:c3:0e:76:fe:
         19:f0:1a:ef:f1:d5:31:74:a7:65:f4:03:54:3f:4b:5c:d2:f7:
         39:5e:a6:49:5a:a7:be:28:a1:70:7d:82:3d:f2:9e:6f:13:7d:
         b0:9b:4b:bc:37:4e:5e:d3:25:b5:a3:f5:bb:30:b4:65:f1:32:
         68:92:ce:7b:78:d7:3d:38:01:8a:c1:85:f4:08:e1:25:cd:cc:
         09:c9:d7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 14:28:13 2026 by rpki-client