Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
File:                     EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft (raw, json)
Hash identifier:          KwcgoCkp9pQiBft0/L5y64XiDrvouiADUKG+JonbZoI=
Subject key identifier:   CB:FE:87:1F:D3:00:26:06:E1:39:DA:AD:43:8E:16:42:25:EE:43:6F
Authority key identifier: EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C
Certificate issuer:       /CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C
Certificate serial:       6A636BC8B7ED4A0F3E68DF61228751BEA490ED6D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
Manifest number:          42
Signing time:             Sat 20 Jun 2026 02:22:41 +0000
Manifest this update:     Sat 20 Jun 2026 02:17:41 +0000
Manifest next update:     Sun 21 Jun 2026 05:53:41 +0000
Files and hashes:         1: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: xYxE6IzCdxb+aq4Kkm/AnjYa+vu3xdG+mLXx5vkCP/U=)
                          2: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: qw6OlEu48FrPsEmKgwHPSjOidfOJLUIet7s/2iStFrA=)
                          3: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl (hash: LvbUvxGTc00ZoTQtflP5wAoldwDHFx+t9l2A0bxQMH8=)
                          4: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: 5DkSgMYDvgEBxCCplmwfDoevI8VI5H/bGiFDzCRHnts=)
                          5: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: L8OlDd+zcMlp2nj6z/A4ihQhVRTYQCBk+qSvJaFpcus=)
                          6: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: P366bIkTOlc69Ppfa9a3mTWNreZ6tb8vIXj7vOkMLBM=)
                          7: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: 2zqd8AgBddwBm4KIXvjiblLxU15/BrCCnreac7skVlA=)
                          8: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: Tsm6R3Ykoq+qGUHJdq4ks8X4b5Uy0ypiE0/txgdjmm4=)
                          9: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: f59rz1HETJlgvZwIKtKFdh5XtKqyQqDaf24eWmjJW6o=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl
                          rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 05:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:63:6b:c8:b7:ed:4a:0f:3e:68:df:61:22:87:51:be:a4:90:ed:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C
        Validity
            Not Before: Jun 20 02:17:41 2026 GMT
            Not After : Jun 21 05:53:41 2026 GMT
        Subject: CN=CBFE871FD3002606E139DAAD438E164225EE436F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1b:d1:5f:be:1b:0c:77:8d:54:9b:78:07:62:
                    74:7e:86:3a:30:c1:66:ce:be:c9:bc:92:48:f6:54:
                    c5:bc:72:14:b2:9f:05:93:0d:3f:a2:0e:2c:d5:81:
                    b8:6b:00:38:45:13:14:99:0a:d8:8c:0a:21:d5:c0:
                    1c:17:8d:5d:16:f9:14:b2:1a:33:12:8f:24:39:48:
                    d4:60:db:fa:9d:22:e9:42:32:18:8a:61:1b:b9:65:
                    7c:80:45:c5:f1:09:fa:90:15:b0:92:5c:7a:69:9a:
                    6c:63:cf:7f:2b:ca:03:fd:cd:94:b9:ac:90:11:a9:
                    9e:0a:a7:ab:85:85:8e:54:75:4f:9d:48:0c:66:6a:
                    09:98:8f:42:1c:6c:b7:2a:c4:af:a2:5a:65:2b:95:
                    0e:3d:99:32:0c:36:97:44:77:c7:b3:be:75:cf:f6:
                    64:bd:b1:7e:52:9d:9a:c3:76:c9:8b:0f:8b:a1:b3:
                    9c:62:2a:6d:b2:c8:05:f8:4c:2a:17:91:70:2b:2b:
                    8b:54:57:11:cd:a3:fd:0f:c8:c2:88:e2:87:39:46:
                    0b:d8:e8:2c:7b:2d:3b:c8:72:09:f2:c4:a1:01:b1:
                    d6:2a:c4:07:b1:e0:ab:6c:31:36:a9:04:70:8d:82:
                    f8:b4:3a:26:17:3a:43:00:b9:5f:2b:f7:57:3c:d8:
                    83:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FE:87:1F:D3:00:26:06:E1:39:DA:AD:43:8E:16:42:25:EE:43:6F
            X509v3 Authority Key Identifier:
                keyid:EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c2:8e:46:20:1b:7f:1c:70:2e:a5:38:b2:7e:cf:a4:8e:63:
         76:d0:1a:fd:2d:0d:c2:7d:59:26:20:c8:fb:44:4b:dc:25:bc:
         c3:76:44:44:08:1a:3c:17:d4:69:c4:1f:d0:58:44:48:96:a3:
         c2:98:19:fb:c9:66:54:9b:11:9f:ee:d9:c1:4d:d5:91:6a:b4:
         b7:16:17:6a:e0:25:a2:70:b6:21:fc:b4:34:92:5f:9f:fe:bc:
         b8:48:aa:d7:a8:15:69:d3:74:f8:8b:b2:a7:d0:e2:a8:6d:6f:
         4f:03:9e:e5:55:73:10:4a:94:60:b9:31:c4:36:b4:e3:c1:47:
         f1:d6:77:fe:a6:96:b4:82:6b:da:2c:0e:b5:80:e0:8e:75:5c:
         54:ce:30:5f:e2:e2:c4:9a:d6:94:26:0d:0d:6a:46:39:2b:0e:
         3b:e5:96:f0:26:f1:8e:dc:be:29:61:25:3f:1d:f4:4e:20:70:
         33:51:c2:37:d7:c0:fa:7e:90:3d:4e:75:d5:3b:6b:6c:89:f7:
         c1:d2:09:a1:2e:9d:d3:2f:f3:ab:51:87:9f:cb:a0:e7:8e:4c:
         5a:94:5c:1a:ce:4b:e5:d9:86:1e:a3:fb:e9:af:24:57:cc:4d:
         65:fb:b5:3b:79:b9:29:c1:c8:64:ec:ae:45:6e:84:41:5c:a0:
         c8:09:52:aa
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUamNryLftSg8+aN9hIodRvqSQ7W0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFGMUJCQzJFNzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAw
MjBGNjEzQzAeFw0yNjA2MjAwMjE3NDFaFw0yNjA2MjEwNTUzNDFaMDMxMTAvBgNV
BAMTKENCRkU4NzFGRDMwMDI2MDZFMTM5REFBRDQzOEUxNjQyMjVFRTQzNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEG9FfvhsMd41Um3gHYnR+hjow
wWbOvsm8kkj2VMW8chSynwWTDT+iDizVgbhrADhFExSZCtiMCiHVwBwXjV0W+RSy
GjMSjyQ5SNRg2/qdIulCMhiKYRu5ZXyARcXxCfqQFbCSXHppmmxjz38rygP9zZS5
rJARqZ4Kp6uFhY5UdU+dSAxmagmYj0IcbLcqxK+iWmUrlQ49mTIMNpdEd8ezvnXP
9mS9sX5SnZrDdsmLD4uhs5xiKm2yyAX4TCoXkXArK4tUVxHNo/0PyMKI4oc5RgvY
6Cx7LTvIcgnyxKEBsdYqxAex4KtsMTapBHCNgvi0OiYXOkMAuV8r91c82INbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUy/6HH9MAJgbhOdqtQ44WQiXuQ28wHwYDVR0j
BBgwFoAU6vG7wueFKgjslybfA3t6kAIPYTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTdmZGY0M2UtNGE0Yy00ZGJjLWI3ODUtZGQ3Y2JmMWE2N2I3LzAvRUFGMUJCQzJF
Nzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAwMjBGNjEzQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQUYxQkJDMkU3ODUyQTA4RUM5NzI2REYwMzdCN0E5MDAyMEY2
MTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdmZGY0M2UtNGE0Yy00ZGJjLWI3
ODUtZGQ3Y2JmMWE2N2I3LzAvRUFGMUJCQzJFNzg1MkEwOEVDOTcyNkRGMDM3QjdB
OTAwMjBGNjEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ3CjkYgG38ccC6lOLJ+z6SOY3bQGv0tDcJ9
WSYgyPtES9wlvMN2REQIGjwX1GnEH9BYREiWo8KYGfvJZlSbEZ/u2cFN1ZFqtLcW
F2rgJaJwtiH8tDSSX5/+vLhIqteoFWnTdPiLsqfQ4qhtb08DnuVVcxBKlGC5McQ2
tOPBR/HWd/6mlrSCa9osDrWA4I51XFTOMF/i4sSa1pQmDQ1qRjkrDjvllvAm8Y7c
vilhJT8d9E4gcDNRwjfXwPp+kD1OddU7a2yJ98HSCaEundMv86tRh5/LoOeOTFqU
XBrOS+XZhh6j++mvJFfMTWX7tTt5uSnByGTsrkVuhEFcoMgJUqo=
-----END CERTIFICATE-----
Generated at Sat Jun 20 09:14:06 2026 by rpki-client