Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft
File:                     5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft (raw, json)
Hash identifier:          EgLqZOHRemuhArT4VBTmRV19b7YeEKgv0xkAX03sH50=
Subject key identifier:   95:F8:F4:A3:B3:26:D3:0A:ED:D5:FD:5F:6D:3F:74:3D:93:FF:08:85
Authority key identifier: 5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C
Certificate issuer:       /CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C
Certificate serial:       7A27F82E04A102119A7D0B47181C4383FBE18069
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft
Manifest number:          41
Signing time:             Fri 19 Jun 2026 17:47:19 +0000
Manifest this update:     Fri 19 Jun 2026 17:42:19 +0000
Manifest next update:     Sat 20 Jun 2026 21:34:19 +0000
Files and hashes:         1: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (hash: mjGJxH6ziPyBnTtwEJk9cCU5dFx1hVDJJz3eyJDrtfU=)
                          2: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (hash: djEgtSTkE/m5IayWnkoTKB0EhOrsppytUQzWTVEnG/A=)
                          3: 323430343a636534303a333a3a2f34382d3438203d3e20313338383834.roa (hash: 0ARU4umpFLyMta2vB6qYPPj5Ig4hYBGPCu9MzyUF/8A=)
                          4: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (hash: hSK8N/vC2/9gXsGi7sFYityEE3YHIpxX/5Nfow0h5pI=)
                          5: 3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (hash: 0qSPCAZrOfi5Y9XILy5crgt/ktdpcPhlsL8t7vKQnzI=)
                          6: 5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl (hash: J/IQj5WAiZhlZhAh7gvOyij5uJsMgNpNarkYA3J6NjM=)
                          7: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (hash: dxfdhNXh202P44oHhJYRmZOKu5Lqt6H/PJxnBPCKWdo=)
                          8: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (hash: /gmLM+AlvVZmZ1aC4xTqncyP3CJDlsdR9nXHmByTkCU=)
                          9: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (hash: k71wAWLK9lWSB9of2XNi/2f+HUpw7qh91wC52CYzZ9I=)
                          10: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (hash: T2qYaU04VQzWeYCnQwxqbKhnW+Yc8luFZj24cheJV1Y=)
                          11: 323430343a636534303a313030303a3a2f33362d3336203d3e20313338383834.roa (hash: zhBd5a5gGTbtet5YBbXE5S+qo1B6mGLmWLRBGJ6q7+o=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl
                          rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 21:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:27:f8:2e:04:a1:02:11:9a:7d:0b:47:18:1c:43:83:fb:e1:80:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C
        Validity
            Not Before: Jun 19 17:42:19 2026 GMT
            Not After : Jun 20 21:34:19 2026 GMT
        Subject: CN=95F8F4A3B326D30AEDD5FD5F6D3F743D93FF0885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ba:82:3f:d1:a4:90:f6:d3:42:98:5f:7f:b7:
                    6f:e0:27:ba:ad:dc:45:f6:71:cc:73:51:ec:33:d5:
                    1b:c6:5b:e3:e2:f1:25:6a:26:e5:b3:bb:ea:48:d7:
                    2e:bf:0a:71:7d:48:ba:6f:de:23:83:0f:6d:9a:18:
                    c1:c9:d8:40:82:4e:b5:43:36:48:91:0c:ea:9f:e6:
                    99:ef:0d:ed:09:32:b9:f4:78:ea:b5:36:7f:cf:21:
                    8d:87:66:c7:bc:81:1e:3b:22:74:66:10:94:1d:10:
                    8d:d5:dc:51:3e:c9:23:d9:eb:1e:6a:54:7b:b5:f8:
                    e4:fb:d7:f2:02:0c:2c:ac:bf:65:9a:5d:1b:9a:3d:
                    81:7b:f6:95:20:77:00:5d:5e:00:9b:3b:0b:44:51:
                    10:54:56:14:fe:f8:9a:30:68:59:76:99:81:99:2a:
                    82:f7:de:3d:b4:13:2b:c8:6a:51:5e:de:38:d0:67:
                    6c:9f:4e:31:78:5c:d0:f9:d2:1c:8f:38:0b:17:de:
                    1f:91:02:dc:47:80:16:12:15:db:d3:14:95:53:8e:
                    e6:73:76:c1:75:be:53:b5:9b:96:a6:f0:7a:de:73:
                    6d:91:e8:0b:1b:48:f4:de:5b:04:ef:e5:ae:03:6f:
                    90:36:0d:1a:a7:ea:78:0c:fa:3c:e2:b5:6f:d3:24:
                    25:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F8:F4:A3:B3:26:D3:0A:ED:D5:FD:5F:6D:3F:74:3D:93:FF:08:85
            X509v3 Authority Key Identifier:
                keyid:5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:dd:d6:0a:94:a2:f0:63:fe:07:60:02:f2:ff:fd:19:d2:84:
         c2:c3:7a:50:a9:7e:44:3c:15:66:c1:30:0b:fd:cd:02:31:ad:
         b9:e8:5d:40:98:9f:62:de:15:4b:dd:c6:f5:9e:ec:41:16:ab:
         7a:61:89:43:53:71:db:19:4c:7a:52:ac:40:e1:66:70:9f:8a:
         8f:84:d2:e7:5f:83:9f:58:0e:0c:47:f8:b1:32:9d:2e:94:74:
         55:09:52:dd:1f:f8:a9:4c:82:6b:18:c1:06:eb:b2:c2:37:f4:
         bf:50:14:6e:01:28:ce:58:0b:33:85:1d:4a:47:a1:04:02:1a:
         ee:79:89:34:4d:40:c2:c1:a5:ed:6f:34:20:af:b7:3d:41:a7:
         83:77:c5:29:52:64:ef:e5:b8:df:7c:5a:01:1b:ea:69:68:f3:
         cc:b5:c0:f6:8b:f7:57:b0:82:25:8b:d6:6c:59:87:b3:b5:cc:
         ed:ca:e3:d4:33:2f:9c:43:d3:20:68:c9:37:98:ee:c2:18:7e:
         bd:73:54:75:c7:b9:0a:69:ce:c5:f8:66:9c:87:95:5f:6f:54:
         90:4f:0a:22:82:68:e5:7e:a0:4c:a4:08:83:d5:84:ce:18:4f:
         ab:97:69:a0:8d:7b:27:a0:48:83:81:4e:e4:cd:62:4a:42:3b:
         cf:1c:46:ac
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeif4LgShAhGafQtHGBxDg/vhgGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZDNDVCRTlFREFDN0JBRDNEMDcwNDYxMEUzNzRCODcz
RkM3QjYxQzAeFw0yNjA2MTkxNzQyMTlaFw0yNjA2MjAyMTM0MTlaMDMxMTAvBgNV
BAMTKDk1RjhGNEEzQjMyNkQzMEFFREQ1RkQ1RjZEM0Y3NDNEOTNGRjA4ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYuoI/0aSQ9tNCmF9/t2/gJ7qt
3EX2ccxzUewz1RvGW+Pi8SVqJuWzu+pI1y6/CnF9SLpv3iODD22aGMHJ2ECCTrVD
NkiRDOqf5pnvDe0JMrn0eOq1Nn/PIY2HZse8gR47InRmEJQdEI3V3FE+ySPZ6x5q
VHu1+OT71/ICDCysv2WaXRuaPYF79pUgdwBdXgCbOwtEURBUVhT++JowaFl2mYGZ
KoL33j20EyvIalFe3jjQZ2yfTjF4XND50hyPOAsX3h+RAtxHgBYSFdvTFJVTjuZz
dsF1vlO1m5am8Hrec22R6AsbSPTeWwTv5a4Db5A2DRqn6ngM+jzitW/TJCU7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUlfj0o7Mm0wrt1f1fbT90PZP/CIUwHwYDVR0j
BBgwFoAUX8Rb6e2se609BwRhDjdLhz/HthwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjIwYzZkNjktNjI5MC00MDJmLWE4NGUtZDI4OWM2ZTkzYTczLzAvNUZDNDVCRTlF
REFDN0JBRDNEMDcwNDYxMEUzNzRCODczRkM3QjYxQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81RkM0NUJFOUVEQUM3QkFEM0QwNzA0NjEwRTM3NEI4NzNGQzdC
NjFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjIwYzZkNjktNjI5MC00MDJmLWE4
NGUtZDI4OWM2ZTkzYTczLzAvNUZDNDVCRTlFREFDN0JBRDNEMDcwNDYxMEUzNzRC
ODczRkM3QjYxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHzd1gqUovBj/gdgAvL//RnShMLDelCpfkQ8
FWbBMAv9zQIxrbnoXUCYn2LeFUvdxvWe7EEWq3phiUNTcdsZTHpSrEDhZnCfio+E
0udfg59YDgxH+LEynS6UdFUJUt0f+KlMgmsYwQbrssI39L9QFG4BKM5YCzOFHUpH
oQQCGu55iTRNQMLBpe1vNCCvtz1Bp4N3xSlSZO/luN98WgEb6mlo88y1wPaL91ew
giWL1mxZh7O1zO3K49QzL5xD0yBoyTeY7sIYfr1zVHXHuQppzsX4ZpyHlV9vVJBP
CiKCaOV+oEykCIPVhM4YT6uXaaCNeyegSIOBTuTNYkpCO88cRqw=
-----END CERTIFICATE-----
Generated at Sat Jun 20 08:38:04 2026 by rpki-client