Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.mft
File:                     57E460937137B652DFB7C6EB8A5BA887C395741C.mft (raw, json)
Hash identifier:          4z0XqZZ4vIxf7QaqAERn4+6+nNWi1PEaMvmc3IkK3ag=
Subject key identifier:   72:71:EB:06:71:07:17:7E:90:7D:5A:9C:7E:84:60:D6:8E:F3:6D:3D
Authority key identifier: 57:E4:60:93:71:37:B6:52:DF:B7:C6:EB:8A:5B:A8:87:C3:95:74:1C
Certificate issuer:       /CN=57E460937137B652DFB7C6EB8A5BA887C395741C
Certificate serial:       04E25E445BDD20DD3088294C9FBAFA3D0478B0D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/57E460937137B652DFB7C6EB8A5BA887C395741C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.mft
Manifest number:          3F
Signing time:             Thu 18 Jun 2026 05:13:20 +0000
Manifest this update:     Thu 18 Jun 2026 05:08:20 +0000
Manifest next update:     Fri 19 Jun 2026 08:12:20 +0000
Files and hashes:         1: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: WQnLXXfXQahSkhJIevnL949Xfgw8fPIR5kTo/AbuQac=)
                          2: 57E460937137B652DFB7C6EB8A5BA887C395741C.crl (hash: Os8Yg81ZBy2xdaUBIJNZx8baqkPodRYfQ0r9ijMqe+o=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.crl
                          rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/57E460937137B652DFB7C6EB8A5BA887C395741C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 08:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e2:5e:44:5b:dd:20:dd:30:88:29:4c:9f:ba:fa:3d:04:78:b0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E460937137B652DFB7C6EB8A5BA887C395741C
        Validity
            Not Before: Jun 18 05:08:20 2026 GMT
            Not After : Jun 19 08:12:20 2026 GMT
        Subject: CN=7271EB067107177E907D5A9C7E8460D68EF36D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:7d:90:00:b4:21:04:e4:86:02:26:f6:e7:
                    a6:ea:51:aa:e4:e8:3e:96:f9:49:af:82:3b:9b:a5:
                    ce:5f:35:e2:c0:3c:4f:fc:9e:1b:dd:44:19:e6:1b:
                    62:29:f6:33:7b:67:ba:0d:3d:34:e4:f9:e3:c5:be:
                    a1:dd:dd:db:0c:36:c1:ad:f2:15:8a:51:a1:d1:e6:
                    6b:cb:1c:b4:e7:6f:96:8e:c1:35:77:b4:56:22:47:
                    24:ac:2d:aa:9b:40:64:b9:d3:12:9d:16:57:45:9f:
                    6a:26:68:0b:80:32:9e:0d:fe:1e:08:49:1a:13:29:
                    d2:af:f8:48:f1:0f:03:95:7a:a2:d7:08:77:aa:81:
                    63:83:34:38:bd:18:d0:5a:bc:bb:68:93:98:aa:c1:
                    ab:ac:9a:ca:be:a1:44:eb:22:44:12:0a:9d:12:1e:
                    2e:b0:0f:2d:d6:01:ea:55:9b:58:eb:42:75:f6:7c:
                    43:39:58:7d:94:61:64:f5:85:12:58:71:58:1a:18:
                    ad:90:19:09:87:ca:f2:cc:12:ef:a5:74:fc:6f:7d:
                    a9:34:e0:ea:25:c1:9a:6e:97:33:19:fb:ce:ec:46:
                    af:f4:64:6a:97:d9:f6:38:9f:94:8f:8b:0e:ed:9e:
                    4b:1b:3c:fe:d8:aa:cc:07:3c:f8:6b:37:4f:43:c7:
                    11:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:71:EB:06:71:07:17:7E:90:7D:5A:9C:7E:84:60:D6:8E:F3:6D:3D
            X509v3 Authority Key Identifier:
                keyid:57:E4:60:93:71:37:B6:52:DF:B7:C6:EB:8A:5B:A8:87:C3:95:74:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/57E460937137B652DFB7C6EB8A5BA887C395741C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:f0:c4:3c:c7:c3:2b:c1:04:20:7d:f2:5c:48:b8:41:b2:de:
         8c:9d:e4:4c:62:63:29:f9:fe:a4:4f:0a:cf:6c:69:75:8d:23:
         0f:fa:db:d8:49:81:0c:cc:48:15:86:08:68:67:f7:7e:1a:8b:
         f7:4a:c6:d2:a2:41:a5:10:dc:1a:c5:dd:fe:84:7e:da:de:97:
         6a:95:1b:8a:e9:ef:6f:6f:c8:77:b3:ca:8d:2d:ba:2a:9c:76:
         4c:be:11:ad:f4:3b:5e:b4:6a:05:30:20:8a:45:05:0e:3e:ab:
         56:c9:88:aa:03:0c:8a:8e:bd:41:d1:f9:ca:3f:21:5f:4f:06:
         d8:34:15:ae:20:3e:ba:5f:05:ae:9d:0a:99:a1:be:fa:00:6b:
         11:e3:08:fb:00:30:0c:7c:3d:aa:cd:19:98:ab:5e:9f:af:31:
         a9:22:d0:c6:be:a1:2d:b3:6f:0b:1c:09:20:d4:e1:69:75:92:
         c3:65:ba:f9:e9:e8:ae:7a:8a:7d:ac:21:c1:11:58:b3:2d:b5:
         bf:27:87:5d:b4:28:62:2c:07:42:cb:79:3b:c0:18:01:a3:84:
         0a:0a:52:50:8f:55:63:f8:5f:07:e8:ce:e0:7b:a2:54:32:60:
         03:de:85:02:f2:90:b0:66:66:df:0e:3e:57:0b:9d:36:0b:f2:
         f5:24:a5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:12:27 2026 by rpki-client