Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
File:                     D769452C15749C457029AB81E06B7D36C9F48804.mft (raw, json)
Hash identifier:          zb+uuN7TLwBPsswCS/pt/ULBFyLPy84ZrqCULKB83V0=
Subject key identifier:   DF:FB:A6:2B:2F:83:14:D3:8B:96:7E:18:81:DF:B7:E3:4D:F2:CD:A5
Authority key identifier: D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04
Certificate issuer:       /CN=D769452C15749C457029AB81E06B7D36C9F48804
Certificate serial:       6EAA52990056F411F11F58C74BFD38C525787B65
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
Manifest number:          3F
Signing time:             Thu 18 Jun 2026 01:02:59 +0000
Manifest this update:     Thu 18 Jun 2026 00:57:59 +0000
Manifest next update:     Fri 19 Jun 2026 01:24:59 +0000
Files and hashes:         1: 3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa (hash: Wgp2Ly277xiC/SJ4ahqqMWo1yKBGTp7hlr1qa44tvrs=)
                          2: 3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa (hash: FxemyMpIsKKyeyZF+nt8pq/Wh2yMuBg7NUlyoxRZXT8=)
                          3: D769452C15749C457029AB81E06B7D36C9F48804.crl (hash: GNw4CAEPna1RWUbcd8NBoFzKocsqLPUth7ivr0nNFCw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.crl
                          rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 01:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:aa:52:99:00:56:f4:11:f1:1f:58:c7:4b:fd:38:c5:25:78:7b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D769452C15749C457029AB81E06B7D36C9F48804
        Validity
            Not Before: Jun 18 00:57:59 2026 GMT
            Not After : Jun 19 01:24:59 2026 GMT
        Subject: CN=DFFBA62B2F8314D38B967E1881DFB7E34DF2CDA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:07:27:f9:62:6c:7d:e4:6e:40:07:f2:16:
                    40:86:83:ab:ae:88:b2:99:65:c6:ec:93:bf:43:39:
                    2c:03:ef:4a:05:bf:73:2f:1a:6e:6d:d9:42:58:9b:
                    ec:24:7a:e9:98:d2:ed:5f:32:56:77:b3:bd:b9:52:
                    f0:a7:8f:b2:51:aa:00:5d:36:5b:c1:e9:ea:23:a4:
                    14:7b:a6:9d:b8:a8:9f:9e:7c:db:6d:0d:0e:05:e1:
                    db:c0:30:17:b4:86:c7:35:5c:67:4e:d3:6e:ee:50:
                    fb:57:bb:61:1b:19:56:2d:fc:ef:db:23:61:64:c6:
                    aa:8b:b6:a3:bb:1c:19:10:58:4f:c4:15:3d:02:f2:
                    65:25:74:6f:26:93:9d:d4:5a:36:02:3f:f4:06:47:
                    99:ef:54:a4:7a:5b:45:48:29:19:25:87:75:2e:9f:
                    56:04:f4:ac:86:7a:86:fa:9e:d3:42:f1:38:10:69:
                    e9:5b:ea:b5:aa:5f:cb:c1:9b:46:33:26:b1:43:23:
                    3b:01:82:ce:c4:8a:e1:3a:b7:02:6b:49:aa:55:dc:
                    b5:20:16:5c:a1:00:10:a9:4d:20:65:0a:c5:cf:26:
                    2c:d4:e1:95:dd:d7:1d:7f:17:d4:dd:ac:1e:ae:d5:
                    9a:67:4c:1b:3f:6d:71:7c:6d:5b:ea:38:c4:53:8a:
                    13:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FB:A6:2B:2F:83:14:D3:8B:96:7E:18:81:DF:B7:E3:4D:F2:CD:A5
            X509v3 Authority Key Identifier:
                keyid:D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a1:5a:9d:09:37:f6:22:95:29:c7:cd:7f:02:15:0c:5d:a9:
         10:0d:1a:ad:08:25:12:6c:8a:b6:8a:b4:1b:de:d3:91:63:3d:
         1f:d8:99:27:28:36:59:e6:31:f8:7d:b4:18:1e:a6:a8:f1:1b:
         68:8b:18:93:59:8e:c7:80:69:ce:24:c9:ff:65:ab:df:86:0d:
         b8:f5:54:61:21:a7:57:83:81:3f:32:ad:7d:ef:ce:5c:34:24:
         b8:01:aa:fb:45:fd:ce:e6:42:4a:c8:be:ff:fc:80:7a:2d:d1:
         3e:90:94:c2:7e:dd:32:bc:60:3a:fc:1f:91:12:1c:08:4b:1d:
         76:0a:86:dc:c5:32:5d:9f:d9:cf:da:0f:18:a3:6b:40:a5:c4:
         a1:27:42:27:74:1c:9d:a6:8d:26:8a:16:b7:64:92:ab:b2:09:
         85:20:70:36:23:b8:c4:e0:0b:54:88:ed:f2:d1:4e:9e:90:20:
         ae:aa:f4:14:4d:3b:df:72:ba:a6:ab:5a:c0:7b:60:0d:76:95:
         f5:f4:b5:9b:4d:8a:f4:4e:3c:46:02:a6:71:b4:87:7b:63:50:
         6a:b7:ff:88:db:22:1d:75:23:91:aa:b7:a6:56:94:f8:aa:78:
         32:c8:3b:d5:83:4a:ce:64:70:b8:a4:bd:e1:14:0e:58:6b:01:
         09:3a:5b:25
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbqpSmQBW9BHxH1jHS/04xSV4e2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc2OTQ1MkMxNTc0OUM0NTcwMjlBQjgxRTA2QjdEMzZD
OUY0ODgwNDAeFw0yNjA2MTgwMDU3NTlaFw0yNjA2MTkwMTI0NTlaMDMxMTAvBgNV
BAMTKERGRkJBNjJCMkY4MzE0RDM4Qjk2N0UxODgxREZCN0UzNERGMkNEQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkQcn+WJsfeRuQAfyFkCGg6uu
iLKZZcbsk79DOSwD70oFv3MvGm5t2UJYm+wkeumY0u1fMlZ3s725UvCnj7JRqgBd
NlvB6eojpBR7pp24qJ+efNttDQ4F4dvAMBe0hsc1XGdO027uUPtXu2EbGVYt/O/b
I2FkxqqLtqO7HBkQWE/EFT0C8mUldG8mk53UWjYCP/QGR5nvVKR6W0VIKRklh3Uu
n1YE9KyGeob6ntNC8TgQaelb6rWqX8vBm0YzJrFDIzsBgs7EiuE6twJrSapV3LUg
FlyhABCpTSBlCsXPJizU4ZXd1x1/F9TdrB6u1ZpnTBs/bXF8bVvqOMRTihMtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3/umKy+DFNOLln4Ygd+3403yzaUwHwYDVR0j
BBgwFoAU12lFLBV0nEVwKauB4Gt9Nsn0iAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzhjYzFjN2UtZGE3NC00YjExLWI2N2EtZDVmMjdkOTgxNzU3LzAvRDc2OTQ1MkMx
NTc0OUM0NTcwMjlBQjgxRTA2QjdEMzZDOUY0ODgwNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9ENzY5NDUyQzE1NzQ5QzQ1NzAyOUFCODFFMDZCN0QzNkM5RjQ4
ODA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhjYzFjN2UtZGE3NC00YjExLWI2
N2EtZDVmMjdkOTgxNzU3LzAvRDc2OTQ1MkMxNTc0OUM0NTcwMjlBQjgxRTA2QjdE
MzZDOUY0ODgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD2hWp0JN/YilSnHzX8CFQxdqRANGq0IJRJs
iraKtBve05FjPR/YmScoNlnmMfh9tBgepqjxG2iLGJNZjseAac4kyf9lq9+GDbj1
VGEhp1eDgT8yrX3vzlw0JLgBqvtF/c7mQkrIvv/8gHot0T6QlMJ+3TK8YDr8H5ES
HAhLHXYKhtzFMl2f2c/aDxija0ClxKEnQid0HJ2mjSaKFrdkkquyCYUgcDYjuMTg
C1SI7fLRTp6QIK6q9BRNO99yuqarWsB7YA12lfX0tZtNivROPEYCpnG0h3tjUGq3
/4jbIh11I5Gqt6ZWlPiqeDLIO9WDSs5kcLikveEUDlhrAQk6WyU=
-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:04 2026 by rpki-client