Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
File:                     595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft (raw, json)
Hash identifier:          otQtW3tKyAGogFkYGSmlDeAXGnacy5kcw1b3dF4ziXU=
Subject key identifier:   6E:D3:29:00:F6:51:82:94:5F:B5:BA:F7:F8:B8:F4:F8:D3:EB:1D:C8
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Certificate issuer:       /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial:       2D980DEDBD69E5D6B3F54370CD71E82C6A210762
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 19:15:02 +0000
Manifest this update:     Tue 12 May 2026 19:10:02 +0000
Manifest next update:     Wed 13 May 2026 21:11:02 +0000
Files and hashes:         1: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: YnpwLS3qShrtat5vFr4GKHpgIrsqYW7nhd/bbP/N9z4=)
                          2: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: pBXuYTqReMplN2AY6AolkobEan90DNcRX+8WnFHv1IY=)
                          3: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: jO/LVsBGp/hIYW/T7V2ve/LWVG5Avg+yBl19oxnQ+Ok=)
                          4: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: OsRtYTl/a4gBsIVTCYGY7UbsLX5kl3Dd0rUx9sxMLF8=)
                          5: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: kbsHwCF+kLPIM6LmBzd7ReTnbGaVE3pJ2tb1Y6LGrMo=)
                          6: 595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl (hash: QQIFQAD+e4z1lJELzi2HiJQAP4nyYIHh0NyMtHz04M4=)
                          7: 3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa (hash: EZ+ZMEszQ0FNnAyScxrOoCf6N5MbYNv0AIqesnyNkY8=)
                          8: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: oIB0azCHKZZD4LUQLYG0Yqlb4f/9KSBQ4JwecEqWsUw=)
                          9: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: jNXjwR9NoJrp9dtiwnlZ8ZD+nF3IUWQs6hiqUnrS/Ok=)
                          10: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: eOdt05IAfcrKKZUnC2uIX6d/C9w0dr4HU6UCs9176ek=)
                          11: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: Gf7+JDdgZXaOoBD3FCXccmzSiqspLprw2RT0W6wNy+U=)
                          12: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: eR32X6TB9dCvTyEj8xcbUe0oCJGcSbLwWM78VEF/mIM=)
                          13: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 0dcgbUIE4O45ZJeQQknhi7QzWy9JrD3T/y5JsTnfFC0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
                          rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:98:0d:ed:bd:69:e5:d6:b3:f5:43:70:cd:71:e8:2c:6a:21:07:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
        Validity
            Not Before: May 12 19:10:02 2026 GMT
            Not After : May 13 21:11:02 2026 GMT
        Subject: CN=6ED32900F65182945FB5BAF7F8B8F4F8D3EB1DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:0d:ad:6b:6f:1b:82:e0:3a:a1:6c:38:b4:
                    b9:23:03:c9:2a:8d:15:7c:b3:b7:06:62:d6:c5:15:
                    fa:34:87:3c:c9:de:50:20:f6:11:94:26:f6:14:28:
                    b2:69:28:38:02:8d:58:87:5c:07:a7:79:e5:36:25:
                    37:a2:2c:cd:5f:f0:10:88:34:6d:50:ba:db:95:0d:
                    74:c9:26:1a:7a:64:5e:12:88:de:c0:49:a3:83:49:
                    50:ba:b4:72:35:5f:54:97:97:52:46:2d:30:9b:10:
                    fb:10:4e:23:c8:ef:37:34:8a:c9:8a:d8:06:34:b5:
                    93:da:c0:58:9b:8b:0a:78:cd:0f:be:32:fc:18:9d:
                    7c:c0:26:6b:bf:47:f3:d8:45:1f:c6:67:43:06:66:
                    24:54:74:e6:e9:06:59:8b:cd:13:09:77:ae:0c:20:
                    bd:ae:af:de:54:cc:98:a6:ae:36:2e:5b:2b:4e:4f:
                    47:27:e1:7a:ae:57:8e:bc:e8:ff:a6:a4:e2:26:c6:
                    ec:fe:56:1d:eb:65:f3:78:08:db:80:8a:1b:21:c9:
                    29:ae:a1:3c:74:a6:8e:61:8d:05:6c:b1:f5:b3:bc:
                    cc:34:9c:0c:3a:1f:0f:c9:31:c9:80:b5:c0:2b:f7:
                    29:4f:b6:4b:32:c7:b1:94:1a:ed:29:55:5f:94:f1:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D3:29:00:F6:51:82:94:5F:B5:BA:F7:F8:B8:F4:F8:D3:EB:1D:C8
            X509v3 Authority Key Identifier:
                keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:63:d2:7e:eb:1a:8e:e6:eb:09:36:cb:32:33:01:db:7a:52:
         a3:2e:95:5e:3f:6e:c8:aa:a8:ff:b4:e3:89:20:08:e2:0b:fe:
         fa:08:09:1f:fd:02:f1:71:1a:3c:a3:4e:f4:ee:9a:9d:01:ae:
         0e:df:18:b1:3b:30:01:19:d4:e1:0a:55:7e:0d:e7:f9:14:91:
         8c:9a:da:06:17:5b:3c:5a:b7:ad:82:4e:2e:35:38:be:f3:d2:
         51:a2:30:b0:c2:c7:54:0a:22:59:c1:63:7b:e1:ac:9c:3f:d1:
         5f:8e:68:d1:64:b6:09:7a:72:51:e5:87:2c:92:36:3c:b1:b2:
         e6:21:c8:53:9c:5f:a8:66:63:62:0f:ba:6a:6c:50:92:54:56:
         5a:53:7d:fd:d8:67:08:e6:d4:60:33:1c:60:d9:66:9c:ef:7c:
         cf:11:0c:ae:ed:71:33:ff:53:b8:30:d9:93:5c:f5:d5:40:3e:
         63:f3:fb:d3:62:d7:f7:11:ca:1f:fe:16:90:b2:84:46:45:d7:
         69:48:99:58:90:cb:74:15:93:c1:fe:e6:a9:83:e6:36:d7:80:
         8e:16:c0:9b:45:ae:92:5b:9a:76:8d:d2:f7:28:01:c2:b5:83:
         a4:d5:3a:37:0b:bf:73:77:b1:a3:bb:e9:21:ee:17:e0:26:21:
         24:be:c1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:39:16 2026 by rpki-client