Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft
File:                     7377350E3E3A151F4CC7127822802AD47B86A5CF.mft (raw, json)
Hash identifier:          9/g7EAPeETSGCa0xDcNXOcx+bDV+xXAHfflQby/lgyE=
Subject key identifier:   EF:B6:E0:F1:78:C5:98:29:6A:3F:38:62:33:96:F4:DE:78:86:54:64
Authority key identifier: 73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF
Certificate issuer:       /CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
Certificate serial:       6D867F7FDEE93514C6AD23004FCB7C68926215E8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 04:13:59 +0000
Manifest this update:     Tue 12 May 2026 04:08:59 +0000
Manifest next update:     Wed 13 May 2026 07:11:59 +0000
Files and hashes:         1: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: e4jbQz3u5a8FYwAIij+O/hjopDRAVXihtcltRGdiV+E=)
                          2: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: OPxPj77Y9Rv3nPwPPsMOHUQMVs3WuJ+hOwcspHs2qG8=)
                          3: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: OU8A/JqlWEHiLMQOXTcJaLj05li9iqcqdLDEsrie8gk=)
                          4: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: B1+lVC5q4sIsDS/x8/d5eAraCNrj0NOZBU8+Bv2wtx0=)
                          5: 7377350E3E3A151F4CC7127822802AD47B86A5CF.crl (hash: Zt6z8h8CVQUjZszXNJYqpyfV9DZ4fTcZ4dVpPbHyfqU=)
                          6: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: CJsi4P7cF17zeVXlJxUuGuNmwdU6F6/z2QybZclUgaI=)
                          7: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: Hao2KVKZ/SYX9wVFj9FYi2+tYJ4CgtxYRSmxcGvPEds=)
                          8: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: 4T0MkaYeQXnt+7nt+tGVXlJwCuwG3xBT42XqaRTpKC8=)
                          9: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: d1NKSb9zCDz65Zahjy0PaWXg282C7xqtAafmjhthBLo=)
                          10: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: Vvaj0i3/+/Ad91udWk53Oqtn0qejlYZw543f3Ty/YWA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl
                          rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:86:7f:7f:de:e9:35:14:c6:ad:23:00:4f:cb:7c:68:92:62:15:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
        Validity
            Not Before: May 12 04:08:59 2026 GMT
            Not After : May 13 07:11:59 2026 GMT
        Subject: CN=EFB6E0F178C598296A3F38623396F4DE78865464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1b:86:6f:00:be:bc:b6:3e:f8:36:d6:ca:2d:
                    2d:83:5a:b3:ce:ca:18:d3:36:af:a7:48:b7:ac:0e:
                    12:da:8d:ea:be:73:87:ed:cf:e1:6e:a2:8a:c5:d3:
                    e1:1f:d0:25:1d:ed:87:9f:29:33:33:73:ed:fc:14:
                    f7:47:76:88:2c:9c:f9:22:e3:89:76:7f:6f:23:b7:
                    da:2d:39:08:be:9c:78:c1:3e:a1:6f:c4:48:3f:aa:
                    1f:47:cd:81:c9:d7:a5:fd:4a:2c:69:1c:0c:4a:db:
                    1d:f9:c5:26:00:df:a4:33:1e:06:5d:0c:86:67:90:
                    35:8a:d7:2f:ca:80:9f:82:07:6a:a1:b9:46:6d:0f:
                    32:1c:fc:41:6c:3d:2d:dc:b1:c8:15:04:f8:9e:e7:
                    9a:10:fb:e4:c6:d1:f9:9d:9d:d4:64:de:45:07:55:
                    ba:76:c7:11:f9:96:02:cb:ab:0f:01:dc:e9:bf:af:
                    87:44:00:03:81:11:43:65:cc:47:8b:60:5e:2f:b4:
                    cc:9a:05:4a:7d:95:da:4a:40:c9:88:f4:bc:5c:78:
                    eb:8d:72:83:64:88:08:73:05:13:61:dc:2b:63:06:
                    39:9a:44:31:7b:9d:5c:3b:28:2d:f7:76:1e:93:d8:
                    6b:26:5b:c8:a6:5f:5c:97:64:6b:81:e2:9e:58:34:
                    58:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B6:E0:F1:78:C5:98:29:6A:3F:38:62:33:96:F4:DE:78:86:54:64
            X509v3 Authority Key Identifier:
                keyid:73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a5:19:4c:f8:69:70:6b:8b:e9:02:54:04:b8:ea:e2:5f:60:
         6f:47:1e:89:9c:c8:a9:76:e0:3a:18:cf:69:bb:d5:9b:53:26:
         2a:56:e9:c9:fd:e0:ed:41:cf:86:84:de:f9:f9:a2:3a:2c:64:
         d7:61:9c:0e:88:35:2f:cc:fe:e6:44:05:f8:02:8f:d8:fc:25:
         76:dd:88:37:32:88:aa:bb:d4:b1:f0:fb:14:58:93:83:c4:f3:
         06:39:66:be:c4:b1:ad:8f:32:5a:a9:24:c4:ee:ac:5e:c8:68:
         52:81:ff:fb:79:d0:dc:30:28:dd:35:7c:96:42:4e:88:72:68:
         bc:d1:ec:7a:77:9b:86:65:16:5a:82:de:b4:16:05:44:4b:27:
         46:36:46:cd:ee:55:da:73:b2:7e:d8:2c:9d:5d:da:fe:35:c0:
         17:bb:92:f2:88:25:91:74:85:98:02:a3:b1:a0:29:2b:53:6a:
         b0:36:1e:57:85:69:3a:d7:24:a0:c9:cc:ee:88:b2:4c:cf:99:
         f1:73:0b:5c:37:a5:cb:65:3a:4e:0b:78:8a:19:45:f1:e3:ff:
         19:ca:e6:53:e3:72:0b:5a:2b:89:c2:b0:2d:17:61:27:a4:58:
         c8:9d:f8:07:90:53:8d:82:79:90:c7:de:c0:c6:8d:7b:0e:9f:
         7a:85:f5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:37:21 2026 by rpki-client