Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
File:                     E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft (raw, json)
Hash identifier:          mO2xnb+qmW69t+3s+/fGW5suaGU1d1hVqGU3D0QuAO0=
Subject key identifier:   3B:E1:2E:E2:93:D8:5B:4E:4E:52:AB:FB:74:98:8E:3C:14:EB:FA:E5
Authority key identifier: E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93
Certificate issuer:       /CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
Certificate serial:       0D26FB55713ECED2F0BAD662658C11A87F638B40
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 20:32:31 +0000
Manifest this update:     Tue 12 May 2026 20:27:31 +0000
Manifest next update:     Wed 13 May 2026 22:17:31 +0000
Files and hashes:         1: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: Sd3fhLkfAzIYKIa+lxI8//LD+Sqt+jk5hVCJVdmO8ro=)
                          2: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: E6gLrMvPbF2DgnqL5izEh9JlZeBZOXfgDDhLttXgRCM=)
                          3: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: m1pNwOSLl0bdCga72bgV0UjJBtOBSgU1ellU74iVk3k=)
                          4: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: 0O4aswxD1VoxCc8I8JRXFhna+2fhOQAti4akwG9PjgQ=)
                          5: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: M9jyn5/cfkiIh8r7xaktGDoS2J9kM31RBGKJ46gBojU=)
                          6: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: PekXXJ/q55kTEO5kx0CRU0xx2H+12J366upyeQ1nZA8=)
                          7: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: v44LsT6qMPli0zPJF9qTEG8AjfBqu7Oywt77FQr+HWc=)
                          8: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: phcDv0m0vLlfwZ99qeKbMtyh63ijZFKiTdhh4MVincM=)
                          9: E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl (hash: aee8DNDmoZTGhog7H0jLEnmZzE27ZUP/WdOe9o2bRq4=)
                          10: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: ho4hOFufXidWAYsTbOliD6cEtUCuHGtc5gpjUTGtn7w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl
                          rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:26:fb:55:71:3e:ce:d2:f0:ba:d6:62:65:8c:11:a8:7f:63:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
        Validity
            Not Before: May 12 20:27:31 2026 GMT
            Not After : May 13 22:17:31 2026 GMT
        Subject: CN=3BE12EE293D85B4E4E52ABFB74988E3C14EBFAE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2c:b0:ab:8d:d5:99:04:01:d5:46:31:48:31:
                    4a:b5:90:41:92:4f:2f:0a:c0:25:29:f6:38:90:3c:
                    ff:72:78:a1:31:12:ef:d3:dd:22:db:cf:76:e9:33:
                    66:a0:cb:aa:57:08:a6:74:72:90:07:38:c2:38:b0:
                    5b:8c:11:65:c6:5a:ac:1c:96:c7:1a:95:00:54:bb:
                    44:57:9a:d9:b6:d5:b3:91:47:57:8a:17:57:52:cd:
                    b8:e9:ef:37:94:92:1d:b7:12:e4:d2:e4:12:0a:55:
                    c3:4b:9e:01:af:43:1b:6a:db:ab:60:a2:50:45:24:
                    a2:a9:6b:c6:5a:d4:cf:8c:8d:91:5e:d9:6f:0b:42:
                    53:f5:de:08:be:84:e2:15:af:92:a0:16:cb:76:00:
                    a5:ec:48:23:c2:9c:de:d7:d1:16:99:b3:5b:1a:51:
                    67:b6:35:d9:94:e7:e8:1a:67:79:4f:66:9a:a4:70:
                    6e:02:6e:c0:35:fe:3d:06:87:f1:90:ae:2b:c3:c7:
                    3e:79:b4:c8:cf:a3:6d:42:b5:04:b0:eb:a5:57:b1:
                    fc:54:82:05:0b:bc:54:52:c7:c7:2a:cf:34:27:34:
                    35:ad:c9:50:7a:b0:3a:80:88:a6:d7:cd:40:64:8a:
                    13:05:25:c6:06:14:9d:ae:2a:c2:39:a1:35:2e:93:
                    27:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E1:2E:E2:93:D8:5B:4E:4E:52:AB:FB:74:98:8E:3C:14:EB:FA:E5
            X509v3 Authority Key Identifier:
                keyid:E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b1:95:fe:d4:25:33:d5:7c:29:7b:30:2d:42:b4:03:70:f0:
         a6:d5:f0:38:9b:ee:ca:7c:cd:55:1c:f0:3c:82:13:c8:9d:af:
         5d:06:c1:44:6e:35:9e:1f:5a:36:12:fb:f6:ca:9b:ab:2c:49:
         21:57:2c:84:d4:7d:cd:20:9d:0f:c6:b2:d2:1e:0a:61:d6:04:
         12:42:09:c5:e7:9b:66:31:3a:bb:4f:ea:4d:b3:0a:04:d9:e8:
         e1:c5:50:77:74:cf:84:22:58:4b:36:67:48:91:e8:a1:80:81:
         98:7f:18:14:59:94:51:d3:4e:18:23:84:c8:8c:52:cd:25:b7:
         84:f9:63:a6:64:36:ae:4a:5b:10:fb:2d:66:f3:15:31:2f:0e:
         ed:1c:59:fb:9e:ad:88:73:78:76:5a:f2:a7:2c:25:27:aa:b7:
         7e:b6:f8:e8:3a:14:cb:6b:75:17:4c:24:59:52:45:2d:4e:af:
         8d:82:61:02:fb:cc:95:8c:16:f6:e7:7a:6c:22:27:f3:00:56:
         a1:6d:23:e8:6e:ef:cb:e8:fb:a4:bb:46:35:47:88:81:d1:76:
         39:8d:4a:37:ee:7c:6b:aa:c7:19:ca:43:7d:a0:68:8a:1f:87:
         58:97:51:7e:4a:fe:a3:8e:4e:ae:67:fd:26:b5:61:3f:66:0a:
         50:6a:ea:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:46 2026 by rpki-client