Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
File:                     68A727878748F40EF62D744B06303F71A6B3F75C.mft (raw, json)
Hash identifier:          SAPMjJj7oJk17BIMmNoabrjSPotoO55R0k2V5qBSCCM=
Subject key identifier:   C3:09:36:17:85:10:DA:AC:3A:8E:19:E3:9C:93:D0:3A:CB:9F:E6:97
Authority key identifier: 68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C
Certificate issuer:       /CN=68A727878748F40EF62D744B06303F71A6B3F75C
Certificate serial:       56054803C9D8471618BAC975B74231178E7F3206
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 12:37:52 +0000
Manifest this update:     Tue 12 May 2026 12:32:52 +0000
Manifest next update:     Wed 13 May 2026 12:40:52 +0000
Files and hashes:         1: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: S8QwzcFeryIcuSdPBiMnAYW7dqUXcBjtqFkLeF9/BcE=)
                          2: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: ghKRefxmMKmKlt978ds7tp9D7g1WWsJyZmES+glyEMw=)
                          3: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: NLB3lY9DFzaCd5CKPizbBhfO5LYHEpYinHrGVDAbCes=)
                          4: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: WRqUfw4kkLNha7EwV7NENaJIZvhb1ikV9t5ePDUcyD4=)
                          5: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: IbAFzZACUnD6lwBQxPhQqMDiyphOZDVL6AMwxKGfiyQ=)
                          6: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: gR1DTuGl5zoFpulg1oigiYRS4tO3/p7LnE5jaqD1jaU=)
                          7: 68A727878748F40EF62D744B06303F71A6B3F75C.crl (hash: SGI9XfV8Fr+UAlQ7bxa3xTJVWdvEEWaClBs2nmWOzpg=)
                          8: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: Tv2GPPjlGM6s70rJUxZeMrMG5Grjr8wYER/e5zbXioI=)
                          9: 3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa (hash: vW5w5IkuRb83zA5ANSFF1CJerE321mN8QnbQgdvihxM=)
                          10: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: c+NnvyqB3knbtuO7KdhM0hJjec2wwtXVinOUBhE4/24=)
                          11: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: PvN2AuvxpSJAs/KNp18Hx71tEJNrxtBQ9MHqNXHlPGI=)
                          12: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: hz0u1O8torhSAEu0GK+s8W9famRD261lcziOb/ZySjc=)
                          13: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: 6s+J2D1xc+Un9FBlPt0gue96vFI4b8yX8woz+h6eFQo=)
                          14: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: pivfi9ji1ihnIAJ1idyzgwRmHruzS5uloDq3BscV5e0=)
                          15: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: CeqXPBLKTKcb4QWFvGgnRWapqG6f1Vmt1NBorMo+v2c=)
                          16: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: r2ZYiFd01bWs0eEN9nD+Mp8m+K6B0HFPjNNciuS/bGc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl
                          rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:05:48:03:c9:d8:47:16:18:ba:c9:75:b7:42:31:17:8e:7f:32:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68A727878748F40EF62D744B06303F71A6B3F75C
        Validity
            Not Before: May 12 12:32:52 2026 GMT
            Not After : May 13 12:40:52 2026 GMT
        Subject: CN=C30936178510DAAC3A8E19E39C93D03ACB9FE697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d3:19:82:17:bc:fb:09:36:71:bd:cd:68:8d:
                    cd:e5:cd:93:be:f2:2b:37:97:e0:2e:2f:66:fd:ad:
                    44:e0:b8:06:74:06:6a:dd:06:d5:4c:3d:98:a9:46:
                    fb:28:39:85:45:64:a8:12:d4:56:c1:4f:8c:3a:c5:
                    76:5b:14:c9:ef:4e:65:40:0e:22:32:75:b5:9a:a8:
                    81:47:a9:07:16:1f:a2:f6:61:ef:98:53:66:2f:07:
                    fd:f1:e6:eb:d2:ee:ce:14:56:05:d4:a0:c2:6a:a3:
                    00:62:93:67:93:30:e6:ac:23:31:3c:16:51:06:29:
                    b9:b9:25:ad:dc:69:29:a8:5b:f9:32:64:96:55:34:
                    8b:7b:f8:97:61:99:d5:67:bd:0d:8d:3b:76:8a:ad:
                    7e:02:8b:32:68:2c:cd:1e:26:f3:dc:7d:24:c4:bb:
                    81:ea:dd:21:87:be:85:08:a9:8c:42:e5:bc:ec:11:
                    27:71:57:ad:4d:03:98:3c:0b:4d:78:5b:f5:b0:5f:
                    26:f4:a0:5c:a0:74:8f:cb:a6:a1:69:39:ef:18:70:
                    8e:ce:a8:ab:46:37:5f:74:51:1e:f0:1e:f8:ed:f1:
                    a1:bf:81:c4:88:cb:c4:c7:b5:bc:73:0e:3b:02:4a:
                    fc:30:c5:27:7f:e9:8e:f3:e8:bf:4c:ba:0c:45:c5:
                    06:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:09:36:17:85:10:DA:AC:3A:8E:19:E3:9C:93:D0:3A:CB:9F:E6:97
            X509v3 Authority Key Identifier:
                keyid:68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d3:18:c9:21:28:ad:9e:b8:b0:02:c2:c4:21:aa:26:37:71:
         a3:4c:7b:6f:d5:88:28:a8:fa:1e:43:ab:f7:2c:e1:e7:38:fc:
         47:21:48:e8:d6:19:df:5a:86:0f:73:67:26:3d:ac:bc:11:d5:
         6c:17:bb:3f:62:fc:eb:1e:48:85:3b:e7:31:db:7f:a5:bb:77:
         f6:a6:73:8e:12:77:c0:bf:93:c3:e1:f1:bc:16:3e:af:8d:22:
         f4:b2:d2:b2:d4:70:6b:36:65:c9:55:34:45:da:2f:ad:83:21:
         77:89:ec:88:63:ba:65:19:d1:69:b4:19:48:8c:83:46:91:f1:
         df:a3:a5:be:80:23:ff:dc:4c:a4:ca:72:84:8e:a7:76:fc:2e:
         18:c4:a3:23:ec:a6:e7:8d:af:2c:64:a0:05:79:6f:c6:fe:ac:
         be:df:d9:42:08:4d:12:fb:35:af:8a:e4:c5:b0:55:84:3b:24:
         82:e7:9b:73:b6:3e:cf:a4:45:43:b4:da:3b:18:54:be:4b:77:
         4d:58:ad:ca:f5:20:82:0b:a9:6a:4a:14:e2:5a:e8:f7:c6:63:
         23:31:b8:6a:95:77:0d:f9:b8:c8:dd:bb:0e:14:a6:a4:89:3e:
         a6:7a:de:c3:f7:c9:14:70:68:27:7f:6d:e4:2a:21:56:90:8e:
         0e:e2:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:19:31 2026 by rpki-client