Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
File:                     EC59C36AB88A35CEA64B4ED019F2F05317672299.mft (raw, json)
Hash identifier:          X9lsrL71c6ZTbKms9bNze/uLJY1CWcw4BVzERlsDCvI=
Subject key identifier:   EA:EF:9C:86:FB:FF:3B:A3:16:C7:58:92:68:62:66:B7:D4:4F:5B:35
Authority key identifier: EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
Certificate issuer:       /CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Certificate serial:       3BDB370A0C2C58080E0B7A864B27FF5D3B19CA8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 09:20:42 +0000
Manifest this update:     Tue 12 May 2026 09:15:42 +0000
Manifest next update:     Wed 13 May 2026 12:24:42 +0000
Files and hashes:         1: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: YPwGvhjJSaspOvLgrZ3Fyf5ldBDtpaa3xSbfWjcGrDA=)
                          2: EC59C36AB88A35CEA64B4ED019F2F05317672299.crl (hash: Dp123U4UO28ON7Ko71NMdFSasnvi4Pff1dLgH6nVSWY=)
                          3: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: Ju2Rnafj0JXyXCFyRIYbsuCCwhT0mQqqDAAoegLW2lk=)
                          4: 3230322e3132372e39362e302f32302d3234203d3e203137393130.roa (hash: +dGVRe6EsrE8x8JkrbEl5y9M3KyI6+RObwSg+1Gl944=)
                          5: 3231302e37392e3230382e302f32302d3234203d3e203137393130.roa (hash: 5vaZfShfqgbUD5UrW2OwsFkdXsmnoUQ2LgDSdBEsxKs=)
                          6: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: AfPj1/WANHCA8ksluVDxgnesb53b+Rlio8ADTE+u1pQ=)
                          7: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: +30yZ3DQ/J4gQPQfBONcQspdy36OErhmpY2jH4HzLiQ=)
                          8: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: n+eUGlNoGxyXiKbu/ITCTX0cNeFjGes4nvyKs6e972Y=)
                          9: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: nvBOhOQVzXAnJ4HGpau+WjYJtRHl8i2975iE/qVl3BQ=)
                          10: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: 57swP2LUwPdheqaXWgJ8pT9nt0r4LCH8JoFCbrhNwuw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
                          rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:db:37:0a:0c:2c:58:08:0e:0b:7a:86:4b:27:ff:5d:3b:19:ca:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
        Validity
            Not Before: May 12 09:15:42 2026 GMT
            Not After : May 13 12:24:42 2026 GMT
        Subject: CN=EAEF9C86FBFF3BA316C75892686266B7D44F5B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f4:40:1b:c9:65:b1:80:ec:86:f5:31:2e:c9:
                    1d:21:d9:13:3d:52:83:ab:b3:0e:12:a8:86:b7:2e:
                    f1:33:54:43:68:f0:98:2b:34:db:6a:58:9b:f8:13:
                    e1:cf:8c:e5:5d:06:32:ef:97:10:f8:91:bf:af:1a:
                    36:cc:27:43:1f:e2:58:94:3b:f0:86:e4:3f:16:6b:
                    8a:42:20:95:b7:86:70:d3:fa:55:88:03:87:cd:75:
                    6f:a1:2c:c7:4f:0b:be:38:17:04:d8:90:f6:ed:ab:
                    4a:cf:e3:e9:18:d6:b5:e6:10:1a:76:45:eb:fb:64:
                    00:b3:c8:88:31:96:08:0d:d2:10:6e:0c:52:2e:e5:
                    07:92:1b:f0:62:d4:1a:36:91:93:e5:94:a7:89:c9:
                    70:43:0a:2f:bb:8d:77:6c:f1:e5:1f:1e:9e:13:a6:
                    df:90:40:44:8f:c1:2a:e9:b3:6d:7b:e7:1a:a8:85:
                    83:9d:40:b6:67:0c:08:d9:0b:d3:63:ba:eb:c6:32:
                    2f:43:df:66:91:7a:41:11:f1:79:1f:be:00:e3:1f:
                    11:5e:f1:d8:b9:90:f0:fc:7b:d6:3c:64:92:cd:fb:
                    82:0c:04:83:53:0b:23:48:59:5d:92:17:74:a2:30:
                    ef:6c:bb:07:f4:99:85:83:45:0a:d9:13:b6:87:64:
                    c6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EF:9C:86:FB:FF:3B:A3:16:C7:58:92:68:62:66:B7:D4:4F:5B:35
            X509v3 Authority Key Identifier:
                keyid:EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:96:7e:a5:d9:d3:0c:3d:99:0d:80:e7:00:f6:ae:52:59:5b:
         f5:34:41:aa:3c:e5:23:48:f0:75:ee:7e:9f:a6:20:ca:46:9a:
         37:36:ad:8b:84:75:63:01:6d:9d:02:2e:0d:bf:ca:0f:d3:4c:
         d1:2c:bd:43:c6:c7:3e:d5:65:be:2b:8c:33:c2:4b:9e:58:52:
         f8:4b:05:99:e3:d3:d1:9a:a5:d2:78:1b:08:29:8d:2b:bd:7a:
         86:00:fe:4a:99:d8:07:e7:dd:07:4b:33:60:cc:ee:6d:96:66:
         a0:ca:a1:d7:17:65:95:3f:01:36:e9:14:6a:ba:93:ce:fb:e8:
         23:5b:57:84:a1:c2:73:9a:fa:5b:4e:ac:18:ec:8f:ce:e9:2e:
         9e:d7:b7:3d:64:87:53:c1:b3:1a:fe:52:65:5e:ed:e7:20:b1:
         5e:1f:e4:a9:f4:e2:6c:de:d7:a0:10:a5:4e:d0:39:52:14:15:
         27:3b:9f:ca:d2:d4:b4:51:01:2c:74:c3:b3:83:b1:b1:a7:05:
         30:44:00:97:13:21:b4:eb:ee:1d:26:59:65:7c:3a:11:83:4a:
         fa:5b:8a:ff:24:32:86:ff:5a:27:aa:5c:03:8b:90:95:3d:23:
         32:d0:02:f0:97:40:68:13:61:35:11:e0:db:e8:19:2b:e0:ea:
         5f:4e:24:ed
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUO9s3CgwsWAgOC3qGSyf/XTsZyoowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM1OUMzNkFCODhBMzVDRUE2NEI0RUQwMTlGMkYwNTMx
NzY3MjI5OTAeFw0yNjA1MTIwOTE1NDJaFw0yNjA1MTMxMjI0NDJaMDMxMTAvBgNV
BAMTKEVBRUY5Qzg2RkJGRjNCQTMxNkM3NTg5MjY4NjI2NkI3RDQ0RjVCMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe9EAbyWWxgOyG9TEuyR0h2RM9
UoOrsw4SqIa3LvEzVENo8JgrNNtqWJv4E+HPjOVdBjLvlxD4kb+vGjbMJ0Mf4liU
O/CG5D8Wa4pCIJW3hnDT+lWIA4fNdW+hLMdPC744FwTYkPbtq0rP4+kY1rXmEBp2
Rev7ZACzyIgxlggN0hBuDFIu5QeSG/Bi1Bo2kZPllKeJyXBDCi+7jXds8eUfHp4T
pt+QQESPwSrps2175xqohYOdQLZnDAjZC9NjuuvGMi9D32aRekER8XkfvgDjHxFe
8di5kPD8e9Y8ZJLN+4IMBINTCyNIWV2SF3SiMO9suwf0mYWDRQrZE7aHZMaNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6u+chvv/O6MWx1iSaGJmt9RPWzUwHwYDVR0j
BBgwFoAU7FnDariKNc6mS07QGfLwUxdnIpkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODY0NTAwMzItNTQ5Mi00YTVhLTk0M2YtYmRiNDczMzQxMjMzLzAvRUM1OUMzNkFC
ODhBMzVDRUE2NEI0RUQwMTlGMkYwNTMxNzY3MjI5OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQzU5QzM2QUI4OEEzNUNFQTY0QjRFRDAxOUYyRjA1MzE3Njcy
Mjk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODY0NTAwMzItNTQ5Mi00YTVhLTk0
M2YtYmRiNDczMzQxMjMzLzAvRUM1OUMzNkFCODhBMzVDRUE2NEI0RUQwMTlGMkYw
NTMxNzY3MjI5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAACWfqXZ0ww9mQ2A5wD2rlJZW/U0Qao85SNI
8HXufp+mIMpGmjc2rYuEdWMBbZ0CLg2/yg/TTNEsvUPGxz7VZb4rjDPCS55YUvhL
BZnj09GapdJ4GwgpjSu9eoYA/kqZ2Afn3QdLM2DM7m2WZqDKodcXZZU/ATbpFGq6
k8776CNbV4ShwnOa+ltOrBjsj87pLp7Xtz1kh1PBsxr+UmVe7ecgsV4f5Kn04mze
16AQpU7QOVIUFSc7n8rS1LRRASx0w7ODsbGnBTBEAJcTIbTr7h0mWWV8OhGDSvpb
iv8kMob/WieqXAOLkJU9IzLQAvCXQGgTYTUR4NvoGSvg6l9OJO0=
-----END CERTIFICATE-----
Generated at Wed May 13 02:36:37 2026 by rpki-client