Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft
File:                     E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft (raw, json)
Hash identifier:          Cyw9tJECbJys4+YjNKwZWfjTsgLp6rtkArIOEBu61bc=
Subject key identifier:   A6:2E:F8:04:10:51:FF:4E:58:D2:E0:B1:1B:E9:60:6B:AB:FA:5B:FC
Authority key identifier: E3:7B:9D:E7:6B:83:69:C8:6C:BD:D8:5F:17:B4:B0:8D:A3:90:39:12
Certificate issuer:       /CN=E37B9DE76B8369C86CBDD85F17B4B08DA3903912
Certificate serial:       1F04E18A578E95B22D532A31CE6EBC38478E4F77
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft
Manifest number:          0F
Signing time:             Wed 13 May 2026 08:35:50 +0000
Manifest this update:     Wed 13 May 2026 08:30:50 +0000
Manifest next update:     Thu 14 May 2026 10:49:50 +0000
Files and hashes:         1: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: WdpYi9xOJp2Ik1RGOa6PotA1dBwWjL6rALxGb9WjneQ=)
                          2: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: rS0I7oveJtn+l4aAAzlWodrD1fslAxWP3f3cXLvaPIY=)
                          3: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: gmD9ajpsyadNWLNIYrlzTIV+UYw18CE56nZqbLaELis=)
                          4: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: n2lJ9bzcnUw6O+w0adArBpP91Kujz+/33ven90vG4LQ=)
                          5: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: D9MoAcvsSp+WiO9dOaWrzis15LUcy+CINQir9MZwMpg=)
                          6: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: oSx0cFa1nsipfiH0pkhplDWMeAxUpXV7UZUBLF8bNIo=)
                          7: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: PQRif44rE/vHl6KI352lV/5EM+qmOZyEEJRR83eHyBI=)
                          8: E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl (hash: eUy3f46eMKkQwKeFaHVnJ4lDWw97GP/OQwUL08EOVTQ=)
                          9: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: 8H0ycrYvaT3pEUwMuUYMPkeb6+nIJfK2o58CvS7laFE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl
                          rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:04:e1:8a:57:8e:95:b2:2d:53:2a:31:ce:6e:bc:38:47:8e:4f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E37B9DE76B8369C86CBDD85F17B4B08DA3903912
        Validity
            Not Before: May 13 08:30:50 2026 GMT
            Not After : May 14 10:49:50 2026 GMT
        Subject: CN=A62EF8041051FF4E58D2E0B11BE9606BABFA5BFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:31:fe:ce:11:b1:5e:34:73:49:41:f4:1f:c3:
                    1f:88:9b:8e:4e:a2:af:9c:8e:1b:67:6d:21:62:19:
                    9e:0b:30:29:77:26:cd:63:84:71:d8:a9:c9:89:da:
                    44:aa:8c:bf:0e:01:d6:5e:2e:2c:55:2e:75:ea:53:
                    37:9c:8a:53:f5:77:15:59:aa:2f:a3:5b:77:21:62:
                    3b:59:1e:cc:a3:2c:cc:5b:ae:20:9a:e5:3e:20:4f:
                    50:3c:fa:40:20:0c:2b:38:99:90:96:7d:2c:20:1c:
                    70:90:15:f7:fe:8a:fe:d5:4e:57:f6:af:85:b3:5a:
                    75:44:fc:83:78:eb:97:89:18:36:de:e2:f6:18:32:
                    87:2f:df:67:95:80:31:be:22:b8:9a:63:9b:f1:05:
                    de:70:7a:bf:ca:53:ba:f4:0c:6f:0d:2e:2e:0b:ae:
                    89:a2:f7:19:dd:be:80:47:d7:c5:dc:c2:72:c3:33:
                    7c:1f:17:ea:44:0b:07:9d:81:17:5f:89:fc:2b:4e:
                    b6:86:37:6b:a2:fe:76:35:73:89:08:67:34:01:b9:
                    7e:00:fe:67:bd:47:cc:b5:b3:10:f6:90:47:55:3e:
                    81:48:ee:dc:f2:a8:b2:04:b1:a4:02:5f:84:97:f9:
                    71:73:57:13:1a:1b:d7:cc:7e:9d:81:5d:cc:9e:92:
                    fe:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2E:F8:04:10:51:FF:4E:58:D2:E0:B1:1B:E9:60:6B:AB:FA:5B:FC
            X509v3 Authority Key Identifier:
                keyid:E3:7B:9D:E7:6B:83:69:C8:6C:BD:D8:5F:17:B4:B0:8D:A3:90:39:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9b:e0:86:22:2a:2e:6a:0a:00:a9:79:bb:12:1a:83:45:19:
         31:02:0c:81:89:1a:94:42:a4:ed:c4:58:8e:36:36:b9:32:b6:
         73:1d:0d:d0:a3:ee:1a:94:5f:ac:f7:18:80:2e:39:c1:06:c5:
         6d:81:37:72:25:68:29:3d:ec:92:2d:20:de:d9:21:3b:54:50:
         73:e5:a6:90:03:31:72:20:26:6c:11:2f:aa:f9:b0:20:2e:03:
         4c:b9:64:37:22:cc:d3:aa:1f:2e:ce:a3:30:c5:67:fe:c1:3e:
         41:39:71:02:b8:b5:01:02:01:5d:a9:78:ba:38:39:34:9c:28:
         bb:82:38:c0:fe:84:a5:ad:0c:d4:8a:9d:c6:b1:fa:15:1a:17:
         1d:5a:84:37:53:e4:d5:fe:bd:6c:fa:8c:af:b4:00:f5:e4:2b:
         0d:3b:b6:cc:8a:a8:47:db:22:b8:be:cf:d3:cc:8b:b8:5e:8e:
         86:fb:9d:e2:3a:8a:c0:fd:21:db:43:5b:e5:c8:0b:47:51:d0:
         85:f1:f9:25:12:a9:08:c1:aa:fb:f5:ce:b7:36:4a:72:37:13:
         c9:6b:92:41:75:c2:41:95:c7:fe:a4:ff:a9:a8:09:bd:79:20:
         55:45:6d:ad:da:87:c3:80:40:84:69:07:d6:e2:6c:51:b5:f8:
         9e:d0:c9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:05:43 2026 by rpki-client