Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft
File:                     DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft (raw, json)
Hash identifier:          uOxVhWMkRV1eY+1mzsDuSzBEfLvV4cZ9gZDLXIravZY=
Subject key identifier:   02:67:26:69:7A:1B:8C:C5:42:E9:F5:5F:46:A8:DA:FF:CC:2B:57:0A
Authority key identifier: DA:E5:9D:7C:32:09:C3:34:9D:E0:17:8E:70:1C:B4:E9:FC:F3:12:10
Certificate issuer:       /CN=DAE59D7C3209C3349DE0178E701CB4E9FCF31210
Certificate serial:       75316286A273A4B5D8FC5BB2347B3A82345E2F90
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 15:27:55 +0000
Manifest this update:     Tue 16 Jun 2026 15:22:55 +0000
Manifest next update:     Wed 17 Jun 2026 16:29:55 +0000
Files and hashes:         1: DAE59D7C3209C3349DE0178E701CB4E9FCF31210.crl (hash: PtLzLR5doKGuaAs6JVDRiZ008wBM/iZ52aD3kdVoHBc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.crl
                          rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 16:29:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:31:62:86:a2:73:a4:b5:d8:fc:5b:b2:34:7b:3a:82:34:5e:2f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAE59D7C3209C3349DE0178E701CB4E9FCF31210
        Validity
            Not Before: Jun 16 15:22:55 2026 GMT
            Not After : Jun 17 16:29:55 2026 GMT
        Subject: CN=026726697A1B8CC542E9F55F46A8DAFFCC2B570A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:68:3d:60:8e:13:58:33:ca:b2:ee:21:c2:ab:
                    33:cc:6a:17:c7:db:5e:cc:72:b2:5d:5c:52:3a:9d:
                    73:18:f8:e2:d8:7c:0d:ba:9a:51:ae:db:0e:12:85:
                    32:34:f7:9c:7b:4a:cb:3b:88:92:90:e1:b4:7d:8a:
                    4a:75:45:4e:24:51:a2:be:3e:68:31:31:e9:0f:7b:
                    c6:b6:fa:f9:f9:37:34:64:47:85:18:d3:40:5e:13:
                    77:0d:2d:bd:a6:68:1c:36:ff:58:86:13:74:55:95:
                    af:95:a4:ef:f3:a9:ee:84:80:1c:e6:a2:91:bd:2a:
                    12:ae:29:45:7f:cc:90:35:d4:61:9c:05:c2:6b:56:
                    d9:41:7d:d0:68:d6:f1:ae:f7:be:bf:8f:68:fc:6f:
                    a2:76:41:17:90:be:75:3e:82:c5:25:9d:a6:52:9c:
                    18:a2:ea:2c:00:14:c7:11:c6:2f:ca:ea:3e:fb:0f:
                    eb:f4:f2:0a:c6:4a:f5:62:e8:cf:37:d6:da:c1:5b:
                    c9:2a:9a:09:8b:25:06:5b:05:04:36:8d:38:c9:9f:
                    93:3b:18:bb:81:ee:20:3a:43:3f:06:79:f7:16:6d:
                    ab:34:e2:8c:3a:1c:79:15:91:34:dc:fa:5a:e3:6d:
                    bd:96:0d:14:d9:21:49:87:53:1c:83:93:cb:3a:f1:
                    cf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:67:26:69:7A:1B:8C:C5:42:E9:F5:5F:46:A8:DA:FF:CC:2B:57:0A
            X509v3 Authority Key Identifier:
                keyid:DA:E5:9D:7C:32:09:C3:34:9D:E0:17:8E:70:1C:B4:E9:FC:F3:12:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/DAE59D7C3209C3349DE0178E701CB4E9FCF31210.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:a8:91:05:21:44:a8:c3:e7:09:80:a8:c4:84:08:24:03:90:
         f8:b7:cb:98:fb:66:27:41:33:cc:4a:6f:8c:5f:cb:ad:ce:36:
         8c:3e:78:c6:b2:70:ac:80:ef:bb:1a:a9:ea:ca:23:83:55:0e:
         de:d7:82:74:7e:66:bb:b2:13:a6:ce:5d:0e:ae:48:2f:1a:8a:
         17:14:95:37:b8:30:fa:58:de:f6:e5:46:6c:4f:c8:09:86:f3:
         48:04:51:5d:af:09:4b:7b:5a:b0:c9:43:0c:d2:2b:7c:df:0d:
         9b:7e:e3:da:79:a6:fb:3c:3f:ed:5a:bf:7e:cd:51:ea:bf:17:
         02:7c:5f:3f:dd:1c:ea:cf:f5:d3:ae:79:81:d6:98:17:2e:af:
         4c:2b:8c:f3:25:f5:41:18:c2:6c:70:ea:d4:f6:63:da:a5:6c:
         86:6f:a8:82:cd:51:ae:58:db:3d:27:e0:e2:b9:22:48:11:28:
         f4:21:20:1c:8b:f5:d1:dc:a8:a8:30:b5:17:d9:38:22:2a:ab:
         55:03:96:fe:31:da:f6:88:e3:79:8e:46:ef:b1:83:5c:48:ba:
         e3:73:e9:b4:b6:d6:e0:62:3b:9f:a9:e5:4f:6b:61:24:5a:3d:
         d0:50:2c:c7:60:4d:9a:99:a0:10:ae:46:d1:ff:d1:a8:99:5d:
         1b:ac:27:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:14:11 2026 by rpki-client