Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.mft
File:                     C73043EA966F0F810C22E736459E7122F2FD0AE0.mft (raw, json)
Hash identifier:          ftAvPQvaEd21AODXGWsQPE3gS7RgvxnBqDQ5WDUpJtk=
Subject key identifier:   5A:29:F6:9F:2A:9A:20:09:42:15:77:E6:09:60:AC:11:FE:D4:73:F2
Authority key identifier: C7:30:43:EA:96:6F:0F:81:0C:22:E7:36:45:9E:71:22:F2:FD:0A:E0
Certificate issuer:       /CN=C73043EA966F0F810C22E736459E7122F2FD0AE0
Certificate serial:       5BD667905925769D7C5D965DF205C44103CF1B9B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C73043EA966F0F810C22E736459E7122F2FD0AE0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.mft
Manifest number:          3F
Signing time:             Tue 16 Jun 2026 19:27:36 +0000
Manifest this update:     Tue 16 Jun 2026 19:22:36 +0000
Manifest next update:     Wed 17 Jun 2026 21:15:36 +0000
Files and hashes:         1: 3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa (hash: MV2xIGxIBgdx5AyOkaAkD+fjhmUbspGn/aDtyM22cf4=)
                          2: C73043EA966F0F810C22E736459E7122F2FD0AE0.crl (hash: qp0oXv3VhdUcWoWQ/axoObVsSbr+OG0dAbbtzUXosN4=)
                          3: 323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa (hash: Amg7n/J1kB55PVPfhSf4dolGpwcgp004+ynKN8Iqa0A=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.crl
                          rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C73043EA966F0F810C22E736459E7122F2FD0AE0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 21:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d6:67:90:59:25:76:9d:7c:5d:96:5d:f2:05:c4:41:03:cf:1b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C73043EA966F0F810C22E736459E7122F2FD0AE0
        Validity
            Not Before: Jun 16 19:22:36 2026 GMT
            Not After : Jun 17 21:15:36 2026 GMT
        Subject: CN=5A29F69F2A9A2009421577E60960AC11FED473F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c9:05:3d:53:fc:c5:12:88:9f:9c:63:87:a8:
                    12:b1:fe:2f:aa:71:d8:4e:82:b2:3a:da:11:f3:f0:
                    7b:96:c6:bb:fa:77:d1:5b:a6:62:da:aa:3c:d5:7b:
                    12:e4:60:f9:71:32:cd:c9:24:aa:86:d9:3e:4c:66:
                    19:b9:e4:24:7a:a3:a2:62:6d:45:e5:7c:5a:d4:f2:
                    04:51:8b:86:57:8d:c6:db:02:da:91:6c:99:4d:31:
                    f1:e3:9f:e4:44:34:2c:87:62:82:02:bf:58:fd:4b:
                    b7:43:6f:36:08:85:cc:bd:a3:78:90:cf:17:86:17:
                    db:c1:4b:bc:8b:a1:4f:33:55:0b:30:24:21:a0:4a:
                    50:f4:8e:ee:c6:aa:06:9d:5d:24:32:30:51:84:da:
                    55:dc:ae:3d:a3:6d:d4:8a:97:19:4e:db:9c:66:c0:
                    e7:dc:96:5e:e9:51:cd:99:f8:86:db:1b:dd:65:54:
                    e8:4b:eb:41:65:5d:ef:87:58:63:73:91:ba:76:06:
                    1a:44:7d:a8:0a:e3:34:d5:64:50:01:60:13:53:91:
                    6d:84:9d:bc:74:7a:13:38:35:54:e0:f8:c1:3a:52:
                    33:6d:e4:4c:0b:b2:8e:da:73:22:0c:07:c9:10:55:
                    bc:98:a4:e9:a8:26:74:28:02:2a:de:76:b2:46:6d:
                    de:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:29:F6:9F:2A:9A:20:09:42:15:77:E6:09:60:AC:11:FE:D4:73:F2
            X509v3 Authority Key Identifier:
                keyid:C7:30:43:EA:96:6F:0F:81:0C:22:E7:36:45:9E:71:22:F2:FD:0A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C73043EA966F0F810C22E736459E7122F2FD0AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4f:4d:c6:76:fb:fd:13:c1:21:1e:6d:e4:16:bd:af:38:e8:
         a8:11:b8:de:ff:0f:7c:0c:50:e6:71:f3:40:36:a7:4a:18:76:
         11:39:75:a3:2d:81:2c:57:8d:56:b1:cf:bd:1b:6b:08:29:fe:
         cf:8b:e7:da:36:98:29:55:5d:65:d7:68:95:13:71:86:40:17:
         1a:de:14:fb:9a:75:23:c4:b4:06:bc:29:aa:42:33:f4:c7:85:
         31:ae:3c:55:75:88:6b:de:32:1e:a9:77:fa:c9:0a:b6:79:fb:
         81:ac:55:a4:5f:34:72:85:79:99:58:8c:b1:cc:33:86:e1:f0:
         c2:d1:3f:63:ef:54:94:1d:bd:55:dd:b7:c8:cc:2b:1a:1d:8c:
         22:8d:ab:c2:56:c6:69:68:99:6d:0b:c9:e9:12:63:05:13:ca:
         2d:79:8a:29:51:02:eb:37:9e:7f:39:3f:20:a6:ff:88:61:4a:
         75:7e:f0:d2:5a:ab:11:f8:71:99:e5:c2:c2:54:19:74:91:e4:
         06:95:6a:15:be:c3:c2:a3:48:15:66:bf:2e:17:fc:ca:46:c1:
         87:d6:fb:be:40:07:ba:54:6a:2b:ce:59:b5:85:b0:95:8c:5f:
         c9:2a:9a:16:72:51:c5:91:98:61:79:0d:95:90:ea:31:ec:67:
         a8:c9:6e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:32:47 2026 by rpki-client