Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.mft
File:                     CC45D911E8D409F5FEF2A15C8F82F0C68919C745.mft (raw, json)
Hash identifier:          kyaZ9fQYt53mvEq+XBt2XEvygF5Kpf90LJO0Wc04cUQ=
Subject key identifier:   81:F6:38:89:C7:7E:42:57:D8:95:CE:EC:07:7B:66:7F:34:98:F9:D7
Authority key identifier: CC:45:D9:11:E8:D4:09:F5:FE:F2:A1:5C:8F:82:F0:C6:89:19:C7:45
Certificate issuer:       /CN=CC45D911E8D409F5FEF2A15C8F82F0C68919C745
Certificate serial:       7194013FED7E907205D54C899416CF9FB94351A2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 16:03:43 +0000
Manifest this update:     Tue 16 Jun 2026 15:58:43 +0000
Manifest next update:     Wed 17 Jun 2026 18:21:43 +0000
Files and hashes:         1: 3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa (hash: 1w4JR+H10y3ISU68cZA0S9gj5TwIQFq6stHAsiX3hNo=)
                          2: CC45D911E8D409F5FEF2A15C8F82F0C68919C745.crl (hash: vNeW7WSi7aw0z78n4Rghi06jnIzyWkYNYmx4G+PKIFI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.crl
                          rsync://rpki-rsync.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:94:01:3f:ed:7e:90:72:05:d5:4c:89:94:16:cf:9f:b9:43:51:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC45D911E8D409F5FEF2A15C8F82F0C68919C745
        Validity
            Not Before: Jun 16 15:58:43 2026 GMT
            Not After : Jun 17 18:21:43 2026 GMT
        Subject: CN=81F63889C77E4257D895CEEC077B667F3498F9D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b6:20:c4:93:66:63:b8:c1:1b:f5:90:bc:0f:
                    0a:8a:f4:c3:fc:39:46:64:a4:f8:84:4f:3b:9e:f9:
                    cc:2c:3b:7c:34:44:9c:de:15:b3:1e:2f:70:cc:ac:
                    9e:fa:c3:8b:2c:9d:d9:b4:0e:0c:77:ae:b9:37:a4:
                    76:8d:0e:7b:f0:8c:a6:26:a8:8f:f0:fa:cf:b2:ea:
                    5c:f8:fa:79:96:4e:71:06:f7:55:7f:5b:2b:48:4a:
                    a8:4d:34:a7:e9:b6:d2:28:1c:d5:2a:9b:bf:10:d9:
                    5b:2d:93:46:a8:c1:70:71:fe:d6:fc:b9:6c:73:4c:
                    ff:a2:c5:cb:b9:e7:10:0a:53:d9:af:9c:e5:dc:b0:
                    02:0a:fe:e8:61:27:34:76:ce:fc:7d:fd:a0:7c:9e:
                    86:2e:eb:a9:5d:b8:bf:a1:8c:20:b3:f0:92:f0:53:
                    56:9f:d7:fa:40:89:02:f1:ab:8b:37:34:8a:21:e4:
                    2d:8f:15:17:e3:47:9a:78:ca:43:63:1e:c5:39:0c:
                    9f:48:7a:63:d8:bd:18:76:c5:c5:ea:24:89:e6:34:
                    e3:0a:a3:55:37:94:6b:15:14:86:e1:2b:01:50:11:
                    65:73:5c:f7:88:a4:89:da:53:a1:c7:fa:c5:ba:aa:
                    ea:4f:29:42:bb:9f:56:f2:a0:1a:6f:7b:ff:1c:fb:
                    83:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F6:38:89:C7:7E:42:57:D8:95:CE:EC:07:7B:66:7F:34:98:F9:D7
            X509v3 Authority Key Identifier:
                keyid:CC:45:D9:11:E8:D4:09:F5:FE:F2:A1:5C:8F:82:F0:C6:89:19:C7:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:fc:79:61:26:f5:16:bb:b0:37:5f:b2:4f:58:5e:4f:26:fa:
         b2:3b:6c:c3:c3:17:5a:34:15:89:e6:92:ef:e4:74:8d:6a:34:
         74:60:53:67:59:ae:8a:37:f7:88:80:99:9f:2d:bd:54:e4:e2:
         84:b9:be:12:d2:03:f1:c7:c6:2b:62:78:97:96:89:98:2f:bb:
         66:42:9b:5d:1a:7c:01:0b:79:55:05:3b:e2:b2:fc:95:ac:3f:
         73:e4:67:e7:80:08:e8:41:df:67:45:75:45:02:01:02:d2:1a:
         6d:87:a3:5c:99:f0:c2:ed:57:3e:17:ff:7e:43:41:8b:93:84:
         3c:95:c4:f9:30:48:0a:38:94:76:eb:c8:31:9e:a3:7e:43:2b:
         ef:02:cd:84:91:a1:65:94:a8:45:96:ba:19:1c:d8:4c:87:b9:
         98:eb:b7:d6:34:4f:0c:bc:23:58:d8:7d:87:0d:e4:41:67:2b:
         b5:25:86:0c:5b:36:1d:2d:74:cb:56:0a:2b:43:78:e2:de:3d:
         af:a6:13:43:d2:f8:a7:59:a2:1e:ff:52:0a:15:f9:9d:a1:60:
         b5:29:32:44:78:2e:18:61:79:08:74:98:c3:3a:99:70:35:01:
         2d:b2:6c:2a:b3:00:70:f2:77:14:9d:f1:40:05:b8:33:ab:30:
         e5:00:0e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:44:13 2026 by rpki-client