Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft
File:                     440F6B35B30CFEEB3F2B22851A2658050264D69E.mft (raw, json)
Hash identifier:          b4Y83Eq4l1j+JNNzRScwKsYMEUFtVMXznqxga6uYbfg=
Subject key identifier:   B9:CC:BB:53:33:4C:62:1A:72:D0:3B:E8:FE:CB:1A:EA:11:A7:0D:8A
Authority key identifier: 44:0F:6B:35:B3:0C:FE:EB:3F:2B:22:85:1A:26:58:05:02:64:D6:9E
Certificate issuer:       /CN=440F6B35B30CFEEB3F2B22851A2658050264D69E
Certificate serial:       5C1588BD2D2C031A43AC84408DD2F66CF5FE4E64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/440F6B35B30CFEEB3F2B22851A2658050264D69E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 17:35:27 +0000
Manifest this update:     Tue 16 Jun 2026 17:30:27 +0000
Manifest next update:     Wed 17 Jun 2026 19:59:27 +0000
Files and hashes:         1: 440F6B35B30CFEEB3F2B22851A2658050264D69E.crl (hash: xSaqveVVDDGYZ8iRgWZVC+1ZEQK/i1BXWTrleeDdHZ0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.crl
                          rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/440F6B35B30CFEEB3F2B22851A2658050264D69E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 19:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:15:88:bd:2d:2c:03:1a:43:ac:84:40:8d:d2:f6:6c:f5:fe:4e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=440F6B35B30CFEEB3F2B22851A2658050264D69E
        Validity
            Not Before: Jun 16 17:30:27 2026 GMT
            Not After : Jun 17 19:59:27 2026 GMT
        Subject: CN=B9CCBB53334C621A72D03BE8FECB1AEA11A70D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:19:81:3a:37:8c:c4:a7:55:00:d6:1a:d5:cb:
                    53:f7:bc:5e:7d:23:86:19:63:92:c9:8f:cc:cc:54:
                    f5:38:9a:b0:42:99:09:5a:1c:de:5f:62:1c:b2:fc:
                    9d:d5:ad:6f:49:b3:32:9f:22:52:06:51:2c:35:c7:
                    1a:0e:23:74:e5:9c:38:3f:3e:de:97:9e:ce:92:63:
                    a4:9c:03:90:95:c9:39:53:4a:60:ec:f0:20:1b:ae:
                    fd:39:1a:ad:23:62:de:e2:49:37:07:7b:f0:74:2a:
                    4b:90:0d:e2:c3:01:90:4c:6d:5c:94:eb:b4:8a:70:
                    5b:fa:94:12:b5:75:ff:23:0f:3a:2a:3d:03:1e:74:
                    28:ce:55:24:02:5a:52:3b:47:03:2b:80:fe:06:e4:
                    72:3a:e6:c5:8c:26:e8:29:cb:26:8a:a1:7f:af:8e:
                    92:4f:2a:1e:56:91:9b:50:26:d1:dd:b9:ed:89:c6:
                    56:61:81:d7:9b:de:85:4e:b2:95:47:db:fc:a5:c2:
                    6d:4a:4d:64:04:af:ba:4c:83:8c:53:1a:f3:c0:40:
                    04:e5:37:e8:a7:06:6e:39:99:8c:ab:a5:fd:c2:af:
                    ad:05:5c:b1:0b:64:ee:53:ed:b8:1d:d4:59:c8:41:
                    61:ac:c7:eb:77:4c:04:0d:37:4a:26:21:9a:a9:aa:
                    7a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CC:BB:53:33:4C:62:1A:72:D0:3B:E8:FE:CB:1A:EA:11:A7:0D:8A
            X509v3 Authority Key Identifier:
                keyid:44:0F:6B:35:B3:0C:FE:EB:3F:2B:22:85:1A:26:58:05:02:64:D6:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/440F6B35B30CFEEB3F2B22851A2658050264D69E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:63:e6:8d:9f:da:24:a7:6a:14:98:1c:51:0b:ca:80:68:db:
         bc:2a:79:2b:42:be:d9:3e:c4:e8:27:c2:b9:42:26:d1:59:1e:
         20:4d:ab:a9:97:16:70:cf:56:89:75:02:4b:8b:76:cc:ec:f6:
         80:76:83:7b:90:ed:ea:e0:0c:d7:db:a4:3c:18:4c:89:e1:6e:
         8b:97:bb:ae:43:1c:93:e6:04:90:19:90:de:8c:e8:97:2b:ee:
         18:fd:11:62:ba:27:5e:2f:fc:06:03:dc:11:c1:ad:a4:07:8b:
         0a:4a:cd:86:e4:7e:8f:30:f8:83:be:91:3c:ac:87:a5:7a:06:
         71:3e:f0:e4:6b:25:a4:ad:34:05:9d:dc:29:7f:a5:24:48:c2:
         ee:75:3d:f1:63:34:19:e3:67:78:d0:ab:0d:e9:d2:dd:47:90:
         9a:cd:00:ba:90:96:ce:81:96:0e:59:54:77:e7:ea:1f:05:56:
         2c:60:ad:c3:0e:11:6f:c4:34:6d:f8:bf:80:27:fe:65:89:96:
         a7:ae:99:93:33:34:db:ab:44:9f:35:69:9e:a6:82:e8:24:a7:
         1c:ff:75:a3:62:be:cf:33:da:39:c5:ee:9c:e2:06:ae:1b:b9:
         83:52:bd:0c:ac:fe:55:ba:be:44:c0:b0:ec:7e:5c:df:58:e4:
         e0:6e:ce:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:27 2026 by rpki-client