Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft
File:                     677938123D24C0A27D10E007C474D99FC455C86B.mft (raw, json)
Hash identifier:          5fqj81PAiqQ0Lyr9EQPyEvtl/6H2nKjJtvA6x/Pa4pg=
Subject key identifier:   1C:38:4D:BB:53:2C:37:9C:95:34:2D:44:02:C9:C7:0B:E1:3B:F6:B7
Authority key identifier: 67:79:38:12:3D:24:C0:A2:7D:10:E0:07:C4:74:D9:9F:C4:55:C8:6B
Certificate issuer:       /CN=677938123D24C0A27D10E007C474D99FC455C86B
Certificate serial:       1E9E5C206720162B93C3BB6A1B2CBF051ADD30F5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/677938123D24C0A27D10E007C474D99FC455C86B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft
Manifest number:          39
Signing time:             Fri 12 Jun 2026 19:54:27 +0000
Manifest this update:     Fri 12 Jun 2026 19:49:27 +0000
Manifest next update:     Sat 13 Jun 2026 22:55:27 +0000
Files and hashes:         1: 677938123D24C0A27D10E007C474D99FC455C86B.crl (hash: 8InZEXkh8DVNpEkZKvARkvRPr9yqRkC8JZdV8Wl94uM=)
                          2: 3135372e32302e32342e302f32342d3234203d3e203633353036.roa (hash: 4Cc4QPAN4qbF7Ai91llZsgvFRMCExHlGGbgV9qW0tuM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.crl
                          rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/677938123D24C0A27D10E007C474D99FC455C86B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 21:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9e:5c:20:67:20:16:2b:93:c3:bb:6a:1b:2c:bf:05:1a:dd:30:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677938123D24C0A27D10E007C474D99FC455C86B
        Validity
            Not Before: Jun 12 19:49:27 2026 GMT
            Not After : Jun 13 22:55:27 2026 GMT
        Subject: CN=1C384DBB532C379C95342D4402C9C70BE13BF6B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:39:24:bf:63:24:56:a5:76:03:de:3a:f6:78:
                    f0:d5:f4:24:88:b4:46:09:73:c2:8c:0e:bb:0e:6c:
                    4d:8d:a3:62:32:97:9a:9d:be:ec:5d:d7:a2:ab:7a:
                    1c:62:d1:49:e2:5b:9f:d3:32:22:4d:df:93:73:98:
                    d0:a7:e0:fe:eb:a1:28:3e:ef:1a:9e:11:b0:b3:c8:
                    c4:fd:17:2d:08:ef:7e:6f:c7:c2:01:c8:b4:84:38:
                    4a:20:30:2b:d0:5d:40:04:5b:5c:74:4c:67:4d:aa:
                    30:25:81:c1:d8:ea:72:90:9a:fc:05:9f:f3:b4:ab:
                    81:a8:20:35:90:0a:43:6f:d4:be:f0:6b:93:b7:52:
                    44:6a:0b:3a:52:c9:ff:13:9c:a5:4f:4d:bc:e9:52:
                    54:83:07:b2:3c:ac:b7:11:12:71:9a:1e:de:44:3c:
                    1b:a8:eb:a2:79:48:4b:ed:6e:9c:d5:fa:da:13:b1:
                    7f:e9:54:b5:ca:75:7f:ab:c5:26:10:38:1a:09:a8:
                    f6:9c:56:4b:c8:b4:d9:53:f4:97:53:90:0e:b3:13:
                    84:71:4e:29:36:8b:83:c7:af:f7:26:65:fa:98:b3:
                    fc:65:29:ef:52:1b:a2:f8:ca:9c:b8:30:81:6c:ff:
                    50:58:e2:23:d7:2c:69:9c:6c:29:a9:05:c1:b2:6c:
                    c7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:38:4D:BB:53:2C:37:9C:95:34:2D:44:02:C9:C7:0B:E1:3B:F6:B7
            X509v3 Authority Key Identifier:
                keyid:67:79:38:12:3D:24:C0:A2:7D:10:E0:07:C4:74:D9:9F:C4:55:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/677938123D24C0A27D10E007C474D99FC455C86B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:95:b5:48:5b:a7:64:8c:91:73:4e:87:b0:d0:1b:c5:44:68:
         64:46:8d:b3:60:b0:4d:3b:57:46:46:93:99:e8:ed:ce:e6:ce:
         5a:43:03:ee:27:44:89:04:23:cb:89:43:f0:4f:61:9e:2c:42:
         23:0d:61:3a:fd:93:f8:fd:d9:f7:f0:0c:5d:f5:b9:ee:83:4c:
         94:2d:f8:ca:23:cc:37:e8:e0:ea:46:58:ce:f7:71:b1:b7:07:
         07:0e:e5:d2:2e:83:08:0b:e5:c4:aa:38:14:a4:85:d0:f2:d7:
         34:9d:aa:a1:a2:7a:70:9e:52:48:c2:ba:b9:bd:fe:fe:2f:fe:
         63:90:4e:14:4d:f2:86:33:91:29:3f:64:d0:89:b7:71:09:2a:
         85:6a:d4:e3:38:0b:5d:c8:66:6c:68:a0:77:93:81:a2:73:6c:
         31:32:9a:ed:36:a0:92:b8:33:7f:a7:5c:22:b3:c9:8d:76:72:
         b0:c2:96:27:bb:6b:94:f5:5b:4e:83:e8:4d:84:f0:ee:ed:d2:
         5f:8a:d2:9b:9c:cb:5e:de:56:69:e2:89:e6:9a:c4:d2:31:85:
         64:11:11:16:e4:6e:63:48:be:cd:de:db:96:a1:50:91:36:52:
         59:54:7c:9b:e3:c1:85:24:7c:14:e2:ed:1b:39:ec:18:5f:6e:
         06:45:34:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:33:52 2026 by rpki-client