Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft
File:                     884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft (raw, json)
Hash identifier:          NO9aACeIDWG8K//CCKRLwOMReiBsb2Beosa9BI2kNco=
Subject key identifier:   89:18:3E:E3:56:08:C3:69:C1:CA:BE:F1:03:4D:18:F3:7D:E0:17:FD
Authority key identifier: 88:4E:23:65:E4:B8:AF:05:C4:4B:D6:49:D5:B4:29:68:E4:8B:8A:97
Certificate issuer:       /CN=884E2365E4B8AF05C44BD649D5B42968E48B8A97
Certificate serial:       0B2331F83AE539DCAD4A2E7A6F7084885FE1FC4D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 18:21:44 +0000
Manifest this update:     Sat 13 Jun 2026 18:16:44 +0000
Manifest next update:     Sun 14 Jun 2026 20:07:44 +0000
Files and hashes:         1: 884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl (hash: YlFPxwi35oRR9UNKjxgEJqZhK9X5C+7JVCauLNSmtEw=)
                          2: 3130332e31312e32322e302f32332d3234203d3e203538333930.roa (hash: 81p6B3Tk5Za1NJUs2uCoetypfDjnwptAX9451IsBrBE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl
                          rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:23:31:f8:3a:e5:39:dc:ad:4a:2e:7a:6f:70:84:88:5f:e1:fc:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884E2365E4B8AF05C44BD649D5B42968E48B8A97
        Validity
            Not Before: Jun 13 18:16:44 2026 GMT
            Not After : Jun 14 20:07:44 2026 GMT
        Subject: CN=89183EE35608C369C1CABEF1034D18F37DE017FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:22:16:20:8e:55:50:51:5c:ef:bb:e5:09:35:
                    2d:a4:59:e1:f9:ce:d2:ba:a6:8b:84:d5:a8:21:f5:
                    fe:40:fd:95:ff:89:24:00:be:ae:c2:8a:00:4e:3b:
                    a7:06:a3:b1:d9:e0:d9:4e:de:f1:45:a0:d1:36:bd:
                    2f:54:df:2c:f8:2b:50:94:f7:64:a2:c8:51:16:ea:
                    81:6e:35:f3:a6:74:5e:56:93:d7:4e:93:ca:e9:de:
                    08:20:1f:be:24:56:0c:46:63:ba:47:4c:e8:4d:0f:
                    8c:5c:54:83:85:b4:ef:34:01:0a:91:34:1b:e4:b7:
                    ed:2b:30:34:96:61:4d:6a:1e:c7:a6:74:df:b2:0f:
                    c6:97:54:2f:09:4c:58:35:c4:c2:81:1e:93:93:f2:
                    18:77:fa:17:5c:9c:0a:3c:d0:dd:14:69:cf:f6:e9:
                    3a:9f:22:9b:d6:46:b1:dd:25:32:87:9b:ce:4c:54:
                    e0:90:d8:1d:50:4a:be:4d:c3:c2:32:5c:4b:ac:dd:
                    c8:67:c7:01:45:9f:d5:7f:37:63:f8:c8:4c:19:8d:
                    ec:07:05:a9:db:81:0f:57:3f:2b:26:4d:de:06:19:
                    af:27:46:98:f7:49:10:b4:33:91:17:65:d7:ed:16:
                    7f:cd:ac:2a:d9:80:4d:22:29:6c:15:d2:7c:f1:4c:
                    14:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:18:3E:E3:56:08:C3:69:C1:CA:BE:F1:03:4D:18:F3:7D:E0:17:FD
            X509v3 Authority Key Identifier:
                keyid:88:4E:23:65:E4:B8:AF:05:C4:4B:D6:49:D5:B4:29:68:E4:8B:8A:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:be:02:4a:78:ea:66:5c:71:a5:90:ab:a2:63:19:47:cc:1d:
         1a:3f:4a:98:fe:20:50:5b:e8:44:8c:cd:43:3a:f1:8d:f9:73:
         99:d4:61:53:d7:02:2b:e5:43:26:11:93:e0:fb:3c:d6:d1:05:
         bc:1f:80:49:67:41:f0:f3:3a:3f:a9:49:de:f7:65:15:13:20:
         fe:90:1b:95:c6:ac:ea:21:77:1d:1b:b8:a3:54:d2:4d:26:27:
         60:18:09:f8:f6:9b:4d:61:99:43:65:5c:29:e6:ca:5a:35:31:
         79:1a:8c:5d:ac:f3:a5:63:26:e5:29:17:49:e8:35:65:06:d9:
         1c:17:27:64:81:eb:8b:19:ec:2b:df:58:7a:9c:57:1f:1e:d6:
         07:9d:91:46:1e:c7:b2:72:7a:d3:dc:16:48:f1:31:0d:6d:84:
         39:1b:65:4b:fc:ac:c5:e5:63:a5:7c:b5:6c:bf:42:5c:5c:cc:
         e4:19:8a:36:ec:74:03:3c:a3:93:aa:65:e8:02:f4:0d:63:e1:
         04:41:82:bc:a6:2b:9a:71:8a:89:ad:ee:6c:26:38:d5:3d:21:
         56:04:3d:7d:cf:2f:be:71:e8:99:7c:c8:7f:70:fd:64:6c:cc:
         a8:d2:97:20:1c:cb:5b:f6:d6:42:85:10:49:83:d9:75:66:ed:
         9c:dc:78:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:05:45 2026 by rpki-client