Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft
File:                     A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft (raw, json)
Hash identifier:          /Ayfjl7TY01GhJzdokh/AmB5SHEa5TZ4j/K/chMYJnY=
Subject key identifier:   5D:75:06:7B:1C:D4:EA:B3:8D:AB:72:8E:7F:29:53:96:41:B7:FD:13
Authority key identifier: A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE
Certificate issuer:       /CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE
Certificate serial:       385F486029D68D427AD0EE12D62ED6B039F30F8B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 22:26:20 +0000
Manifest this update:     Tue 16 Jun 2026 22:21:20 +0000
Manifest next update:     Thu 18 Jun 2026 00:28:20 +0000
Files and hashes:         1: A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl (hash: yiEk0GBwf2Xhe3spyNZQTl6KcZd3gFTdZnc0fibX4qE=)
                          2: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: ICLSFvgSRRkmlVey9F0aZzpRAm3MpVToF57RNv3826o=)
                          3: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: XjEh4h/m9O4zav0oJbGUt3KwmUOKS7DwqIAy5aQ35aY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl
                          rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 00:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5f:48:60:29:d6:8d:42:7a:d0:ee:12:d6:2e:d6:b0:39:f3:0f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE
        Validity
            Not Before: Jun 16 22:21:20 2026 GMT
            Not After : Jun 18 00:28:20 2026 GMT
        Subject: CN=5D75067B1CD4EAB38DAB728E7F29539641B7FD13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:11:7e:e2:d8:7e:e7:5f:67:a3:f4:87:c9:6c:
                    97:f2:f6:ac:4c:38:d3:b2:f3:2a:b0:b8:7b:5e:01:
                    4a:18:7b:9f:21:5d:58:24:42:75:2c:64:e8:fd:8e:
                    fc:86:73:28:b2:2d:79:fe:71:91:fe:cf:0b:e5:a2:
                    a0:45:d3:85:74:37:5b:5d:e8:dc:fc:b6:8d:23:fa:
                    c2:63:04:61:2f:cf:dc:37:59:25:a6:d2:e5:1f:1d:
                    76:1b:ec:17:23:2e:0d:9a:e0:60:85:26:7f:c5:ea:
                    1f:10:f5:b6:09:a2:77:ed:f2:29:4d:5e:bc:d8:3c:
                    96:64:3e:3c:87:dc:20:18:6c:36:bd:65:68:ba:36:
                    32:cf:5f:43:67:1d:b5:9d:df:39:9d:0a:23:19:76:
                    2c:68:6f:c4:12:30:b3:5e:6e:10:f3:75:73:64:07:
                    66:52:5b:6a:f7:ff:7e:71:b9:18:a5:23:86:81:d0:
                    d0:ca:0d:88:90:28:54:65:d2:a2:80:69:18:c0:4e:
                    3f:f5:20:b8:54:90:86:06:ef:c8:48:f0:d0:aa:8d:
                    9d:42:c3:fe:0e:dc:10:a9:80:3d:b2:ad:b0:c1:e8:
                    6f:ee:dc:63:45:9b:15:c9:0e:a5:62:58:b3:58:31:
                    64:d6:7e:01:85:db:f1:69:c7:4b:2f:3a:16:96:54:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:75:06:7B:1C:D4:EA:B3:8D:AB:72:8E:7F:29:53:96:41:B7:FD:13
            X509v3 Authority Key Identifier:
                keyid:A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:02:06:4a:bb:2c:03:bc:b1:48:d9:5d:8f:8e:19:55:d2:41:
         7d:c3:59:63:b0:ed:ac:ae:77:f8:74:3a:b4:f7:48:b7:d4:34:
         58:8a:60:68:e7:8e:57:06:15:fd:76:2b:fb:96:c4:55:44:66:
         48:89:7f:c9:5b:3c:f6:53:09:31:1e:c5:50:11:1c:8d:fa:25:
         73:8d:79:43:30:51:23:78:e3:85:2e:fd:4f:9f:3b:37:57:f2:
         e5:42:bf:64:2d:c2:20:2c:a9:01:3a:a3:fd:8e:4a:6d:8c:bb:
         61:43:28:cb:e9:6d:b2:f3:c8:d1:0b:65:c9:37:20:e1:ec:e4:
         20:52:19:78:88:ce:b5:3a:b8:87:9d:85:72:da:86:1c:c6:c9:
         39:18:b3:5e:45:fc:87:0b:48:34:11:9c:ad:69:43:1a:ae:2d:
         cf:e3:a5:e4:9b:9c:f1:c5:b3:91:98:d1:d1:df:06:5b:8a:d9:
         3d:a1:46:0c:a3:e9:28:a9:cc:03:64:6a:c5:ab:6c:ac:f7:aa:
         ea:6d:e8:21:9f:ab:81:37:5e:75:51:96:b4:5a:f6:f8:57:f2:
         f4:64:24:53:39:47:91:1a:4a:ec:26:fc:e3:2c:43:45:eb:79:
         68:0e:19:a4:5c:1d:4e:d7:ed:13:2b:ee:ef:d9:34:7b:f6:3c:
         b6:ed:73:78
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOF9IYCnWjUJ60O4S1i7WsDnzD4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFFOTdDOERDNTNFRDRCOTRGMDYyMDdEQUUyQjNCMjFC
QTA4RDNGRTAeFw0yNjA2MTYyMjIxMjBaFw0yNjA2MTgwMDI4MjBaMDMxMTAvBgNV
BAMTKDVENzUwNjdCMUNENEVBQjM4REFCNzI4RTdGMjk1Mzk2NDFCN0ZEMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXEX7i2H7nX2ej9IfJbJfy9qxM
ONOy8yqwuHteAUoYe58hXVgkQnUsZOj9jvyGcyiyLXn+cZH+zwvloqBF04V0N1td
6Nz8to0j+sJjBGEvz9w3WSWm0uUfHXYb7BcjLg2a4GCFJn/F6h8Q9bYJonft8ilN
XrzYPJZkPjyH3CAYbDa9ZWi6NjLPX0NnHbWd3zmdCiMZdixob8QSMLNebhDzdXNk
B2ZSW2r3/35xuRilI4aB0NDKDYiQKFRl0qKAaRjATj/1ILhUkIYG78hI8NCqjZ1C
w/4O3BCpgD2yrbDB6G/u3GNFmxXJDqViWLNYMWTWfgGF2/Fpx0svOhaWVJs1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUXXUGexzU6rONq3KOfylTlkG3/RMwHwYDVR0j
BBgwFoAUoel8jcU+1LlPBiB9ris7IboI0/4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjA1MGRjYzMtODRkZC00NTk1LWJhMmMtYmM2OTk4OTY5MmYxLzAvQTFFOTdDOERD
NTNFRDRCOTRGMDYyMDdEQUUyQjNCMjFCQTA4RDNGRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BMUU5N0M4REM1M0VENEI5NEYwNjIwN0RBRTJCM0IyMUJBMDhE
M0ZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh
MmMtYmM2OTk4OTY5MmYxLzAvQTFFOTdDOERDNTNFRDRCOTRGMDYyMDdEQUUyQjNC
MjFCQTA4RDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEoCBkq7LAO8sUjZXY+OGVXSQX3DWWOw7ayu
d/h0OrT3SLfUNFiKYGjnjlcGFf12K/uWxFVEZkiJf8lbPPZTCTEexVARHI36JXON
eUMwUSN444Uu/U+fOzdX8uVCv2QtwiAsqQE6o/2OSm2Mu2FDKMvpbbLzyNELZck3
IOHs5CBSGXiIzrU6uIedhXLahhzGyTkYs15F/IcLSDQRnK1pQxquLc/jpeSbnPHF
s5GY0dHfBluK2T2hRgyj6SipzANkasWrbKz3qupt6CGfq4E3XnVRlrRa9vhX8vRk
JFM5R5EaSuwm/OMsQ0XreWgOGaRcHU7X7RMr7u/ZNHv2PLbtc3g=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:43:26 2026 by rpki-client