Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft
File:                     7445E0A188A89312C5454C032583053AC7510B2E.mft (raw, json)
Hash identifier:          V0UZ0r2qz16eb0lNXrpMP/BgNwO1qMVQqMnIIi5OSHw=
Subject key identifier:   5C:DD:1D:CE:36:A2:A0:03:D7:DA:EC:42:54:5A:35:2A:B3:3E:43:22
Authority key identifier: 74:45:E0:A1:88:A8:93:12:C5:45:4C:03:25:83:05:3A:C7:51:0B:2E
Certificate issuer:       /CN=7445E0A188A89312C5454C032583053AC7510B2E
Certificate serial:       2987C2B42E8E37EA594633AC05FFABE61BCED065
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7445E0A188A89312C5454C032583053AC7510B2E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 04:17:59 +0000
Manifest this update:     Wed 17 Jun 2026 04:12:59 +0000
Manifest next update:     Thu 18 Jun 2026 07:10:59 +0000
Files and hashes:         1: 7445E0A188A89312C5454C032583053AC7510B2E.crl (hash: MwX+ogpUj02khhUSJNULaHowHIrTY5+9XFasbj7HR1Y=)
                          2: 3130332e3138392e3235302e302f32332d3234203d3e20313530323437.roa (hash: NNCIDLB8B5pgD36GvRtcI/+uQ+zL1+/NCHRLyabCKqA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.crl
                          rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7445E0A188A89312C5454C032583053AC7510B2E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:87:c2:b4:2e:8e:37:ea:59:46:33:ac:05:ff:ab:e6:1b:ce:d0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7445E0A188A89312C5454C032583053AC7510B2E
        Validity
            Not Before: Jun 17 04:12:59 2026 GMT
            Not After : Jun 18 07:10:59 2026 GMT
        Subject: CN=5CDD1DCE36A2A003D7DAEC42545A352AB33E4322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:17:31:67:a7:e9:02:f7:19:8c:bc:39:81:a4:
                    3c:64:52:90:b6:bf:b2:38:28:8a:42:97:37:4e:95:
                    b9:8b:72:cc:21:af:cf:ab:f9:42:0d:8d:57:75:2f:
                    9b:6c:47:0f:e8:90:28:93:f1:0f:77:30:43:41:cf:
                    5a:86:8a:b3:64:43:b9:d4:01:59:66:0d:2c:00:f8:
                    2a:e4:41:a2:96:c3:cb:0b:b7:d4:34:98:d0:82:3f:
                    47:cc:6d:56:8d:8c:28:18:9f:3a:1e:36:77:81:15:
                    19:ee:08:b9:59:27:12:6e:c9:b5:3b:fd:e6:68:c3:
                    0d:1b:d3:dd:71:3e:14:dc:de:21:59:05:11:fe:76:
                    d3:65:81:68:ab:c0:b4:4e:35:d4:c7:4e:fe:06:af:
                    d9:9d:f6:25:25:8d:67:06:85:92:ba:e1:f8:c4:32:
                    4a:f8:99:d9:31:bc:c6:18:57:65:38:6c:83:b3:a5:
                    c1:08:60:f1:64:25:7b:d5:87:6c:a8:c5:76:6c:7c:
                    7e:43:d5:ee:0f:ff:04:5e:b6:66:a0:8e:ef:6a:f1:
                    93:20:a1:74:94:36:f0:79:80:74:7b:61:9d:4f:1b:
                    01:c3:79:b6:30:dd:b3:82:34:1d:0e:32:9a:14:bc:
                    ba:5c:e3:7e:ab:43:16:57:fc:98:44:aa:6f:a4:8c:
                    43:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DD:1D:CE:36:A2:A0:03:D7:DA:EC:42:54:5A:35:2A:B3:3E:43:22
            X509v3 Authority Key Identifier:
                keyid:74:45:E0:A1:88:A8:93:12:C5:45:4C:03:25:83:05:3A:C7:51:0B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7445E0A188A89312C5454C032583053AC7510B2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:bc:32:16:d4:11:ba:48:83:3f:c6:24:e6:01:4b:61:44:19:
         1e:be:2b:d6:2e:87:a6:3c:6c:27:e2:63:6e:8a:e0:3c:0a:39:
         3b:e0:26:8a:80:74:96:5d:d0:99:e7:25:98:e9:02:fd:26:90:
         6a:95:22:1b:b3:75:12:79:47:59:28:fe:71:f0:6c:d4:c0:c7:
         99:b0:c8:0a:c2:1c:19:b0:36:05:d2:64:04:c3:f1:2c:13:9a:
         53:1f:a0:2e:b9:c8:a6:7c:b5:95:0a:fd:06:24:1b:21:d2:14:
         cc:f1:45:e6:cd:35:59:43:6d:e4:6a:ed:d9:83:9c:d1:c5:95:
         d5:3f:04:6e:6c:bc:4b:0a:b5:85:ff:d2:8c:76:a3:04:ba:49:
         9e:bd:20:03:41:4c:2e:ac:4f:7a:db:2a:a3:18:f1:25:d5:96:
         d8:5f:8b:fc:c7:8a:56:9c:c0:dc:03:7d:0c:f3:57:07:f0:0c:
         52:37:ac:93:46:28:c0:b9:41:da:ee:75:62:c8:cf:67:fc:b0:
         36:84:ca:d5:cf:54:27:12:6c:27:bd:00:0b:d9:10:e0:05:b5:
         0d:4f:82:4a:9c:55:00:19:aa:b3:66:9b:ca:b5:49:ca:46:cb:
         ea:3b:f9:f5:91:56:48:85:d0:91:fe:9f:40:fb:67:c6:42:0b:
         88:fc:47:c3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKYfCtC6ON+pZRjOsBf+r5hvO0GUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NUUwQTE4OEE4OTMxMkM1NDU0QzAzMjU4MzA1M0FD
NzUxMEIyRTAeFw0yNjA2MTcwNDEyNTlaFw0yNjA2MTgwNzEwNTlaMDMxMTAvBgNV
BAMTKDVDREQxRENFMzZBMkEwMDNEN0RBRUM0MjU0NUEzNTJBQjMzRTQzMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTFzFnp+kC9xmMvDmBpDxkUpC2
v7I4KIpClzdOlbmLcswhr8+r+UINjVd1L5tsRw/okCiT8Q93MENBz1qGirNkQ7nU
AVlmDSwA+CrkQaKWw8sLt9Q0mNCCP0fMbVaNjCgYnzoeNneBFRnuCLlZJxJuybU7
/eZoww0b091xPhTc3iFZBRH+dtNlgWirwLRONdTHTv4Gr9md9iUljWcGhZK64fjE
Mkr4mdkxvMYYV2U4bIOzpcEIYPFkJXvVh2yoxXZsfH5D1e4P/wRetmagju9q8ZMg
oXSUNvB5gHR7YZ1PGwHDebYw3bOCNB0OMpoUvLpc436rQxZX/JhEqm+kjEMvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUXN0dzjaioAPX2uxCVFo1KrM+QyIwHwYDVR0j
BBgwFoAUdEXgoYiokxLFRUwDJYMFOsdRCy4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjIxMTI2ZDMtMTNiZS00NTA4LWI5N2QtMTNmZTY1YTViNGQ2LzAvNzQ0NUUwQTE4
OEE4OTMxMkM1NDU0QzAzMjU4MzA1M0FDNzUxMEIyRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83NDQ1RTBBMTg4QTg5MzEyQzU0NTRDMDMyNTgzMDUzQUM3NTEw
QjJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjIxMTI2ZDMtMTNiZS00NTA4LWI5
N2QtMTNmZTY1YTViNGQ2LzAvNzQ0NUUwQTE4OEE4OTMxMkM1NDU0QzAzMjU4MzA1
M0FDNzUxMEIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKG8MhbUEbpIgz/GJOYBS2FEGR6+K9Yuh6Y8
bCfiY26K4DwKOTvgJoqAdJZd0JnnJZjpAv0mkGqVIhuzdRJ5R1ko/nHwbNTAx5mw
yArCHBmwNgXSZATD8SwTmlMfoC65yKZ8tZUK/QYkGyHSFMzxRebNNVlDbeRq7dmD
nNHFldU/BG5svEsKtYX/0ox2owS6SZ69IANBTC6sT3rbKqMY8SXVlthfi/zHilac
wNwDfQzzVwfwDFI3rJNGKMC5QdrudWLIz2f8sDaEytXPVCcSbCe9AAvZEOAFtQ1P
gkqcVQAZqrNmm8q1ScpGy+o7+fWRVkiF0JH+n0D7Z8ZCC4j8R8M=
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:42:36 2026 by rpki-client