Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft
File:                     083DF9FCF3773A042D5A64A6401BE726552524C0.mft (raw, json)
Hash identifier:          GcTHMNs2tiAEQMNzujjjGpvbQumDMrPrhbdoFsJdTKQ=
Subject key identifier:   20:5E:88:06:43:D3:10:EC:B9:18:56:E6:1C:F1:8E:39:93:B4:1D:7F
Authority key identifier: 08:3D:F9:FC:F3:77:3A:04:2D:5A:64:A6:40:1B:E7:26:55:25:24:C0
Certificate issuer:       /CN=083DF9FCF3773A042D5A64A6401BE726552524C0
Certificate serial:       64A18B5AD186BED40933C6A7C0690548BD67C930
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft
Manifest number:          3C
Signing time:             Wed 17 Jun 2026 04:38:32 +0000
Manifest this update:     Wed 17 Jun 2026 04:33:32 +0000
Manifest next update:     Thu 18 Jun 2026 05:25:32 +0000
Files and hashes:         1: 083DF9FCF3773A042D5A64A6401BE726552524C0.crl (hash: NcBmpbYm0xhwKOACEJzqEMGUpcRsKSh5q8ch97Tu2WY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.crl
                          rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a1:8b:5a:d1:86:be:d4:09:33:c6:a7:c0:69:05:48:bd:67:c9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=083DF9FCF3773A042D5A64A6401BE726552524C0
        Validity
            Not Before: Jun 17 04:33:32 2026 GMT
            Not After : Jun 18 05:25:32 2026 GMT
        Subject: CN=205E880643D310ECB91856E61CF18E3993B41D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b5:8e:cf:a8:6d:c8:97:59:fa:0b:5b:bb:64:
                    bf:1f:8a:5b:ed:fa:7a:29:e6:7d:41:b7:6b:c6:9a:
                    45:78:02:8a:89:85:9b:10:b2:08:6d:df:64:48:79:
                    15:b6:0c:b6:2d:f6:00:68:f9:6e:8b:98:29:5e:32:
                    d9:ae:59:53:b7:eb:ff:d8:56:a2:20:72:57:ec:fe:
                    1c:e4:97:1e:a7:06:5e:a0:b5:31:9c:9f:ec:d9:9b:
                    f8:11:98:e9:d4:58:fc:11:ab:dd:08:bf:c5:1a:3d:
                    d9:2f:7f:23:fb:8d:55:9b:71:a9:85:f5:e5:ea:18:
                    cb:58:20:1a:5e:48:be:33:c4:6e:7f:1d:ef:ad:20:
                    93:60:71:03:f1:6e:de:5b:2b:98:a2:94:48:29:85:
                    d9:9f:6e:16:11:b1:45:7c:e7:16:7f:9c:1a:c5:42:
                    7c:98:f4:04:a2:06:5d:e4:ab:75:d3:a4:bf:4f:d5:
                    42:54:ea:33:04:2c:9a:d6:43:3b:23:7e:52:3f:42:
                    f3:31:a1:eb:d8:80:d5:ca:7f:27:06:5f:1a:36:db:
                    9d:0b:65:80:0a:00:23:90:dd:92:22:27:18:6a:2c:
                    0b:c5:ac:a2:8d:e9:50:a9:f9:54:d4:f0:aa:ac:69:
                    fd:98:db:d3:cd:38:aa:6d:96:ef:31:47:8c:64:d4:
                    d9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5E:88:06:43:D3:10:EC:B9:18:56:E6:1C:F1:8E:39:93:B4:1D:7F
            X509v3 Authority Key Identifier:
                keyid:08:3D:F9:FC:F3:77:3A:04:2D:5A:64:A6:40:1B:E7:26:55:25:24:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:40:24:99:7e:fb:a3:48:d9:26:63:be:3e:be:eb:7a:c9:6d:
         ee:3f:ac:72:4d:bf:56:cc:92:0f:dd:1a:5f:40:85:77:6d:f0:
         e7:ed:2b:90:1d:59:96:d0:ab:88:aa:dd:98:af:93:92:43:ea:
         f4:72:96:d3:27:39:5c:25:60:e6:82:cb:d4:e5:32:37:af:a9:
         f8:88:df:34:6f:95:e1:cb:a8:2d:0a:21:a1:ed:96:a5:c8:87:
         6d:21:a7:2c:b7:4e:f3:2f:61:c4:1b:68:d2:6d:83:83:5d:be:
         ce:0b:60:e6:47:a2:6b:c8:ff:d5:d3:61:ea:bb:65:c1:4c:f2:
         7f:5b:12:3c:87:bd:c4:9a:b4:be:0d:c6:f1:34:7c:9f:2d:56:
         48:ad:3d:fd:59:45:0b:75:b1:71:7c:96:c2:43:0d:29:11:2c:
         7c:d7:ec:24:d2:c5:d4:73:45:b0:90:b2:e9:13:04:1a:4c:28:
         d9:5e:af:82:0d:42:8a:0d:ac:6d:5c:5a:0a:f3:01:93:32:76:
         44:5f:c4:b5:19:cf:4f:cd:86:78:79:f7:61:0d:fd:af:3b:ea:
         58:c3:64:74:3f:bd:9b:09:e2:67:82:78:b6:49:22:9c:45:33:
         a2:63:1a:74:ab:a1:28:de:69:cf:d6:0c:19:03:2b:72:fe:e1:
         52:83:14:2e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZKGLWtGGvtQJM8anwGkFSL1nyTAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzREY5RkNGMzc3M0EwNDJENUE2NEE2NDAxQkU3MjY1
NTI1MjRDMDAeFw0yNjA2MTcwNDMzMzJaFw0yNjA2MTgwNTI1MzJaMDMxMTAvBgNV
BAMTKDIwNUU4ODA2NDNEMzEwRUNCOTE4NTZFNjFDRjE4RTM5OTNCNDFEN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCztY7PqG3Il1n6C1u7ZL8filvt
+nop5n1Bt2vGmkV4AoqJhZsQsght32RIeRW2DLYt9gBo+W6LmCleMtmuWVO36//Y
VqIgclfs/hzklx6nBl6gtTGcn+zZm/gRmOnUWPwRq90Iv8UaPdkvfyP7jVWbcamF
9eXqGMtYIBpeSL4zxG5/He+tIJNgcQPxbt5bK5iilEgphdmfbhYRsUV85xZ/nBrF
QnyY9ASiBl3kq3XTpL9P1UJU6jMELJrWQzsjflI/QvMxoevYgNXKfycGXxo2250L
ZYAKACOQ3ZIiJxhqLAvFrKKN6VCp+VTU8Kqsaf2Y29PNOKptlu8xR4xk1NlFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIF6IBkPTEOy5GFbmHPGOOZO0HX8wHwYDVR0j
BBgwFoAUCD35/PN3OgQtWmSmQBvnJlUlJMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjM1MjI1YTYtMDVkMy00NDRjLWJmM2YtMTFlM2VmN2I2YTE1LzAvMDgzREY5RkNG
Mzc3M0EwNDJENUE2NEE2NDAxQkU3MjY1NTI1MjRDMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wODNERjlGQ0YzNzczQTA0MkQ1QTY0QTY0MDFCRTcyNjU1MjUy
NEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm
M2YtMTFlM2VmN2I2YTE1LzAvMDgzREY5RkNGMzc3M0EwNDJENUE2NEE2NDAxQkU3
MjY1NTI1MjRDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFRAJJl++6NI2SZjvj6+63rJbe4/rHJNv1bM
kg/dGl9AhXdt8OftK5AdWZbQq4iq3Zivk5JD6vRyltMnOVwlYOaCy9TlMjevqfiI
3zRvleHLqC0KIaHtlqXIh20hpyy3TvMvYcQbaNJtg4Ndvs4LYOZHomvI/9XTYeq7
ZcFM8n9bEjyHvcSatL4NxvE0fJ8tVkitPf1ZRQt1sXF8lsJDDSkRLHzX7CTSxdRz
RbCQsukTBBpMKNler4INQooNrG1cWgrzAZMydkRfxLUZz0/Nhnh592EN/a876ljD
ZHQ/vZsJ4meCeLZJIpxFM6JjGnSroSjeac/WDBkDK3L+4VKDFC4=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:19 2026 by rpki-client