Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft
File:                     E23AA0021573342645A2DFB669071A3FC460F128.mft (raw, json)
Hash identifier:          svAeRjBda7i+rxRCALb9GNxWHpZYljyMJkwySAWNe+c=
Subject key identifier:   47:58:C2:FF:87:39:4A:E1:75:6B:41:7C:51:00:47:F6:FA:23:46:12
Authority key identifier: E2:3A:A0:02:15:73:34:26:45:A2:DF:B6:69:07:1A:3F:C4:60:F1:28
Certificate issuer:       /CN=E23AA0021573342645A2DFB669071A3FC460F128
Certificate serial:       082184A4F7D4D35A307ABCE351748AEBBBE878ED
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft
Manifest number:          3F
Signing time:             Wed 17 Jun 2026 07:52:20 +0000
Manifest this update:     Wed 17 Jun 2026 07:47:20 +0000
Manifest next update:     Thu 18 Jun 2026 10:47:20 +0000
Files and hashes:         1: E23AA0021573342645A2DFB669071A3FC460F128.crl (hash: ivZMkZG/3k1Pa4RVDdlbHj/fm+FN1n5oObpYmSgT50Q=)
                          2: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: ehJTG/Z8MCWRpYE7Mv6MPXlKzKRx5WpLNTB9Vc1HLns=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.crl
                          rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:21:84:a4:f7:d4:d3:5a:30:7a:bc:e3:51:74:8a:eb:bb:e8:78:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E23AA0021573342645A2DFB669071A3FC460F128
        Validity
            Not Before: Jun 17 07:47:20 2026 GMT
            Not After : Jun 18 10:47:20 2026 GMT
        Subject: CN=4758C2FF87394AE1756B417C510047F6FA234612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:ba:58:13:8c:b5:b5:1f:11:67:5c:f6:ca:
                    d9:23:9b:b6:76:6a:c7:6e:f5:1f:56:53:0b:48:8a:
                    e4:fa:64:a4:90:ca:87:85:5d:3f:31:3c:17:36:bb:
                    14:d0:4d:54:b2:b8:7f:5d:94:8c:ab:7f:5f:7b:0e:
                    6a:ea:49:b7:82:ad:29:9e:8b:de:d9:3d:10:5e:f1:
                    79:0d:da:c5:53:07:07:e5:bf:a6:e1:04:38:a2:a4:
                    4f:a0:20:66:3b:fe:fc:0a:f1:c1:07:82:b3:2b:77:
                    c8:ec:d8:a7:24:7d:dd:0e:77:83:9d:c7:06:7c:91:
                    f4:c7:72:86:e1:b8:0a:d4:f1:ad:dd:a8:4a:cb:83:
                    02:7f:66:48:65:d1:4c:1b:40:5b:3f:09:50:7d:cc:
                    a2:a6:c6:19:bf:92:55:d2:35:05:72:25:2d:d8:84:
                    46:5c:fa:ec:49:96:ab:eb:96:27:63:89:2e:2b:d0:
                    27:2b:72:4b:79:de:78:cf:5b:7a:cd:ed:4a:43:58:
                    c1:85:67:2d:9f:f8:21:6a:0c:60:a5:a1:8f:d0:a1:
                    91:28:09:c5:c0:de:73:3f:47:2a:2c:f1:db:58:73:
                    a1:3f:45:90:b3:8e:56:19:0c:27:11:ed:69:d4:cb:
                    58:e5:61:f3:b9:bc:9b:37:3b:2f:0c:9a:ad:9b:61:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:58:C2:FF:87:39:4A:E1:75:6B:41:7C:51:00:47:F6:FA:23:46:12
            X509v3 Authority Key Identifier:
                keyid:E2:3A:A0:02:15:73:34:26:45:A2:DF:B6:69:07:1A:3F:C4:60:F1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:da:13:6f:c0:eb:98:13:e7:86:94:4c:c4:71:2b:66:3b:db:
         5c:9a:a9:2e:2d:3b:97:15:5a:a4:dd:27:a2:46:11:01:b0:d2:
         74:b8:6a:35:00:7d:fc:e0:84:ac:f4:88:b2:f6:28:a8:98:3e:
         e8:7a:fb:4a:35:6a:1e:a2:2e:7e:2a:89:70:73:7e:a6:a4:ad:
         50:34:6c:06:85:bd:ab:71:22:9d:7e:de:bf:09:e1:17:0b:f0:
         55:73:81:33:d6:c5:11:36:38:1d:26:4b:d4:85:3a:4d:ef:cb:
         42:6f:31:de:dc:6a:7e:58:2c:a5:26:d6:96:69:a6:11:11:74:
         c2:69:f2:e5:3a:aa:e5:90:7c:1f:69:06:28:a4:87:cc:fa:18:
         3e:49:2d:97:f0:a5:90:e1:c5:eb:f3:59:1c:b0:00:fd:e4:7a:
         e6:95:c0:13:15:65:d5:e1:f6:d5:bf:e3:5a:7e:af:b8:86:c7:
         17:19:61:dc:52:3f:84:a5:76:85:05:bc:68:ec:3f:f2:48:2a:
         81:fa:f6:e1:ef:c8:00:ae:49:49:68:52:ad:2c:60:11:77:05:
         69:df:b8:e1:c5:d1:ef:8f:5e:17:db:0f:ab:77:0d:4b:95:ea:
         1f:bb:a3:e3:d4:2c:69:31:2c:d2:4a:d2:e6:59:d0:fe:f6:b8:
         6d:4f:53:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:39 2026 by rpki-client