Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft
File:                     DB23849BCF63AE719E7BE4FE89385D166773A883.mft (raw, json)
Hash identifier:          jDzeBlu7qwKWDewFSCHqAXw77MzOL1ihtVcvgkWe780=
Subject key identifier:   A9:C0:53:29:31:80:76:23:93:9C:C9:E0:73:E0:33:82:DB:70:16:25
Authority key identifier: DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83
Certificate issuer:       /CN=DB23849BCF63AE719E7BE4FE89385D166773A883
Certificate serial:       67597DC4E9AA975C439214CEBE3BACDEDD88789D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 17:50:45 +0000
Manifest this update:     Tue 16 Jun 2026 17:45:45 +0000
Manifest next update:     Wed 17 Jun 2026 18:05:45 +0000
Files and hashes:         1: DB23849BCF63AE719E7BE4FE89385D166773A883.crl (hash: kBB0hibm91oTjm1NOGvevUXR3/OxwTRZk4/IFn2gyig=)
                          2: 3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa (hash: g3WbWI1q18vac55oq8gdpUXBjsp4Aidv1FzJgM9YpdM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl
                          rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:59:7d:c4:e9:aa:97:5c:43:92:14:ce:be:3b:ac:de:dd:88:78:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB23849BCF63AE719E7BE4FE89385D166773A883
        Validity
            Not Before: Jun 16 17:45:45 2026 GMT
            Not After : Jun 17 18:05:45 2026 GMT
        Subject: CN=A9C0532931807623939CC9E073E03382DB701625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:07:57:1c:59:00:4f:50:fd:66:40:9d:52:
                    71:64:a4:83:87:93:e7:ae:9a:1f:57:44:8c:05:b0:
                    4b:0c:dc:ae:a6:c8:c8:74:08:e0:a4:70:10:4b:71:
                    18:e0:e8:59:e6:9e:b0:5a:d6:28:25:2e:2e:3a:42:
                    ba:02:00:0a:c8:e8:44:79:54:9b:8b:57:8a:6d:0b:
                    de:ee:c7:dc:d8:41:53:f8:c4:a5:81:a4:a8:de:88:
                    42:97:ec:18:91:75:08:5f:55:c5:79:55:f8:4a:04:
                    d6:63:9c:fc:d4:4a:09:50:14:b9:26:3e:74:12:fd:
                    6c:bb:96:01:2e:03:88:fd:78:94:b2:a8:04:81:87:
                    05:51:dc:10:b5:13:6a:25:09:4b:57:21:d9:fb:24:
                    cc:e2:4e:3a:f2:21:d6:47:7e:28:7c:09:65:6c:26:
                    3b:4e:1d:f6:41:37:79:14:10:7e:f1:91:1f:a4:76:
                    c2:8f:b2:06:37:a1:78:bb:0b:f1:80:97:ad:72:9e:
                    b9:33:ba:89:b1:4d:20:f5:08:29:fc:75:36:36:5e:
                    e6:c0:a7:5f:e1:81:a6:48:ac:fa:4d:f0:d1:ef:dd:
                    3e:44:cd:0d:99:ec:1c:83:43:dc:8b:bc:06:e4:0f:
                    f0:26:27:b8:4b:39:de:8c:71:8b:bf:55:3a:90:3e:
                    2c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C0:53:29:31:80:76:23:93:9C:C9:E0:73:E0:33:82:DB:70:16:25
            X509v3 Authority Key Identifier:
                keyid:DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:d3:6d:d1:81:18:08:e6:6f:db:dd:9f:32:c1:c6:3c:8f:2c:
         b7:38:10:8a:a6:0a:f3:28:c7:ea:b7:98:42:0a:29:d8:aa:9a:
         48:20:44:30:d5:61:de:fa:00:41:1f:1f:a1:68:c4:c3:c8:c8:
         32:53:01:9f:0d:dd:90:18:80:6f:4e:2b:ef:94:00:e8:61:ca:
         c7:7d:66:17:d3:9f:fe:bc:d4:a1:47:f5:38:1c:6e:df:fd:3a:
         1f:6e:3f:ca:07:1f:b4:ee:20:01:75:6a:c3:ee:65:5b:88:1d:
         3f:ec:71:31:a2:14:d8:7c:35:71:a3:f6:71:25:cd:23:78:0d:
         ec:b3:3a:1c:60:57:2b:4b:f2:1f:a2:11:69:47:4a:5a:29:5b:
         e5:cc:2b:dc:2d:7f:0c:ed:50:b9:70:c1:92:76:5d:f5:7e:cd:
         03:7a:74:82:bd:5f:93:3e:5e:61:60:ea:99:04:c9:bb:99:06:
         ed:d9:e0:1c:3d:fc:db:46:57:1f:5e:ed:d1:a5:6a:db:d8:b2:
         fb:5a:69:68:f6:bd:b6:e8:78:19:82:f9:05:66:43:39:55:b1:
         33:4a:98:ad:84:07:95:74:0b:c3:22:46:28:40:ed:83:93:ae:
         4a:fe:b5:b0:e6:e3:cf:35:54:3f:2f:dd:a2:42:aa:48:4f:bb:
         96:37:7e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:37 2026 by rpki-client