Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft
File:                     284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft (raw, json)
Hash identifier:          7631lfpSUhxfliQydY+u8zrc7mWSbuvsqKb1AAhS9BI=
Subject key identifier:   94:DC:2A:A9:7A:9C:62:15:83:B4:BF:34:D9:B5:DB:36:CB:9E:2E:26
Authority key identifier: 28:41:32:D9:17:9D:6A:10:5A:D3:8E:8C:B4:7C:2E:2D:87:7E:8D:8B
Certificate issuer:       /CN=284132D9179D6A105AD38E8CB47C2E2D877E8D8B
Certificate serial:       4E66E4B513BA31482820E2CC7D6EC2B21ADD67FF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 23:12:11 +0000
Manifest this update:     Tue 16 Jun 2026 23:07:11 +0000
Manifest next update:     Thu 18 Jun 2026 01:10:11 +0000
Files and hashes:         1: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (hash: K06HluoUSneBunwOTMkxMJ0GcJy62PXja/IY39krYJE=)
                          2: 284132D9179D6A105AD38E8CB47C2E2D877E8D8B.crl (hash: Xm1S5D6gYDXQvWPKCTVh07ks44DQtTeXfZN6mhmob0Q=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.crl
                          rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 01:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:66:e4:b5:13:ba:31:48:28:20:e2:cc:7d:6e:c2:b2:1a:dd:67:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284132D9179D6A105AD38E8CB47C2E2D877E8D8B
        Validity
            Not Before: Jun 16 23:07:11 2026 GMT
            Not After : Jun 18 01:10:11 2026 GMT
        Subject: CN=94DC2AA97A9C621583B4BF34D9B5DB36CB9E2E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:85:b3:24:54:46:4d:58:5e:34:75:eb:60:eb:
                    0c:51:98:06:3a:80:fd:c0:c5:ee:c3:c1:52:01:b1:
                    1a:f9:e9:c2:a7:5e:f6:cb:76:4b:56:4c:ae:0d:c2:
                    5a:0b:02:1f:b9:7f:e9:03:46:33:fb:67:d6:43:5e:
                    dd:5f:73:94:97:96:21:d5:1f:bc:ea:3b:d9:9b:9d:
                    9b:d1:88:9b:e6:cb:13:02:4d:57:f6:5a:96:44:13:
                    29:05:63:cb:d0:90:9f:49:bb:b4:16:40:82:73:76:
                    9a:83:87:aa:94:9e:70:a8:26:95:39:5b:37:af:28:
                    96:00:67:a1:f0:36:5d:4e:90:ea:78:bd:4a:2d:f0:
                    e2:a2:79:97:e1:2b:c9:41:6a:73:27:f0:67:57:6f:
                    05:66:7e:31:49:91:1d:d7:71:65:8e:aa:ca:a2:5b:
                    1c:c9:ac:3d:85:4d:03:b2:56:33:a4:ff:ed:a9:26:
                    3d:e9:81:9e:f4:e3:f9:c5:86:ac:55:c5:bb:88:43:
                    84:c6:f0:cf:18:7c:ab:ac:c0:ac:c1:89:6f:17:e5:
                    5e:12:17:35:5f:f4:a7:29:7d:54:79:94:3a:46:03:
                    4d:54:9e:d7:e3:4f:fc:e6:ba:f9:77:86:cb:d1:71:
                    40:85:1c:45:d1:f7:db:49:e5:84:af:b1:42:c7:9e:
                    3b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DC:2A:A9:7A:9C:62:15:83:B4:BF:34:D9:B5:DB:36:CB:9E:2E:26
            X509v3 Authority Key Identifier:
                keyid:28:41:32:D9:17:9D:6A:10:5A:D3:8E:8C:B4:7C:2E:2D:87:7E:8D:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:2c:ce:8f:8e:17:34:10:e3:82:27:f4:e8:19:f6:39:b8:b4:
         2a:9f:f2:f5:9a:46:d2:67:3e:5b:b0:14:82:3d:37:1f:a4:6e:
         58:17:b8:63:e0:ee:61:ad:b5:4a:c6:9e:fd:20:0b:4b:fd:a2:
         5c:a6:83:c4:5f:bb:0a:c9:99:5d:d0:87:61:73:8d:d3:f1:f0:
         19:02:09:76:61:e4:a1:3a:0c:6e:f3:a3:c5:ff:c2:73:f8:e9:
         55:b5:c6:c4:2f:63:a3:ca:fc:39:17:f9:25:fe:c5:0e:77:39:
         97:f7:18:37:9b:db:d4:7c:5f:22:a9:fd:e2:0d:a2:e7:73:a4:
         34:e0:0b:ff:38:88:18:2f:7d:ef:69:0e:bd:5a:99:f2:88:26:
         5b:bc:2f:5d:d6:6e:24:29:d9:6a:d0:7d:86:ff:57:21:f6:17:
         fe:66:58:d2:67:68:16:fd:75:3e:14:c2:08:d6:7b:4c:76:fa:
         07:92:e7:da:d4:bf:78:26:83:0d:e1:03:b6:8b:d8:6e:a7:a8:
         13:bf:e6:72:24:f4:e3:8b:96:38:27:4d:44:03:9d:5f:7d:0f:
         bb:95:2d:b0:d4:93:00:8f:97:36:9d:cf:08:25:05:b5:e3:f2:
         22:95:58:b9:36:19:40:cc:cd:50:74:16:1b:89:1f:ad:2f:4f:
         7f:ec:87:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:41:17 2026 by rpki-client