Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft
File:                     B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft (raw, json)
Hash identifier:          NbdIyov6fuRjdIa6bGhWrqq3dRgIGmCu5afF/6+c8NU=
Subject key identifier:   1F:1F:06:1A:77:3B:56:9D:CF:85:B1:EF:A4:66:89:75:ED:A8:DD:68
Authority key identifier: B7:5F:76:DD:A3:5A:BF:BD:BA:32:03:BE:CB:4D:08:AA:52:80:0D:28
Certificate issuer:       /CN=B75F76DDA35ABFBDBA3203BECB4D08AA52800D28
Certificate serial:       508D7A823182DAACCAED5EBCD3582F0364ECD3F3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 09:45:44 +0000
Manifest this update:     Sat 13 Jun 2026 09:40:44 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:44 +0000
Files and hashes:         1: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: 04gnRp5NdkCVsfCRhM0EkwATPsm78cD7B2V1btMyUtQ=)
                          2: B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl (hash: PIHkpGwoM/NcJz1I98fShVlVyFE21bfKP4D5FJP5FTQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl
                          rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8d:7a:82:31:82:da:ac:ca:ed:5e:bc:d3:58:2f:03:64:ec:d3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75F76DDA35ABFBDBA3203BECB4D08AA52800D28
        Validity
            Not Before: Jun 13 09:40:44 2026 GMT
            Not After : Jun 14 12:01:44 2026 GMT
        Subject: CN=1F1F061A773B569DCF85B1EFA4668975EDA8DD68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ed:8d:85:bf:6b:83:40:81:b0:30:f2:9e:05:
                    48:ae:fd:51:9c:d7:f1:8f:4f:f6:27:b4:73:b6:ab:
                    6e:71:90:f5:96:bb:92:61:13:62:64:21:f0:1a:b9:
                    83:c1:d2:bf:1b:6d:f4:cc:97:9c:f1:a9:24:ea:6d:
                    46:0b:4c:e5:38:0c:0a:ae:c3:04:71:ea:33:06:22:
                    58:36:66:e5:7c:a2:9c:36:ac:fe:fa:2f:3c:ea:ae:
                    d8:96:19:19:04:54:be:e1:9c:7c:56:fb:3a:06:ba:
                    d6:d1:7b:fd:f0:28:00:8f:bb:bd:73:43:a1:24:10:
                    16:a3:bf:f8:a4:eb:16:3c:e5:2d:ad:cc:7a:1e:cf:
                    43:c0:7a:6d:36:4b:69:b9:93:9d:0b:d8:42:d8:4c:
                    77:ef:97:b0:3f:5d:fd:72:4c:85:d1:dd:3a:21:13:
                    ed:7d:8a:3f:dc:21:73:5d:db:8b:83:28:ea:4f:21:
                    fb:ec:49:79:93:0c:f2:27:35:10:37:a4:64:72:4a:
                    36:e8:8c:f7:d6:56:b8:17:26:a5:46:c8:50:4e:8c:
                    1e:e2:c0:d6:9b:a8:1f:4c:38:eb:2d:11:fa:b9:bf:
                    e9:5e:cc:3b:ee:cc:d3:6e:91:7b:73:3f:db:6f:72:
                    e0:09:af:7e:98:08:84:3b:82:38:cf:8e:5e:6d:e7:
                    7a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1F:06:1A:77:3B:56:9D:CF:85:B1:EF:A4:66:89:75:ED:A8:DD:68
            X509v3 Authority Key Identifier:
                keyid:B7:5F:76:DD:A3:5A:BF:BD:BA:32:03:BE:CB:4D:08:AA:52:80:0D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b1:be:72:22:2d:15:73:6c:4d:35:a1:d2:7d:83:9c:84:df:
         7e:35:c9:ed:2e:5b:3a:d3:11:9a:4a:a7:39:2d:3d:a8:99:2a:
         50:4a:58:a6:d9:bd:58:b3:34:c1:35:78:17:c3:04:cd:f5:e9:
         30:37:47:f7:d7:13:61:41:b0:cc:91:e0:6c:5d:9e:94:00:fb:
         87:4e:6c:23:0e:e9:ea:ea:fa:45:88:97:20:b4:0c:03:45:bd:
         84:3e:72:6f:71:34:01:62:4c:ce:2b:5b:45:cf:05:c4:e8:87:
         59:88:10:ed:10:38:9f:43:3a:de:f7:2d:99:82:6a:f0:ac:ba:
         18:b9:4f:b6:34:5a:2b:bc:63:b5:45:e6:e4:54:9a:da:c0:15:
         bf:a1:ea:2d:ba:b7:cb:29:6e:38:39:26:49:a7:25:02:19:74:
         b5:b3:8c:40:cb:13:c6:24:27:dd:5b:76:d7:d3:7d:dc:17:f9:
         2c:f6:b2:55:d4:87:1c:36:e3:0a:ac:5d:1e:34:fe:14:07:65:
         7a:a2:10:10:05:03:4a:4f:dd:da:98:9f:e0:dd:8b:2e:24:9a:
         34:11:da:47:b2:f4:ef:33:3d:60:a1:85:06:04:5e:c5:75:a6:
         9e:75:fb:65:5a:73:6a:29:45:ab:80:99:f1:60:b4:1e:2b:a4:
         73:00:03:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:09:45 2026 by rpki-client