Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft
File:                     44428DF327C8FF800708E2196181BCB000E14F9B.mft (raw, json)
Hash identifier:          8PZHW5X5BjHyrnvWpoIqCncbjfiLrHlYGulI4hrjBOI=
Subject key identifier:   35:78:7B:53:DF:E6:8C:81:A6:2A:05:5A:2D:D7:F7:16:2B:A4:22:CB
Authority key identifier: 44:42:8D:F3:27:C8:FF:80:07:08:E2:19:61:81:BC:B0:00:E1:4F:9B
Certificate issuer:       /CN=44428DF327C8FF800708E2196181BCB000E14F9B
Certificate serial:       4F09B7AFE5BAAFF512CCB573C68D2410CF16FD3A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 18:01:21 +0000
Manifest this update:     Sat 13 Jun 2026 17:56:21 +0000
Manifest next update:     Sun 14 Jun 2026 21:28:21 +0000
Files and hashes:         1: 44428DF327C8FF800708E2196181BCB000E14F9B.crl (hash: PFeJroM6e7u3B9KtDrDGGxUPtl0PpzzraUtJjPCCyc8=)
                          2: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: 85/rZ6LwJ+jBT8qlN/LTVMyuVN987z9Fl30YQ8p1+qo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.crl
                          rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:09:b7:af:e5:ba:af:f5:12:cc:b5:73:c6:8d:24:10:cf:16:fd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44428DF327C8FF800708E2196181BCB000E14F9B
        Validity
            Not Before: Jun 13 17:56:21 2026 GMT
            Not After : Jun 14 21:28:21 2026 GMT
        Subject: CN=35787B53DFE68C81A62A055A2DD7F7162BA422CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:75:8e:72:38:b7:35:da:20:74:d4:70:9e:12:
                    c9:8f:dd:af:8e:4b:e6:d8:d0:18:45:b8:cb:03:e5:
                    eb:ea:0e:38:3d:f3:ce:57:47:4f:9c:51:6c:7d:10:
                    a9:35:da:16:96:e8:0a:cf:5e:60:11:8d:58:75:41:
                    d9:e1:40:60:50:93:02:b9:4d:7a:9a:5f:70:01:79:
                    83:a7:53:69:2c:7d:ed:72:8c:a5:d9:53:52:3c:97:
                    01:a6:75:87:79:10:3d:5d:79:d6:b6:2f:a5:04:6e:
                    6f:e3:c8:8b:ea:7c:15:03:30:72:d1:26:1e:27:49:
                    df:9a:6c:e5:c9:df:ce:e8:02:5b:2a:11:af:36:6e:
                    06:cd:e6:81:50:95:60:6f:bc:18:29:dd:dc:25:8c:
                    ad:c1:be:1f:1b:02:80:dc:db:1a:4b:70:72:4f:0a:
                    4a:ee:ee:04:26:aa:67:1d:fb:cd:18:4c:7f:00:e8:
                    29:80:fb:41:f9:d4:e0:d7:bb:ec:0e:05:25:18:58:
                    21:2e:e4:0b:86:08:2b:64:a1:33:5f:d3:aa:75:1e:
                    3a:50:f1:4a:c4:2f:63:db:08:82:b9:55:9d:08:3a:
                    45:cb:b5:2d:86:e1:de:35:9c:eb:6b:f0:62:d6:aa:
                    cf:19:22:f9:52:ad:0d:26:07:73:d2:50:e6:e4:8b:
                    fb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:78:7B:53:DF:E6:8C:81:A6:2A:05:5A:2D:D7:F7:16:2B:A4:22:CB
            X509v3 Authority Key Identifier:
                keyid:44:42:8D:F3:27:C8:FF:80:07:08:E2:19:61:81:BC:B0:00:E1:4F:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:8b:8d:3c:a8:81:91:f2:5f:08:43:08:c3:e4:10:5b:a9:f5:
         ce:7c:b6:2e:91:67:55:92:10:74:4e:fa:cf:e4:8a:c7:96:3d:
         02:6b:fc:66:62:73:34:25:9b:f4:01:bc:6a:b7:66:85:08:d1:
         08:dd:25:40:5d:18:59:79:1d:bd:fd:18:90:9e:49:84:4d:3f:
         00:3c:71:a3:3d:16:83:28:4a:6f:dc:ca:9f:31:d3:13:34:32:
         5d:8a:4a:e6:60:36:b6:5a:4a:e8:63:67:94:67:cf:1b:4d:68:
         e2:4a:73:0a:87:b6:75:bc:00:1b:16:df:bf:91:c6:c3:d5:28:
         1f:6a:fc:02:e2:ab:b3:bc:a8:f2:80:05:a1:31:c1:77:db:e7:
         c6:ff:27:e5:3a:ec:e5:23:ca:a1:d6:84:85:25:ed:21:6f:3c:
         76:15:b9:20:14:e0:f6:ba:1a:dc:32:07:d4:0c:cd:e4:af:73:
         f8:c6:e3:79:36:b9:97:b0:31:0d:2e:bf:78:e5:d8:06:92:8b:
         40:31:cd:8b:97:e6:7e:e0:a0:a5:bb:29:2a:a4:5e:aa:92:11:
         8d:08:aa:eb:8e:32:8f:f8:7a:a7:c2:e4:00:ce:0a:77:fb:cb:
         63:ad:49:1d:23:d4:f8:49:34:65:15:13:2a:0e:5d:70:02:d6:
         09:a8:d0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:20 2026 by rpki-client