Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
File:                     125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft (raw, json)
Hash identifier:          Ds7DGRceg5oi4SQYKPFg3xjDCPfDUyBslTsHIgobDxw=
Subject key identifier:   A4:2E:6A:55:87:A0:5E:4F:1D:49:F3:73:EF:1C:58:D5:7D:4F:7E:48
Authority key identifier: 12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4
Certificate issuer:       /CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4
Certificate serial:       3859D342200175BA54864FFA4AA5A4E2249739F5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 13:51:28 +0000
Manifest this update:     Sat 13 Jun 2026 13:46:28 +0000
Manifest next update:     Sun 14 Jun 2026 15:45:28 +0000
Files and hashes:         1: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pD8AAJGfek8X+gmcTJvavhY6u1lO1X5RIEZ8T14MLvE=)
                          2: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl (hash: GI02cukjRPyxZ506a2U2eP7IQCcLdnG7N4nY4jUcWeY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl
                          rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:59:d3:42:20:01:75:ba:54:86:4f:fa:4a:a5:a4:e2:24:97:39:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4
        Validity
            Not Before: Jun 13 13:46:28 2026 GMT
            Not After : Jun 14 15:45:28 2026 GMT
        Subject: CN=A42E6A5587A05E4F1D49F373EF1C58D57D4F7E48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:be:0f:7b:d4:9a:f6:37:a7:90:f0:a4:b3:
                    31:e7:25:75:ec:ad:c3:bf:c8:29:14:c3:df:ac:c3:
                    05:a1:cf:4d:20:dc:47:86:19:2d:1a:ac:51:ca:d7:
                    43:b1:25:aa:f3:f8:a9:67:47:59:91:f7:1c:d6:17:
                    c5:95:89:38:67:f9:75:2c:64:be:a7:4a:c2:a0:2d:
                    e6:7a:11:7d:79:e5:24:15:9a:61:a7:a5:9c:04:ff:
                    d1:6f:59:ca:78:1a:4d:9c:aa:30:eb:35:11:41:10:
                    73:b1:8d:78:53:5e:27:10:90:b9:80:83:4b:83:58:
                    b2:5e:40:f9:a3:c7:37:d1:7f:6a:86:09:e4:3a:a5:
                    8e:c4:97:0c:7a:08:98:11:65:77:0c:3d:5b:14:82:
                    eb:08:6e:43:47:2f:b0:7b:25:0d:ea:88:df:58:b4:
                    e7:70:a7:3a:0f:20:5e:d7:fd:2f:0e:d5:5e:f9:e0:
                    b8:1c:05:18:d7:43:ee:7f:85:0e:d2:e5:ae:a7:9a:
                    c4:a5:72:4f:4e:09:b6:7c:15:5c:9f:fd:30:95:98:
                    8e:4b:b6:75:e0:81:eb:07:c3:84:3a:8e:03:e7:b4:
                    af:57:aa:ff:6b:6c:8b:cf:b1:01:89:e8:a3:fb:30:
                    92:79:8b:d6:90:ca:71:e5:96:97:c4:86:4a:65:92:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2E:6A:55:87:A0:5E:4F:1D:49:F3:73:EF:1C:58:D5:7D:4F:7E:48
            X509v3 Authority Key Identifier:
                keyid:12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:65:9d:e4:21:ca:7b:c3:24:c2:88:22:2b:d2:97:af:39:e7:
         b8:45:1b:9d:4d:36:a5:88:88:a7:78:b7:46:be:fa:d7:db:6d:
         c8:32:7d:06:10:73:6a:8d:18:1c:c3:20:2b:31:57:1a:da:14:
         e4:ac:2b:4e:d4:4e:77:b8:2e:a1:23:e2:6e:8b:e7:49:85:17:
         76:ee:75:02:ca:7d:3b:9b:a4:92:1a:a0:db:10:92:fd:ed:c0:
         0e:96:ba:a1:0a:5e:de:de:4a:6d:b7:97:ab:67:d9:43:c9:60:
         74:ea:cf:d1:69:59:fa:59:7a:6e:96:fe:8d:42:01:4d:02:d2:
         de:c2:ba:70:07:e1:a7:c7:44:4a:f1:38:5c:cf:c7:bb:b5:42:
         d1:ce:05:d7:38:96:6c:6a:8f:9c:32:bc:9c:e3:05:74:df:9c:
         08:27:01:4d:68:0e:5e:20:0b:e4:12:a2:ec:f0:43:55:06:32:
         cf:66:47:ff:e3:c9:ed:20:e8:a8:00:3e:93:88:8b:f9:ea:20:
         cf:11:1f:43:9e:db:b5:4b:df:56:8c:53:9e:54:27:eb:b5:18:
         6a:75:ce:a5:90:fe:f6:f3:b0:7f:cb:56:c2:7d:b2:9d:f4:52:
         1d:84:e4:0a:22:cd:ab:4e:17:c2:db:0b:5b:c3:58:13:ed:7b:
         61:a4:94:30
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOFnTQiABdbpUhk/6SqWk4iSXOfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI1MzMxRThFMENENzE5N0M3RUU4NEY1MDg3ODc1MURF
NUVFRTFDNDAeFw0yNjA2MTMxMzQ2MjhaFw0yNjA2MTQxNTQ1MjhaMDMxMTAvBgNV
BAMTKEE0MkU2QTU1ODdBMDVFNEYxRDQ5RjM3M0VGMUM1OEQ1N0Q0RjdFNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxIL4Pe9Sa9jenkPCkszHnJXXs
rcO/yCkUw9+swwWhz00g3EeGGS0arFHK10OxJarz+KlnR1mR9xzWF8WViThn+XUs
ZL6nSsKgLeZ6EX155SQVmmGnpZwE/9FvWcp4Gk2cqjDrNRFBEHOxjXhTXicQkLmA
g0uDWLJeQPmjxzfRf2qGCeQ6pY7Elwx6CJgRZXcMPVsUgusIbkNHL7B7JQ3qiN9Y
tOdwpzoPIF7X/S8O1V754LgcBRjXQ+5/hQ7S5a6nmsSlck9OCbZ8FVyf/TCVmI5L
tnXggesHw4Q6jgPntK9Xqv9rbIvPsQGJ6KP7MJJ5i9aQynHllpfEhkplkgMJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpC5qVYegXk8dSfNz7xxY1X1PfkgwHwYDVR0j
BBgwFoAUElMx6ODNcZfH7oT1CHh1HeXu4cQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzI1OGRjZWEtYjM4My00NDMyLWFkMDgtZTZjZmZhYTUyYjdkLzAvMTI1MzMxRThF
MENENzE5N0M3RUU4NEY1MDg3ODc1MURFNUVFRTFDNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMjUzMzFFOEUwQ0Q3MTk3QzdFRTg0RjUwODc4NzUxREU1RUVF
MUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk
MDgtZTZjZmZhYTUyYjdkLzAvMTI1MzMxRThFMENENzE5N0M3RUU4NEY1MDg3ODc1
MURFNUVFRTFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ1lneQhynvDJMKIIivSl68557hFG51NNqWI
iKd4t0a++tfbbcgyfQYQc2qNGBzDICsxVxraFOSsK07UTne4LqEj4m6L50mFF3bu
dQLKfTubpJIaoNsQkv3twA6WuqEKXt7eSm23l6tn2UPJYHTqz9FpWfpZem6W/o1C
AU0C0t7CunAH4afHRErxOFzPx7u1QtHOBdc4lmxqj5wyvJzjBXTfnAgnAU1oDl4g
C+QSouzwQ1UGMs9mR//jye0g6KgAPpOIi/nqIM8RH0Oe27VL31aMU55UJ+u1GGp1
zqWQ/vbzsH/LVsJ9sp30Uh2E5AoizatOF8LbC1vDWBPte2GklDA=
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:38 2026 by rpki-client