Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft
File:                     59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft (raw, json)
Hash identifier:          YCIu76Z17g+iBj27S4NNbEgC9dYlgq7e2xi3jAggxwI=
Subject key identifier:   71:BA:75:73:30:06:D8:13:8A:85:3C:23:B0:6F:C7:C1:36:9A:E6:DB
Authority key identifier: 59:F4:23:4C:AE:EF:A4:6B:3C:B1:62:7D:38:50:2F:B4:BA:6E:FD:90
Certificate issuer:       /CN=59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90
Certificate serial:       01D6DBC2E87DB2EF2D7097E4DEF29F515F202444
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 19:32:46 +0000
Manifest this update:     Tue 16 Jun 2026 19:27:46 +0000
Manifest next update:     Wed 17 Jun 2026 20:10:46 +0000
Files and hashes:         1: 59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.crl (hash: 0txyoF99Go9EAqHBFqnl8JbnzPEtOiwXcoZBmPCX29s=)
                          2: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: xUpvUE2ZHUc2DU7j7aFTg7BviyLprNaKf2mKbV8517U=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.crl
                          rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 20:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d6:db:c2:e8:7d:b2:ef:2d:70:97:e4:de:f2:9f:51:5f:20:24:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90
        Validity
            Not Before: Jun 16 19:27:46 2026 GMT
            Not After : Jun 17 20:10:46 2026 GMT
        Subject: CN=71BA75733006D8138A853C23B06FC7C1369AE6DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:c2:97:8a:d1:9b:39:f9:87:ae:4f:44:6a:
                    59:7f:fc:63:c2:40:90:6a:c1:02:6d:31:ea:69:2f:
                    6b:60:de:11:db:6a:f7:dd:9b:78:72:43:79:68:3a:
                    51:e8:93:4f:8b:a9:2d:d2:a1:36:8f:a2:4e:fe:2a:
                    1f:92:1c:9d:8a:ac:9b:fc:9e:1a:61:61:26:3f:06:
                    e5:fe:71:84:5e:f4:28:b3:a5:1d:68:04:d2:0e:65:
                    12:eb:11:9b:54:a1:a3:1e:25:02:83:94:2c:bc:14:
                    b9:28:66:74:8b:4c:75:66:92:57:b5:e4:0d:5f:02:
                    b4:db:91:ef:1d:e3:c6:02:ea:f6:69:4d:dc:c2:ba:
                    b6:8c:d9:d8:52:e4:d0:8c:f4:fc:92:ba:15:ae:d2:
                    fb:b0:13:a7:0a:cf:35:b4:0d:cf:cc:d0:f9:bd:85:
                    c3:e5:74:62:a3:be:43:e6:89:15:ad:df:5c:22:a0:
                    d2:25:fa:be:7f:ec:dd:82:e0:3d:ad:54:18:ed:9b:
                    a6:46:a3:a8:ac:09:86:dd:90:e1:d9:32:79:8f:3d:
                    89:27:26:33:15:4b:ca:b4:6a:81:1c:0f:23:0c:01:
                    3a:3d:6d:73:d7:80:d4:6b:c3:d9:b0:e9:d0:6f:fa:
                    58:84:f0:3a:58:f3:81:6b:5b:d1:6e:20:69:1b:1a:
                    3d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BA:75:73:30:06:D8:13:8A:85:3C:23:B0:6F:C7:C1:36:9A:E6:DB
            X509v3 Authority Key Identifier:
                keyid:59:F4:23:4C:AE:EF:A4:6B:3C:B1:62:7D:38:50:2F:B4:BA:6E:FD:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ee:bb:8e:88:fa:3d:9d:b2:9d:76:eb:02:15:a8:b2:e9:96:
         79:8d:b5:cc:0a:d6:5d:ed:0f:a3:66:23:ff:6c:ac:b1:eb:54:
         27:62:b8:d5:6d:3f:b7:50:40:dd:31:df:51:59:d3:23:af:bf:
         98:7b:b6:61:78:b2:45:dc:31:38:b0:19:3c:5d:1a:af:a0:d2:
         98:7c:34:bc:ca:7e:dc:b0:e6:e0:6d:2a:fc:9c:39:20:32:a0:
         5f:44:2e:8f:c6:fc:92:eb:67:6f:1f:b9:85:6f:c5:b3:fd:56:
         d2:5d:ec:40:c1:cd:f0:5a:87:ae:b0:ee:d4:ca:27:14:6c:c9:
         d3:46:97:ac:70:76:0d:ec:4d:49:0d:53:dc:78:f4:a9:22:b7:
         41:3a:aa:bf:c9:9c:cc:f0:c0:45:4e:a1:c8:cc:e3:5e:85:d9:
         d2:62:ec:ea:dc:7d:bd:c8:ff:42:1f:cb:8c:8c:72:cd:cc:a7:
         7d:8e:98:03:1b:ed:ed:e7:71:c7:a0:bf:dc:3c:e9:3d:b1:d6:
         1d:60:9e:12:93:1a:cd:18:4d:81:16:0b:22:ac:75:b4:85:39:
         91:06:40:6e:ca:08:e9:ea:6d:43:c3:2c:60:78:62:3a:25:ed:
         d6:4f:88:d5:f9:1b:d7:12:4c:c9:2b:51:2f:75:5c:f0:14:58:
         7e:cc:b4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:18:44 2026 by rpki-client