Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft
File:                     F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft (raw, json)
Hash identifier:          N4oiLHk7jWk/a4woUoZS5+A29ihYV1M+4gdS1GddibY=
Subject key identifier:   E7:7E:11:19:11:3F:31:C8:A2:7D:86:4A:33:9E:4A:7D:E7:06:05:B3
Authority key identifier: F3:14:4B:9C:C1:B3:86:B2:02:46:51:61:BF:4D:4E:AD:04:8C:0F:C9
Certificate issuer:       /CN=F3144B9CC1B386B202465161BF4D4EAD048C0FC9
Certificate serial:       7487B91E9DAC5B07DFB02650086899309278192D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 14:47:05 +0000
Manifest this update:     Tue 16 Jun 2026 14:42:05 +0000
Manifest next update:     Wed 17 Jun 2026 17:09:05 +0000
Files and hashes:         1: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: +QD/pWetD0IzXhbj5Z0Qy5abcmZ6aa3dun6UEco+UkE=)
                          2: F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl (hash: MiyuzGAG+chZ81NEydiZI4G01GUBk1/YXfE9GVDLkOk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl
                          rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 17:09:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:87:b9:1e:9d:ac:5b:07:df:b0:26:50:08:68:99:30:92:78:19:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3144B9CC1B386B202465161BF4D4EAD048C0FC9
        Validity
            Not Before: Jun 16 14:42:05 2026 GMT
            Not After : Jun 17 17:09:05 2026 GMT
        Subject: CN=E77E1119113F31C8A27D864A339E4A7DE70605B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:0b:f2:28:dd:07:37:91:01:eb:21:c9:fe:
                    2a:8f:ab:39:32:0c:e1:e7:2d:bf:13:0e:1e:97:c5:
                    82:b2:c8:d5:d0:1a:90:87:12:a8:9e:d7:bd:de:13:
                    d1:3a:78:a2:27:0e:ea:84:ff:76:5b:25:dc:e8:36:
                    6f:3b:a5:5f:18:b6:e3:a7:80:f1:f1:21:1e:68:c2:
                    08:22:92:34:f3:70:1b:52:a2:aa:c5:b9:a5:ce:d6:
                    d7:0b:74:95:39:b3:f3:7a:eb:db:45:96:ed:18:c2:
                    af:9e:4c:ce:e3:cf:3c:e9:dd:fd:d1:fc:13:48:91:
                    a8:06:7e:a0:cc:d2:e0:a1:8f:bf:e9:b6:bf:03:9c:
                    c6:dc:ef:f0:0c:e0:dc:ad:67:a4:eb:5a:3c:40:12:
                    1c:11:71:cd:b0:16:db:ce:20:32:7a:15:99:51:cd:
                    e4:a3:1b:e7:1f:05:bf:d3:77:11:87:15:1f:57:98:
                    a0:66:cf:bd:f5:73:d4:c8:a0:5b:e0:51:20:0e:8c:
                    95:d1:d5:ad:06:02:db:4a:85:88:14:58:1a:b9:7f:
                    21:56:d8:99:f8:c9:83:9c:06:29:14:65:cc:95:11:
                    38:7f:03:ac:2a:78:7d:0c:44:60:ed:7d:06:ec:06:
                    a3:53:6d:8a:eb:f5:47:9d:e3:db:6e:96:d7:a8:ec:
                    c5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7E:11:19:11:3F:31:C8:A2:7D:86:4A:33:9E:4A:7D:E7:06:05:B3
            X509v3 Authority Key Identifier:
                keyid:F3:14:4B:9C:C1:B3:86:B2:02:46:51:61:BF:4D:4E:AD:04:8C:0F:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:57:fc:16:12:99:a7:6e:57:de:69:b2:42:9b:f1:3f:c7:1c:
         09:26:29:de:bf:e2:51:81:01:5f:10:1b:74:c2:57:42:d4:03:
         80:32:73:b6:9a:34:c9:47:51:74:7a:bb:9c:db:cd:d0:f3:06:
         91:1c:c6:81:67:56:5c:2a:1f:be:cf:5e:12:e1:3b:b1:1d:4a:
         a1:0f:de:18:2c:44:1b:6a:9f:30:73:ad:a5:6f:bf:99:8b:16:
         28:b1:e4:99:13:6a:4f:d3:cc:13:4d:66:44:46:77:c1:c4:aa:
         71:f0:d9:61:ac:c8:9e:f3:a2:ac:0c:c1:a9:3d:6e:06:93:13:
         44:86:93:9b:c9:7f:12:5a:f6:41:05:db:72:ab:bd:88:f9:3d:
         b2:41:58:53:2b:5d:ef:86:b8:f9:a1:69:1c:d0:56:56:5b:2e:
         0a:8b:5f:d2:b9:82:dd:10:ea:67:09:5e:37:f5:6b:6d:07:3f:
         5d:f7:9e:c3:64:7a:98:20:b5:f3:cf:ec:05:b3:66:74:8a:fc:
         4d:ef:12:db:be:ba:dd:8c:a0:5a:c0:da:c7:eb:69:d7:5c:f7:
         64:61:f9:72:28:a9:51:cc:af:0f:e3:80:ad:a6:1b:89:3b:fd:
         dc:3d:ef:57:c7:95:d4:28:8e:73:da:3b:2c:29:fb:8d:a7:68:
         60:8f:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:54 2026 by rpki-client