Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft
File:                     2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft (raw, json)
Hash identifier:          gfPnNvSQ15Yef3Cg1Pxu9spgXNbhmMYPWEXIIrH06Tw=
Subject key identifier:   51:A9:8A:1A:25:A3:35:8A:E8:5A:A8:BE:DD:28:98:28:5B:70:06:D3
Authority key identifier: 2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF
Certificate issuer:       /CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF
Certificate serial:       7165966C94AFE6451C7EFB37FFC5B3D224BFE20A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 14:01:13 +0000
Manifest this update:     Tue 16 Jun 2026 13:56:13 +0000
Manifest next update:     Wed 17 Jun 2026 16:46:13 +0000
Files and hashes:         1: 2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl (hash: ySAaR5BM8CHEOPbzqxWBDqoORip3GQ1VVyhWaV+B7Aw=)
                          2: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: njSBQKxaBf8FgxYd9UzVWcsd+7NkvHs45etGgjIxXxw=)
                          3: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: R//K7f8SQ84W/WhpHi/GP3kDl7olX9IsyMdmQ8qFKuk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl
                          rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 16:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:65:96:6c:94:af:e6:45:1c:7e:fb:37:ff:c5:b3:d2:24:bf:e2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF
        Validity
            Not Before: Jun 16 13:56:13 2026 GMT
            Not After : Jun 17 16:46:13 2026 GMT
        Subject: CN=51A98A1A25A3358AE85AA8BEDD2898285B7006D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e6:f4:c1:ac:b5:30:05:f9:75:76:28:38:31:
                    c0:37:59:7d:fd:02:47:04:d4:6f:ca:c8:8c:05:cc:
                    20:16:7c:82:db:da:83:88:76:39:4f:6d:11:a4:06:
                    61:90:a6:5b:67:7e:90:cb:0e:d3:00:2c:70:c3:ee:
                    fe:25:ee:9d:b9:a2:1a:68:fd:ed:82:bd:11:7d:a2:
                    be:07:1a:43:27:98:c9:d8:78:37:8f:44:49:b8:37:
                    28:e4:70:5c:d2:27:2c:f1:52:2f:cb:17:bb:11:15:
                    25:b6:3f:63:2b:65:47:1b:70:bb:ec:fd:61:f4:e5:
                    5e:41:d3:0e:c6:c3:7e:48:2d:53:ff:e7:8b:e6:70:
                    d1:56:44:33:71:ea:9f:db:b2:9c:28:0c:24:eb:a5:
                    98:4e:b8:02:29:65:a2:d5:09:fa:bf:3f:4a:02:ff:
                    4f:82:c9:ac:4e:58:31:25:25:a1:14:19:3e:9b:65:
                    00:96:bc:ea:79:7c:c1:8a:52:d6:82:1b:d1:63:1d:
                    e7:1e:08:59:02:30:b5:35:ff:af:38:33:89:4a:c5:
                    2c:17:ef:a9:98:01:f3:75:a2:26:5c:78:c5:b6:d8:
                    b9:7c:19:51:e8:a1:c9:26:43:46:bd:40:14:58:f1:
                    87:87:97:51:13:32:b8:17:bd:c5:93:d6:88:a9:5a:
                    1d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A9:8A:1A:25:A3:35:8A:E8:5A:A8:BE:DD:28:98:28:5B:70:06:D3
            X509v3 Authority Key Identifier:
                keyid:2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f6:be:41:d1:93:e3:5c:29:63:0d:48:55:1f:52:b2:ed:2a:
         b1:65:d7:ea:3a:c8:d3:f3:2b:d2:77:73:44:b8:00:8d:ea:38:
         e3:7f:c6:6d:e7:9b:6c:09:0a:6c:af:ff:04:1d:1d:61:0f:6b:
         f9:b1:60:99:ae:a7:4c:a1:05:0e:8e:6f:3f:0d:30:88:4c:20:
         1c:4c:68:18:59:8f:7a:33:d8:62:5d:25:e2:17:fc:94:ca:90:
         f1:2c:3a:6b:ac:d2:e7:16:7d:30:95:d7:04:07:66:35:bf:4e:
         ea:cc:2d:4c:6c:43:2b:8e:bd:cf:82:de:9b:af:6e:83:d3:dc:
         cb:59:91:5e:c0:88:75:91:62:33:e6:eb:40:3f:8a:fb:68:e7:
         74:aa:b9:fd:bc:c4:e9:08:5b:07:ea:b0:02:78:dc:69:38:63:
         45:80:9f:29:ae:b6:72:9f:09:e8:62:98:21:e6:4d:a9:a8:21:
         b3:a0:59:40:94:91:47:e1:05:ab:cb:7b:27:56:80:39:90:8a:
         2c:d7:66:95:32:e5:c1:ae:6b:e6:01:0a:36:09:26:9f:31:1d:
         56:39:d1:6e:64:90:5b:b0:69:07:fd:25:e3:2e:4b:e9:33:bd:
         f2:04:e7:15:e3:b1:61:88:e7:35:5f:41:ca:09:0c:4f:c2:bd:
         1c:2a:bd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:41 2026 by rpki-client