Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft
File:                     C797413CFB24F6454A9F7473DF020BB107134EE7.mft (raw, json)
Hash identifier:          u+wedb0KxjTrYQckB4iNUpWO6Nz+6RVbW5ETWmX+6S8=
Subject key identifier:   12:98:B4:12:45:73:EB:D8:BC:02:83:62:9A:22:37:42:16:50:27:6A
Authority key identifier: C7:97:41:3C:FB:24:F6:45:4A:9F:74:73:DF:02:0B:B1:07:13:4E:E7
Certificate issuer:       /CN=C797413CFB24F6454A9F7473DF020BB107134EE7
Certificate serial:       66652A450E98F6C20E852B6BCE54851B32EEA3C5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 09:25:16 +0000
Manifest this update:     Sat 13 Jun 2026 09:20:16 +0000
Manifest next update:     Sun 14 Jun 2026 10:59:16 +0000
Files and hashes:         1: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: chSnFe2TA+OmeDv7yM6MlQKXcupUNd+M99kXzF+BQEw=)
                          2: C797413CFB24F6454A9F7473DF020BB107134EE7.crl (hash: CXAiQxfLvMPEgVPCsDybsnaBF+CsEceqAy5/e0voz+U=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.crl
                          rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 10:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:65:2a:45:0e:98:f6:c2:0e:85:2b:6b:ce:54:85:1b:32:ee:a3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C797413CFB24F6454A9F7473DF020BB107134EE7
        Validity
            Not Before: Jun 13 09:20:16 2026 GMT
            Not After : Jun 14 10:59:16 2026 GMT
        Subject: CN=1298B4124573EBD8BC0283629A2237421650276A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ff:ff:12:39:7a:81:95:da:a9:21:bd:0a:ee:
                    71:14:79:fa:dc:9e:db:36:3a:7e:cd:2c:a6:17:e1:
                    de:f4:7a:1b:13:e1:88:6c:50:c5:96:c3:10:15:f7:
                    fd:5b:f8:0c:3f:2f:e0:0d:29:ec:32:59:e8:41:e9:
                    ac:5b:45:70:fb:29:57:fa:c6:80:45:0f:45:2d:4f:
                    6d:cc:31:3d:9c:2c:0a:59:b7:4e:90:2a:4c:b3:0e:
                    42:53:44:ac:f8:db:08:81:aa:e4:70:91:ea:9c:85:
                    0e:4f:62:71:d4:27:51:a0:26:ca:3c:55:e1:e3:35:
                    76:84:7c:79:50:ab:f4:07:16:ce:ff:3f:43:73:9b:
                    5a:d7:14:d8:9f:3d:d1:d6:62:a2:cb:5b:1c:36:07:
                    94:ab:e6:a4:98:e2:83:66:cc:a2:1f:eb:3d:e8:0d:
                    82:fe:ec:58:02:52:3b:50:f7:46:c2:37:c3:3a:ad:
                    9f:57:a9:51:ba:bb:65:b3:26:8b:db:83:96:4a:e4:
                    86:52:91:62:74:f1:f9:77:64:0b:1e:15:88:fb:a4:
                    79:4a:57:3b:ec:b5:a6:28:20:0d:05:68:24:fd:37:
                    d8:31:1a:07:ad:bf:9c:e2:ef:5c:7d:ba:93:28:28:
                    6b:50:0a:ab:88:8a:a9:6e:56:db:2a:3a:c8:28:12:
                    d2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:98:B4:12:45:73:EB:D8:BC:02:83:62:9A:22:37:42:16:50:27:6A
            X509v3 Authority Key Identifier:
                keyid:C7:97:41:3C:FB:24:F6:45:4A:9F:74:73:DF:02:0B:B1:07:13:4E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:25:ca:56:a7:ad:bc:83:d4:63:4e:a1:26:08:14:6c:4e:51:
         3d:e1:d1:c5:52:01:16:b6:c8:bd:37:26:1a:e1:93:c0:f6:cf:
         a7:82:4a:09:69:55:ca:17:15:f2:b5:61:cd:ab:af:95:3c:df:
         76:af:3b:0a:ee:9f:fd:7f:79:ba:64:59:51:71:ab:1a:d0:dd:
         bb:6a:e6:17:0e:01:2e:85:c7:99:98:d4:37:87:11:bd:85:b6:
         5c:5e:0d:cc:5a:02:50:81:a6:56:5a:35:c9:1f:5f:98:83:58:
         2c:ac:08:d4:e8:ce:46:f0:01:4f:26:01:db:ba:d2:54:fd:05:
         a6:32:61:dd:87:5e:b4:85:04:f7:1f:87:9e:32:68:08:bb:09:
         08:d9:ed:40:46:82:79:69:78:29:88:38:68:a6:59:17:ac:1c:
         eb:f7:9f:62:cd:5c:a6:ce:e2:ee:be:18:12:42:9c:0f:65:10:
         ee:d8:a7:27:2e:b9:93:66:a8:5f:57:64:f0:e9:42:aa:dd:c3:
         7c:5a:1e:71:d9:bf:bf:9a:85:44:46:89:93:cd:01:24:ec:f1:
         7c:22:70:23:52:d3:7a:07:eb:d1:50:4b:59:87:6a:ea:03:8f:
         26:a8:02:40:fd:04:2c:cf:be:6a:69:0c:8e:17:f2:b1:b0:e9:
         93:d4:a0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:19:48 2026 by rpki-client