Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft
File:                     B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft (raw, json)
Hash identifier:          DezUY0f4dnshTE6dx16XfsF6JDRhUb+WWc4Cvp6UpTY=
Subject key identifier:   92:17:DE:F6:63:41:62:7A:D3:84:01:13:E0:1B:4E:55:A3:87:4E:02
Authority key identifier: B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5
Certificate issuer:       /CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5
Certificate serial:       3CACEB33376E46B6FD98C4D60B8C3959E386B785
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 06:30:42 +0000
Manifest this update:     Wed 17 Jun 2026 06:25:42 +0000
Manifest next update:     Thu 18 Jun 2026 07:11:42 +0000
Files and hashes:         1: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: hZL/hi6Qgsw4sgW/mhx3uNInW8MyX4I+jFDzsHcP8Z4=)
                          2: B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl (hash: 3vi54uvx/04R89Za4ueGrLHnshCdvkSBaOqTmi7SncY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl
                          rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ac:eb:33:37:6e:46:b6:fd:98:c4:d6:0b:8c:39:59:e3:86:b7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5
        Validity
            Not Before: Jun 17 06:25:42 2026 GMT
            Not After : Jun 18 07:11:42 2026 GMT
        Subject: CN=9217DEF66341627AD3840113E01B4E55A3874E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a7:8e:b3:54:92:25:f9:0b:62:47:aa:b5:a0:
                    ed:66:43:11:71:7a:f3:1e:86:38:be:5f:01:58:b1:
                    82:69:28:44:4f:37:af:ee:03:8e:db:4e:0c:c3:fe:
                    01:de:ed:2e:5f:50:ba:6a:20:50:78:16:30:21:77:
                    5c:98:2f:2e:28:fb:13:29:8d:79:7a:2b:1b:2c:a3:
                    6d:c8:cd:49:10:f8:9d:e6:aa:13:2c:25:5b:c6:61:
                    e5:d2:79:8f:63:d7:fe:f5:48:81:8a:6a:1b:55:2f:
                    14:8d:6e:ea:e9:87:6b:ad:e3:bf:14:f2:ac:b6:e2:
                    c2:97:c2:f5:37:47:18:e2:22:46:3e:2f:93:b7:a8:
                    1a:1d:b4:24:38:1f:ae:42:83:3d:4f:b6:fd:92:83:
                    36:ac:8b:5c:b0:27:e7:2a:31:52:d8:4d:40:55:47:
                    d1:e4:c2:11:b6:10:6b:5d:48:cf:f3:d1:ce:18:d6:
                    b8:0a:01:ab:54:70:4e:af:08:e3:a2:77:a7:e0:26:
                    56:9e:cb:68:4b:6f:f6:cf:f9:46:06:1e:d1:ea:3d:
                    da:4e:4d:6a:25:34:7e:4a:a6:a1:bb:70:4c:1c:38:
                    38:a4:04:db:d4:30:6f:28:ad:9b:10:8f:b0:23:27:
                    9a:d4:84:7f:c5:21:67:ce:e6:9a:97:da:b8:54:2f:
                    bc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:17:DE:F6:63:41:62:7A:D3:84:01:13:E0:1B:4E:55:A3:87:4E:02
            X509v3 Authority Key Identifier:
                keyid:B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:51:4e:e6:0e:38:52:fa:f9:b6:24:00:8d:9c:28:7c:18:49:
         87:d9:5c:95:88:10:47:96:44:b6:44:e5:37:45:58:7c:39:d6:
         71:67:a7:97:be:46:40:02:9c:78:c8:b1:6a:57:a7:fc:c2:a5:
         9c:32:99:a1:06:ad:f1:8a:cd:33:d9:57:77:0b:59:46:ec:1c:
         1e:4a:b5:a5:b0:0f:6b:87:5d:e5:c9:83:52:2c:91:ae:4c:ce:
         da:5f:30:61:a1:f5:84:54:70:35:3a:9a:95:5e:f0:44:d6:65:
         c6:3f:96:0a:22:ba:c6:89:f3:e2:85:58:80:83:7d:75:9e:c2:
         2d:67:78:6d:4d:c4:d8:aa:d1:7c:99:a8:10:aa:0f:02:b8:05:
         f8:86:8b:5b:48:34:e5:52:24:22:65:3b:66:f2:75:e4:a8:a3:
         a5:c5:2f:0c:19:35:69:e3:6f:ab:6f:87:f9:a5:6a:dc:46:61:
         85:d5:3c:77:66:f6:c6:41:ad:ca:23:94:5b:58:48:f8:02:9e:
         93:e5:eb:8d:f6:86:a0:d1:5b:46:3f:59:06:58:6e:9c:53:1e:
         ca:eb:2d:35:e9:a2:21:6b:67:5a:36:c4:08:b9:06:f1:06:21:
         e0:5b:7c:87:8e:cf:be:b0:4b:f9:5a:fd:35:ef:dd:bf:32:1a:
         df:cf:26:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:19:35 2026 by rpki-client