Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft
File:                     B3CEDD0459F32B7E856E38152E88C017667C44C5.mft (raw, json)
Hash identifier:          nDgJ2Xn/5waT96cgUgiQOuLzK6jMgj24UhSwuefokuI=
Subject key identifier:   39:AD:66:87:3E:9B:49:03:71:56:62:D4:30:AA:24:56:24:CA:2A:C4
Authority key identifier: B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5
Certificate issuer:       /CN=B3CEDD0459F32B7E856E38152E88C017667C44C5
Certificate serial:       1887A724E3C0C63227F064E7EA584315C57EBA12
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft
Manifest number:          75
Signing time:             Wed 29 Jul 2026 06:28:38 +0000
Manifest this update:     Wed 29 Jul 2026 06:23:38 +0000
Manifest next update:     Thu 30 Jul 2026 06:54:38 +0000
Files and hashes:         1: B3CEDD0459F32B7E856E38152E88C017667C44C5.crl (hash: Sdg2b1GgSc3HmrPwl1dAXHUjOFUMaouVo5+CBn0RunQ=)
                          2: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: QGY4lzWj4Cp3rLIA8ZEjymdBTTpuyiO2y6++xao+5yg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl
                          rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:87:a7:24:e3:c0:c6:32:27:f0:64:e7:ea:58:43:15:c5:7e:ba:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CEDD0459F32B7E856E38152E88C017667C44C5
        Validity
            Not Before: Jul 29 06:23:38 2026 GMT
            Not After : Jul 30 06:54:38 2026 GMT
        Subject: CN=39AD66873E9B4903715662D430AA245624CA2AC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:cc:62:51:bb:17:ff:3c:89:13:36:c2:e0:
                    f1:90:75:0f:d9:6f:ae:38:9d:80:15:5c:2a:7a:0d:
                    55:09:1a:26:6a:9d:63:4e:33:af:00:5d:6a:40:9b:
                    98:24:9e:f9:29:c5:10:1a:12:10:45:af:69:6a:83:
                    fd:22:a5:73:55:58:5a:ad:c1:71:13:cd:37:0b:fc:
                    fc:45:09:a8:bf:32:c3:d4:0d:0a:d1:ae:d9:91:e4:
                    38:85:e5:bf:9c:4d:a1:59:ae:29:32:9d:b5:5d:d9:
                    a4:85:4f:13:2b:df:76:59:04:75:0e:a7:14:53:10:
                    1c:ca:91:56:60:e0:3b:42:01:f6:b7:84:2c:a8:86:
                    b1:6a:f5:93:92:8c:0d:fc:2b:bb:df:56:ca:b3:95:
                    f3:2f:70:1e:5b:e2:cb:45:bd:07:cb:01:a8:51:d4:
                    af:51:21:0c:1a:8a:1a:7c:2e:ab:52:d0:1f:d9:88:
                    1e:28:c7:35:dc:cb:01:93:ec:0a:4b:d4:5c:96:42:
                    9b:a9:db:82:f5:bf:d2:73:dc:de:22:7f:53:23:9b:
                    e6:25:e1:c3:e9:fb:f2:40:ef:94:c0:36:df:f8:6a:
                    3b:49:23:4d:73:84:65:a1:66:00:07:c8:6c:e9:91:
                    9e:21:ae:50:1d:27:c1:83:15:43:0a:05:0b:4f:f8:
                    ca:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AD:66:87:3E:9B:49:03:71:56:62:D4:30:AA:24:56:24:CA:2A:C4
            X509v3 Authority Key Identifier:
                keyid:B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:35:88:40:79:3a:d3:db:c1:9d:55:f3:9d:84:76:0e:f4:e4:
         77:e3:1c:16:16:1f:77:7e:e9:4d:34:b7:35:c2:67:fa:da:7a:
         db:40:4f:e8:97:b5:31:06:46:34:10:07:4e:93:3d:8c:1e:5f:
         a6:28:63:65:46:ae:b5:5c:88:78:55:43:ed:94:cf:67:c0:49:
         25:af:bc:77:7b:c0:80:a3:c2:4a:7d:b2:7b:1b:5c:a7:94:8b:
         a8:c2:37:6f:21:45:e8:b7:fa:85:cf:a8:7a:86:c6:9a:7f:cc:
         64:12:bd:77:d9:ac:f3:fd:7d:44:03:a1:9e:de:12:24:06:ea:
         24:df:07:42:61:d9:bd:34:88:61:a2:fe:46:51:f6:52:41:49:
         65:16:6d:e4:b1:1d:70:5e:a1:20:b6:dc:ae:63:0e:a7:d5:f8:
         1f:46:45:26:62:d3:b2:91:a0:fd:bd:4a:b8:b7:1b:6e:dc:7b:
         c0:a4:b4:7a:f3:17:0b:48:6d:7f:56:1b:bd:f4:ec:b3:6d:ac:
         bd:18:d9:36:11:2a:03:c2:08:6f:cd:3b:5f:d3:54:88:c4:51:
         0a:5a:3a:ba:2a:a5:57:58:5b:a9:71:3b:8d:b8:3b:8f:f7:d4:
         d2:3d:b0:b4:60:49:b8:fe:77:3b:68:00:9c:f2:4a:7e:3e:13:
         a6:2f:63:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:38:34 2026 by rpki-client