Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
File:                     27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft (raw, json)
Hash identifier:          3qfyHBO1FCzGLvzAkTp9wAJ5To54idHfdLf0RKoq260=
Subject key identifier:   24:9B:9B:53:1E:54:79:76:4A:D0:81:09:72:A8:9E:7B:78:87:94:8C
Authority key identifier: 27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6
Certificate issuer:       /CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6
Certificate serial:       555BF2A1D418375277E59FC477DB4BC92D04A408
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
Manifest number:          38
Signing time:             Fri 12 Jun 2026 16:35:16 +0000
Manifest this update:     Fri 12 Jun 2026 16:30:16 +0000
Manifest next update:     Sat 13 Jun 2026 18:48:16 +0000
Files and hashes:         1: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: VH+O4TH4eDJSI25JypJZ7rsLYdNS/p0NBbNxGChAQqQ=)
                          2: 27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl (hash: OcTNEnrl8piOBynuWk7OwmjoEVl20+sXt3FtjGmR5Ao=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl
                          rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 18:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5b:f2:a1:d4:18:37:52:77:e5:9f:c4:77:db:4b:c9:2d:04:a4:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6
        Validity
            Not Before: Jun 12 16:30:16 2026 GMT
            Not After : Jun 13 18:48:16 2026 GMT
        Subject: CN=249B9B531E5479764AD0810972A89E7B7887948C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9a:91:6e:87:7b:c1:d9:b1:86:4e:b7:8d:a7:
                    0b:01:80:13:c1:bf:46:d9:fb:0d:b5:a7:a8:e4:53:
                    ab:00:cd:80:19:43:4c:f6:dc:41:59:e1:a0:37:4b:
                    e6:0e:43:c2:8c:00:2b:77:bc:46:f5:fa:13:c5:35:
                    d0:50:15:3d:27:66:3a:b1:e6:a0:fe:7c:43:36:e9:
                    2b:15:23:1b:c7:45:14:d6:96:2d:7a:61:67:51:ed:
                    d5:be:aa:90:7c:3b:33:a2:12:b6:b2:a2:eb:7b:3d:
                    38:0e:0b:9b:65:9b:7a:96:a2:6c:52:a1:75:80:87:
                    33:4e:fd:76:70:57:1d:27:3d:34:3a:c9:6f:83:bc:
                    32:68:e9:6c:42:98:5d:c3:f4:44:0a:6f:71:e0:12:
                    d4:1e:2d:87:9f:f1:33:db:1b:fc:8e:02:68:2b:68:
                    ce:50:2a:ea:a6:a1:d1:3d:9a:d6:8f:56:1d:aa:e5:
                    76:d8:72:aa:94:0a:d4:e0:0d:71:79:40:37:a1:55:
                    2f:7e:30:3c:a7:85:f6:0f:b8:bc:68:8d:05:cc:09:
                    80:db:28:d3:32:c6:e2:b1:a0:ed:11:73:33:80:38:
                    c5:79:b6:6b:d1:dc:fd:b7:88:8f:5c:28:af:a3:93:
                    6a:d4:5a:76:d4:43:16:91:bd:51:13:0d:5a:07:8a:
                    73:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9B:9B:53:1E:54:79:76:4A:D0:81:09:72:A8:9E:7B:78:87:94:8C
            X509v3 Authority Key Identifier:
                keyid:27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d2:fa:5f:d8:72:25:b3:3d:c9:c5:5a:3f:87:46:36:f0:9f:
         3b:c7:c6:3e:e3:8b:47:bc:e8:fe:bf:9f:34:bb:1f:01:9b:ea:
         d6:6f:40:59:a1:02:92:2b:3e:44:9d:4b:fd:ca:68:36:45:31:
         48:db:6f:30:6d:bd:2a:74:38:3a:d3:b0:23:10:6c:08:1e:66:
         1c:4c:d2:98:2d:56:83:23:f1:10:83:e5:1a:3e:d6:b0:35:80:
         17:93:70:f0:fc:73:83:12:a2:26:df:2e:65:97:8e:a8:c7:f3:
         b0:14:27:b8:f2:29:c7:67:da:46:46:c6:77:7c:cd:93:01:84:
         17:18:31:7b:91:21:83:35:3f:8b:a0:d5:17:dc:d4:38:26:bd:
         53:b4:cb:be:fe:8c:5d:d7:bc:05:9f:f1:d1:bf:48:a7:bf:d7:
         d0:38:da:c4:60:ee:83:97:2c:8d:86:87:09:58:2d:6c:68:f3:
         bc:78:8f:bb:ee:96:0b:ed:2b:59:10:8a:7d:36:35:8b:e6:e1:
         9a:ba:e2:44:e7:8c:b5:9f:94:9a:2f:35:ef:0c:1d:47:40:ca:
         5d:c8:8f:4b:ee:a8:83:71:bb:60:84:0c:83:bb:9e:be:a1:e9:
         fc:96:23:b3:31:21:7f:e8:07:c6:4b:cc:09:89:46:6c:74:55:
         3f:b3:59:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:38 2026 by rpki-client