Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft
File:                     37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft (raw, json)
Hash identifier:          4+/1BcYz3yqgZgqh1cH8HlRjkvupGLHMmOleslwlrr4=
Subject key identifier:   13:9A:BB:9B:6B:F3:15:07:9E:A5:C0:DB:8B:8A:3D:DD:8D:70:91:58
Authority key identifier: 37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57
Certificate issuer:       /CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657
Certificate serial:       7138CDAF7F373A6AF7B74F206553E1DBDE068C14
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft
Manifest number:          39
Signing time:             Fri 12 Jun 2026 23:28:48 +0000
Manifest this update:     Fri 12 Jun 2026 23:23:48 +0000
Manifest next update:     Sun 14 Jun 2026 02:27:48 +0000
Files and hashes:         1: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: O7Qsfv9shx16yrQW2Xe4frvAZ94BOmPstpdbztVAHcM=)
                          2: 37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl (hash: 3bcUb0pFFPVdRotZkBsndtVi2bmQURn/NlIPu8/Wayc=)
                          3: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 7Srge9sdh/jCl7HVuvbDBLE62n0zvsTPF/zsdp6ZWdc=)
                          4: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: Fs+RqQ+YiPkIKy5ykH1+x0x7YMvGdMnBJYUHtFZf1pc=)
                          5: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: jCqON8Yk3P3gMbZcKuKALDn9F/zcK2FOZiJKlSNeDJ8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl
                          rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 20:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:38:cd:af:7f:37:3a:6a:f7:b7:4f:20:65:53:e1:db:de:06:8c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657
        Validity
            Not Before: Jun 12 23:23:48 2026 GMT
            Not After : Jun 14 02:27:48 2026 GMT
        Subject: CN=139ABB9B6BF315079EA5C0DB8B8A3DDD8D709158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:ef:d7:8f:0b:03:12:54:de:96:2e:13:36:
                    37:0a:93:5f:8a:d8:b3:ad:17:49:b3:ba:19:02:91:
                    ad:60:d3:16:40:58:f1:a1:1a:38:d7:a3:d5:7e:2c:
                    7e:13:19:bc:14:a1:98:ec:10:a2:ed:b6:cc:7c:fd:
                    06:22:12:32:a0:e1:cc:b1:13:a2:4f:19:5a:16:24:
                    d8:dc:03:5f:7b:f4:fd:e8:ab:2d:6e:d0:50:2f:a1:
                    1a:88:ff:40:56:17:c7:30:df:aa:31:18:27:fb:78:
                    5d:9d:f6:21:57:d9:5c:12:80:48:81:fa:95:d2:e4:
                    07:3a:e1:ea:a9:cb:7f:11:d9:a3:b6:94:d7:91:98:
                    36:6f:7c:08:4a:17:44:61:e1:fe:02:13:94:34:57:
                    3a:d8:5e:bf:d0:23:79:61:b0:ac:37:32:a7:87:58:
                    63:b5:ba:32:08:d7:f4:88:8f:48:d1:17:33:29:63:
                    63:5d:5a:fe:73:29:84:81:4c:13:a0:66:ba:29:3f:
                    a2:75:6f:13:b6:e0:03:34:93:1d:a9:54:60:ed:ad:
                    49:6d:a1:1e:d3:8f:31:75:aa:05:87:03:43:42:ec:
                    c9:3f:e4:e4:31:50:32:3c:da:b1:12:08:0d:04:e0:
                    9d:97:54:e3:48:b2:88:a1:48:08:79:3f:f1:44:ef:
                    b0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9A:BB:9B:6B:F3:15:07:9E:A5:C0:DB:8B:8A:3D:DD:8D:70:91:58
            X509v3 Authority Key Identifier:
                keyid:37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:84:38:42:4b:2c:e8:8d:32:db:0e:e9:92:d7:fd:1a:c9:ce:
         d9:a2:bb:e9:dc:f6:16:f5:b9:54:dd:d9:e8:44:41:ed:bf:1c:
         44:7d:67:c4:aa:c5:93:91:5b:90:c8:fe:36:bd:08:93:4b:c4:
         80:5d:a9:41:ad:67:ac:db:56:06:ab:30:cf:e0:16:ef:20:f7:
         4e:f7:a4:1a:65:1f:d3:5b:bb:4e:2d:5f:3f:4b:84:bb:d7:06:
         cb:9e:cc:e6:70:b1:73:a7:66:a4:ef:85:2d:5c:6e:f9:50:c4:
         59:77:ae:29:5a:83:4e:3f:ba:42:bf:20:e3:eb:65:af:f2:b1:
         2c:5e:4b:13:4d:23:4b:29:61:d6:cb:f2:8e:65:fb:86:73:6e:
         8a:1d:30:62:b8:c6:a3:a7:67:ce:23:38:0b:a2:05:12:bc:a8:
         08:49:a4:c5:7e:bd:24:3b:c4:e0:40:dd:8b:c2:72:a1:5e:4e:
         7c:46:fa:fc:0e:ae:68:7e:3c:b8:5a:45:27:46:19:eb:3b:9a:
         da:10:93:e6:18:f2:e8:37:7a:38:2a:45:4e:cb:ef:11:0e:a4:
         45:b8:3b:d8:e4:fd:07:cd:f8:06:d4:db:cb:c3:f0:d1:df:d9:
         75:f8:f7:bd:8d:64:50:ce:ea:cf:e5:7f:09:c7:20:e7:45:3e:
         f5:95:8f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:34 2026 by rpki-client