Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
File:                     F23594312FE527F86185AE38CC16265280FD40FA.mft (raw, json)
Hash identifier:          oluOzru08UpKkWYTwUlLZfwk17GHvg52+mjpefjbhKM=
Subject key identifier:   E6:CD:B8:44:88:AD:A8:19:29:AB:A8:4B:78:97:2C:98:FE:0F:4F:ED
Authority key identifier: F2:35:94:31:2F:E5:27:F8:61:85:AE:38:CC:16:26:52:80:FD:40:FA
Certificate issuer:       /CN=F23594312FE527F86185AE38CC16265280FD40FA
Certificate serial:       65920B47334098312EE0885F0231D5F7FAE9B51D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
Manifest number:          3A
Signing time:             Sat 13 Jun 2026 07:58:31 +0000
Manifest this update:     Sat 13 Jun 2026 07:53:31 +0000
Manifest next update:     Sun 14 Jun 2026 11:34:31 +0000
Files and hashes:         1: F23594312FE527F86185AE38CC16265280FD40FA.crl (hash: /Owx3ro1hXsLomwhJ7LXYLzCx4RfE0x0SyR3IgVgaN0=)
                          2: 3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa (hash: 7MJm9/1g/gkw58AS1qnqSYx9VaW3KBNo5zcIcw63iro=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.crl
                          rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 11:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:92:0b:47:33:40:98:31:2e:e0:88:5f:02:31:d5:f7:fa:e9:b5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F23594312FE527F86185AE38CC16265280FD40FA
        Validity
            Not Before: Jun 13 07:53:31 2026 GMT
            Not After : Jun 14 11:34:31 2026 GMT
        Subject: CN=E6CDB84488ADA81929ABA84B78972C98FE0F4FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:df:59:f9:87:75:1b:e9:77:a1:fa:62:b4:3a:
                    fc:67:3a:85:8b:1e:c7:7e:ec:5f:cd:56:76:b2:c1:
                    4b:08:d5:bf:02:18:42:86:c8:b3:8b:b7:54:ad:93:
                    ea:d5:a0:34:26:1a:22:29:9b:d8:c6:a1:d5:80:0b:
                    4d:51:c8:e8:b7:c7:a1:e2:8c:1f:c6:41:23:06:0e:
                    1d:1a:27:93:ec:5b:50:13:0b:4f:17:a4:da:42:84:
                    96:45:0b:23:23:6a:f5:1a:17:ad:d1:98:5d:e8:89:
                    e3:8f:48:6d:53:b7:80:cc:71:91:47:9c:0f:65:f6:
                    8b:ca:16:5e:2a:49:9e:81:3e:00:b6:19:30:11:ea:
                    9f:bf:10:2d:6c:b0:a9:50:d7:bb:69:ea:2f:8c:83:
                    50:e1:ee:b5:3c:87:9e:0e:41:e2:27:f6:01:d5:96:
                    c8:7f:1d:81:e4:31:89:95:cf:22:e0:ce:32:48:8f:
                    21:85:e6:a4:b9:02:33:ac:9e:ee:42:c5:97:bd:fe:
                    74:c5:97:8d:a7:69:92:8e:a5:a0:e9:d9:c9:33:a8:
                    6c:79:49:2f:6a:e3:5a:73:5c:95:b1:60:ca:d6:06:
                    48:00:a4:54:79:47:c5:98:ee:1f:71:fb:04:3d:66:
                    04:67:bd:55:b5:b6:64:a6:c8:e4:f2:b1:dd:65:a6:
                    96:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CD:B8:44:88:AD:A8:19:29:AB:A8:4B:78:97:2C:98:FE:0F:4F:ED
            X509v3 Authority Key Identifier:
                keyid:F2:35:94:31:2F:E5:27:F8:61:85:AE:38:CC:16:26:52:80:FD:40:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:21:69:ee:8c:f5:26:a4:59:26:82:75:d5:25:0e:78:0a:66:
         81:3a:6c:52:1c:8e:dc:04:59:97:f9:35:3f:cb:51:01:f4:78:
         e7:72:3a:cd:76:10:33:d6:ab:b6:10:a3:a9:c1:ab:ae:2c:ac:
         db:c1:38:01:01:91:84:75:78:a7:98:2c:1f:a3:22:ee:98:d1:
         a1:76:86:2f:c0:ec:7f:a3:a0:38:e2:65:5d:1e:48:e1:f6:55:
         22:85:17:46:02:5e:60:45:53:d4:bf:28:6c:80:dd:f7:90:95:
         87:db:8e:84:62:84:47:df:ed:57:cf:39:75:d7:30:20:8d:ec:
         7f:2b:a1:04:50:29:5a:63:0a:a4:61:4d:0e:7c:d6:cb:35:05:
         ce:dd:fb:86:b1:e1:8a:ec:5d:06:9e:9e:46:f5:98:e3:52:9c:
         6c:d7:b1:7d:71:d3:a0:9f:ba:08:29:df:e3:e6:63:26:f0:84:
         c5:fb:ab:8e:f5:ec:9a:9f:c0:08:ad:19:84:c6:54:51:6a:6e:
         81:da:e8:c9:62:61:6e:f0:fe:38:50:4f:02:df:84:72:dc:e2:
         bf:b4:42:32:3a:96:e4:b9:82:07:02:c4:0c:f4:23:e7:0b:5a:
         c3:04:a8:d5:dd:ad:3b:14:b9:6b:3f:c1:79:9a:8a:d3:66:67:
         72:ce:81:2a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZZILRzNAmDEu4IhfAjHV9/rptR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjIzNTk0MzEyRkU1MjdGODYxODVBRTM4Q0MxNjI2NTI4
MEZENDBGQTAeFw0yNjA2MTMwNzUzMzFaFw0yNjA2MTQxMTM0MzFaMDMxMTAvBgNV
BAMTKEU2Q0RCODQ0ODhBREE4MTkyOUFCQTg0Qjc4OTcyQzk4RkUwRjRGRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb31n5h3Ub6Xeh+mK0OvxnOoWL
Hsd+7F/NVnaywUsI1b8CGEKGyLOLt1Stk+rVoDQmGiIpm9jGodWAC01RyOi3x6Hi
jB/GQSMGDh0aJ5PsW1ATC08XpNpChJZFCyMjavUaF63RmF3oieOPSG1Tt4DMcZFH
nA9l9ovKFl4qSZ6BPgC2GTAR6p+/EC1ssKlQ17tp6i+Mg1Dh7rU8h54OQeIn9gHV
lsh/HYHkMYmVzyLgzjJIjyGF5qS5AjOsnu5CxZe9/nTFl42naZKOpaDp2ckzqGx5
SS9q41pzXJWxYMrWBkgApFR5R8WY7h9x+wQ9ZgRnvVW1tmSmyOTysd1lppZHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU5s24RIitqBkpq6hLeJcsmP4PT+0wHwYDVR0j
BBgwFoAU8jWUMS/lJ/hhha44zBYmUoD9QPowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDRhMjMyMmYtZjM1MS00MjhkLWE3NDctOTBkZmQzMjJiNTQxLzAvRjIzNTk0MzEy
RkU1MjdGODYxODVBRTM4Q0MxNjI2NTI4MEZENDBGQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMjM1OTQzMTJGRTUyN0Y4NjE4NUFFMzhDQzE2MjY1MjgwRkQ0
MEZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDRhMjMyMmYtZjM1MS00MjhkLWE3
NDctOTBkZmQzMjJiNTQxLzAvRjIzNTk0MzEyRkU1MjdGODYxODVBRTM4Q0MxNjI2
NTI4MEZENDBGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADkhae6M9SakWSaCddUlDngKZoE6bFIcjtwE
WZf5NT/LUQH0eOdyOs12EDPWq7YQo6nBq64srNvBOAEBkYR1eKeYLB+jIu6Y0aF2
hi/A7H+joDjiZV0eSOH2VSKFF0YCXmBFU9S/KGyA3feQlYfbjoRihEff7VfPOXXX
MCCN7H8roQRQKVpjCqRhTQ581ss1Bc7d+4ax4YrsXQaenkb1mONSnGzXsX1x06Cf
uggp3+PmYybwhMX7q4717JqfwAitGYTGVFFqboHa6MliYW7w/jhQTwLfhHLc4r+0
QjI6luS5ggcCxAz0I+cLWsMEqNXdrTsUuWs/wXmaitNmZ3LOgSo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:50:50 2026 by rpki-client