Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
File:                     883664DA613C9067C8155436693AEF1A82B3B1A7.mft (raw, json)
Hash identifier:          f9dkSo0sYMkeptpfghHdn95cx1ux4diJgT0yOmplv2g=
Subject key identifier:   42:23:76:27:6D:00:3F:E3:68:B0:63:DB:1C:53:5E:24:1E:3B:58:AC
Authority key identifier: 88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7
Certificate issuer:       /CN=883664DA613C9067C8155436693AEF1A82B3B1A7
Certificate serial:       1B19C34E647F1451BA3CBCE4CC292CBD80A20441
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 07:26:50 +0000
Manifest this update:     Wed 17 Jun 2026 07:21:50 +0000
Manifest next update:     Thu 18 Jun 2026 10:58:50 +0000
Files and hashes:         1: 883664DA613C9067C8155436693AEF1A82B3B1A7.crl (hash: WG1Oryr9aX5eZOXxcuAwmApklSRl9e7AuMmFOyBo3RA=)
                          2: 3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa (hash: lsAH30jSOhgM8OAAJtXdQCjaCWk5sZqIYZ6QuMuRymM=)
                          3: 3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa (hash: ETbLJXXcJM3Uqzm41+hqN5GkUeg2ajdJtzrh7tkT7pM=)
                          4: 3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa (hash: Yz7WTJdxRW1CYrN9boz8edyp4I9Scuuedk3B0vEsAGc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl
                          rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:19:c3:4e:64:7f:14:51:ba:3c:bc:e4:cc:29:2c:bd:80:a2:04:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883664DA613C9067C8155436693AEF1A82B3B1A7
        Validity
            Not Before: Jun 17 07:21:50 2026 GMT
            Not After : Jun 18 10:58:50 2026 GMT
        Subject: CN=422376276D003FE368B063DB1C535E241E3B58AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:b1:59:f4:aa:80:61:38:b1:ae:26:e3:d9:
                    44:2e:0c:eb:8b:63:fa:2f:64:08:64:b7:4e:8c:7b:
                    7d:47:4b:36:35:d3:99:d3:d0:7a:20:04:1f:b5:bc:
                    6d:3a:4c:cc:73:d4:1b:3a:12:b9:1b:70:03:d4:44:
                    1d:2f:d4:f3:71:11:b2:eb:f2:8a:b9:ce:00:17:bc:
                    2d:07:71:8e:3d:fa:4f:0d:c2:1b:f4:db:4c:66:cc:
                    97:7f:dc:a4:6b:56:93:94:82:cd:2c:5b:ff:4d:66:
                    5f:ba:6d:c5:16:84:1a:77:6f:49:78:20:8b:9d:05:
                    84:f6:ca:b3:7c:ab:89:de:50:d0:d0:9e:0c:b6:76:
                    0a:5d:55:1b:ff:16:32:3e:87:5f:f8:63:9b:6a:47:
                    98:51:51:e0:65:84:24:10:07:a8:52:07:7e:08:62:
                    b7:c9:b6:d4:03:c3:16:a2:ba:b1:ba:54:20:d6:45:
                    1a:f7:44:89:68:29:56:d8:f8:91:29:65:05:0a:50:
                    2b:9f:27:58:32:4f:fa:b6:b4:34:b0:8a:d0:0d:5a:
                    e7:07:55:03:18:33:8e:bf:94:71:5e:29:df:1d:fa:
                    4d:a0:a9:58:b9:ae:c4:e3:e3:3d:46:b3:50:c5:2b:
                    95:d8:de:14:28:e9:39:52:f3:bd:bd:cb:12:20:13:
                    5e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:23:76:27:6D:00:3F:E3:68:B0:63:DB:1C:53:5E:24:1E:3B:58:AC
            X509v3 Authority Key Identifier:
                keyid:88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:cf:59:e0:d3:33:58:47:12:12:17:2a:29:c8:89:ae:58:26:
         e2:7c:a0:87:7f:bb:53:9c:c0:90:31:bc:de:9b:a8:06:0a:8a:
         73:a1:b0:7a:ae:08:9a:6a:59:d7:de:6e:e6:ab:23:b4:4d:bc:
         0b:4b:5a:d8:85:84:44:e7:78:10:e4:94:f7:f2:be:14:66:32:
         3f:a2:ca:1b:de:29:3a:c8:29:8c:48:cf:91:bf:99:06:f5:bd:
         2d:96:a3:d0:4d:b2:0b:cf:08:7e:0f:34:35:61:db:18:da:e6:
         83:9e:0d:a7:36:e7:11:4c:44:41:f4:b0:f6:1c:c5:64:b2:fc:
         5f:8f:24:4c:30:4d:ff:93:7d:c1:41:a8:5b:82:95:f3:2f:59:
         89:60:7a:54:20:d9:2e:41:10:8b:7b:fa:bf:74:d2:a0:0c:bf:
         1d:74:a1:43:cd:6a:d5:49:00:52:03:3c:67:c0:a5:32:30:86:
         76:2a:5e:31:50:cf:f1:fd:e1:10:e9:e3:d4:8f:9e:fe:50:5f:
         54:45:5d:6c:87:dd:7c:81:2f:9d:48:ec:e3:c8:a4:d4:dd:e5:
         d8:ba:65:3e:a4:de:92:85:69:52:52:0e:70:ef:3d:fe:df:f2:
         d2:a5:01:c4:39:99:b0:65:a5:6c:8f:f2:10:ad:0e:a6:72:95:
         86:11:30:12
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGxnDTmR/FFG6PLzkzCksvYCiBEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgzNjY0REE2MTNDOTA2N0M4MTU1NDM2NjkzQUVGMUE4
MkIzQjFBNzAeFw0yNjA2MTcwNzIxNTBaFw0yNjA2MTgxMDU4NTBaMDMxMTAvBgNV
BAMTKDQyMjM3NjI3NkQwMDNGRTM2OEIwNjNEQjFDNTM1RTI0MUUzQjU4QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFbFZ9KqAYTixribj2UQuDOuL
Y/ovZAhkt06Me31HSzY105nT0HogBB+1vG06TMxz1Bs6ErkbcAPURB0v1PNxEbLr
8oq5zgAXvC0HcY49+k8Nwhv020xmzJd/3KRrVpOUgs0sW/9NZl+6bcUWhBp3b0l4
IIudBYT2yrN8q4neUNDQngy2dgpdVRv/FjI+h1/4Y5tqR5hRUeBlhCQQB6hSB34I
YrfJttQDwxaiurG6VCDWRRr3RIloKVbY+JEpZQUKUCufJ1gyT/q2tDSwitANWucH
VQMYM46/lHFeKd8d+k2gqVi5rsTj4z1Gs1DFK5XY3hQo6TlS8729yxIgE16bAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQiN2J20AP+NosGPbHFNeJB47WKwwHwYDVR0j
BBgwFoAUiDZk2mE8kGfIFVQ2aTrvGoKzsacwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDY1ZmE5OGYtMWU4NS00NjM4LWJiOWQtMjg3Mzc4YTRjZTg3LzAvODgzNjY0REE2
MTNDOTA2N0M4MTU1NDM2NjkzQUVGMUE4MkIzQjFBNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84ODM2NjREQTYxM0M5MDY3QzgxNTU0MzY2OTNBRUYxQTgyQjNC
MUE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY1ZmE5OGYtMWU4NS00NjM4LWJi
OWQtMjg3Mzc4YTRjZTg3LzAvODgzNjY0REE2MTNDOTA2N0M4MTU1NDM2NjkzQUVG
MUE4MkIzQjFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABTPWeDTM1hHEhIXKinIia5YJuJ8oId/u1Oc
wJAxvN6bqAYKinOhsHquCJpqWdfebuarI7RNvAtLWtiFhETneBDklPfyvhRmMj+i
yhveKTrIKYxIz5G/mQb1vS2Wo9BNsgvPCH4PNDVh2xja5oOeDac25xFMREH0sPYc
xWSy/F+PJEwwTf+TfcFBqFuClfMvWYlgelQg2S5BEIt7+r900qAMvx10oUPNatVJ
AFIDPGfApTIwhnYqXjFQz/H94RDp49SPnv5QX1RFXWyH3XyBL51I7OPIpNTd5di6
ZT6k3pKFaVJSDnDvPf7f8tKlAcQ5mbBlpWyP8hCtDqZylYYRMBI=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:59 2026 by rpki-client