Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft
File:                     AD238D07A804B8783FEA2C95818033D3F37F9B13.mft (raw, json)
Hash identifier:          QSV+iycnFnEj3l28VG1ZRKc4tmF3dtdkgOnouG11mug=
Subject key identifier:   5B:91:26:53:7C:54:F9:7B:48:DC:B7:E7:64:92:4A:BE:56:80:99:45
Authority key identifier: AD:23:8D:07:A8:04:B8:78:3F:EA:2C:95:81:80:33:D3:F3:7F:9B:13
Certificate issuer:       /CN=AD238D07A804B8783FEA2C95818033D3F37F9B13
Certificate serial:       1D1E7FAAFF386A03150582FFCFA5AFF9619E5667
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft
Manifest number:          38
Signing time:             Sat 13 Jun 2026 05:51:09 +0000
Manifest this update:     Sat 13 Jun 2026 05:46:09 +0000
Manifest next update:     Sun 14 Jun 2026 09:12:09 +0000
Files and hashes:         1: AD238D07A804B8783FEA2C95818033D3F37F9B13.crl (hash: III1EzBzREvXNR2uOlm9Hr+MILcsXfezloMA6QJ+n0I=)
                          2: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: qb/n9u4SdQIIMXQTv0C6H7ovI6oRYrEsrPfBnGqFhG0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.crl
                          rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 09:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:1e:7f:aa:ff:38:6a:03:15:05:82:ff:cf:a5:af:f9:61:9e:56:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD238D07A804B8783FEA2C95818033D3F37F9B13
        Validity
            Not Before: Jun 13 05:46:09 2026 GMT
            Not After : Jun 14 09:12:09 2026 GMT
        Subject: CN=5B9126537C54F97B48DCB7E764924ABE56809945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:86:72:67:57:8d:83:c3:0f:04:77:39:fc:b0:
                    0e:2e:a2:f9:63:eb:08:4a:bc:22:62:70:6e:f4:8d:
                    17:38:c8:0c:46:bf:95:8c:69:86:f2:3d:fb:22:81:
                    74:ef:ab:58:92:45:32:25:df:27:20:98:b9:93:35:
                    ed:36:d7:e8:de:5a:95:03:db:d4:a1:eb:41:2a:74:
                    68:7f:49:6a:4c:13:5e:2e:28:e5:6d:62:cb:fb:69:
                    aa:ab:58:e4:2a:00:c4:94:14:83:a0:a9:61:98:6a:
                    68:0e:57:10:55:9d:66:ab:59:5d:51:24:39:94:3a:
                    7b:ed:98:20:6c:0c:ed:0d:02:c8:59:3f:9c:db:30:
                    d2:18:3d:21:62:82:77:3c:5f:c9:fd:0f:1a:77:74:
                    02:07:32:8d:09:a9:c8:07:75:9f:22:a8:eb:5b:30:
                    57:f9:48:d7:e5:f8:e5:65:f6:35:c3:f3:71:04:34:
                    97:42:1a:bb:e6:1f:1e:9b:dd:02:01:39:12:a7:7f:
                    1b:85:a9:46:2b:6a:ed:7c:a4:9c:bd:f8:ac:ba:2f:
                    35:c0:fa:97:8a:ee:95:31:87:f8:ed:c6:f3:8b:ca:
                    fc:49:81:58:3b:a2:e3:3b:6d:ab:16:b7:f2:36:45:
                    b5:13:72:f9:6d:fd:ab:3c:80:43:69:e8:b1:75:77:
                    53:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:91:26:53:7C:54:F9:7B:48:DC:B7:E7:64:92:4A:BE:56:80:99:45
            X509v3 Authority Key Identifier:
                keyid:AD:23:8D:07:A8:04:B8:78:3F:EA:2C:95:81:80:33:D3:F3:7F:9B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e7:c0:ff:4e:58:66:16:18:2b:5f:23:95:cf:16:ca:e5:34:
         27:dc:e6:22:d7:da:a9:f3:e2:1b:9d:3f:d0:3c:53:27:11:59:
         e7:9f:45:df:08:1f:72:05:49:81:59:67:20:13:ae:d9:b5:f0:
         41:aa:5e:98:50:97:e8:e2:e9:41:20:e6:72:22:85:f6:28:be:
         1a:01:c6:21:7f:de:a7:96:38:f7:dd:d4:f3:79:d0:15:e0:28:
         03:41:06:88:ed:c0:98:73:bc:c3:fd:fe:cf:4e:65:e3:49:a3:
         af:26:eb:51:dd:1e:be:ca:17:b1:ec:03:ce:05:a7:19:7c:15:
         28:c5:67:e2:39:f3:14:a5:ac:be:10:12:f6:eb:21:c2:ba:ef:
         fb:31:85:11:d5:75:02:55:fb:30:36:7e:26:ef:27:2b:ec:bd:
         ef:bb:5e:64:04:71:98:57:6e:d9:e9:cd:c5:ab:d7:72:cc:6f:
         83:e6:13:f7:fc:bc:40:71:08:5a:e7:e9:ba:61:6a:f9:93:5b:
         04:e3:da:1d:90:ee:7f:64:b7:79:a1:97:a0:59:a0:d3:35:71:
         52:6e:f9:34:be:e9:0f:a2:15:f8:fd:73:64:d0:00:3e:65:f2:
         26:3c:bb:b7:d9:63:af:2e:ed:51:9f:52:f3:b2:e0:7a:72:c1:
         9a:da:a3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:54:58 2026 by rpki-client