Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft
File:                     37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft (raw, json)
Hash identifier:          OAs9QkpHAI6KDeI7yZztmKwaGmMvMK5W1rawLYLbUVQ=
Subject key identifier:   C0:BE:18:ED:6F:B1:1C:A8:AF:FF:04:3A:85:90:B7:29:40:0E:25:3C
Authority key identifier: 37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5
Certificate issuer:       /CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5
Certificate serial:       1E5436D1D3A6BDE2C6B8F6DD82156AB435FAA490
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 16:49:32 +0000
Manifest this update:     Tue 16 Jun 2026 16:44:32 +0000
Manifest next update:     Wed 17 Jun 2026 20:15:32 +0000
Files and hashes:         1: 3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (hash: fyLe+p/AB5OB4ujhmHeH2n5bm2C2Orl4eXn3b+l/rRM=)
                          2: 37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl (hash: hUZXgH5wFvj/YrtMJLB9BExNhWvFukHjZRWP6W8Bsm8=)
                          3: 3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa (hash: 9QAgWnws9Pn2cMk1Ow/sd4cNStAKYkg3/wIKxMTubt0=)
                          4: 3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa (hash: GHzYb3rjVTEQVdIvZj3KeXXe6U5QglqPAin2lkUZXo8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl
                          rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 20:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:54:36:d1:d3:a6:bd:e2:c6:b8:f6:dd:82:15:6a:b4:35:fa:a4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5
        Validity
            Not Before: Jun 16 16:44:32 2026 GMT
            Not After : Jun 17 20:15:32 2026 GMT
        Subject: CN=C0BE18ED6FB11CA8AFFF043A8590B729400E253C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:73:14:e6:68:66:e9:17:c9:5f:54:a6:b6:0e:
                    04:b9:72:cc:7e:1b:de:c7:85:f3:10:21:5e:78:c6:
                    18:08:f8:6d:80:5c:9c:94:4b:98:02:72:22:81:96:
                    4c:66:4e:20:a9:f4:14:78:89:a0:07:f9:48:a0:21:
                    49:8e:5b:59:11:07:c2:37:6b:f2:7c:27:e7:3a:8d:
                    09:5f:62:6e:75:2b:61:c3:07:18:0c:f0:47:76:23:
                    d6:c1:17:87:9e:a2:23:8e:da:80:81:71:24:4f:44:
                    8b:87:1e:40:aa:10:f0:c7:29:ac:3e:5f:1f:c6:92:
                    f1:c5:f8:1e:95:ce:5e:49:44:a2:a9:53:7f:d8:66:
                    a5:2a:df:87:de:15:2f:bd:10:50:12:9c:d6:16:0a:
                    f7:dc:b0:6c:48:50:38:55:9d:92:bc:88:63:b1:d0:
                    42:2a:03:29:38:70:bb:70:22:bd:be:ed:6f:d4:d4:
                    23:5b:41:86:d0:00:b5:72:65:35:72:e5:66:8d:a0:
                    55:41:14:d1:8e:47:03:ba:98:70:d6:88:48:c2:a9:
                    00:4b:53:ac:77:3b:48:6e:d8:f9:33:5b:d5:17:24:
                    46:5c:e4:96:6b:d2:d2:ac:50:ff:7e:f5:60:ee:0c:
                    ee:13:e1:63:9e:0c:9f:9c:b8:f8:d8:11:cb:7d:1d:
                    ae:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BE:18:ED:6F:B1:1C:A8:AF:FF:04:3A:85:90:B7:29:40:0E:25:3C
            X509v3 Authority Key Identifier:
                keyid:37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:72:c7:e8:c1:41:cf:72:46:62:2c:11:24:eb:c2:5c:37:e3:
         84:b1:34:b9:60:54:cb:99:54:6a:14:7d:f8:d0:46:d9:c9:c3:
         76:2a:c1:6b:56:c2:65:72:21:25:07:12:07:31:b6:67:e7:55:
         61:bc:3f:05:27:4f:52:99:72:3f:cc:39:0d:7e:99:21:a7:b5:
         c3:b6:a3:81:a5:d9:30:bc:be:c7:9d:0b:1c:1b:29:1c:98:4c:
         4f:73:65:ea:b9:7b:08:0c:7d:6b:75:c9:31:26:b8:96:c1:eb:
         e3:d2:33:c3:66:de:73:d2:8b:46:af:41:48:ce:c6:85:d8:87:
         96:09:ad:f9:db:0b:c3:f7:80:17:e9:7e:13:a0:12:61:d5:5b:
         70:57:8a:74:ca:b0:2d:10:09:2e:1f:53:0d:41:cc:83:75:05:
         00:ba:60:e0:0d:4e:2d:7f:4d:ab:43:2e:cb:c1:e9:3c:95:c0:
         6d:f3:90:ea:fc:a7:76:2d:06:0e:f8:7c:ab:35:3e:b8:0c:53:
         77:95:a2:82:ff:c1:50:58:da:dd:77:1c:28:25:92:6f:1c:35:
         59:fc:ce:ca:4c:e9:e7:34:66:81:c6:ff:7f:2a:ce:16:02:af:
         aa:f2:cc:10:83:ea:b9:de:0b:eb:25:d8:81:13:44:7e:f9:a2:
         ec:03:d6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:50:52 2026 by rpki-client