Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft
File:                     FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft (raw, json)
Hash identifier:          L8Cjd5yjwcKZpMi76k9HKF8Wg1OWcnLTSuBNFzKOVCM=
Subject key identifier:   22:65:E4:84:2B:18:A7:4E:59:9A:DF:6E:69:FB:31:37:6D:6E:FF:8C
Authority key identifier: FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D
Certificate issuer:       /CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D
Certificate serial:       5D29250033160EC0CA87363D10CF01047D7F7D4F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft
Manifest number:          3A
Signing time:             Sun 14 Jun 2026 06:35:44 +0000
Manifest this update:     Sun 14 Jun 2026 06:30:44 +0000
Manifest next update:     Mon 15 Jun 2026 09:01:44 +0000
Files and hashes:         1: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: ml34NC1R87K9Zf0E/ACprwe1/Uh3m52IpSfVQUykZgM=)
                          2: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: 1Gi2e8AAFWDOKE+5UmsqFduRDaB0LnfA1YnSqLcGLnY=)
                          3: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: 0IHHzyS35LBwjniI5IhdPgVL9nvhStnNpY8Gs7Vqfnc=)
                          4: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl (hash: Nrgn6Lw7GIF9RhylNy38ngOV8QL50dvWIefjbT0396c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl
                          rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Jun 2026 08:40:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:29:25:00:33:16:0e:c0:ca:87:36:3d:10:cf:01:04:7d:7f:7d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D
        Validity
            Not Before: Jun 14 06:30:44 2026 GMT
            Not After : Jun 15 09:01:44 2026 GMT
        Subject: CN=2265E4842B18A74E599ADF6E69FB31376D6EFF8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ea:89:5d:6b:a9:24:1a:5b:b8:99:55:de:c1:
                    f8:4f:53:c9:a8:df:73:f2:69:49:08:e5:4d:6a:6c:
                    e3:74:a4:2c:dd:3d:f5:79:23:69:42:6f:b9:b0:1b:
                    48:ec:78:21:29:c6:b5:1d:74:ea:15:b5:6a:26:1c:
                    30:c9:1c:de:cb:7b:a9:e8:2e:4b:34:e1:bb:61:96:
                    12:66:41:bb:b9:a7:97:07:75:8d:82:43:5b:51:bf:
                    01:f4:df:c0:28:7a:2e:11:f6:b1:d5:f9:72:69:3c:
                    6d:ab:8c:84:59:dd:5f:d2:12:68:fa:82:fd:53:3f:
                    b2:bf:d8:df:c5:8b:97:ff:39:f1:ba:18:d3:7e:54:
                    b2:e8:e4:d4:4b:48:8e:2f:68:75:6c:d0:e8:cb:ab:
                    06:81:d7:6c:a0:59:ce:f2:28:7f:4e:40:c7:63:ac:
                    88:b5:d0:47:90:2f:7d:de:3a:e8:dd:6e:60:cc:19:
                    68:a4:58:ec:e0:bf:c3:9d:8b:90:5b:6d:c6:03:d6:
                    0b:d7:4e:03:a0:19:35:aa:a7:42:8e:08:48:bc:3d:
                    8e:47:5c:6a:1f:0a:cd:08:07:8f:65:69:d8:b9:d1:
                    8b:4b:44:b3:fc:28:5e:ce:43:75:86:ad:59:d6:6a:
                    fe:ec:aa:71:72:42:0e:85:9b:bc:a3:b1:9e:4e:16:
                    6e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:65:E4:84:2B:18:A7:4E:59:9A:DF:6E:69:FB:31:37:6D:6E:FF:8C
            X509v3 Authority Key Identifier:
                keyid:FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:7c:08:19:76:91:49:ad:6b:5b:93:e0:46:cc:e0:4f:ad:25:
         21:75:29:12:fe:08:cc:34:3d:51:52:9c:dc:17:73:ed:7b:69:
         9e:00:d0:54:86:22:2c:9d:aa:b2:2b:86:19:35:c5:54:bf:ec:
         fa:27:5e:09:2b:e0:fc:07:6e:a6:00:f3:b3:f8:ce:e5:9e:78:
         41:2e:7f:3e:6b:82:06:c7:27:d2:17:ae:b8:b4:94:f6:8e:35:
         4a:27:b5:14:26:40:95:f7:42:51:59:55:69:ed:cf:b8:bd:37:
         2c:4a:50:4f:14:f3:ee:a5:42:4c:5a:e2:75:50:3c:b6:6d:82:
         85:e5:a5:59:61:de:5e:2b:ad:00:29:06:a0:e1:a3:a9:11:da:
         65:e6:19:77:cd:68:45:d7:71:34:ae:b1:bb:e7:cb:f1:9c:35:
         d6:ab:7a:3e:19:cd:dc:03:a5:61:52:7f:b8:24:09:83:a0:70:
         32:1d:32:d1:61:64:de:5a:fe:d5:62:26:bd:2f:2f:55:c5:3d:
         d3:6c:08:60:0a:f1:63:2a:23:8b:57:ab:b1:df:33:d5:14:9c:
         10:60:c6:97:e6:c5:fb:b3:b6:85:4a:ea:15:f7:97:62:15:fc:
         50:86:d6:5a:83:ce:ca:97:fd:6d:59:d3:5b:02:fb:3a:ff:17:
         4d:bc:bc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:22:02 2026 by rpki-client