Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft
File:                     FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft (raw, json)
Hash identifier:          xuG+drx8U59mxzdSMLMNIe313HsRNxE1YrciaUEk/ac=
Subject key identifier:   44:67:88:5A:40:D7:0F:20:2C:B7:83:DA:1A:BD:38:59:09:7C:7E:C5
Authority key identifier: FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB
Certificate issuer:       /CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB
Certificate serial:       5AEF31B806F3ED6DCB7BF2083DEB3A35E87CABC2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 00:08:09 +0000
Manifest this update:     Wed 17 Jun 2026 00:03:09 +0000
Manifest next update:     Thu 18 Jun 2026 04:04:09 +0000
Files and hashes:         1: FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl (hash: 0y/aMNIx/CUosZwj8ubE//0Z7nUK348xleMtQ15xFFA=)
                          2: 3130332e37392e39312e302f32342d3234203d3e203634333035.roa (hash: zgtrY5nvzrcyU/ntTybDgmO63b7QkAMGZiL13SPjEp8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl
                          rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ef:31:b8:06:f3:ed:6d:cb:7b:f2:08:3d:eb:3a:35:e8:7c:ab:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB
        Validity
            Not Before: Jun 17 00:03:09 2026 GMT
            Not After : Jun 18 04:04:09 2026 GMT
        Subject: CN=4467885A40D70F202CB783DA1ABD3859097C7EC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:3b:ef:91:c3:a7:93:5f:3e:e0:68:a0:a4:46:
                    71:28:21:c7:97:fd:44:af:8d:58:9b:cb:0f:30:93:
                    e4:10:d9:f6:60:7a:99:14:a8:b8:7a:1b:96:63:f8:
                    d9:cd:2e:a2:58:e4:17:d1:e5:b5:1d:45:86:ed:22:
                    81:83:7d:03:bd:75:e4:de:51:4c:5c:65:84:c9:9c:
                    1e:9d:db:c3:39:11:db:b0:4c:c6:77:18:6b:a8:f4:
                    57:11:8f:1b:ce:60:6a:ec:b1:2b:99:98:6c:23:16:
                    2b:4c:ec:18:ba:c6:f0:68:8e:a4:b1:7f:36:7a:e0:
                    bf:dd:ff:05:9c:5c:d2:6d:73:73:94:bf:6e:4b:8d:
                    0c:5e:4a:6c:f1:b1:17:6d:88:9f:74:00:ed:88:3a:
                    55:2b:ab:b1:8e:6b:e5:fa:5a:1c:b0:bc:8e:cd:9e:
                    c7:39:f5:41:cc:5b:ff:d7:d2:48:6f:92:f2:a1:f5:
                    ae:12:ca:0c:9b:19:0d:c9:d2:98:27:15:58:d1:20:
                    3a:3d:ea:51:c0:3a:27:37:71:14:b9:b9:72:74:56:
                    fd:b9:c6:b7:50:f7:8f:66:01:f1:ab:b0:8a:dd:f0:
                    3b:c9:b1:90:62:66:78:ec:dd:74:b1:d7:43:8a:8c:
                    93:fc:3d:b7:49:9c:f5:c4:3f:40:fb:11:e6:9f:87:
                    78:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:67:88:5A:40:D7:0F:20:2C:B7:83:DA:1A:BD:38:59:09:7C:7E:C5
            X509v3 Authority Key Identifier:
                keyid:FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:bc:2e:d2:52:d0:14:7c:60:67:08:d5:67:03:22:e5:d4:ad:
         98:c2:47:c3:60:1c:fd:cb:e2:0b:a8:77:91:7e:2c:19:15:0d:
         93:72:82:7d:5e:44:82:9a:b5:7c:6b:8e:35:b2:98:a4:8a:2d:
         25:92:91:b4:0b:01:29:ba:38:bb:b1:87:98:5a:dd:53:7d:8b:
         cc:1c:30:76:d0:05:c7:eb:7c:66:52:cb:f5:f7:0b:f8:2e:59:
         75:c8:68:9f:11:17:2d:4c:88:b9:66:c9:63:c0:e3:8f:3a:cb:
         c3:7d:fe:13:a1:33:38:ff:d7:d3:4d:a9:c0:b3:f9:2d:3f:d2:
         ff:51:0a:51:17:85:d1:89:08:e1:a3:87:17:27:26:d8:83:f7:
         67:cf:08:6b:41:92:fe:81:55:e7:a6:9a:dd:a6:7b:ff:d5:10:
         60:15:ee:f6:77:41:b3:d1:5f:69:9b:90:18:ae:03:9d:40:f4:
         e0:2e:a4:f5:67:69:dd:5b:5f:a3:8f:86:6c:53:9a:76:39:af:
         24:ab:93:93:fd:32:2c:0a:75:4f:d0:e2:ec:20:22:dc:f4:b6:
         1e:9d:c6:66:50:50:2d:e4:a9:bf:12:d4:fb:d2:26:72:4c:9c:
         37:51:42:10:bc:36:86:7d:b3:0d:df:3a:dd:31:2a:ce:1f:6e:
         96:ad:79:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:03:03 2026 by rpki-client