Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft
File:                     BE674235014841C34B81D477A887E851CCB5DE20.mft (raw, json)
Hash identifier:          RoYsG6Y/ku/dWcAJnVQWxzQiEHCOyVPvdUuTPEeJafg=
Subject key identifier:   75:6B:9D:F6:1C:46:30:6F:04:86:67:9E:BA:59:06:FD:B9:2C:7A:B2
Authority key identifier: BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20
Certificate issuer:       /CN=BE674235014841C34B81D477A887E851CCB5DE20
Certificate serial:       30E1B69B3F839FE9C90629C6A094F940C4FF9475
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft
Manifest number:          3A
Signing time:             Sat 13 Jun 2026 13:31:03 +0000
Manifest this update:     Sat 13 Jun 2026 13:26:03 +0000
Manifest next update:     Sun 14 Jun 2026 14:16:03 +0000
Files and hashes:         1: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: s63GisiYkYpRSTD3slDNbXG2Qv97cpH0+c4eaoKLjgA=)
                          2: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: u3ZNobogmTT7oj8DktFleI1vr3pzVaKkxPNl1qOcKkg=)
                          3: BE674235014841C34B81D477A887E851CCB5DE20.crl (hash: J3WG1MXSe/SlfI1BeT3BoQ9UyLnUGlkLHQ7DE7F/YQU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl
                          rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e1:b6:9b:3f:83:9f:e9:c9:06:29:c6:a0:94:f9:40:c4:ff:94:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE674235014841C34B81D477A887E851CCB5DE20
        Validity
            Not Before: Jun 13 13:26:03 2026 GMT
            Not After : Jun 14 14:16:03 2026 GMT
        Subject: CN=756B9DF61C46306F0486679EBA5906FDB92C7AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e3:3e:64:6d:5c:0a:d1:10:03:5e:b0:d8:f7:
                    b3:a7:fc:fa:5c:7f:63:b6:0c:ea:79:77:16:4c:82:
                    de:7b:d5:ab:49:ea:d5:c3:2f:67:5a:2d:10:4c:ca:
                    13:a0:44:ea:c4:de:69:4d:29:34:05:f1:39:a1:ed:
                    a3:7c:11:19:4f:24:7f:7a:07:23:0d:c2:f5:dd:8a:
                    ee:99:bb:f2:95:d6:31:b2:31:44:33:83:59:99:24:
                    c2:95:4f:e7:b4:4e:63:8f:de:ac:3a:ba:3c:ef:e2:
                    0e:a0:91:a9:47:5b:83:2d:0d:03:68:46:00:42:72:
                    50:4b:13:93:d7:9d:a1:1f:d6:b9:e0:08:5c:4f:0a:
                    a4:ac:e1:96:73:9f:0e:70:20:df:64:c0:54:12:7a:
                    79:08:f3:36:e8:cd:78:05:b0:b8:74:76:5f:25:16:
                    ce:5b:70:db:44:a3:5c:71:07:07:20:ee:ff:5f:8c:
                    1a:bb:86:e8:b2:ef:f5:a6:55:dd:00:37:c7:eb:0e:
                    de:c6:84:c2:bb:1d:68:8c:88:bf:61:c1:c3:52:4d:
                    10:c8:53:5a:8f:53:e5:1b:2f:c1:b9:f1:14:d9:11:
                    ee:ed:f4:c7:97:09:b9:bd:b9:62:d5:1d:32:32:42:
                    d3:59:d9:05:85:ec:06:44:2a:67:c5:9e:e8:c8:7a:
                    ca:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6B:9D:F6:1C:46:30:6F:04:86:67:9E:BA:59:06:FD:B9:2C:7A:B2
            X509v3 Authority Key Identifier:
                keyid:BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:69:f9:a9:20:8e:87:03:eb:70:05:8c:68:29:45:e1:39:7a:
         8f:ef:b6:b9:88:15:53:f0:dd:35:bc:90:c8:4b:36:7e:cb:69:
         60:38:6f:24:7e:75:b7:d2:b3:ea:7e:31:34:a9:8b:f2:17:c8:
         0c:0c:12:bc:f8:10:e7:93:c1:ec:1c:d0:dd:cd:7c:97:08:b9:
         33:5f:72:0d:6c:9b:11:d0:5e:1c:e8:5e:01:80:6d:c6:19:18:
         c4:79:1a:e9:0a:0f:06:6d:90:e3:a8:af:63:01:3e:74:f8:d8:
         a1:59:83:11:eb:f3:27:30:ca:de:eb:16:96:92:8d:6f:76:d1:
         5c:91:b5:69:1b:e9:b5:10:5c:96:c4:9e:b6:ce:f9:ff:2e:88:
         7c:ac:37:89:60:b6:18:4b:8c:4f:5e:7c:c0:fc:96:ac:8e:3e:
         af:50:5b:d0:90:b5:d6:c9:00:30:ed:77:ff:be:ce:f8:6a:23:
         1a:d9:01:4a:ee:13:ec:6d:52:ac:37:c8:f5:0b:a6:fe:36:c4:
         15:73:79:f9:7b:bf:b9:a6:07:9b:bc:eb:2e:d7:32:a9:20:06:
         d0:0b:dd:70:22:0c:92:a0:dd:72:f8:54:49:0d:96:af:b3:cb:
         5b:3f:a2:b2:e0:1c:ac:02:a5:7a:7f:e5:0f:b1:6c:a5:00:c5:
         fb:4f:43:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:03:12 2026 by rpki-client