Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft
File:                     1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft (raw, json)
Hash identifier:          RgWYScZgl7p8iebU1Nv+DkNbDasy8FfEmRBzM93St1c=
Subject key identifier:   0A:A0:E5:05:42:D8:78:32:67:F0:C0:3C:84:76:A2:F2:5A:D8:2A:00
Authority key identifier: 1B:A6:53:A8:22:6A:06:FB:A0:B6:25:B5:C4:B6:A8:46:5F:4E:5F:88
Certificate issuer:       /CN=1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88
Certificate serial:       628327FAF6BBA3A9632B0C717D42B7A09CBA457D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 01:50:00 +0000
Manifest this update:     Wed 17 Jun 2026 01:45:00 +0000
Manifest next update:     Thu 18 Jun 2026 04:20:00 +0000
Files and hashes:         1: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: m7In3QfaxfsyuW0qTfRybGAF6wFMxAA9Ta2LCZQCpzQ=)
                          2: 1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl (hash: 67iaVLU5nOIW2A2diUhbBxRxYEyhBqT8wKPcJugp8yI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl
                          rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:83:27:fa:f6:bb:a3:a9:63:2b:0c:71:7d:42:b7:a0:9c:ba:45:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88
        Validity
            Not Before: Jun 17 01:45:00 2026 GMT
            Not After : Jun 18 04:20:00 2026 GMT
        Subject: CN=0AA0E50542D8783267F0C03C8476A2F25AD82A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fd:86:ba:f8:87:6d:b8:e4:b9:96:bf:93:09:
                    a7:a0:84:3c:35:77:ef:a6:d6:ab:84:dd:74:93:d6:
                    ec:93:96:63:23:94:5a:c2:6f:e4:2e:dc:59:b9:77:
                    90:8a:0c:b9:74:da:24:23:a7:4e:e2:53:4d:4e:af:
                    47:b0:37:61:78:49:6c:ad:e7:0c:a0:79:a2:6a:f8:
                    7c:3d:9c:a1:a9:56:5f:ed:17:1e:92:c2:4f:ff:c3:
                    6f:55:cd:fa:f2:d9:66:3a:9e:c4:3c:77:16:e3:2d:
                    5f:02:d7:3f:39:20:26:93:ca:ee:10:17:82:78:d9:
                    84:ab:03:35:55:97:7c:e3:b2:60:67:0c:73:6e:38:
                    14:64:d8:77:ef:c0:8f:01:45:5c:b7:91:28:cb:67:
                    bd:42:5c:7c:e8:34:1c:5c:07:eb:91:3f:d6:e8:5e:
                    21:bf:4b:74:0e:d6:ef:1b:2c:f2:c4:8d:4a:4e:fa:
                    2e:e8:56:98:1d:66:bc:81:93:a2:ee:37:16:50:1b:
                    56:5b:af:10:2f:66:d9:a7:01:dc:05:29:19:41:ca:
                    c6:cd:bc:4b:b9:ed:cb:07:37:04:60:25:4b:46:e3:
                    a0:24:df:35:7d:f8:3b:95:d7:8e:59:12:81:8a:e4:
                    c9:9a:16:d3:85:3f:90:34:a1:05:80:65:0a:2b:a6:
                    8a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A0:E5:05:42:D8:78:32:67:F0:C0:3C:84:76:A2:F2:5A:D8:2A:00
            X509v3 Authority Key Identifier:
                keyid:1B:A6:53:A8:22:6A:06:FB:A0:B6:25:B5:C4:B6:A8:46:5F:4E:5F:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:2a:40:ac:95:79:7b:0f:98:4f:61:39:55:9b:78:a8:5e:93:
         7f:5a:65:09:1e:e4:83:2a:f2:07:64:eb:54:5b:ca:49:39:4c:
         ff:b3:04:64:59:6b:b5:e5:a0:90:4e:73:e1:b4:f5:ae:d8:b8:
         44:e3:54:5e:1c:f2:5b:08:72:da:4a:cd:56:f8:b9:50:bd:fd:
         1d:fa:ff:dd:24:61:d4:9e:45:78:bb:80:dd:b8:b4:27:ea:10:
         79:50:9e:c2:57:fe:ba:e8:e0:e5:58:8d:cb:2a:a2:e7:10:96:
         c8:10:aa:1d:e2:5c:1a:16:15:71:c2:0f:79:af:c3:42:08:c4:
         ac:11:5d:03:ef:9e:28:01:a3:89:4f:e5:c2:d7:7d:9c:2a:d8:
         12:c4:b8:a0:fa:93:b5:b7:ab:a1:14:81:ef:fd:b6:6e:c4:52:
         40:12:8b:6a:03:cc:9e:d9:22:00:7f:fd:e5:84:1b:16:bd:21:
         45:9a:c1:9c:7e:5f:42:2e:b6:42:c2:44:ac:04:37:db:db:64:
         d0:16:ab:43:82:ff:77:80:e8:ed:32:dc:d4:c7:e9:db:a3:60:
         c6:13:d6:58:fc:56:f1:3a:72:15:45:ba:ad:2d:42:7f:ec:9c:
         2c:6c:c8:05:7d:e7:3d:19:12:dd:d3:5c:02:08:3a:40:a7:fe:
         1b:5b:b6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:21 2026 by rpki-client