Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft
File:                     7A276C25D89ED838797A7CF49DB2E3D67648B379.mft (raw, json)
Hash identifier:          t2gx2NCpK4l/mL/wR4i63I7sYmpbDAiFwSLMOSDigFo=
Subject key identifier:   31:A0:39:3D:5B:E6:30:2A:00:96:BD:00:53:51:D8:76:EA:29:C1:2D
Authority key identifier: 7A:27:6C:25:D8:9E:D8:38:79:7A:7C:F4:9D:B2:E3:D6:76:48:B3:79
Certificate issuer:       /CN=7A276C25D89ED838797A7CF49DB2E3D67648B379
Certificate serial:       0B37A68787C27708CAC5482DB0FF57A9DAD46BEC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A276C25D89ED838797A7CF49DB2E3D67648B379.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 06:51:09 +0000
Manifest this update:     Wed 17 Jun 2026 06:46:09 +0000
Manifest next update:     Thu 18 Jun 2026 10:44:09 +0000
Files and hashes:         1: 3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa (hash: iWcahQGRrsnCIAhYQ8rHjq7ZMGsSFJ+cbAcqLYsj9no=)
                          2: 7A276C25D89ED838797A7CF49DB2E3D67648B379.crl (hash: hwTNontt1Gli3uYfdGa10AZK0r/mMXjqMjqhqXa8B0Y=)
                          3: 3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa (hash: wDzwvh0/RUfwdplNcUVZOVvbgp+6g5HZt6NGYXuuI5Q=)
                          4: 3130332e36392e3130372e302f32342d3234203d3e20313437303837.roa (hash: JuA2uBSmsLijQSphyrUgKMuE0E0xw1DLO7TmsEYyzKs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.crl
                          rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A276C25D89ED838797A7CF49DB2E3D67648B379.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:37:a6:87:87:c2:77:08:ca:c5:48:2d:b0:ff:57:a9:da:d4:6b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A276C25D89ED838797A7CF49DB2E3D67648B379
        Validity
            Not Before: Jun 17 06:46:09 2026 GMT
            Not After : Jun 18 10:44:09 2026 GMT
        Subject: CN=31A0393D5BE6302A0096BD005351D876EA29C12D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8b:f3:27:ea:01:e9:d4:f2:f7:01:53:ff:e2:
                    5e:75:bc:50:37:33:4e:1c:a0:8f:ff:50:52:4c:f5:
                    12:05:b2:30:7c:d5:00:63:ed:41:45:ae:5e:d9:07:
                    ed:9d:48:ce:07:af:ce:8b:06:c6:4c:27:ad:33:cd:
                    6c:43:8b:65:c9:e4:cd:44:b4:ee:3e:bd:ca:dd:d2:
                    3c:3a:35:3b:23:0b:c3:24:1c:49:63:89:79:42:f1:
                    4f:e3:7f:3b:67:7b:70:49:a0:fb:12:3b:bb:46:c9:
                    51:32:b8:2c:24:01:c8:ac:13:64:6e:55:a1:43:c2:
                    18:82:a3:b5:07:cc:bc:29:35:63:b1:f2:3c:75:c5:
                    e4:05:9d:61:2e:00:4b:eb:02:15:fb:04:82:c1:cf:
                    18:9c:a2:02:83:9b:88:99:ba:ad:7f:3e:b9:f2:93:
                    d9:43:b8:d2:ed:25:ef:d9:db:f0:88:1b:72:4a:4f:
                    91:c1:18:e0:6b:63:5d:8f:cd:f9:a9:b4:84:6d:8f:
                    a6:53:41:9d:48:c7:e8:bd:76:23:44:d3:38:a4:34:
                    e2:50:f7:82:92:2b:95:ce:68:69:fd:32:6e:35:5e:
                    f8:d5:24:a8:21:00:e4:e0:9a:35:f9:34:00:29:4c:
                    fe:2f:96:9c:14:01:16:51:06:85:3d:e9:42:de:c7:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A0:39:3D:5B:E6:30:2A:00:96:BD:00:53:51:D8:76:EA:29:C1:2D
            X509v3 Authority Key Identifier:
                keyid:7A:27:6C:25:D8:9E:D8:38:79:7A:7C:F4:9D:B2:E3:D6:76:48:B3:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A276C25D89ED838797A7CF49DB2E3D67648B379.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:10:a3:73:78:b8:4a:10:dd:d2:7a:f3:a6:9e:32:35:8d:5c:
         fe:d1:99:28:05:f1:8e:f8:dd:37:99:fe:5a:06:49:8d:cf:d6:
         75:62:3e:3d:f5:e4:e2:5b:4c:4e:70:dd:88:41:5b:7b:4a:b9:
         d9:2c:f2:ef:98:84:e8:7c:8f:36:53:97:17:8e:2a:57:ce:35:
         5e:63:5c:8e:f4:fd:6e:f4:49:b9:59:cc:fb:c4:3a:c5:ed:17:
         b0:cd:72:8a:9a:a5:25:b2:e3:92:9d:db:fc:22:d7:88:c9:f1:
         15:f8:07:f9:1f:8c:15:3f:3a:95:4d:1f:8e:eb:cf:28:f7:d6:
         45:8b:ea:8b:c2:32:91:e7:75:82:75:8f:38:5b:57:e7:e0:b8:
         13:90:aa:02:2c:ee:1b:da:51:3c:e9:9c:42:83:45:86:f9:e3:
         c8:67:23:ff:20:51:40:dc:2a:32:b3:1e:03:6e:ca:ad:cc:9f:
         e2:c3:76:39:52:84:9b:26:d2:21:f0:6f:7c:5e:68:29:dc:e5:
         2f:7c:a6:b6:c2:82:77:ae:93:a7:58:be:e2:7b:8e:bd:80:0a:
         8d:1b:41:89:11:b3:03:8d:90:66:e1:a7:2f:60:02:be:6c:42:
         08:ef:33:a7:24:54:6b:02:91:2f:a4:4b:df:ad:3b:0a:f6:7d:
         b1:ff:5e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:46 2026 by rpki-client