Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.mft
File:                     FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.mft (raw, json)
Hash identifier:          yC+lLWBmyu058NGaslO02qW2HwbDyx6MLz4ajUiH4vA=
Subject key identifier:   86:1B:22:FC:97:20:9C:5B:2A:77:EE:A9:38:D1:C0:2D:81:12:67:1C
Authority key identifier: FE:D5:7B:6A:0C:A0:BB:25:22:DC:00:EC:0D:79:B4:7B:10:D2:D6:AB
Certificate issuer:       /CN=FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB
Certificate serial:       090311A370263348FDCA57B07532424497631701
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 21:25:07 +0000
Manifest this update:     Tue 16 Jun 2026 21:20:07 +0000
Manifest next update:     Wed 17 Jun 2026 21:49:07 +0000
Files and hashes:         1: 3130332e33392e35322e302f32342d3234203d3e203633353033.roa (hash: Fo5NB9vASxOhrtlcTFfuoSfV+Q1Mqfl65n0mUhSShiU=)
                          2: FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.crl (hash: 2+ANlTUprwjhQSIwdXPZOwF2hiXCS8PCdtkWjlwi8tw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.crl
                          rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 21:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:03:11:a3:70:26:33:48:fd:ca:57:b0:75:32:42:44:97:63:17:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB
        Validity
            Not Before: Jun 16 21:20:07 2026 GMT
            Not After : Jun 17 21:49:07 2026 GMT
        Subject: CN=861B22FC97209C5B2A77EEA938D1C02D8112671C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0c:67:f9:60:8b:d4:d8:95:53:02:0e:7d:3c:
                    37:fc:3c:86:13:a9:53:8e:8d:df:65:5f:88:35:e4:
                    9e:27:a4:9c:fc:05:c6:d4:36:91:72:7e:fd:1d:b0:
                    8c:9f:5c:7b:b6:f9:04:16:25:6d:8f:c6:d8:57:89:
                    26:de:da:b9:7a:87:da:e9:e2:6f:67:da:d0:8d:1c:
                    59:94:d1:a2:1a:8d:e6:4d:b4:63:fe:f1:85:4a:61:
                    6c:87:7b:f5:77:18:bf:74:21:18:09:95:53:5e:c0:
                    81:67:7e:a0:8d:e5:4c:83:dc:fc:78:e7:b5:c3:6c:
                    12:7a:66:95:6e:0f:88:25:ec:0b:34:8c:dd:63:3d:
                    6d:42:5b:6f:79:6f:e7:41:96:a6:5b:35:2d:a1:6b:
                    bd:7b:9d:8e:a9:0c:ec:5c:0d:a2:42:60:01:f9:a2:
                    42:39:68:41:00:31:ea:a9:98:31:16:4f:93:59:e6:
                    ab:cd:60:c1:a9:ef:32:a4:38:12:b7:3b:a2:7b:74:
                    2c:ad:8c:7a:59:ca:c7:57:45:a7:c5:17:2a:b1:80:
                    b7:89:58:cb:9d:27:ba:dc:96:23:26:f1:ea:e2:52:
                    4a:23:0e:b4:a3:b2:74:9e:51:cf:ef:10:66:35:c4:
                    2b:32:c2:fd:37:7c:9e:44:8e:2d:44:22:05:80:74:
                    83:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1B:22:FC:97:20:9C:5B:2A:77:EE:A9:38:D1:C0:2D:81:12:67:1C
            X509v3 Authority Key Identifier:
                keyid:FE:D5:7B:6A:0C:A0:BB:25:22:DC:00:EC:0D:79:B4:7B:10:D2:D6:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:1f:4b:e7:ad:1e:a6:e2:35:7d:a9:1b:c4:ff:56:0d:76:73:
         63:eb:2e:ba:85:8d:b6:50:27:4c:2e:be:c7:bd:b6:c6:83:a3:
         d0:06:60:63:5f:28:21:13:79:1c:ee:1f:ea:da:f0:f8:ae:9b:
         c0:c5:3b:72:45:d1:64:3f:cf:f1:43:12:ae:3e:10:71:e2:bb:
         ef:65:ff:17:70:1f:d7:f6:ea:d1:c4:81:24:99:f9:9b:0f:42:
         dc:33:84:bb:ce:b8:86:68:45:d9:82:46:52:13:68:1a:4c:d6:
         22:d8:8e:c6:20:19:09:74:4c:34:fa:0a:bf:44:4d:3d:06:03:
         89:bc:50:54:81:54:08:d1:99:f9:0c:dc:18:de:67:2c:26:c5:
         8c:3a:0b:8e:0b:0b:3a:24:cf:cc:b3:9d:b1:ab:b5:7e:e7:b5:
         82:9b:82:ae:94:47:76:69:ee:ec:ad:5b:21:b6:20:71:9e:b7:
         1f:6a:53:75:53:a2:cd:98:88:b9:16:61:54:37:b2:07:39:98:
         68:62:d2:a5:d3:ba:38:4c:01:7f:5e:02:f3:c3:84:05:bb:e0:
         f7:94:ee:11:98:cd:04:77:7c:ab:48:fb:31:f1:40:b7:1b:64:
         60:1e:d1:1b:5d:6e:e1:67:0a:32:18:46:ca:84:dd:09:a4:d5:
         9d:d3:1c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:40:50 2026 by rpki-client