Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft
File:                     AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft (raw, json)
Hash identifier:          avGWLTEVoJDZ0fZG8YqVDlwFtxI2ifr96soOihOMNO8=
Subject key identifier:   65:E0:A1:1C:8C:94:17:59:60:01:20:9B:CC:4D:49:42:1C:E9:2A:A3
Authority key identifier: AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE
Certificate issuer:       /CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE
Certificate serial:       7957912DF7CF589EBDC30A96C40C8E085A6C2BEB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 14:26:41 +0000
Manifest this update:     Tue 16 Jun 2026 14:21:41 +0000
Manifest next update:     Wed 17 Jun 2026 17:04:41 +0000
Files and hashes:         1: AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl (hash: 0mMq9AWgNZfrAuRYviKPAPx7FHdvQCHhWQjibdao5YQ=)
                          2: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: 8knmmlk6VbCEzOwxll8mjdcL7YeA/GevLWgeSXesFqE=)
                          3: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: DURCQ0yaLxsLK0NyQoA/+8rorIbQkFZb7X0OVwrX9XQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl
                          rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 17:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:57:91:2d:f7:cf:58:9e:bd:c3:0a:96:c4:0c:8e:08:5a:6c:2b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE
        Validity
            Not Before: Jun 16 14:21:41 2026 GMT
            Not After : Jun 17 17:04:41 2026 GMT
        Subject: CN=65E0A11C8C9417596001209BCC4D49421CE92AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2f:a6:57:53:52:1f:7d:2d:5c:a4:2a:86:4d:
                    b4:c9:7d:40:5d:18:18:4a:af:9d:52:1a:81:d0:e3:
                    32:10:27:d4:b6:66:38:cd:3a:71:24:ab:bb:e6:a6:
                    ed:70:3c:a8:b1:c7:dc:83:3f:a0:68:a8:e3:0f:b9:
                    06:1d:bc:08:29:4e:c5:74:80:d9:9f:15:a1:f5:ab:
                    f3:aa:c9:2b:f7:b3:7e:48:5f:c3:f2:e2:57:5c:d0:
                    e6:e6:f7:6c:82:c3:d7:64:7e:1d:96:78:5f:d9:12:
                    7b:72:24:24:40:ee:3d:08:02:6a:da:65:bb:63:6d:
                    13:9d:d6:da:b3:a7:be:2a:c0:ce:88:18:e1:39:a6:
                    fd:94:83:6e:5c:89:eb:85:a2:f2:7c:7e:e1:5a:77:
                    13:28:9a:8f:11:e5:7a:14:df:40:2f:4a:5c:15:58:
                    7a:30:d9:7d:f9:27:75:bf:70:40:c4:9a:13:9a:b9:
                    d2:69:17:c6:23:73:ee:c7:6b:75:14:1a:0d:a6:79:
                    4b:a3:ff:d5:e3:45:71:f2:01:fd:1f:f5:42:43:b1:
                    94:62:dc:e7:12:bf:3c:cb:b4:c0:6c:78:67:ae:be:
                    1d:1b:a4:50:7f:6b:66:12:bd:d7:77:f3:fe:f9:0f:
                    6d:87:80:18:4d:cf:c7:a2:c7:d1:a8:31:1d:02:08:
                    fc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E0:A1:1C:8C:94:17:59:60:01:20:9B:CC:4D:49:42:1C:E9:2A:A3
            X509v3 Authority Key Identifier:
                keyid:AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5d:0f:18:a1:11:77:9a:7d:e3:96:82:02:41:ff:ca:c4:c9:
         bc:0b:38:2d:5c:a7:ef:49:93:33:36:02:77:61:83:2c:d2:c8:
         6b:c4:a7:9b:fc:b1:ba:f1:36:4d:d1:aa:08:33:2d:7a:76:0b:
         e0:4f:79:10:21:55:eb:e5:36:c4:d8:8d:01:dc:8f:bb:a6:1c:
         aa:f7:25:ac:77:c7:62:4e:b2:ff:0b:e3:d1:e1:21:cd:5c:36:
         4b:ea:ec:8d:d6:6a:c1:1d:40:3a:c2:7d:48:97:68:8a:26:bc:
         75:d0:68:8d:9f:81:09:72:a6:33:ee:42:08:68:b6:60:80:27:
         be:ce:99:05:f4:8a:68:40:b8:d5:c4:29:62:1d:1f:d5:00:82:
         51:5d:30:2d:cf:3d:ff:05:f2:09:49:cf:42:cb:60:d8:15:1e:
         37:6e:6a:fc:4a:29:b1:5c:d5:cb:51:4d:92:92:11:3f:3f:cd:
         8a:cf:b8:7c:d3:7b:f2:18:b2:f1:bc:11:73:d2:b3:5a:1e:a4:
         24:7a:44:f6:9b:36:9c:28:df:8c:bb:05:16:78:d2:f6:62:ba:
         f0:5c:d2:47:8a:8e:91:ce:d1:42:1c:05:9a:b8:8d:32:e8:cb:
         05:e8:b8:1e:54:d6:f4:e1:f5:4f:e8:6e:cc:18:7b:bb:ae:8b:
         4a:6b:fd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:58 2026 by rpki-client