Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft
File:                     B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft (raw, json)
Hash identifier:          EwUcsToMWQGsx0mPT6XlsB+Vxbn1Gt5THVKUM4BscGg=
Subject key identifier:   92:66:9D:11:44:17:01:17:37:39:CA:3E:C2:78:22:53:36:CC:CC:8B
Authority key identifier: B3:26:20:A4:DF:41:96:D2:A3:CE:BA:2C:CC:78:73:54:9A:AC:61:05
Certificate issuer:       /CN=B32620A4DF4196D2A3CEBA2CCC7873549AAC6105
Certificate serial:       11B6A3602F7D9D6237DDC3169E6D3CBF3FD25C44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft
Manifest number:          3D
Signing time:             Wed 17 Jun 2026 04:38:23 +0000
Manifest this update:     Wed 17 Jun 2026 04:33:23 +0000
Manifest next update:     Thu 18 Jun 2026 06:04:23 +0000
Files and hashes:         1: B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.crl (hash: jiDCYcJyJudrqGxzxwEg2zq2i1FzwEQhkW789seFspg=)
                          2: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (hash: nGCzx9GztVX9RTrYIz2qrQucEQnhRI7SlGCvxpc25Jk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.crl
                          rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b6:a3:60:2f:7d:9d:62:37:dd:c3:16:9e:6d:3c:bf:3f:d2:5c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B32620A4DF4196D2A3CEBA2CCC7873549AAC6105
        Validity
            Not Before: Jun 17 04:33:23 2026 GMT
            Not After : Jun 18 06:04:23 2026 GMT
        Subject: CN=92669D11441701173739CA3EC278225336CCCC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:1b:1f:65:9a:19:5d:50:ca:80:2d:cb:44:
                    a1:35:11:83:7e:ad:9c:bd:e5:33:52:49:99:35:2c:
                    c9:5c:98:84:9d:be:cb:72:eb:04:77:ec:97:47:ff:
                    df:29:a1:a3:50:aa:8d:35:fd:80:e5:a9:51:59:c5:
                    0a:be:7a:e7:92:13:16:f2:ca:2d:71:7d:74:dd:2e:
                    14:7d:88:fc:7d:85:07:41:1b:21:f2:93:b0:ce:ad:
                    ac:f2:8c:d3:4c:44:c1:55:18:27:bf:06:d4:f7:28:
                    02:fc:ec:14:a3:9a:95:40:3d:62:ad:a6:f9:6a:04:
                    14:e2:a5:d9:a6:09:29:ad:a8:fd:48:41:ae:77:13:
                    3e:40:21:b9:c4:8e:2d:58:a9:b9:98:16:e6:76:63:
                    21:53:ed:b6:3f:95:df:ee:37:22:9c:18:5e:91:95:
                    3b:69:6d:17:6d:c5:ff:b6:18:cf:32:1f:61:2c:02:
                    17:84:ac:67:64:6c:83:7a:a6:5e:05:21:d0:6a:93:
                    f7:7a:1d:51:0f:d9:cc:5d:61:92:e6:77:9c:52:e1:
                    0b:d2:e8:3f:ae:c3:bf:92:0a:00:a4:0b:3f:94:99:
                    67:51:c7:cb:ed:c5:96:34:9b:b1:3f:3e:5c:ff:f6:
                    0a:18:60:c9:5b:1a:56:da:be:d3:c0:2c:c0:d6:3c:
                    8c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:66:9D:11:44:17:01:17:37:39:CA:3E:C2:78:22:53:36:CC:CC:8B
            X509v3 Authority Key Identifier:
                keyid:B3:26:20:A4:DF:41:96:D2:A3:CE:BA:2C:CC:78:73:54:9A:AC:61:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b4:25:0e:06:39:fa:a4:24:f6:c1:85:59:69:52:06:92:3a:
         43:45:18:c3:0e:97:d5:b5:42:51:1c:49:89:f0:55:32:ed:a2:
         68:64:bb:81:6f:31:be:6c:c3:2c:b0:32:ae:35:21:8c:30:5b:
         e1:3a:81:f6:4a:05:e4:fb:55:0d:cf:c6:c2:ce:27:ef:77:86:
         7f:50:d0:4b:72:d9:24:e8:ae:79:cf:99:51:8a:39:8d:71:e9:
         23:79:57:46:16:09:3f:bb:f5:95:d1:43:b0:ff:5b:80:9c:01:
         f0:6d:4b:63:7e:b1:33:c5:6f:b5:a6:aa:b5:46:8f:2b:16:83:
         51:2d:10:c0:09:6e:c2:71:37:7d:ad:60:86:56:11:03:73:86:
         55:dd:96:11:fa:4b:4e:61:4f:46:3f:17:70:fe:76:31:ae:42:
         b2:25:b0:d9:4c:73:dd:a4:60:08:55:16:44:ee:1a:20:51:ae:
         2f:ce:fc:77:9e:bf:4c:d3:2a:8c:c9:7f:65:fc:f8:e9:f8:27:
         80:f9:0a:ff:1b:f1:c6:f6:d1:f3:4d:da:7c:06:87:c7:43:f1:
         d3:b2:a1:35:ec:6d:bd:c8:50:89:c9:33:b6:19:53:a9:21:6e:
         a5:e3:38:ed:c0:07:6f:7e:48:05:4e:02:85:63:cc:31:44:0d:
         5b:34:d1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:08 2026 by rpki-client