Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
File:                     02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft (raw, json)
Hash identifier:          LCt4JNnYtwC0pZL0Ne1w1t7gkqYEkHi75/dOix7Y3BQ=
Subject key identifier:   50:50:D8:B7:3D:9E:E8:0C:84:87:4D:1C:1A:01:FE:CF:08:AF:F7:DD
Authority key identifier: 02:F8:6D:79:30:66:6A:C9:B0:80:9D:7A:E4:2C:20:B1:D2:9C:A9:97
Certificate issuer:       /CN=02F86D7930666AC9B0809D7AE42C20B1D29CA997
Certificate serial:       7D869149952855E863EF8831EF8A83A3F24FAA6A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 18:21:16 +0000
Manifest this update:     Tue 16 Jun 2026 18:16:16 +0000
Manifest next update:     Wed 17 Jun 2026 21:38:16 +0000
Files and hashes:         1: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (hash: 8bk4nM/CpViyJMYTIYd85+JJ5zEQXXgNb/ogzW3MmFM=)
                          2: 02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl (hash: RkSYk9N4prw51QTLhGf2oaCpC2PGl/Pec5GfyA4iZ3U=)
                          3: 3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (hash: mckJR6NOoa+yl4WEvk2NXD7USkbc88RSKMqJlOr2OEY=)
                          4: 3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (hash: uqiSzcg0G6eG40rjBlY0LrjMSKV5cIiAMiPhDeDO7GM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl
                          rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 21:38:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:86:91:49:95:28:55:e8:63:ef:88:31:ef:8a:83:a3:f2:4f:aa:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02F86D7930666AC9B0809D7AE42C20B1D29CA997
        Validity
            Not Before: Jun 16 18:16:16 2026 GMT
            Not After : Jun 17 21:38:16 2026 GMT
        Subject: CN=5050D8B73D9EE80C84874D1C1A01FECF08AFF7DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:7e:b2:ca:df:b0:4b:7d:24:c4:aa:6d:43:
                    28:44:3b:76:77:b3:1d:0a:80:95:22:f3:f1:ca:e7:
                    89:b0:7c:82:62:1d:fa:95:78:e5:ba:fd:c3:a9:2e:
                    91:a2:62:a8:6f:8a:45:fb:2f:d2:c0:f4:9f:e2:75:
                    4e:90:0c:f6:ae:7e:94:e2:76:f6:1b:53:55:b2:bf:
                    b7:4c:40:39:c0:90:96:ed:9a:17:39:06:13:8c:44:
                    d7:ab:c9:67:24:ae:06:e1:40:51:29:30:ff:ba:70:
                    a0:f3:f4:95:2e:6e:cc:30:d0:a4:e5:5d:4e:7a:e9:
                    cc:6a:a4:88:fb:cb:3f:0c:bf:76:0c:ff:9e:29:9c:
                    dc:dc:ac:68:66:88:46:5e:ee:92:46:6d:a3:7c:89:
                    bd:fc:8d:9d:bf:fe:38:a5:4f:3a:ec:5e:ad:ab:6e:
                    b1:df:2b:02:c7:30:09:a8:d1:98:d2:65:a8:51:09:
                    38:c9:a7:8f:ff:25:7b:6d:1e:a8:5c:23:b5:84:35:
                    d5:42:76:e2:e9:96:29:ce:82:5c:1e:68:ff:0f:4d:
                    2b:79:c0:69:29:a3:a3:3c:6c:5a:2b:47:32:ae:b8:
                    98:b6:d3:e1:4a:bb:7b:d6:01:2d:d6:3b:e6:6f:4e:
                    b1:2d:f9:f0:64:ed:40:c9:e2:9f:25:bd:f0:ef:d8:
                    de:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:50:D8:B7:3D:9E:E8:0C:84:87:4D:1C:1A:01:FE:CF:08:AF:F7:DD
            X509v3 Authority Key Identifier:
                keyid:02:F8:6D:79:30:66:6A:C9:B0:80:9D:7A:E4:2C:20:B1:D2:9C:A9:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:40:60:23:aa:a1:cc:a7:94:47:20:34:f3:b6:7c:49:dc:c5:
         70:b5:fb:4a:b9:8d:52:81:91:b1:10:ff:4b:db:71:03:49:d4:
         51:dc:96:35:5b:4b:7d:6a:69:bd:3d:a5:16:0c:ee:ce:51:7f:
         02:3e:97:d1:82:4e:81:f5:43:b8:79:d6:38:1f:67:0f:44:20:
         1c:28:0a:93:60:29:47:58:df:93:b0:c5:6a:16:22:7b:a9:70:
         c0:e3:3d:87:96:d1:47:ad:5a:54:0d:71:63:a8:92:06:ab:9e:
         e9:26:90:8c:d0:f6:a5:1b:25:16:0a:f3:0b:aa:82:a2:8b:70:
         16:26:0c:39:f8:40:f7:9e:9b:06:cf:0e:31:d6:f2:04:d3:fb:
         a8:c6:f7:54:d9:eb:86:96:12:e1:42:4c:03:3c:69:a0:6d:2a:
         cf:ec:4b:07:8a:49:9d:c1:1b:fa:db:cf:1b:2d:5e:e8:91:ff:
         ce:b1:52:49:72:e6:7c:1d:dd:43:21:55:68:7f:de:f7:83:51:
         bc:b5:6f:c0:5e:5a:8b:5f:6e:60:4a:b1:dd:90:ca:55:9f:5d:
         27:43:48:8e:50:19:93:aa:5b:06:58:8b:70:12:03:b2:2e:a1:
         2b:d8:fa:93:c8:63:19:0c:ab:4c:60:df:21:3c:d3:17:04:28:
         93:e8:86:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:43:02 2026 by rpki-client