Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft
File:                     4202428F6F3C953C642F298719C5C35E169724A2.mft (raw, json)
Hash identifier:          G+HhO2Zb+6LP2Vs8uLBJLarueNIV4w6iSNuDQ9UDqYY=
Subject key identifier:   2D:71:2C:6B:4D:DB:D4:19:D2:8D:FB:FC:BF:E0:CD:A4:48:8F:85:97
Authority key identifier: 42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2
Certificate issuer:       /CN=4202428F6F3C953C642F298719C5C35E169724A2
Certificate serial:       6A050751E7B5EB8C2ACEC83728B1F2C4CA387365
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 15:12:39 +0000
Manifest this update:     Tue 16 Jun 2026 15:07:39 +0000
Manifest next update:     Wed 17 Jun 2026 18:17:39 +0000
Files and hashes:         1: 4202428F6F3C953C642F298719C5C35E169724A2.crl (hash: VSTUNuk2ubsppy3khcKEr0XbyEjbDrRb7qvAhluLsSI=)
                          2: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: p7JO88fvmBW+Y+ZP8rFGldK5BvqAlDmHyGZVg3MhVAY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl
                          rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:05:07:51:e7:b5:eb:8c:2a:ce:c8:37:28:b1:f2:c4:ca:38:73:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4202428F6F3C953C642F298719C5C35E169724A2
        Validity
            Not Before: Jun 16 15:07:39 2026 GMT
            Not After : Jun 17 18:17:39 2026 GMT
        Subject: CN=2D712C6B4DDBD419D28DFBFCBFE0CDA4488F8597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:22:03:3d:4b:67:4d:94:a3:e6:cc:37:2d:
                    1c:3b:5c:f1:27:3e:93:40:38:52:4a:e3:76:71:36:
                    73:a0:b7:d9:0e:ef:22:3a:e5:5f:5a:b5:37:79:7e:
                    ad:97:47:bd:0c:ec:8a:ba:dd:03:7d:de:39:fb:2c:
                    58:1c:38:fc:b0:33:dd:dc:e4:33:d1:5a:8d:2c:58:
                    b4:3a:7f:e2:84:84:9e:76:2a:50:7a:0a:a8:cd:b6:
                    9a:cf:57:f2:51:63:c4:7a:fe:89:6a:72:a4:f2:55:
                    de:97:32:b9:21:b5:91:60:2b:b3:dd:38:c1:c4:b5:
                    c8:de:03:5c:87:d7:39:5d:85:35:13:82:6e:fa:3c:
                    1c:f0:91:ca:8e:64:fe:6f:e2:ce:0a:46:b4:c7:14:
                    c4:59:19:e9:c9:50:66:b2:d7:37:52:76:10:84:3b:
                    8a:7a:62:16:47:4d:af:4d:1c:8c:d6:1b:d0:76:15:
                    84:c5:ba:e8:07:69:b2:dc:70:61:d0:39:66:f8:83:
                    e4:a8:64:97:82:9a:70:be:20:af:a9:25:eb:e9:67:
                    89:c4:d4:e6:f1:47:9b:ba:3b:90:f4:f9:c9:68:3d:
                    aa:b4:77:f3:fe:ad:9f:d3:e6:6a:2c:d0:df:46:97:
                    2f:52:df:2c:73:a1:d3:e0:ae:1e:de:50:2e:d8:ee:
                    e9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:71:2C:6B:4D:DB:D4:19:D2:8D:FB:FC:BF:E0:CD:A4:48:8F:85:97
            X509v3 Authority Key Identifier:
                keyid:42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:30:48:eb:eb:ce:13:5c:d7:e5:28:2e:a1:8d:f2:24:8c:bf:
         24:1b:98:41:ef:07:5f:b7:2f:af:46:01:42:5c:73:be:1c:8b:
         54:92:c2:97:39:6d:b2:d2:2e:4c:44:23:f4:ad:e7:9d:ad:f0:
         14:bf:00:96:1c:66:47:b2:23:89:cd:46:25:2c:af:94:f1:c4:
         de:5b:6b:9c:b1:b2:06:ce:a2:b6:3d:dd:39:b1:26:4a:a4:8f:
         5c:d5:bb:e7:18:6b:b7:ad:50:3e:ee:a5:1d:e6:4b:a2:42:63:
         16:5d:65:c9:d1:e8:8b:92:0f:1b:f0:f6:d9:10:dc:91:2b:c1:
         a6:0e:d7:37:24:c3:57:da:ef:0e:5a:e7:4e:3f:30:aa:bd:d5:
         7d:c9:c0:e9:ed:96:1e:4d:e6:cc:f5:47:38:f0:af:f6:79:fc:
         01:2b:56:d6:b4:27:90:be:88:ee:80:e3:c7:9f:6c:a2:ce:8c:
         b5:a7:bf:dc:fb:92:ed:89:e6:2c:1c:59:bd:b5:8a:f7:48:be:
         70:6d:b8:4b:d6:c6:94:a2:8b:5e:9d:ee:0e:72:de:6a:70:17:
         19:b4:63:02:34:ea:36:75:fc:2a:c8:01:77:60:93:cb:32:a4:
         20:d2:c3:03:02:d3:c0:87:82:81:5b:8d:5f:05:f1:aa:cf:62:
         5a:4c:0b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:50 2026 by rpki-client