Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft
File:                     A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft (raw, json)
Hash identifier:          1OfNnisRCulo3n2vFrbawbH7hquS8DNDM9K+R0ZOQ9U=
Subject key identifier:   5B:97:B7:8E:C5:7F:B2:CC:95:55:75:C8:03:29:F7:CB:9E:70:B7:10
Authority key identifier: A4:E1:4E:D9:62:51:66:5F:CF:9F:C4:FA:C3:68:DC:40:95:3E:34:0D
Certificate issuer:       /CN=A4E14ED96251665FCF9FC4FAC368DC40953E340D
Certificate serial:       52BFF25247EEEDD799315C2469DA508E2EDB36B1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4E14ED96251665FCF9FC4FAC368DC40953E340D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 18:06:01 +0000
Manifest this update:     Tue 16 Jun 2026 18:01:01 +0000
Manifest next update:     Wed 17 Jun 2026 19:18:01 +0000
Files and hashes:         1: A4E14ED96251665FCF9FC4FAC368DC40953E340D.crl (hash: IoyGbfAqbBuOre6K1809AyzyPk6IM6cOwZxmAZVQ238=)
                          2: 3130332e3136312e3134362e302f32332d3234203d3e20313431363238.roa (hash: q0vh/quQ+eV+UyFsOiPKTjhnWvk1GZbhfwaX1pBs5t4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.crl
                          rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4E14ED96251665FCF9FC4FAC368DC40953E340D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 19:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:bf:f2:52:47:ee:ed:d7:99:31:5c:24:69:da:50:8e:2e:db:36:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4E14ED96251665FCF9FC4FAC368DC40953E340D
        Validity
            Not Before: Jun 16 18:01:01 2026 GMT
            Not After : Jun 17 19:18:01 2026 GMT
        Subject: CN=5B97B78EC57FB2CC955575C80329F7CB9E70B710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b1:ad:f3:3a:cb:67:64:8b:ad:7a:99:81:f1:
                    0f:7b:b1:3b:4b:77:f8:53:c3:81:6c:ef:f5:31:54:
                    35:e6:f2:64:41:4a:f7:50:73:b1:82:52:91:ec:85:
                    20:e6:07:53:13:ff:52:ca:e3:83:65:db:e0:ec:d4:
                    bf:67:08:6d:d7:1b:45:41:a0:39:77:bf:e5:03:5a:
                    5a:75:f2:89:d2:27:a8:65:0b:d8:c8:13:fa:38:b4:
                    04:91:11:0a:f2:df:b2:fa:35:20:d6:9f:42:75:f1:
                    9d:70:3a:7b:51:7a:fa:7f:d5:a5:48:f0:2a:4d:40:
                    48:5f:df:dc:d3:59:b8:37:c8:9d:00:c2:6f:d9:54:
                    4d:a9:9b:4d:14:d5:a6:62:cb:1c:61:8e:d0:15:36:
                    71:1f:9f:61:ca:1f:dd:a7:84:96:2c:b9:22:da:c4:
                    b3:5b:ed:8f:29:25:93:97:7c:53:db:b7:f5:89:8b:
                    99:d3:d2:90:68:21:f3:ca:78:ff:86:e4:8f:41:46:
                    11:e7:51:5e:c3:64:96:0e:26:a5:5b:13:7b:6d:19:
                    fa:6f:58:c3:0e:2a:8c:41:4e:08:ca:28:59:26:2c:
                    ec:6d:bb:28:f3:ad:6c:49:9b:ed:10:57:ce:d9:a7:
                    a0:a2:84:e2:bb:e9:e0:95:28:65:74:80:2c:c8:32:
                    e9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:97:B7:8E:C5:7F:B2:CC:95:55:75:C8:03:29:F7:CB:9E:70:B7:10
            X509v3 Authority Key Identifier:
                keyid:A4:E1:4E:D9:62:51:66:5F:CF:9F:C4:FA:C3:68:DC:40:95:3E:34:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4E14ED96251665FCF9FC4FAC368DC40953E340D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e2:c6:ba:96:a2:6b:3e:58:e4:cf:96:65:63:07:28:e1:3c:
         7d:07:58:66:17:a3:35:2c:66:7c:6e:e5:b5:c9:19:de:b1:be:
         c0:00:66:60:e5:9d:d6:ea:75:a7:a1:80:d6:1d:d6:d4:25:70:
         53:7a:a3:c2:df:06:ee:4b:33:f2:e6:c9:1c:b2:e2:7e:6b:9b:
         cf:ef:69:b0:89:ac:df:68:21:10:78:9a:62:60:e1:21:9d:42:
         64:36:93:37:4d:a6:93:9f:d9:e4:d1:b3:fc:06:27:fb:45:58:
         7c:b9:ce:b8:91:ce:a8:54:92:ed:90:38:a7:35:25:98:42:e9:
         23:80:55:d4:39:5d:48:1d:1b:ad:83:71:aa:a3:eb:b0:3d:72:
         b0:3b:d7:6e:86:ff:69:f9:85:34:80:df:7a:f4:e5:3e:2b:6b:
         df:02:42:2b:d0:cf:78:37:d0:f0:cf:5a:dd:40:dd:71:29:b2:
         c3:d3:37:40:dd:91:db:9f:83:ff:fb:be:69:61:65:26:cc:4e:
         28:e1:c8:05:7d:7c:89:87:c6:b6:a8:84:9f:8f:31:4e:10:9c:
         23:66:43:86:ac:6f:ec:b1:79:98:2c:5b:bc:4e:c9:bb:a6:20:
         27:7e:71:3e:bb:9e:af:dc:e9:5b:27:b6:ed:f5:92:33:4b:a6:
         25:c6:b9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:43:41 2026 by rpki-client