Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft
File:                     CF204D748DAD2D1A024DE66D85E425F06F541748.mft (raw, json)
Hash identifier:          Ef/k4PK9gQfVKAcHlMqnvu/yX644hoRq0QaktB9JsUs=
Subject key identifier:   20:26:9E:F7:B4:2A:04:03:29:80:90:C9:03:8E:BD:C0:EC:8E:26:54
Authority key identifier: CF:20:4D:74:8D:AD:2D:1A:02:4D:E6:6D:85:E4:25:F0:6F:54:17:48
Certificate issuer:       /CN=CF204D748DAD2D1A024DE66D85E425F06F541748
Certificate serial:       397F61313AAFC288AA9346898491396597048555
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 23:22:20 +0000
Manifest this update:     Tue 16 Jun 2026 23:17:20 +0000
Manifest next update:     Thu 18 Jun 2026 00:05:20 +0000
Files and hashes:         1: 3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (hash: bx46ncSYTvRKNt6l7eIGw4KadKwqVqeIYnxDZEiogWY=)
                          2: CF204D748DAD2D1A024DE66D85E425F06F541748.crl (hash: L0hoMi0mVU2ZQaHGqk5LxUcQV3+xjxaZ01NWdj2DMls=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.crl
                          rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 00:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7f:61:31:3a:af:c2:88:aa:93:46:89:84:91:39:65:97:04:85:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF204D748DAD2D1A024DE66D85E425F06F541748
        Validity
            Not Before: Jun 16 23:17:20 2026 GMT
            Not After : Jun 18 00:05:20 2026 GMT
        Subject: CN=20269EF7B42A0403298090C9038EBDC0EC8E2654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:c0:69:ba:59:48:ab:a4:3d:db:75:de:70:
                    91:89:57:d0:24:d0:9e:a2:47:f4:4c:dc:16:3f:78:
                    57:3a:19:12:fb:26:89:bc:7b:95:79:eb:66:2f:62:
                    83:e1:ba:3c:c8:32:43:52:9e:72:6b:83:12:1c:f4:
                    08:fa:00:10:10:9f:aa:7a:17:c3:00:e2:77:79:65:
                    bb:35:35:08:4e:1a:e4:e0:43:75:f4:46:29:67:9e:
                    a5:43:8d:9e:57:bf:5f:70:ae:43:60:1c:95:c9:72:
                    44:f0:31:71:b4:a8:0d:51:b6:03:23:c6:23:17:1a:
                    8b:cd:81:cd:2d:b8:2e:be:17:5c:f8:42:34:80:46:
                    66:b0:2c:0e:9a:a2:72:0d:e2:30:d0:45:ca:b8:44:
                    64:af:08:71:0d:ae:d2:ac:c0:bc:12:1a:38:8e:9b:
                    33:0a:80:59:0c:53:b3:5e:e6:56:ef:14:7b:ce:53:
                    ef:9d:ed:6f:b1:e1:b4:12:cf:b8:6a:c0:f2:59:96:
                    5a:5f:5e:a6:4e:24:87:17:39:31:dc:c1:2a:42:c8:
                    45:0f:c8:0a:b5:89:b0:c8:66:f9:33:44:ce:60:8e:
                    cf:00:af:16:72:5d:b1:0f:61:04:3b:8e:b2:18:e7:
                    f0:fd:66:0e:b7:da:42:d1:13:2e:61:28:9d:35:cb:
                    23:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:26:9E:F7:B4:2A:04:03:29:80:90:C9:03:8E:BD:C0:EC:8E:26:54
            X509v3 Authority Key Identifier:
                keyid:CF:20:4D:74:8D:AD:2D:1A:02:4D:E6:6D:85:E4:25:F0:6F:54:17:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:83:51:ce:ad:9c:de:92:a6:83:bb:09:22:aa:f1:79:33:c9:
         9f:29:e0:57:e0:32:4b:32:d0:e1:28:95:02:f7:a4:a9:d0:56:
         6a:32:3b:9e:a3:d5:7d:8b:6a:e5:c6:ae:8d:78:a0:12:c9:4a:
         1f:ec:86:ce:3e:d6:a0:ec:e6:13:ae:d9:4b:3a:35:d6:f0:51:
         39:2b:87:a7:95:05:2c:42:e5:eb:95:f3:e6:0f:65:82:a5:c0:
         62:26:ff:67:5a:65:a8:46:a3:bf:bd:d6:91:b1:fb:bb:76:c2:
         d3:c6:b8:04:de:30:08:e6:72:71:52:ca:38:4f:ed:ce:0f:66:
         0d:36:f9:d5:bd:58:88:89:cf:f9:e5:c4:d3:a2:7f:0a:09:e8:
         78:a9:21:ba:1c:2e:59:09:bb:72:d3:c7:3b:3e:e6:ba:4f:25:
         9b:c3:00:ed:67:7c:6f:fc:3e:f5:3d:83:a6:90:c2:9e:d5:43:
         ab:7d:43:87:4d:d8:e6:a6:b4:87:03:21:8d:eb:5e:d1:ae:e7:
         8c:da:db:e1:a3:1b:11:bf:e5:df:47:8e:a1:80:b7:fb:64:23:
         f4:42:fb:b9:73:38:30:60:7f:8b:49:4b:3f:f9:9f:09:5e:79:
         95:64:1d:ec:66:63:e7:48:93:90:77:f4:bc:79:af:b9:03:e3:
         b9:75:a1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:39 2026 by rpki-client