Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft
File:                     AC7439239B591D2499B70C3230C1C35BE2A0104B.mft (raw, json)
Hash identifier:          DwknKUAXEuoagTts1nixNu3NWmS8Ire8sZUbCUh2Ixg=
Subject key identifier:   5B:35:67:5B:F0:4E:21:A2:6B:A4:68:CA:82:16:72:DA:85:27:3C:1C
Authority key identifier: AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B
Certificate issuer:       /CN=AC7439239B591D2499B70C3230C1C35BE2A0104B
Certificate serial:       1AE27483C36EF3C46538C5251FF4960AF3C8B7FA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft
Manifest number:          3B
Signing time:             Sun 14 Jun 2026 08:07:43 +0000
Manifest this update:     Sun 14 Jun 2026 08:02:43 +0000
Manifest next update:     Mon 15 Jun 2026 11:39:43 +0000
Files and hashes:         1: AC7439239B591D2499B70C3230C1C35BE2A0104B.crl (hash: QPlbSVZuwneTEmF+u9RAesYWMlaP+Wvkp97XMk6GAug=)
                          2: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: w+9v1WGiMKcMfvG8PMyM732c95+KBZTi8eUiSRuPBO8=)
                          3: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: pTJhsbE/QsnSwa5lw6Tt2iC9wy8jG1QR42mcBhsUqfg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl
                          rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Jun 2026 07:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e2:74:83:c3:6e:f3:c4:65:38:c5:25:1f:f4:96:0a:f3:c8:b7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC7439239B591D2499B70C3230C1C35BE2A0104B
        Validity
            Not Before: Jun 14 08:02:43 2026 GMT
            Not After : Jun 15 11:39:43 2026 GMT
        Subject: CN=5B35675BF04E21A26BA468CA821672DA85273C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a7:dd:f4:13:27:18:f6:84:36:7b:56:69:dc:
                    1c:3a:28:30:11:42:c8:2e:0e:75:dc:87:04:35:4d:
                    6a:a0:67:0e:e1:1f:d3:b7:db:9e:dc:37:88:a0:d3:
                    12:9f:d9:c9:ed:9d:7b:83:2b:28:fb:0e:ab:72:a5:
                    d0:5e:0f:fe:c0:79:d5:d2:cf:8b:a0:33:31:48:93:
                    fd:c7:b4:aa:d4:44:c8:13:a8:69:f9:9b:e5:a2:27:
                    1e:63:81:d3:0f:49:a5:5e:95:e1:b7:1c:62:4b:dc:
                    5f:3c:db:dc:c1:c1:50:53:4b:1b:38:6e:d3:da:5a:
                    f4:38:7a:43:8f:42:8d:c4:f4:f3:86:02:56:b4:00:
                    77:c8:64:32:6e:4d:db:87:5f:ac:d1:07:e9:df:81:
                    ef:ee:53:0f:57:5f:66:83:c9:27:f5:0d:f0:43:52:
                    9a:81:fc:73:88:f2:3a:36:23:d0:9a:a4:6d:0a:13:
                    74:10:62:73:72:9c:35:42:32:5c:de:56:22:9d:af:
                    14:35:d7:54:3e:e5:e7:c9:99:b3:02:79:f0:a7:55:
                    92:80:a4:a9:85:06:07:de:c1:88:c6:37:8c:b7:d0:
                    1d:c6:8c:f1:38:12:10:fb:0f:4d:cd:2d:3b:87:71:
                    6f:7e:7b:b7:1c:5a:bc:70:97:37:fe:ae:28:28:56:
                    b8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:35:67:5B:F0:4E:21:A2:6B:A4:68:CA:82:16:72:DA:85:27:3C:1C
            X509v3 Authority Key Identifier:
                keyid:AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:21:24:e1:1b:a1:3e:58:43:a6:d0:72:47:ab:78:40:45:fa:
         28:53:4c:ce:31:eb:e7:96:da:a6:53:97:7e:b6:13:f1:38:50:
         e1:ec:80:08:8f:09:62:b3:48:8b:e1:bd:ab:37:52:0a:c8:3c:
         4f:25:d7:bc:f8:80:23:0e:90:d6:5e:f2:8d:c5:84:db:e2:d2:
         f2:6a:a7:07:69:09:23:33:87:e4:fe:d8:45:50:0f:f7:69:60:
         3c:1e:3a:01:2a:ce:1b:1d:1c:25:71:b6:c7:c7:4b:c8:c3:20:
         da:d9:0f:9a:95:40:47:90:dc:57:a1:88:28:58:ed:ed:d7:10:
         9f:9a:a7:a7:5c:48:42:7e:a6:2c:77:10:4e:49:e7:ed:dc:ff:
         e2:23:ac:04:8b:74:e6:85:74:a6:a5:d6:d9:e1:16:24:13:ef:
         73:ea:a7:39:d5:f4:2b:28:ff:cb:e4:c9:72:53:d1:4f:f1:f5:
         df:80:83:32:ee:15:a8:81:de:bd:17:75:ec:e5:62:03:45:95:
         7d:bb:74:0f:59:f2:04:a5:58:98:18:a2:a8:b1:55:85:6f:75:
         be:69:5b:6b:53:ad:60:42:7d:a7:0f:9d:5a:79:38:b7:26:4e:
         18:bc:21:36:f1:ff:3a:6e:b8:ab:87:53:7a:ae:be:4f:1c:5f:
         24:7b:7e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 17:17:17 2026 by rpki-client