Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft
File:                     3B610B6D52EFC83BEC0E681395E172E5584CB922.mft (raw, json)
Hash identifier:          xs+/GlQKtnAuy4sHqbqECseUe94Hwnl//FTGpUoJOL0=
Subject key identifier:   EE:C7:20:C0:EC:30:A0:3C:68:B2:8C:AD:19:3C:68:DC:BE:F2:01:E9
Authority key identifier: 3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22
Certificate issuer:       /CN=3B610B6D52EFC83BEC0E681395E172E5584CB922
Certificate serial:       1DC3485F9BBEAF0C987F507D06B13DED319AE7D6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft
Manifest number:          38
Signing time:             Fri 12 Jun 2026 20:55:43 +0000
Manifest this update:     Fri 12 Jun 2026 20:50:43 +0000
Manifest next update:     Sat 13 Jun 2026 23:26:43 +0000
Files and hashes:         1: 3135372e32302e39322e302f32332d3233203d3e20313532343037.roa (hash: JeBWxU2nKUoJd4mmQd29lF3qX2yOUpENL2Ej8COjW7k=)
                          2: 3135372e32302e39322e302f32342d3234203d3e20313532343037.roa (hash: +4k5B1hiZNKTDNmRtO1UucDd1K3kJOf9PkAdB1Yr6bU=)
                          3: 3135372e32302e39332e302f32342d3234203d3e20313532343037.roa (hash: rS+TB49YP+YKxVsyAwTK2Y9kOM5qpa1/Sqk+oSuWw+E=)
                          4: 3B610B6D52EFC83BEC0E681395E172E5584CB922.crl (hash: +qhjGLQbmvq/8Wf1+6bf6kNC518NQVaE7FROLa14bfg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl
                          rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 23:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c3:48:5f:9b:be:af:0c:98:7f:50:7d:06:b1:3d:ed:31:9a:e7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B610B6D52EFC83BEC0E681395E172E5584CB922
        Validity
            Not Before: Jun 12 20:50:43 2026 GMT
            Not After : Jun 13 23:26:43 2026 GMT
        Subject: CN=EEC720C0EC30A03C68B28CAD193C68DCBEF201E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:30:2e:b1:08:a2:42:7e:d0:f0:5a:78:49:
                    32:c5:3b:5b:d3:f8:83:4b:d5:98:97:7f:8a:c8:34:
                    6e:39:db:ea:f5:a5:76:d0:39:8c:f0:27:90:02:71:
                    71:e6:70:e8:a0:39:a5:fa:b7:b2:c2:eb:f1:de:ef:
                    64:f5:18:f5:3b:96:95:aa:17:83:c0:76:79:4d:35:
                    86:8f:5f:ae:5e:0b:26:6a:be:85:df:a2:a6:94:0c:
                    a5:2a:b7:4a:2f:1e:44:c4:1e:b4:d9:39:91:91:f9:
                    12:87:88:ec:0c:d1:35:68:14:27:b4:13:c5:af:ac:
                    e4:76:cc:16:48:20:21:7a:4e:05:fd:39:3a:1e:d6:
                    c1:58:f2:19:3d:fe:e2:df:a6:cf:87:59:8a:19:53:
                    a4:fa:96:f0:bd:18:88:e3:10:cc:bd:93:59:08:c6:
                    88:a4:dd:3c:63:33:91:64:af:85:00:87:92:33:b5:
                    a0:70:a9:e7:9b:a9:f8:29:32:67:7c:97:bd:b3:6d:
                    31:3e:28:ba:73:71:20:a3:eb:bb:7c:35:c6:f8:5c:
                    8b:39:48:62:38:89:69:fd:67:37:97:fb:1a:7c:dd:
                    d6:50:a1:10:2a:be:61:96:26:b5:43:cc:ae:45:9a:
                    b1:6c:5b:32:c1:9e:06:83:a8:96:2c:eb:d1:6d:7d:
                    e9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C7:20:C0:EC:30:A0:3C:68:B2:8C:AD:19:3C:68:DC:BE:F2:01:E9
            X509v3 Authority Key Identifier:
                keyid:3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:64:67:14:25:e3:c4:1a:a8:26:83:55:0f:48:2f:41:74:31:
         cc:2d:7b:72:f3:b2:25:d5:6e:e3:cc:fa:5b:5f:98:44:88:db:
         2c:30:4a:f5:6d:15:fa:c5:ef:5e:60:ad:dc:f5:16:4e:cb:5e:
         cf:e5:45:84:be:15:69:db:6d:0f:a7:a6:74:08:b2:0d:b7:ad:
         b2:27:86:44:22:8e:71:04:0b:99:72:75:92:ad:07:39:e3:e6:
         a5:bd:fc:d3:f1:34:c4:7a:45:d4:e6:4d:b9:36:7d:e6:be:bb:
         eb:11:e1:b8:0a:84:eb:ec:91:27:f6:6b:10:ca:a2:44:14:e4:
         95:16:d2:d9:d0:86:5f:ee:cd:eb:4c:e5:d7:66:ce:7e:1f:7a:
         3a:17:e9:1c:86:81:25:27:a5:55:b2:61:c5:09:89:de:fe:5b:
         7c:b1:3e:ad:2a:55:7b:0f:8b:99:0b:5f:6d:c7:13:bd:a4:0b:
         a3:10:df:2e:29:20:dd:d0:17:bd:34:a7:6f:54:e5:93:e3:38:
         e9:16:82:bb:b5:ea:a4:bb:14:38:18:20:89:c1:ff:15:13:a3:
         fd:c1:eb:40:24:ae:3e:b6:70:d3:9a:94:17:8e:12:24:1f:0b:
         38:e6:48:0d:f0:08:64:a9:17:05:75:15:7e:75:20:ed:98:ba:
         62:07:8b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:16:03 2026 by rpki-client