Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
File:                     A008821941A61F29770FC73A584B71178BCAE916.mft (raw, json)
Hash identifier:          AixkDRFx7fqwiS1Aqv1FuBrpyzv+PQK7UkqmiGdZtU8=
Subject key identifier:   5A:4B:30:DE:D6:93:40:52:0E:9A:54:6C:03:D6:6B:4F:1C:6E:CB:06
Authority key identifier: A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16
Certificate issuer:       /CN=A008821941A61F29770FC73A584B71178BCAE916
Certificate serial:       52E506A00118E64D021CB9F1D0257AAE886EA5FF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
Manifest number:          3A
Signing time:             Sat 13 Jun 2026 13:31:02 +0000
Manifest this update:     Sat 13 Jun 2026 13:26:02 +0000
Manifest next update:     Sun 14 Jun 2026 14:03:02 +0000
Files and hashes:         1: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (hash: IsFb+2IB3+NAOmMQ4bANX3K12nM98beEkYNtdgmBcMk=)
                          2: A008821941A61F29770FC73A584B71178BCAE916.crl (hash: YvCY2MMUVtsN+aspYpLNd7EgPaI/GTTCKnRBZZhJcLc=)
                          3: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (hash: MEn9rSCA+X2qT8GUKSJ4R7eRC44YahAnX3SQmIywZAg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl
                          rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e5:06:a0:01:18:e6:4d:02:1c:b9:f1:d0:25:7a:ae:88:6e:a5:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A008821941A61F29770FC73A584B71178BCAE916
        Validity
            Not Before: Jun 13 13:26:02 2026 GMT
            Not After : Jun 14 14:03:02 2026 GMT
        Subject: CN=5A4B30DED69340520E9A546C03D66B4F1C6ECB06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:93:a7:98:38:3d:7d:15:bb:9a:82:68:24:e7:
                    12:2f:f3:e4:5d:0f:34:cf:ec:78:ce:c7:5b:fa:bd:
                    89:20:e5:28:47:98:21:36:b4:07:d2:92:60:14:c7:
                    59:3f:1b:65:22:cb:27:0d:16:db:4e:a9:87:54:e0:
                    f1:ae:bd:b4:81:73:c8:42:41:6c:fb:a7:59:e4:3d:
                    e2:6b:93:28:16:8c:08:84:ea:80:ec:cf:4c:08:9a:
                    c3:7e:8d:79:00:bd:0e:85:fd:95:a3:2d:b5:32:78:
                    4e:ba:59:eb:42:c7:70:c7:c5:9c:0c:f4:b0:6d:5e:
                    c0:7b:5f:08:75:cb:01:c6:c6:a3:9f:25:93:c1:b5:
                    80:b3:65:a2:0a:57:9f:84:ed:ad:2f:c8:fe:ab:9e:
                    02:be:9a:dc:97:3a:ed:f5:45:00:61:db:cf:20:6f:
                    80:41:46:e9:b8:93:04:e9:a1:a3:41:86:65:04:da:
                    af:4f:de:84:29:52:55:55:65:5f:c7:5c:d1:60:e4:
                    41:af:c5:c9:19:5e:61:64:69:63:45:42:2b:df:91:
                    89:9a:a8:d3:79:68:52:41:c5:42:05:ca:9c:8b:c9:
                    a0:52:47:d6:07:28:a6:c5:52:a2:29:3b:d6:15:e9:
                    50:1b:8a:19:cf:74:ec:67:cc:63:d1:a9:83:e3:e5:
                    70:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4B:30:DE:D6:93:40:52:0E:9A:54:6C:03:D6:6B:4F:1C:6E:CB:06
            X509v3 Authority Key Identifier:
                keyid:A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:95:e3:84:94:54:1b:2a:ed:80:5e:6f:9c:44:04:7a:1d:2b:
         f6:06:53:28:80:54:2d:1c:26:b0:8a:6b:52:59:0e:87:19:1c:
         34:3d:59:cd:85:e2:2a:bf:d6:b6:1c:06:1c:e0:30:fa:30:44:
         bb:42:39:86:83:ea:05:55:db:36:4c:0a:81:dc:25:10:af:a2:
         a0:ad:9f:ec:69:29:86:8d:d1:e0:7d:59:b3:c7:92:5a:c1:6a:
         c3:b7:16:57:94:c3:ab:c2:79:49:ea:cf:a6:26:87:c0:e9:93:
         a9:ef:d4:d2:99:41:29:68:0d:1d:be:b9:fe:71:1a:62:a7:87:
         78:b6:b3:40:c6:65:a1:b8:56:a0:ae:c8:25:79:16:2c:bd:5c:
         89:cc:ab:68:d6:11:1a:81:d3:a5:e0:42:50:32:ed:ba:36:2d:
         ad:4f:c6:a6:13:4a:73:7b:0d:de:c3:fc:67:ff:cf:65:20:60:
         87:ef:13:af:ea:b4:e7:9c:24:3e:93:58:6e:a8:d0:b7:3a:b0:
         bd:fa:b7:fd:d7:c6:e6:f4:18:8d:c5:52:3d:a3:af:31:c8:1f:
         22:83:33:30:d2:6f:0c:fd:28:fe:aa:f2:95:08:b6:d4:c6:88:
         9a:9d:f1:29:e2:c0:aa:73:e8:a0:5c:63:03:b3:35:2e:21:e2:
         05:f5:02:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:54:46 2026 by rpki-client