Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft
File:                     BE64AB23612B159BE54939807CB20423D340D326.mft (raw, json)
Hash identifier:          1LgARbfMJDop/GsEMEYUaE7azggvWNatHX1rnLxqvs0=
Subject key identifier:   D6:01:75:CC:EE:82:B3:7F:F5:E1:A8:9F:EF:F7:79:1B:D4:FF:6F:77
Authority key identifier: BE:64:AB:23:61:2B:15:9B:E5:49:39:80:7C:B2:04:23:D3:40:D3:26
Certificate issuer:       /CN=BE64AB23612B159BE54939807CB20423D340D326
Certificate serial:       7B119DE7D6193B0F3642BE9E21E42C8998531E83
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 19:48:05 +0000
Manifest this update:     Tue 16 Jun 2026 19:43:05 +0000
Manifest next update:     Wed 17 Jun 2026 20:33:05 +0000
Files and hashes:         1: BE64AB23612B159BE54939807CB20423D340D326.crl (hash: JSvhfyGlwKjj2bTMfRe+jEYdOT0ECd9MF5BMWDoAfe0=)
                          2: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: gqKKZqiveBSyuWNd8uxps6/yl/at9bVMTgVKSVDM6XY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.crl
                          rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 20:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:11:9d:e7:d6:19:3b:0f:36:42:be:9e:21:e4:2c:89:98:53:1e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE64AB23612B159BE54939807CB20423D340D326
        Validity
            Not Before: Jun 16 19:43:05 2026 GMT
            Not After : Jun 17 20:33:05 2026 GMT
        Subject: CN=D60175CCEE82B37FF5E1A89FEFF7791BD4FF6F77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:05:e1:f5:c5:68:9d:73:88:04:03:e9:b1:49:
                    06:cb:71:5b:8f:f6:5e:67:fd:e9:c1:79:cb:b9:2e:
                    5d:ce:5a:0e:43:14:d1:50:ad:6c:5f:fd:67:6c:5a:
                    87:aa:43:f1:ae:51:06:85:85:ee:83:ab:70:c8:25:
                    5d:b8:6a:7c:a5:da:b2:26:75:69:2f:96:0a:79:c5:
                    3e:39:21:d1:c3:f8:2b:2e:6f:df:e9:c7:06:c7:fd:
                    c0:dd:b2:44:82:0d:b9:2c:be:b3:ae:4f:9b:58:e5:
                    e9:90:06:d5:09:6e:a5:3a:fa:61:3d:7c:e2:62:5b:
                    67:27:30:f4:43:b8:dc:60:e8:53:31:16:2c:7b:95:
                    dd:05:a0:cf:bb:c6:53:03:a1:ea:1e:c0:07:d8:2b:
                    3d:11:82:8d:b1:a5:c1:6a:c8:5b:fc:cb:24:a3:20:
                    ec:0e:ea:2f:78:0d:9c:17:cd:69:b4:48:b6:5c:07:
                    ef:a5:23:0d:82:bf:79:1b:21:14:f4:39:f0:40:50:
                    f7:8e:e9:60:61:d0:22:df:62:e9:17:62:a0:83:73:
                    66:7e:e7:db:50:c8:b0:79:4a:6f:30:eb:f6:a3:5a:
                    1d:62:75:85:2c:d8:cc:8f:0b:2a:72:11:af:5c:42:
                    69:91:bb:75:57:f1:d0:db:ef:90:7c:67:15:7f:05:
                    84:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:01:75:CC:EE:82:B3:7F:F5:E1:A8:9F:EF:F7:79:1B:D4:FF:6F:77
            X509v3 Authority Key Identifier:
                keyid:BE:64:AB:23:61:2B:15:9B:E5:49:39:80:7C:B2:04:23:D3:40:D3:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:90:52:3b:fb:20:8f:13:65:72:ae:00:6c:dc:7e:86:27:76:
         7c:7c:b2:6f:59:b6:1d:7b:00:22:b6:c7:60:86:1c:9e:4a:a4:
         8f:ba:15:b5:5f:7d:00:5a:b5:33:db:99:f2:22:fe:a7:2e:6e:
         87:e4:07:00:38:e8:ee:c6:15:86:27:7f:87:ae:9f:20:f2:0e:
         9d:93:89:fc:24:09:7f:ca:56:18:4b:8f:4d:bb:ef:41:92:e1:
         48:51:c3:6f:7f:6e:74:ad:be:d7:bf:c7:f8:41:4f:47:e7:ca:
         97:78:f9:ac:fc:62:0d:e0:56:af:7f:e6:f6:70:e8:0f:b4:47:
         0f:96:5c:a7:ea:49:f9:f5:56:d0:e2:ba:1b:89:78:c9:54:20:
         80:40:a4:96:c0:99:01:50:ac:48:cf:8b:db:b4:18:e0:3d:df:
         5a:7b:e4:71:7b:b5:73:14:62:79:01:35:37:a5:d4:78:65:50:
         00:ad:cd:86:8b:cf:89:7b:06:3e:c1:ca:25:73:a4:78:cc:50:
         60:05:5e:d2:bf:8f:0e:77:4c:fa:11:6c:59:aa:4d:86:38:6f:
         51:4d:6e:37:7c:88:2c:7c:88:56:3b:a0:25:f9:0c:a6:85:44:
         79:a3:56:74:c7:92:8b:1e:02:1a:46:f6:4b:09:1f:d7:a1:2c:
         80:d4:10:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:40:15 2026 by rpki-client