Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft
File:                     8BE5D6878B464D9FA654023C63F4762E67599164.mft (raw, json)
Hash identifier:          P3ZErh4jASbYfXAyf3uGAhxA3XjPY3YpgfzZB36CGSY=
Subject key identifier:   3D:A7:A7:E5:EE:72:DD:77:46:37:2E:18:39:62:BC:2B:73:BB:7A:EC
Authority key identifier: 8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64
Certificate issuer:       /CN=8BE5D6878B464D9FA654023C63F4762E67599164
Certificate serial:       648012673E1D235AF547D8D0B0A44946FCB4ED82
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft
Manifest number:          3A
Signing time:             Sun 14 Jun 2026 01:44:59 +0000
Manifest this update:     Sun 14 Jun 2026 01:39:59 +0000
Manifest next update:     Mon 15 Jun 2026 03:10:59 +0000
Files and hashes:         1: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: gsCaOX96MCEfxecmW7euDwqW3eYjaAOY81K1Ab8R/sk=)
                          2: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: j1q7Tjwd0n3nZPl8Mige83XpdVNq8A8OBRmyY8xB6w0=)
                          3: 8BE5D6878B464D9FA654023C63F4762E67599164.crl (hash: VUU6zN6TrVpcJ8KRn0lsAhYY34scCSU0RiaZtaIJ9dU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl
                          rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Jun 2026 03:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:80:12:67:3e:1d:23:5a:f5:47:d8:d0:b0:a4:49:46:fc:b4:ed:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE5D6878B464D9FA654023C63F4762E67599164
        Validity
            Not Before: Jun 14 01:39:59 2026 GMT
            Not After : Jun 15 03:10:59 2026 GMT
        Subject: CN=3DA7A7E5EE72DD7746372E183962BC2B73BB7AEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ce:34:79:bc:79:2f:22:d4:46:6a:27:8c:9d:
                    0e:22:04:44:1f:39:d2:7a:ae:ed:e8:24:ba:53:b3:
                    4f:6e:cf:89:d1:ba:e0:ce:ab:6f:c1:4c:d3:d9:07:
                    8a:9d:bf:41:72:f1:c8:88:c0:a2:28:3b:95:a0:d3:
                    ad:04:8e:c7:02:bc:6f:56:04:39:57:cc:d1:63:3f:
                    93:a1:68:78:e1:70:09:4a:8d:43:5d:c2:f8:da:33:
                    3a:a1:2f:d8:8b:cd:89:ee:58:04:06:46:30:3a:0f:
                    55:e1:12:52:8e:06:cd:e0:06:1d:e8:76:7a:ad:8e:
                    26:1a:31:86:3a:4a:14:86:6d:ae:f3:28:2d:64:7b:
                    5a:63:cb:f5:3d:ab:6a:30:af:29:67:d1:8a:c2:56:
                    b9:04:16:60:83:74:21:08:dd:8e:36:88:42:8a:80:
                    5b:23:8d:36:a8:12:90:a0:d7:cc:ed:32:ed:7c:d0:
                    45:e4:17:07:a3:df:28:02:c7:cf:a9:59:5e:c2:fd:
                    99:15:a0:56:0d:53:45:f2:2e:d5:1d:19:9d:54:f1:
                    7b:7c:c7:e7:30:ef:52:44:ca:ea:75:89:02:76:04:
                    07:ff:e9:8d:de:3f:36:6b:6f:1e:59:a1:7e:d3:71:
                    f4:f9:76:db:b8:d6:a8:97:27:a8:b5:f4:6e:6b:71:
                    91:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A7:A7:E5:EE:72:DD:77:46:37:2E:18:39:62:BC:2B:73:BB:7A:EC
            X509v3 Authority Key Identifier:
                keyid:8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6e:67:9f:df:3a:19:d9:bd:5e:b7:be:04:66:c1:fd:ed:b1:
         9d:d1:c6:16:1c:1b:41:3b:31:6f:01:47:8e:26:38:77:00:00:
         18:ac:37:52:0c:d1:8d:19:1c:90:21:ce:10:54:be:60:09:0a:
         78:6c:50:e2:16:e1:5e:83:d6:60:d1:9e:26:b3:04:86:21:5b:
         fc:13:7b:5b:27:27:df:92:4e:e3:a9:53:0e:c7:71:e0:2b:f4:
         d2:13:e2:41:df:25:21:71:44:3d:ab:70:3d:5a:92:0d:b8:35:
         c6:6d:81:b0:62:b4:e1:81:50:5a:69:cc:7c:7c:29:2f:22:03:
         73:d6:94:88:b6:48:c1:aa:6a:09:0f:a2:9d:10:3b:49:32:52:
         f9:b2:fd:b1:f2:fe:37:22:e6:39:53:f8:d1:65:48:5a:f2:01:
         76:85:a6:e5:43:b0:3b:f6:24:de:a6:06:61:51:66:0d:4f:4a:
         ac:c4:28:25:1d:6b:91:09:0d:2c:30:34:10:95:a8:c3:de:7e:
         66:e3:f3:c8:0c:a4:38:10:fd:87:f2:26:be:b5:4e:09:d4:2c:
         52:12:97:ea:72:4b:eb:41:6c:66:db:52:c4:2c:3a:e3:1f:6f:
         49:72:27:84:bf:b3:88:5b:f4:1b:9e:43:0e:18:a9:20:2f:ba:
         30:91:8d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:22:04 2026 by rpki-client