Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
File:                     D280C077A9E801FBA933C9D0085012E09D686927.mft (raw, json)
Hash identifier:          r3z0RfhWhQ0t7KD4moY6H0ipIHOYDa0BfgG5Ld2n7AE=
Subject key identifier:   9F:40:3B:31:41:77:7B:29:CE:44:3C:42:F1:F4:ED:1A:BD:EF:98:88
Authority key identifier: D2:80:C0:77:A9:E8:01:FB:A9:33:C9:D0:08:50:12:E0:9D:68:69:27
Certificate issuer:       /CN=D280C077A9E801FBA933C9D0085012E09D686927
Certificate serial:       462A904F765DEED2BF596BDE4C3E5886C6DE6D15
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
Manifest number:          3D
Signing time:             Wed 17 Jun 2026 03:26:59 +0000
Manifest this update:     Wed 17 Jun 2026 03:21:59 +0000
Manifest next update:     Thu 18 Jun 2026 04:25:59 +0000
Files and hashes:         1: D280C077A9E801FBA933C9D0085012E09D686927.crl (hash: LCiFc7HI/ekBVhBSq4bgj8HmUPpA6m6Ri/esvys6GhE=)
                          2: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: RX42n1sKvH6RuNxwR829dnAhCVM69IdefkYN8dkI7/c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.crl
                          rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2a:90:4f:76:5d:ee:d2:bf:59:6b:de:4c:3e:58:86:c6:de:6d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D280C077A9E801FBA933C9D0085012E09D686927
        Validity
            Not Before: Jun 17 03:21:59 2026 GMT
            Not After : Jun 18 04:25:59 2026 GMT
        Subject: CN=9F403B3141777B29CE443C42F1F4ED1ABDEF9888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:10:13:01:eb:5b:0d:11:e5:52:bd:da:7f:
                    35:2f:78:37:18:80:24:92:f6:70:2d:3e:46:a2:48:
                    16:71:48:95:58:a0:31:61:f1:c5:57:24:ad:f9:f4:
                    d5:94:9e:ac:ce:07:dd:46:81:c0:0c:d5:91:8d:ac:
                    97:40:4e:56:b1:8d:94:77:db:a1:34:1a:0f:d1:ac:
                    1d:8d:42:46:93:20:fa:eb:70:73:87:02:62:2b:91:
                    36:02:1b:02:c0:e9:4d:f6:ae:f3:f4:d8:d4:ef:4c:
                    ce:4e:1f:b6:ae:7f:8d:12:db:79:77:45:58:fd:21:
                    6c:84:c9:18:dd:2b:b2:33:5e:ad:4f:b0:bd:ac:10:
                    51:0d:d1:15:68:7a:5e:bd:37:1a:f3:fa:ac:f5:ac:
                    b5:08:1c:4a:6c:1a:2b:f1:39:23:4c:89:a4:06:9e:
                    30:c9:e8:72:00:e7:62:21:40:99:9b:1b:70:8e:9e:
                    af:d7:c6:3c:a3:c7:bb:1b:c1:79:6f:58:70:e1:a1:
                    a3:48:e9:e2:fd:ed:c9:03:c8:36:93:9e:29:62:fa:
                    6e:22:eb:da:bc:54:7e:32:19:6e:74:cb:7b:70:8e:
                    d1:f7:d2:6a:21:45:3f:fe:bd:37:64:c3:5c:c7:a9:
                    87:06:8f:7e:77:30:67:ec:00:c2:6b:7e:e0:8c:82:
                    94:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:40:3B:31:41:77:7B:29:CE:44:3C:42:F1:F4:ED:1A:BD:EF:98:88
            X509v3 Authority Key Identifier:
                keyid:D2:80:C0:77:A9:E8:01:FB:A9:33:C9:D0:08:50:12:E0:9D:68:69:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:85:2d:e5:bb:52:38:d7:ad:6c:60:c3:6b:b3:1f:d2:be:f8:
         ed:4f:6c:09:ce:13:f3:f6:6b:ed:c3:3c:a3:be:d2:78:f8:44:
         fe:dc:66:52:50:e5:ee:68:ce:0c:c8:28:b7:c0:2d:8b:66:2b:
         28:3d:4d:11:e4:37:37:76:15:11:d7:8c:f9:3e:1a:e2:4f:2f:
         29:02:bf:8d:78:c3:ad:3a:b4:eb:89:28:3e:84:b5:9d:94:28:
         18:3a:99:eb:99:9b:f7:11:18:8c:7b:e1:67:2d:aa:5e:11:fd:
         f1:22:68:85:ad:7a:97:26:78:9d:b8:af:b7:2e:41:6c:a8:13:
         f6:5d:4c:76:49:1a:69:d1:dc:d4:aa:18:e8:85:af:05:c1:ba:
         d7:30:30:bd:49:09:0e:b1:2b:ce:8e:2d:50:5b:7e:56:8b:dc:
         f3:16:16:62:a0:0e:4e:d0:bc:4b:72:5f:55:38:19:7f:c2:c7:
         a5:1b:7f:eb:c9:83:90:9f:eb:df:f0:2d:c4:bb:9d:c5:fb:0e:
         b7:7e:3d:fd:16:6e:3a:f4:9f:b8:49:18:d5:c0:0a:6e:1a:63:
         48:2a:03:cf:58:47:57:d6:6f:62:42:96:99:e4:d6:b4:4f:e0:
         cd:b2:d4:e8:cf:18:e7:d2:8c:17:ce:a0:ea:e6:71:0c:3b:a1:
         5d:c7:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:43:59 2026 by rpki-client