Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft
File:                     3B53322385FC84075D5F59542B2C6639361DE40C.mft (raw, json)
Hash identifier:          fE4gWG/szgNoaBaT/Bh2uPPs0J/GSKWbfI3XNZdmcNU=
Subject key identifier:   7E:23:8D:C7:08:DA:42:21:81:EC:29:CF:C5:0E:DE:EC:72:88:E6:04
Authority key identifier: 3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C
Certificate issuer:       /CN=3B53322385FC84075D5F59542B2C6639361DE40C
Certificate serial:       7A637CA4CD4DEE9AFC1AF1815B8BF0B5C16421F4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft
Manifest number:          38
Signing time:             Fri 12 Jun 2026 23:13:28 +0000
Manifest this update:     Fri 12 Jun 2026 23:08:28 +0000
Manifest next update:     Sun 14 Jun 2026 00:46:28 +0000
Files and hashes:         1: 3B53322385FC84075D5F59542B2C6639361DE40C.crl (hash: rDXOzrqYdAYsJWKRwOBFov+HuejVQx1A7RJUf84Eidw=)
                          2: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: edgXYAVoofbMfNNTYL6wJjTWLg+lJA34PwxUNFokvFo=)
                          3: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: zCD5tPWCUNUK6oOFsXZp8GFckmeJahFdBXRBLxy8mgQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl
                          rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 21:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:63:7c:a4:cd:4d:ee:9a:fc:1a:f1:81:5b:8b:f0:b5:c1:64:21:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B53322385FC84075D5F59542B2C6639361DE40C
        Validity
            Not Before: Jun 12 23:08:28 2026 GMT
            Not After : Jun 14 00:46:28 2026 GMT
        Subject: CN=7E238DC708DA422181EC29CFC50EDEEC7288E604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fc:69:25:23:1d:1c:fe:01:5d:3b:4c:cb:c8:
                    dc:46:0b:88:9b:f6:3e:8a:40:82:1d:07:5b:d3:c7:
                    ce:38:92:e2:5c:c2:e9:24:b2:62:04:29:79:77:33:
                    c5:32:20:6a:c0:1d:9f:b0:c6:d8:88:21:29:af:f2:
                    3c:a9:4a:9b:b7:4c:cb:a4:14:a4:10:99:ae:40:14:
                    8b:8c:04:7f:5e:ba:13:e8:e6:9b:b2:94:6a:97:a8:
                    7c:5e:81:39:f3:08:dd:0a:1e:d4:f4:2d:2e:ae:0d:
                    fe:32:1b:3d:bc:9d:be:a6:55:1b:eb:e0:dc:82:f5:
                    96:40:94:0d:fe:d8:77:70:04:01:8c:71:9d:7c:8f:
                    97:1f:ba:b6:a6:80:0b:87:b6:70:c9:aa:f4:24:ac:
                    05:d4:0a:a7:32:b9:73:56:71:e4:7f:f7:d6:75:c4:
                    7f:bf:d3:52:72:9b:03:73:eb:72:06:c3:e4:ee:1d:
                    61:5c:4a:10:a5:59:98:5d:58:be:43:ee:6b:f5:1a:
                    5d:ee:2b:5c:31:57:3e:e8:bf:f7:35:d5:c4:f7:07:
                    c2:e1:5c:88:cc:59:50:c9:39:ff:9d:f4:4f:69:6a:
                    b9:cd:45:c3:39:ff:13:a3:52:6a:96:df:3b:7e:a8:
                    64:3b:00:ea:23:a0:7c:3f:81:32:99:72:09:17:ca:
                    d3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:23:8D:C7:08:DA:42:21:81:EC:29:CF:C5:0E:DE:EC:72:88:E6:04
            X509v3 Authority Key Identifier:
                keyid:3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e3:b1:ec:4c:f2:21:33:50:2a:c8:f2:e3:5a:48:84:6d:5c:
         85:51:0c:08:64:42:30:50:64:af:31:8d:be:a4:04:ad:5a:12:
         eb:97:d4:09:0d:80:e8:64:e1:16:6e:6b:1d:69:6b:c7:14:36:
         57:98:ff:86:17:cd:47:9e:4c:55:08:a8:ca:bd:8a:98:55:36:
         cd:ae:7a:c9:a9:a1:99:39:1a:10:ab:64:0c:2e:71:46:8d:fa:
         05:26:df:1c:8c:91:f9:2f:28:a4:59:10:bb:6d:6a:68:b5:2f:
         e1:ff:1f:ea:0e:d2:e9:75:91:23:ac:97:c4:6a:0b:b5:8b:ee:
         72:c0:74:d0:d6:de:24:95:e5:b9:83:61:3c:1d:22:35:1f:c1:
         47:1e:d5:13:e5:21:10:ac:a5:9a:d2:50:60:11:0b:06:df:48:
         74:b3:a9:46:03:b7:ce:d5:a7:c1:54:c9:09:b1:7d:8b:c6:09:
         be:29:90:eb:2f:e4:25:00:ac:56:97:72:08:56:b6:e3:98:4b:
         7d:0e:a3:42:91:f5:88:f9:79:96:51:3a:35:78:36:a2:6d:24:
         ed:1e:db:16:65:6c:94:ea:3c:a1:80:44:bd:02:cd:2b:29:54:
         22:33:a0:78:cd:cc:c3:f1:f4:85:96:c4:20:66:40:8a:3e:35:
         2a:78:61:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:16:48 2026 by rpki-client