Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft
File:                     02AAB50744B5B2355B015A3152AD1101FDD80A06.mft (raw, json)
Hash identifier:          bh8oMKL26ZGGq9Adnb6cleYDijQdY9iSW7m+9SLG+wU=
Subject key identifier:   E5:7B:CF:88:6A:66:99:25:BB:7E:6E:29:CA:BC:28:F0:57:D6:24:C4
Authority key identifier: 02:AA:B5:07:44:B5:B2:35:5B:01:5A:31:52:AD:11:01:FD:D8:0A:06
Certificate issuer:       /CN=02AAB50744B5B2355B015A3152AD1101FDD80A06
Certificate serial:       6E0F4379CCC999976363E35DAE6AB238332266B7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02AAB50744B5B2355B015A3152AD1101FDD80A06.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 20:18:43 +0000
Manifest this update:     Tue 16 Jun 2026 20:13:43 +0000
Manifest next update:     Wed 17 Jun 2026 21:46:43 +0000
Files and hashes:         1: 02AAB50744B5B2355B015A3152AD1101FDD80A06.crl (hash: 88MxSVci9S5VIfgb3+92BcILdVux6u4RI77VzuEtLn4=)
                          2: 3130332e3138362e33342e302f32342d3234203d3e20313439363837.roa (hash: I/xRHiSouk0qQoSEfFFc5Esrv4Bnl21g3IwAa+RLLcM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.crl
                          rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02AAB50744B5B2355B015A3152AD1101FDD80A06.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 21:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0f:43:79:cc:c9:99:97:63:63:e3:5d:ae:6a:b2:38:33:22:66:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02AAB50744B5B2355B015A3152AD1101FDD80A06
        Validity
            Not Before: Jun 16 20:13:43 2026 GMT
            Not After : Jun 17 21:46:43 2026 GMT
        Subject: CN=E57BCF886A669925BB7E6E29CABC28F057D624C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ab:ce:f9:7d:d2:03:d4:96:49:4e:5b:40:ca:
                    76:32:c7:31:5d:c5:b0:29:c6:06:bd:a0:ed:a2:16:
                    c7:14:c2:be:61:b6:e0:14:73:79:c7:44:f2:70:fe:
                    d7:2b:e4:60:1d:70:e5:8d:03:5c:7d:e2:04:0d:16:
                    e6:03:57:da:19:15:66:bf:2c:64:cf:d4:18:b7:2f:
                    fa:22:01:4e:79:a0:58:c0:35:22:0a:d1:a3:5f:33:
                    37:78:42:c7:a6:a5:d3:cd:db:59:e8:20:3f:f3:39:
                    dc:ae:f2:55:b8:da:f5:55:03:f4:45:b3:de:9e:dc:
                    40:7d:6e:19:ee:5d:d1:07:f0:f1:48:04:d8:ab:45:
                    26:ac:c0:00:b6:8c:65:b6:c0:fe:95:41:30:2c:c3:
                    46:b0:56:3c:bf:37:5f:96:41:63:79:a6:65:37:1a:
                    e0:c3:8c:0e:7b:f0:46:62:c2:db:e8:e0:fd:75:79:
                    f1:68:79:3c:79:ab:be:9d:b8:3e:4a:9d:4c:b9:ed:
                    3b:fd:17:f8:de:71:f7:8a:26:d1:77:4a:02:64:d9:
                    03:8e:95:f4:81:75:a7:72:41:4f:7a:4d:aa:ca:75:
                    58:6e:d4:12:6f:ab:d7:df:63:53:89:b6:dc:85:99:
                    99:c7:2b:3a:ef:97:d3:92:3a:7d:ac:d7:97:bb:89:
                    ed:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7B:CF:88:6A:66:99:25:BB:7E:6E:29:CA:BC:28:F0:57:D6:24:C4
            X509v3 Authority Key Identifier:
                keyid:02:AA:B5:07:44:B5:B2:35:5B:01:5A:31:52:AD:11:01:FD:D8:0A:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02AAB50744B5B2355B015A3152AD1101FDD80A06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:34:39:50:9f:22:e2:68:40:fe:4d:01:3b:f0:d1:bf:ab:e2:
         c8:df:4f:93:da:bb:66:82:bf:ab:1c:21:3c:06:fb:f3:31:65:
         e0:46:9f:77:72:7a:4f:fd:f6:94:01:ca:01:00:57:42:de:9c:
         56:f2:21:ca:5e:12:25:87:61:33:59:f9:f2:b2:1d:23:ed:53:
         63:d2:63:2b:0c:bb:01:37:4b:ec:79:24:66:5d:57:85:37:10:
         c6:17:b2:7c:22:82:26:e4:fa:58:0d:01:cb:29:08:fa:9a:35:
         00:30:05:23:91:41:a2:fd:39:4b:a2:60:c8:c3:5c:aa:ac:87:
         de:c2:68:47:f4:2f:7f:e5:12:1b:0d:76:fc:39:fb:88:cd:72:
         6b:0d:12:a2:dd:73:b4:9d:67:70:61:63:9c:0d:ff:91:d0:d4:
         22:a4:54:1d:bb:e2:da:6f:1a:4a:d7:83:5d:a5:c4:8c:a6:c1:
         35:63:d5:5c:8e:09:da:85:3f:0e:ad:28:34:95:5d:82:18:b4:
         ca:ec:0c:1d:5d:cf:09:07:b4:27:3b:e3:c7:a3:98:cf:77:d5:
         02:08:c8:2d:1b:27:4a:72:53:c2:b3:92:66:11:52:5b:87:07:
         ce:fa:4f:6d:48:fd:ae:07:e8:47:b7:94:1c:d3:0f:e1:c3:6d:
         b2:10:94:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:14:14 2026 by rpki-client