Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft
File:                     1345157B61F361F583DCB52DB3ECBCA10862599B.mft (raw, json)
Hash identifier:          RmPF4xJBA66X86pSkiovSWGj14SZzAE4MI8aLKCxilA=
Subject key identifier:   2B:E4:71:26:E3:1D:EC:19:F0:A4:98:61:0B:DF:64:95:9E:1A:F1:03
Authority key identifier: 13:45:15:7B:61:F3:61:F5:83:DC:B5:2D:B3:EC:BC:A1:08:62:59:9B
Certificate issuer:       /CN=1345157B61F361F583DCB52DB3ECBCA10862599B
Certificate serial:       4354C2C74C1517365F88A48680EF3F00C911903B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1345157B61F361F583DCB52DB3ECBCA10862599B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 05:39:45 +0000
Manifest this update:     Wed 17 Jun 2026 05:34:45 +0000
Manifest next update:     Thu 18 Jun 2026 07:22:45 +0000
Files and hashes:         1: 1345157B61F361F583DCB52DB3ECBCA10862599B.crl (hash: gGZ6EMkFOjMe/JmV/mgLEppiN6plkvu2LgUHvnJVTMA=)
                          2: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: jNEFs2GtzFKSgVBlfyDoiMOmxKN4+FK/qSYbZvqpibs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.crl
                          rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1345157B61F361F583DCB52DB3ECBCA10862599B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:54:c2:c7:4c:15:17:36:5f:88:a4:86:80:ef:3f:00:c9:11:90:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1345157B61F361F583DCB52DB3ECBCA10862599B
        Validity
            Not Before: Jun 17 05:34:45 2026 GMT
            Not After : Jun 18 07:22:45 2026 GMT
        Subject: CN=2BE47126E31DEC19F0A498610BDF64959E1AF103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e0:74:11:35:8f:b2:63:65:77:af:9b:e5:22:
                    78:9a:84:c1:27:7d:94:14:9d:5e:75:40:54:56:1d:
                    e6:15:8d:70:43:67:3d:d0:cc:82:0e:93:a7:e5:bd:
                    78:5d:df:6e:4b:b1:54:8b:f1:e4:f5:23:95:84:0f:
                    74:79:22:69:aa:98:c0:4b:6e:95:fe:84:46:ab:81:
                    96:fa:cf:d9:6b:ba:5b:ef:ff:4a:12:a8:76:12:8b:
                    ea:9d:e2:95:5a:c7:19:e4:ef:79:b1:c8:eb:2f:7f:
                    f1:fb:31:e2:3f:06:46:d0:7e:02:2d:9d:f2:14:42:
                    1a:57:87:c9:59:39:6f:73:b5:7f:74:e4:05:e7:e1:
                    a8:13:8a:3e:65:24:b4:ea:c3:4f:21:16:47:0c:14:
                    c3:ee:23:3a:89:1f:ec:47:ce:f6:a6:69:75:09:d3:
                    0d:e3:c2:81:89:a2:d0:06:c5:05:97:a5:64:8a:fe:
                    5d:a5:70:0e:4b:c4:75:f3:50:d4:27:13:8a:cf:2c:
                    34:1c:8e:81:cc:1b:62:bc:04:59:ac:65:36:60:ad:
                    a7:d7:d9:01:52:2d:41:7b:01:76:0c:b2:97:40:64:
                    47:2a:fc:18:f2:42:c2:5e:ed:c5:ca:87:87:b7:37:
                    51:f9:62:c6:b5:ce:10:a7:a7:c0:47:ec:1b:a9:43:
                    28:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E4:71:26:E3:1D:EC:19:F0:A4:98:61:0B:DF:64:95:9E:1A:F1:03
            X509v3 Authority Key Identifier:
                keyid:13:45:15:7B:61:F3:61:F5:83:DC:B5:2D:B3:EC:BC:A1:08:62:59:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1345157B61F361F583DCB52DB3ECBCA10862599B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:97:ec:3f:8c:ee:0c:c5:d8:bf:82:8b:fb:2f:c9:6e:25:95:
         db:9c:85:ae:80:5b:b2:b9:ed:9d:5d:a6:95:0d:d3:94:18:51:
         1f:86:21:44:40:e4:9c:ed:e2:af:c4:b7:f5:91:e9:8c:78:2e:
         5a:4d:51:ce:b2:61:ce:95:58:b0:67:f7:aa:2a:67:df:ae:a7:
         86:c4:29:fb:e3:d9:67:9e:f1:07:57:9f:0f:c1:b2:aa:29:33:
         ef:3f:f1:c7:c2:55:64:b6:33:06:b1:fb:66:1d:19:41:84:d8:
         b2:d1:27:03:54:14:62:2d:32:30:c8:16:01:20:6a:c6:da:e8:
         ff:ca:11:bc:ef:5d:3a:11:3c:59:7c:ad:47:dc:84:37:35:f0:
         0e:4c:bf:d6:7e:4e:af:bd:24:99:db:89:24:6a:e7:03:41:94:
         e6:b6:31:e7:a9:2b:a0:0b:28:75:be:3d:a5:7b:e6:98:e9:54:
         76:a6:f9:f9:60:de:87:c4:f7:d2:0e:fa:4e:75:4d:53:10:c8:
         b4:d0:72:4b:81:76:e2:bd:cd:9a:3c:20:12:52:f4:40:d8:2c:
         b6:bb:b5:2a:93:e9:dd:52:56:d7:73:a3:28:00:91:d4:5c:d6:
         1f:26:a0:05:0e:b7:e4:81:05:f6:f2:60:cf:f6:ef:34:c9:7a:
         0b:ef:ba:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:44:08 2026 by rpki-client