Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft
File:                     CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft (raw, json)
Hash identifier:          j69bK72JFtRA0oCxKza1GYIsPhwFkzWNbo7LpUJbpFQ=
Subject key identifier:   A5:CB:A5:F2:36:D1:3E:90:27:AC:5E:1C:DF:59:74:DE:57:D8:8E:74
Authority key identifier: CE:86:6C:A7:A4:8F:42:70:D8:61:14:1E:8D:B8:3F:09:E2:EF:39:F6
Certificate issuer:       /CN=CE866CA7A48F4270D861141E8DB83F09E2EF39F6
Certificate serial:       15E4E46C2BC353CE2F2BE460BC96E4C331B7CAC6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 19:53:15 +0000
Manifest this update:     Tue 16 Jun 2026 19:48:15 +0000
Manifest next update:     Wed 17 Jun 2026 19:56:15 +0000
Files and hashes:         1: CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl (hash: Laf0iokfmNvkUp84FlW0LPsZSbHTfbrzGxfP82fLLF0=)
                          2: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: mS9PRPKBDmGv104t2c/uWFhRF9qgpc8OIooHFMXaEg4=)
                          3: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: 12S1HOzE8Rs4umiuV1n2mL1hqQ5ALMTa7jdnK3K0btU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl
                          rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 19:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e4:e4:6c:2b:c3:53:ce:2f:2b:e4:60:bc:96:e4:c3:31:b7:ca:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE866CA7A48F4270D861141E8DB83F09E2EF39F6
        Validity
            Not Before: Jun 16 19:48:15 2026 GMT
            Not After : Jun 17 19:56:15 2026 GMT
        Subject: CN=A5CBA5F236D13E9027AC5E1CDF5974DE57D88E74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:ff:8c:b4:ef:41:fc:58:f6:4f:38:c1:73:
                    b7:aa:2e:3b:5e:7c:d5:e0:3a:a5:e2:0c:8e:2a:7e:
                    56:65:ac:3d:3b:77:65:eb:bd:78:09:97:d2:49:61:
                    90:dd:0b:9c:3f:77:09:d9:66:55:a1:6d:6c:09:ea:
                    f0:85:07:ed:e8:ec:90:4b:53:5e:a6:2c:d9:82:ed:
                    11:e0:fa:47:94:7b:ba:06:88:68:86:8e:4a:29:45:
                    73:39:10:e1:f8:26:e9:26:77:5b:91:2a:47:bb:95:
                    1e:2b:e2:29:98:4d:00:1d:11:90:09:71:b0:a9:86:
                    b9:80:40:c1:46:0f:c1:48:c9:13:44:15:b9:4e:b6:
                    1e:71:a9:87:38:2c:29:9c:9b:76:48:bd:73:a0:40:
                    9d:bd:c3:15:86:69:cd:66:fd:2e:c0:e1:9c:9a:a9:
                    e4:fd:a7:dd:cd:a3:32:78:56:cd:55:27:52:c9:7d:
                    da:75:b8:60:06:62:a7:b2:65:bf:02:b1:f2:c6:31:
                    db:2e:7f:92:13:5e:e1:f7:72:7a:66:5f:59:59:43:
                    1e:55:12:6e:b7:ea:3d:2b:77:1e:b9:37:a5:20:bc:
                    48:b1:7e:51:4f:8e:82:25:f6:e8:0f:9a:9a:ff:1c:
                    8b:a2:9c:b8:47:64:06:8d:df:7f:ac:35:0c:bd:a3:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CB:A5:F2:36:D1:3E:90:27:AC:5E:1C:DF:59:74:DE:57:D8:8E:74
            X509v3 Authority Key Identifier:
                keyid:CE:86:6C:A7:A4:8F:42:70:D8:61:14:1E:8D:B8:3F:09:E2:EF:39:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:52:a9:4c:0f:43:d1:4b:7c:2d:9e:9c:bf:f9:6d:cb:a8:4b:
         ef:60:38:1f:c8:71:ab:aa:65:03:ae:b3:2d:55:de:fb:da:14:
         f1:d1:63:73:73:0e:31:5f:57:61:32:bb:32:3c:cf:88:25:4c:
         00:e3:4d:f3:bb:ce:fa:66:5c:20:8d:57:3d:f2:45:53:18:a9:
         e7:e2:1a:62:66:ec:a8:77:2e:af:9e:f2:6d:2b:9b:ea:66:b9:
         29:13:af:ef:32:bd:48:bb:7f:33:70:9b:3d:b2:06:f2:7d:7e:
         92:ff:4b:17:fe:17:dc:84:49:95:cc:12:cd:aa:97:22:e5:5d:
         a5:32:01:80:35:a8:47:6e:7c:82:13:62:d8:b6:90:8d:bd:30:
         bb:07:5c:4d:56:e0:22:f3:9e:32:b3:93:ee:13:53:6f:ad:3a:
         b5:a1:47:02:db:29:58:bd:23:91:67:ee:82:2c:39:e5:a3:12:
         56:5d:d8:00:10:ba:8e:36:e7:a8:c4:ac:be:61:6f:8c:b8:98:
         34:e0:5d:de:07:46:40:a4:64:db:76:21:56:ef:0a:18:fd:38:
         a6:b3:b5:13:b5:3c:ad:4d:6a:14:70:2b:63:6c:87:c9:57:b8:
         55:c4:48:4c:5b:89:cb:73:f3:c6:51:38:be:6f:47:31:02:f6:
         5e:9a:ba:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:19:14 2026 by rpki-client