Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.mft
File:                     E48354BE9F141988ABFB54173029C4000CF9B18B.mft (raw, json)
Hash identifier:          2YXbQ23JbMTENUwWsvttx9b1ElatsTipLeeiNPLdtcc=
Subject key identifier:   CB:F3:E3:6D:FD:C8:C9:60:F0:1F:D6:75:1E:D9:28:57:B5:19:1F:52
Authority key identifier: E4:83:54:BE:9F:14:19:88:AB:FB:54:17:30:29:C4:00:0C:F9:B1:8B
Certificate issuer:       /CN=E48354BE9F141988ABFB54173029C4000CF9B18B
Certificate serial:       659C8D5B1AE11D69C20DEB99AE408459B10D48C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 22:21:16 +0000
Manifest this update:     Sat 13 Jun 2026 22:16:16 +0000
Manifest next update:     Mon 15 Jun 2026 00:06:16 +0000
Files and hashes:         1: 3130332e3132352e3130342e302f32322d3232203d3e20323135373237.roa (hash: 03NYkPPLVfBPNGc3GX0j/D9a1kQon+xDAfJQkUY2WfI=)
                          2: 3130332e3132352e3130372e302f32342d3234203d3e20313338313030.roa (hash: ojp9gB1BKHELPh6AJXnC9Qiad2EUw2t4WqRumYJpvoo=)
                          3: 3130332e3132352e3130342e302f32322d3232203d3e20313534343130.roa (hash: eCyAxg6TMb3y8UNuAa8VAwHZx8s/p2Q+nPiDr2+G5JM=)
                          4: E48354BE9F141988ABFB54173029C4000CF9B18B.crl (hash: DsRv2rfR80UaEp3efAejD85aMhRHSu5J8BfrezG9dzg=)
                          5: 3130332e3132352e3130362e302f32342d3234203d3e20313338313030.roa (hash: F+YbRAk+0CxM0DS0hqXRpMyQpkrAk0n0dHGfND3TquE=)
                          6: 3130332e3132352e3130342e302f32342d3234203d3e20313338313030.roa (hash: c0s6g/0N7Mpt32/FZfwmkqY2FOP2/z8Sv0VSvzKlGpQ=)
                          7: 3130332e3132352e3130352e302f32342d3234203d3e20313338313030.roa (hash: stWnJUHdeZ0lpj6XHoDiqPJcFNoLD1Jb0lqEc/eqrQc=)
                          8: 3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa (hash: ORI8ZzHMIQWit79i41H+hRQktja+THpVFHQP7zI/W24=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.crl
                          rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9c:8d:5b:1a:e1:1d:69:c2:0d:eb:99:ae:40:84:59:b1:0d:48:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48354BE9F141988ABFB54173029C4000CF9B18B
        Validity
            Not Before: Jun 13 22:16:16 2026 GMT
            Not After : Jun 15 00:06:16 2026 GMT
        Subject: CN=CBF3E36DFDC8C960F01FD6751ED92857B5191F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:f3:19:50:35:00:82:7a:9d:e4:8b:3f:d9:
                    d3:f8:85:b0:19:9b:51:90:1d:a4:18:e7:16:3a:d2:
                    c6:b8:be:5a:d2:1b:03:61:a0:21:b3:b0:e1:ae:3b:
                    e9:e7:62:79:98:0b:e7:65:4c:2f:ae:25:08:94:1f:
                    ce:42:bc:00:7e:8c:76:f7:96:ba:b2:e8:95:16:00:
                    4b:d4:5b:f7:66:78:ac:bc:4e:2a:9e:0d:20:47:a9:
                    0f:a6:d8:0a:e7:a6:47:53:6e:a9:54:49:2a:30:9f:
                    19:cd:a0:70:78:bf:49:4a:1f:d3:68:62:44:f4:94:
                    ad:5b:3c:d4:10:2f:42:d1:d1:18:68:b0:0f:b9:ac:
                    51:61:7b:85:d1:8b:28:b1:b9:c6:f0:96:4b:77:54:
                    ef:b9:03:7b:2c:9a:9d:de:ce:21:47:d9:04:f6:2a:
                    de:79:d1:a1:00:71:8b:09:37:ab:62:c7:39:6e:26:
                    3d:2d:9b:84:db:b3:18:88:bc:cd:6a:b1:1f:dd:d0:
                    28:63:7c:28:e6:9b:e6:c9:a7:99:2a:9a:1a:6f:83:
                    8f:9f:7e:07:8e:2d:d9:5f:26:a5:5c:63:84:5d:40:
                    16:4e:56:2e:b0:db:3f:23:81:22:c1:14:0b:e9:9d:
                    28:dd:58:7c:8c:98:46:be:e4:86:33:62:92:77:62:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F3:E3:6D:FD:C8:C9:60:F0:1F:D6:75:1E:D9:28:57:B5:19:1F:52
            X509v3 Authority Key Identifier:
                keyid:E4:83:54:BE:9F:14:19:88:AB:FB:54:17:30:29:C4:00:0C:F9:B1:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:24:41:80:d6:0f:d4:8e:11:e4:bd:37:b9:88:00:2b:2b:f2:
         50:d7:de:f6:a4:0d:a4:bc:94:bf:5a:28:4e:63:0f:ed:1a:50:
         b2:2c:5c:99:71:c4:d3:c2:d9:d0:ef:01:45:bd:ad:b8:9c:ba:
         29:ef:01:74:05:6a:1b:19:84:59:bc:2a:cb:c6:22:52:25:c7:
         14:3e:29:47:02:2e:f0:cb:f5:d8:06:a7:6e:02:0b:2a:32:b8:
         a2:55:26:ee:c9:a0:4c:95:f0:c8:e0:4d:32:2a:b4:60:01:da:
         31:ae:cd:de:46:dd:5f:12:b5:e2:37:e3:08:36:d0:d5:82:e6:
         f9:2a:80:b2:8b:30:44:7a:39:1d:5e:0a:bf:ad:47:99:6a:b2:
         78:99:a5:4d:e0:ab:8a:2d:85:71:b8:69:3f:bb:3c:1c:da:66:
         96:87:f0:1e:a4:c0:34:7d:ac:5e:bf:23:7c:ee:3a:62:0d:a9:
         75:4b:50:87:c1:8a:a1:18:b2:17:e7:d6:9b:ab:10:7a:e0:1e:
         47:0a:e1:e9:f2:e8:6e:0f:f8:33:98:a7:a8:46:f9:ca:2f:b0:
         63:d0:45:35:d3:8f:50:3c:5d:a9:bd:0b:fc:26:8e:cd:0a:c2:
         23:86:ef:60:3a:22:17:25:39:0f:a3:94:1d:a2:c9:8d:75:fe:
         25:b2:0d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:18:02 2026 by rpki-client