Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
File:                     449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft (raw, json)
Hash identifier:          z4awcHLCdyGJ03wj7WxY8flY9M2Y7MyPXcBM1TrESTs=
Subject key identifier:   12:CD:DF:DF:86:37:73:9F:8D:C0:FD:83:B6:DA:C2:10:21:82:0C:17
Authority key identifier: 44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B
Certificate issuer:       /CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B
Certificate serial:       1F9AED0C02350FC52CCC1DC709A462222C6AA583
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 17:05:09 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:09 +0000
Manifest next update:     Sun 14 Jun 2026 18:47:09 +0000
Files and hashes:         1: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: d+pQREUWb58vXjRmKWwC44imrF7e8FC0pHZi7c2qThU=)
                          2: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: 4fUkU+nbH3X0YWVA/nyzT1vHqWQSMJDAjWYPAHB9Lcc=)
                          3: 449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl (hash: kfbA4LrgJYwlZPJs6qzR4lS4uUCKgBwoKdhsK7x7/b4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl
                          rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 15:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9a:ed:0c:02:35:0f:c5:2c:cc:1d:c7:09:a4:62:22:2c:6a:a5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B
        Validity
            Not Before: Jun 13 17:00:09 2026 GMT
            Not After : Jun 14 18:47:09 2026 GMT
        Subject: CN=12CDDFDF8637739F8DC0FD83B6DAC21021820C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:25:93:ea:b6:34:4c:e1:a6:a0:45:2f:82:
                    10:19:a9:91:54:22:3f:fe:59:13:ac:b1:73:3b:26:
                    9b:e3:d4:fb:f5:4f:62:20:ae:11:3b:ec:20:2d:45:
                    a2:0d:d0:83:dc:a8:00:dc:dd:b6:5b:d9:f6:ed:37:
                    3d:1f:ae:49:34:4e:03:44:a8:a2:3b:b2:19:9a:f1:
                    44:47:cd:e6:93:43:92:ad:1d:2b:b2:9a:fc:7a:80:
                    1b:bd:b9:a1:7f:52:c2:fb:69:9a:8a:2c:2a:cd:54:
                    0a:43:15:92:88:06:4a:42:c4:32:1c:29:83:25:5a:
                    bb:09:7b:22:f9:b8:5c:ba:1c:a2:10:7c:a1:85:54:
                    ef:97:e3:1a:2f:9a:46:bc:02:1e:b6:fa:90:10:af:
                    ac:02:af:e4:b5:2a:8c:d6:9a:02:8d:05:29:21:1a:
                    29:49:d4:a9:2f:8e:d3:a1:d9:0d:07:f5:32:f4:b1:
                    90:a7:d2:a8:80:38:df:83:6b:e9:6a:3b:f0:b2:4f:
                    17:8c:dd:ca:29:6f:52:05:0d:56:bf:dc:e5:39:14:
                    b4:41:ed:07:0d:7e:62:e9:f9:c2:6f:32:d3:b3:6a:
                    d8:86:96:9b:79:1e:fa:2f:1e:c5:98:57:41:e3:86:
                    0b:5f:f5:9e:9d:ed:71:ba:cd:16:56:9f:0b:22:8a:
                    8f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CD:DF:DF:86:37:73:9F:8D:C0:FD:83:B6:DA:C2:10:21:82:0C:17
            X509v3 Authority Key Identifier:
                keyid:44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:50:b8:51:73:7d:10:ea:03:17:34:bd:d3:7c:2f:3c:39:c1:
         55:1b:33:e6:f4:53:59:b7:c4:49:86:5e:2c:7f:d8:0b:e2:ca:
         97:1f:cf:93:b9:55:82:af:e5:e5:91:29:d1:45:a7:81:8b:e2:
         67:42:d4:d5:5f:bf:cd:b0:60:bc:3f:c7:32:2b:66:fe:03:f8:
         34:6e:66:dd:ba:9b:bc:58:69:81:e7:fe:9e:5e:48:cf:94:e8:
         d9:7f:30:92:85:68:52:05:c5:c4:ad:09:c0:4a:43:7a:78:13:
         33:bd:80:eb:dd:d2:0c:db:26:79:51:4e:9d:24:c9:d2:01:f9:
         f8:ae:eb:5f:d1:cf:f7:bb:7d:29:c5:fa:5a:92:cf:79:d4:7b:
         e7:68:8e:b3:72:ff:e9:6d:68:e7:c9:07:7f:b6:31:ee:37:57:
         4b:69:81:73:b5:8f:68:2f:0a:ac:87:6b:80:b4:9b:3c:ea:7a:
         5a:04:96:5d:54:07:01:16:6f:e5:35:e5:5f:67:cb:60:26:fe:
         dd:e6:06:89:7d:43:f0:53:6b:aa:dd:55:fd:c3:40:8a:f2:83:
         e5:70:fd:a2:6a:52:6a:e1:1d:2a:8a:0b:3e:79:04:50:e0:c2:
         44:9d:ce:f1:99:82:65:e2:c4:64:67:b2:65:6a:c0:3c:9b:a2:
         4a:d6:e1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:23:49 2026 by rpki-client