Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft
File:                     FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft (raw, json)
Hash identifier:          9vx32oEA7dzfjjRq3h35NTIwdYZDsinI3VMPw8PNan4=
Subject key identifier:   D6:7B:F5:1C:10:B4:3F:CF:93:EA:5F:37:AF:38:86:D5:9D:DD:AF:2C
Authority key identifier: FF:DA:C7:75:CB:B5:F1:B2:C7:B9:51:BF:15:23:EF:6C:30:FF:EC:F6
Certificate issuer:       /CN=FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6
Certificate serial:       156CDCD710B68F42BB1DD70A6D1F3A05AF7B96A5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft
Manifest number:          3B
Signing time:             Sun 14 Jun 2026 00:48:53 +0000
Manifest this update:     Sun 14 Jun 2026 00:43:53 +0000
Manifest next update:     Mon 15 Jun 2026 03:07:53 +0000
Files and hashes:         1: FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl (hash: MLsmsDerJrahp8Xc9NSJtTCweweo2jC5sJ3TkUyXLDU=)
                          2: 3130332e3136342e32322e302f32332d3234203d3e203137393935.roa (hash: e5rLZ+uiB21yOgfSRe83jWI/e3SG0saFimxCgcV74b8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl
                          rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6c:dc:d7:10:b6:8f:42:bb:1d:d7:0a:6d:1f:3a:05:af:7b:96:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6
        Validity
            Not Before: Jun 14 00:43:53 2026 GMT
            Not After : Jun 15 03:07:53 2026 GMT
        Subject: CN=D67BF51C10B43FCF93EA5F37AF3886D59DDDAF2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:af:4b:f7:70:85:fa:57:5e:39:9b:ed:e7:
                    47:74:89:c7:c0:42:81:40:9f:be:da:56:aa:ad:5f:
                    45:b5:88:b9:98:0c:2a:19:6c:5a:90:5e:a7:2b:04:
                    37:80:10:62:bc:aa:15:d9:5e:7d:39:77:62:5f:b4:
                    ce:10:61:c1:a0:49:83:d8:ee:2e:e8:2e:82:7a:c0:
                    b6:83:f2:fa:32:76:b5:6a:9a:c4:72:d2:43:cc:2b:
                    9a:04:9b:25:ee:ad:92:98:65:92:9c:b5:b2:16:ac:
                    36:3b:ef:e2:cc:e3:59:8a:09:d8:fc:d9:74:00:4b:
                    9b:67:c3:cd:8b:cc:0d:63:bc:2e:62:3e:34:75:ba:
                    e3:10:6a:40:9b:97:6a:0d:ef:53:e4:4a:f7:3f:c6:
                    39:4f:13:c2:27:c4:09:d5:ec:be:90:9b:95:7b:40:
                    9a:51:48:0b:3b:c3:07:4d:8b:5a:9c:98:85:ac:ce:
                    b9:b9:84:27:c4:b8:72:38:92:73:66:96:55:33:b2:
                    c6:3a:52:e5:16:64:33:ba:e0:c5:14:a3:89:06:34:
                    75:4a:11:79:08:c4:66:5b:57:0e:aa:83:51:32:6f:
                    3b:b7:9f:50:cd:be:27:94:98:f1:90:08:c5:98:72:
                    2a:d8:41:dc:cc:31:16:12:61:ae:ed:89:20:9e:87:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7B:F5:1C:10:B4:3F:CF:93:EA:5F:37:AF:38:86:D5:9D:DD:AF:2C
            X509v3 Authority Key Identifier:
                keyid:FF:DA:C7:75:CB:B5:F1:B2:C7:B9:51:BF:15:23:EF:6C:30:FF:EC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7c:1e:fe:3f:c7:42:10:4b:df:67:bb:c8:12:65:5a:48:22:
         33:e3:2e:fb:5f:f2:b2:f1:23:72:26:bb:56:ce:6a:87:c5:a9:
         9e:66:81:f3:94:2b:6b:f1:b4:92:12:3c:e5:c1:d0:23:c5:f6:
         a1:54:dd:43:7e:33:60:9f:a0:23:b5:f3:7c:e7:88:04:6a:78:
         59:28:67:55:82:f6:ca:90:7a:eb:cd:b1:a2:a0:5e:a6:07:74:
         2a:90:63:d1:ab:dd:51:32:9b:a4:8d:ad:10:78:99:a0:2d:12:
         21:98:b7:57:5b:e1:ab:6f:2c:10:cd:1b:1b:b6:1e:cb:06:3f:
         af:30:f0:a9:74:32:0f:37:3d:6f:04:91:88:4c:27:06:e6:79:
         86:40:88:95:cf:1d:d7:9f:f1:ba:a7:a6:8f:f9:ad:70:01:aa:
         6a:44:91:cb:32:be:e9:9d:ff:06:30:39:f5:f9:1e:28:83:2a:
         63:f0:9b:be:02:51:e1:b6:d8:2f:7c:d3:ff:59:f6:b0:b7:e2:
         55:06:4e:d7:2c:99:07:01:3a:81:0e:82:82:83:9a:77:da:27:
         db:88:4e:8a:31:93:0f:08:b1:94:b2:57:d1:15:b1:fa:1c:37:
         ba:44:74:5a:2d:b7:0e:f0:9d:1a:44:6c:e1:47:f2:3a:b9:83:
         66:1f:23:7a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFWzc1xC2j0K7HdcKbR86Ba97lqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZEQUM3NzVDQkI1RjFCMkM3Qjk1MUJGMTUyM0VGNkMz
MEZGRUNGNjAeFw0yNjA2MTQwMDQzNTNaFw0yNjA2MTUwMzA3NTNaMDMxMTAvBgNV
BAMTKEQ2N0JGNTFDMTBCNDNGQ0Y5M0VBNUYzN0FGMzg4NkQ1OUREREFGMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/a9L93CF+ldeOZvt50d0icfA
QoFAn77aVqqtX0W1iLmYDCoZbFqQXqcrBDeAEGK8qhXZXn05d2JftM4QYcGgSYPY
7i7oLoJ6wLaD8voydrVqmsRy0kPMK5oEmyXurZKYZZKctbIWrDY77+LM41mKCdj8
2XQAS5tnw82LzA1jvC5iPjR1uuMQakCbl2oN71PkSvc/xjlPE8InxAnV7L6Qm5V7
QJpRSAs7wwdNi1qcmIWszrm5hCfEuHI4knNmllUzssY6UuUWZDO64MUUo4kGNHVK
EXkIxGZbVw6qg1Eybzu3n1DNvieUmPGQCMWYcirYQdzMMRYSYa7tiSCehwVVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1nv1HBC0P8+T6l83rziG1Z3drywwHwYDVR0j
BBgwFoAU/9rHdcu18bLHuVG/FSPvbDD/7PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTdkYzdlZTUtY2U2Ny00NWNkLTk4ODEtNDM0ODlhYjJiMWE1LzAvRkZEQUM3NzVD
QkI1RjFCMkM3Qjk1MUJGMTUyM0VGNkMzMEZGRUNGNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GRkRBQzc3NUNCQjVGMUIyQzdCOTUxQkYxNTIzRUY2QzMwRkZF
Q0Y2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTdkYzdlZTUtY2U2Ny00NWNkLTk4
ODEtNDM0ODlhYjJiMWE1LzAvRkZEQUM3NzVDQkI1RjFCMkM3Qjk1MUJGMTUyM0VG
NkMzMEZGRUNGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABJ8Hv4/x0IQS99nu8gSZVpIIjPjLvtf8rLx
I3Imu1bOaofFqZ5mgfOUK2vxtJISPOXB0CPF9qFU3UN+M2CfoCO183zniARqeFko
Z1WC9sqQeuvNsaKgXqYHdCqQY9Gr3VEym6SNrRB4maAtEiGYt1db4atvLBDNGxu2
HssGP68w8Kl0Mg83PW8EkYhMJwbmeYZAiJXPHdef8bqnpo/5rXABqmpEkcsyvumd
/wYwOfX5HiiDKmPwm74CUeG22C980/9Z9rC34lUGTtcsmQcBOoEOgoKDmnfaJ9uI
Tooxkw8IsZSyV9EVsfocN7pEdFottw7wnRpEbOFH8jq5g2YfI3o=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:01 2026 by rpki-client