Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft
File:                     6807307655CEA502796E1026C663C4A882D37E72.mft (raw, json)
Hash identifier:          u11HW97gHHobQIOP4t85ToKFDHE0PHFcbNi5A2X6Xqo=
Subject key identifier:   A9:04:A8:09:0F:05:F2:4D:CE:A5:0B:55:81:AB:F1:51:44:BA:4E:65
Authority key identifier: 68:07:30:76:55:CE:A5:02:79:6E:10:26:C6:63:C4:A8:82:D3:7E:72
Certificate issuer:       /CN=6807307655CEA502796E1026C663C4A882D37E72
Certificate serial:       0FF0D040127965E8422B8986D35F6D1B3FC37F25
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6807307655CEA502796E1026C663C4A882D37E72.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 11:23:20 +0000
Manifest this update:     Sat 13 Jun 2026 11:18:20 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:20 +0000
Files and hashes:         1: 3230332e33332e33352e302f32342d3234203d3e203137383835.roa (hash: k002Muyqc9cS3UpWT7uJHqyqbjEHyYRWloXEdO7c7yA=)
                          2: 6807307655CEA502796E1026C663C4A882D37E72.crl (hash: pPAutJQucwHFSyPwMzBbFPQL3OKeFF4j5Az1xCFo3Qw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.crl
                          rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6807307655CEA502796E1026C663C4A882D37E72.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f0:d0:40:12:79:65:e8:42:2b:89:86:d3:5f:6d:1b:3f:c3:7f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6807307655CEA502796E1026C663C4A882D37E72
        Validity
            Not Before: Jun 13 11:18:20 2026 GMT
            Not After : Jun 14 12:01:20 2026 GMT
        Subject: CN=A904A8090F05F24DCEA50B5581ABF15144BA4E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:a6:88:42:f3:f2:c2:24:20:a2:1c:e9:98:
                    13:82:d4:d0:a1:32:f7:76:4c:36:4a:09:fd:80:b7:
                    2f:a7:91:80:87:52:b7:8b:93:1a:d0:98:8a:85:52:
                    5d:cd:68:28:e9:92:6a:91:e6:3d:b9:d5:57:23:9d:
                    12:9b:40:94:dd:1f:5e:c4:69:0b:a7:d3:cb:6b:69:
                    ca:b3:9a:16:bf:26:ee:8a:ea:8a:b5:c1:38:a0:4e:
                    e4:b1:cb:bf:2b:07:20:47:89:c3:41:56:cf:a4:45:
                    01:39:85:05:43:c5:ed:e3:41:d7:d5:ae:1e:97:9f:
                    a1:51:3e:56:bc:40:5a:d4:f3:20:06:31:2e:01:00:
                    fc:86:d3:7b:37:dd:bd:10:16:84:1b:1e:9b:f8:ad:
                    5c:ea:d7:f6:93:a3:b2:3d:1c:4b:cf:15:dd:ec:bf:
                    05:7b:7b:15:ec:65:77:c4:fd:4d:34:e2:52:14:00:
                    bb:68:94:5d:6c:8e:72:60:44:d7:56:ca:ac:b7:a0:
                    1a:cc:1f:e4:f6:ee:2a:5d:70:06:1d:e8:5a:e2:ab:
                    ea:2f:f1:8e:af:48:e2:19:c1:1d:a5:3e:13:bb:5e:
                    de:b9:70:34:fe:86:7e:12:2a:84:b9:a7:42:20:7b:
                    0e:25:e5:bf:2a:28:66:78:aa:a7:44:06:3c:00:08:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:04:A8:09:0F:05:F2:4D:CE:A5:0B:55:81:AB:F1:51:44:BA:4E:65
            X509v3 Authority Key Identifier:
                keyid:68:07:30:76:55:CE:A5:02:79:6E:10:26:C6:63:C4:A8:82:D3:7E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6807307655CEA502796E1026C663C4A882D37E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e1:2d:c7:59:90:fa:49:ea:31:ab:2e:39:bc:c9:39:6d:a9:
         46:15:dd:b6:68:4a:8f:9b:74:6f:05:8f:36:6a:6e:1f:8a:f2:
         f7:62:7d:c6:76:78:42:2f:b0:37:89:47:4f:5e:a4:7c:5d:b4:
         4e:99:81:15:5d:a0:97:30:96:19:ad:26:9a:c2:e0:95:a4:3e:
         70:b4:be:f3:02:3c:53:1e:dd:a9:1d:8c:8e:34:10:9f:cb:b7:
         f7:00:67:70:3f:03:95:41:f1:92:f8:fa:2b:04:46:f0:06:69:
         a4:45:f8:3b:68:36:51:75:12:87:65:c6:95:5a:77:97:55:dc:
         47:f1:3f:45:ae:a8:b6:f7:91:55:92:7e:ec:28:be:84:0e:ae:
         44:97:b2:8c:b9:0e:a6:db:ab:6b:f9:92:41:54:0f:6b:ac:fa:
         e0:a9:08:fb:2a:d6:a8:d9:64:bd:30:39:27:74:0f:9f:82:90:
         07:21:c3:5b:46:05:bb:f1:4d:74:b9:a7:54:78:c1:c2:25:87:
         a0:8a:5b:b7:8b:ef:b9:61:7d:6f:14:73:36:c3:b9:75:2e:e9:
         a3:7f:f7:77:ff:86:29:b4:99:d4:fd:99:a5:b5:79:82:94:c7:
         95:3a:5e:f7:95:86:57:4b:aa:4e:bb:7d:0d:07:c6:90:dd:3b:
         95:95:77:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:11 2026 by rpki-client