Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/E9306CA027A6C73945DD117FFCFB3BAB04C66543.mft
File:                     E9306CA027A6C73945DD117FFCFB3BAB04C66543.mft (raw, json)
Hash identifier:          3djHQPtNnX3TlaOpHt2xjcOjEulFeiByx1FGC+mRVic=
Subject key identifier:   69:60:51:5F:1E:7C:08:9E:72:B3:93:B5:68:E5:DF:2D:7A:18:81:AF
Authority key identifier: E9:30:6C:A0:27:A6:C7:39:45:DD:11:7F:FC:FB:3B:AB:04:C6:65:43
Certificate issuer:       /CN=E9306CA027A6C73945DD117FFCFB3BAB04C66543
Certificate serial:       515B58D1840858713334621346CBDB9D3390D262
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9306CA027A6C73945DD117FFCFB3BAB04C66543.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/E9306CA027A6C73945DD117FFCFB3BAB04C66543.mft
Manifest number:          3D
Signing time:             Wed 17 Jun 2026 04:33:19 +0000
Manifest this update:     Wed 17 Jun 2026 04:28:19 +0000
Manifest next update:     Thu 18 Jun 2026 07:03:19 +0000
Files and hashes:         1: E9306CA027A6C73945DD117FFCFB3BAB04C66543.crl (hash: xmr2LuouHLc357VR4hwMOqJBVndur4emsDASEnfZVaY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/E9306CA027A6C73945DD117FFCFB3BAB04C66543.crl
                          rsync://rpki-rsync.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/E9306CA027A6C73945DD117FFCFB3BAB04C66543.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9306CA027A6C73945DD117FFCFB3BAB04C66543.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5b:58:d1:84:08:58:71:33:34:62:13:46:cb:db:9d:33:90:d2:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9306CA027A6C73945DD117FFCFB3BAB04C66543
        Validity
            Not Before: Jun 17 04:28:19 2026 GMT
            Not After : Jun 18 07:03:19 2026 GMT
        Subject: CN=6960515F1E7C089E72B393B568E5DF2D7A1881AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:27:3b:e8:0d:27:c1:25:94:07:06:0e:06:0c:
                    d1:1f:fc:cc:64:10:69:9f:2c:93:3c:5e:06:f5:6a:
                    67:a0:e0:c6:08:6d:66:79:b5:17:f8:be:14:84:5a:
                    9d:fe:b3:4c:9c:26:ff:25:5c:14:35:5a:e6:60:e0:
                    98:74:b1:16:45:f4:94:34:73:34:66:7c:a4:b6:35:
                    7a:9e:d6:e1:76:2e:b1:28:de:19:bc:65:a4:94:ca:
                    be:33:e0:b3:55:15:49:a3:30:2a:81:6f:32:ef:87:
                    83:3a:af:97:32:5e:eb:25:f3:3c:05:16:4d:db:30:
                    34:d0:91:f0:3f:5d:6b:bf:84:92:da:90:f3:84:2e:
                    38:a8:b2:39:51:98:9f:ce:93:5c:49:6b:57:30:90:
                    05:f5:aa:88:d3:be:33:00:f6:73:cb:7c:2a:7f:86:
                    1d:6b:f1:2c:2d:bb:f5:e7:b8:2f:b0:62:95:bb:00:
                    9d:b4:f8:83:2b:d3:f2:c9:c9:12:95:3b:a4:e9:93:
                    66:0a:e0:f6:2e:9d:a1:68:34:eb:b5:67:21:3f:b7:
                    6e:6a:01:4d:eb:7c:aa:89:1f:ac:ec:1e:35:09:0b:
                    03:a1:3d:59:5f:50:92:8c:cc:91:a6:67:74:1b:cb:
                    ed:4b:6b:71:6f:fe:a0:56:6b:be:6f:88:6c:85:b7:
                    71:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:60:51:5F:1E:7C:08:9E:72:B3:93:B5:68:E5:DF:2D:7A:18:81:AF
            X509v3 Authority Key Identifier:
                keyid:E9:30:6C:A0:27:A6:C7:39:45:DD:11:7F:FC:FB:3B:AB:04:C6:65:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/E9306CA027A6C73945DD117FFCFB3BAB04C66543.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9306CA027A6C73945DD117FFCFB3BAB04C66543.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/E9306CA027A6C73945DD117FFCFB3BAB04C66543.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b5:82:f3:d7:e6:b8:5d:79:ad:5c:50:1b:40:1f:ba:74:78:
         c2:8b:f0:9b:46:c5:6d:18:2f:9c:4b:20:d8:af:75:bf:96:3d:
         b5:33:bc:fa:59:8e:c6:11:30:d3:96:c6:fa:a2:40:b1:e6:2f:
         42:1f:70:47:74:da:26:c3:5e:59:dc:dc:10:73:18:f9:de:8b:
         14:ce:a0:8d:68:84:bd:c6:24:90:bf:89:f8:5a:e6:80:38:57:
         80:37:5f:d4:98:9d:14:80:91:eb:31:d8:12:bf:23:2c:eb:5c:
         7a:3e:5f:de:21:4a:ff:41:d0:d9:47:74:b5:ec:e2:95:77:4f:
         da:54:59:2a:12:a9:08:b8:23:58:95:a1:af:ac:42:81:12:c9:
         a0:fc:f6:b7:75:a0:b1:7a:90:a0:28:a6:f5:15:46:3c:d7:5e:
         cf:82:31:7d:2b:df:8d:20:ed:29:d6:76:f6:a8:62:64:90:fb:
         3a:c2:fc:0b:6d:87:18:ba:5f:10:b3:d4:83:02:9f:ca:3a:cc:
         93:b9:8d:c7:ff:2d:96:06:6c:6c:ec:f7:3c:2c:d1:ed:d1:a2:
         b1:31:62:cc:c5:1a:c8:cd:29:e0:ea:b2:e5:43:40:02:89:c1:
         8f:fd:16:63:71:0e:f7:d6:ba:df:8f:06:68:f2:e4:ae:08:f2:
         71:53:b5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:47 2026 by rpki-client