Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft
File:                     72B5B7AD5B62DED550889B15909739A2F336730F.mft (raw, json)
Hash identifier:          gm2b3eL+FnSBKKN+pV2sx6XZgIbFhgFZa24hkl9b3vk=
Subject key identifier:   01:F6:A8:5A:A1:80:4C:41:51:07:E6:9A:A1:4E:AB:8A:1D:7D:D0:16
Authority key identifier: 72:B5:B7:AD:5B:62:DE:D5:50:88:9B:15:90:97:39:A2:F3:36:73:0F
Certificate issuer:       /CN=72B5B7AD5B62DED550889B15909739A2F336730F
Certificate serial:       04F7D7DBB21A8793BC97B8B4C9373E8C4BA5ADD3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 00:13:18 +0000
Manifest this update:     Wed 17 Jun 2026 00:08:18 +0000
Manifest next update:     Thu 18 Jun 2026 02:43:18 +0000
Files and hashes:         1: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: MoFbGw9hVRSVf3DPc/KG0BTNUX5J8EnngaE3zfGzXJk=)
                          2: 72B5B7AD5B62DED550889B15909739A2F336730F.crl (hash: 7EVbTn9IQm1+uJGj/KAhuxSQg4lVoOKkCH9k1sy2SlM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.crl
                          rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 02:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f7:d7:db:b2:1a:87:93:bc:97:b8:b4:c9:37:3e:8c:4b:a5:ad:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B5B7AD5B62DED550889B15909739A2F336730F
        Validity
            Not Before: Jun 17 00:08:18 2026 GMT
            Not After : Jun 18 02:43:18 2026 GMT
        Subject: CN=01F6A85AA1804C415107E69AA14EAB8A1D7DD016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0a:9d:a1:0b:95:b6:f5:92:c7:e1:d9:6d:02:
                    01:a1:1b:34:a4:0b:24:5b:c7:08:5c:d9:50:85:8a:
                    8a:93:51:2c:48:d5:6b:84:a3:ae:d6:08:79:4e:4d:
                    2f:d0:0e:51:40:9c:6a:9c:9b:fc:10:a7:08:08:ef:
                    51:22:ca:0a:e9:ee:1f:26:17:89:37:f0:46:4f:21:
                    47:fb:68:50:06:6a:7a:af:67:f9:70:63:51:4c:5f:
                    ef:7d:bd:f2:21:8f:7d:fb:58:31:85:b6:01:a2:c3:
                    77:6c:23:e1:c1:6d:8b:ae:a6:a5:1f:3c:1d:28:b9:
                    be:27:e8:96:fb:e5:dc:5a:4c:44:94:57:78:dd:2a:
                    56:29:fb:bc:f5:52:50:f4:5a:17:b1:8b:6c:46:25:
                    11:ce:57:4c:c7:90:23:01:3d:bd:37:c1:68:7e:df:
                    73:6e:0f:c4:d5:32:f4:0c:fb:d0:aa:d8:df:0f:46:
                    6a:da:93:5e:2e:17:45:d2:60:2a:d4:0f:b1:03:9e:
                    53:14:18:eb:48:62:9e:09:0f:1b:ab:89:4a:f2:66:
                    5e:71:6e:cb:52:98:b3:a5:84:67:1f:c0:ee:d2:a2:
                    db:c1:01:4d:39:28:c4:3f:c3:79:c2:4b:8f:b8:29:
                    70:a1:f7:74:b4:c5:38:0b:d6:0b:f1:2c:5c:af:4a:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F6:A8:5A:A1:80:4C:41:51:07:E6:9A:A1:4E:AB:8A:1D:7D:D0:16
            X509v3 Authority Key Identifier:
                keyid:72:B5:B7:AD:5B:62:DE:D5:50:88:9B:15:90:97:39:A2:F3:36:73:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f4:af:02:6b:53:82:5a:2f:05:88:12:50:c6:b0:4c:1f:b0:
         82:07:24:01:35:08:dd:2c:09:5f:78:16:00:e6:1f:52:16:bc:
         e1:9e:70:cc:89:db:21:c6:46:b3:44:94:de:f3:89:b3:46:6d:
         2f:a2:a6:51:51:eb:47:ce:a0:9d:25:07:17:74:eb:b5:14:57:
         d8:f2:9c:c1:10:6c:5a:3b:14:d3:ca:f2:29:f6:3a:6a:02:70:
         6b:b7:1a:88:0b:10:5f:6f:9f:2a:dc:93:18:21:4a:b5:ec:18:
         d4:10:14:47:a5:be:7c:54:cf:88:8d:7d:27:c7:fc:07:7c:fa:
         1e:06:04:d1:50:e8:93:ac:da:43:d7:ae:03:78:0e:91:8e:21:
         c8:b6:62:a7:e8:be:52:f7:15:69:69:ea:51:03:f9:9c:26:33:
         02:1e:30:b6:79:1c:8d:2b:43:fb:83:ae:00:4a:c1:d4:13:ca:
         2e:14:3b:b7:47:98:4c:ee:3a:9e:8b:e3:ce:e4:8c:d2:8e:e0:
         f5:50:36:30:cd:4b:b5:b4:a7:1d:07:48:57:89:83:9c:34:c3:
         e1:63:ca:11:c8:6b:22:a4:43:dd:68:3e:ae:8a:d8:db:f3:30:
         66:9c:c1:05:95:94:56:e0:02:57:64:e4:ec:2a:9c:72:37:f3:
         10:ab:66:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:34 2026 by rpki-client