Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
File:                     C771ADE0100457DC61EB95A71BB4E63885DC542F.mft (raw, json)
Hash identifier:          6nZvvT2AKT1pqXVvZQv6CWOJc82bV8bjoLMtp1uIWZI=
Subject key identifier:   4E:8A:DB:FF:56:2B:37:0F:4E:5B:EA:54:D5:54:EF:63:AA:41:CD:26
Authority key identifier: C7:71:AD:E0:10:04:57:DC:61:EB:95:A7:1B:B4:E6:38:85:DC:54:2F
Certificate issuer:       /CN=C771ADE0100457DC61EB95A71BB4E63885DC542F
Certificate serial:       3EC8F947DFC03FEFA6093C54CE6C80936E6AEF9A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
Manifest number:          3D
Signing time:             Wed 17 Jun 2026 07:31:57 +0000
Manifest this update:     Wed 17 Jun 2026 07:26:57 +0000
Manifest next update:     Thu 18 Jun 2026 09:02:57 +0000
Files and hashes:         1: 3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa (hash: cnrnucshQjB1HR7ilM8foFskZiCRkLLcdgQGq/I0/j4=)
                          2: C771ADE0100457DC61EB95A71BB4E63885DC542F.crl (hash: +yLUirFk9wpAkWNyo4b7w/75Bij1B34LpsPy1g1sOos=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.crl
                          rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c8:f9:47:df:c0:3f:ef:a6:09:3c:54:ce:6c:80:93:6e:6a:ef:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C771ADE0100457DC61EB95A71BB4E63885DC542F
        Validity
            Not Before: Jun 17 07:26:57 2026 GMT
            Not After : Jun 18 09:02:57 2026 GMT
        Subject: CN=4E8ADBFF562B370F4E5BEA54D554EF63AA41CD26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:04:0d:d4:5a:b9:cc:06:05:6f:51:25:0c:
                    79:28:49:47:e6:a7:05:91:8a:30:92:00:a3:8b:f3:
                    c8:f2:07:a3:eb:d8:36:95:30:ff:73:31:d3:18:d2:
                    03:9d:6f:51:de:d5:0a:11:81:e1:aa:fa:07:ae:89:
                    23:c1:c7:7a:77:45:ee:e1:35:d8:17:bb:a3:ce:f3:
                    7c:2c:0b:48:c1:c6:08:39:b0:ee:f0:55:bb:62:b3:
                    53:a1:e3:5c:23:64:4a:d7:11:e5:8e:d5:7a:f2:03:
                    b5:ef:f5:67:cd:74:36:5c:70:c7:54:1b:82:d4:a3:
                    e5:c3:48:b3:0a:31:18:49:df:df:d5:12:8c:61:4d:
                    4c:c6:bf:b8:39:86:29:23:f1:75:e3:40:0d:3f:68:
                    3d:6b:d5:f0:8b:13:68:0d:85:01:e0:6e:5f:b5:8a:
                    fe:86:ad:dd:56:5b:43:18:0a:4e:a3:63:ef:ae:8f:
                    11:4d:2e:cc:2e:02:68:7b:98:e4:c0:90:9a:c7:a8:
                    f0:2c:85:13:38:e4:eb:fe:c4:2c:60:7b:d4:fe:ac:
                    5a:2b:73:d9:e3:5b:92:f9:00:ed:d1:8f:bb:8c:3c:
                    0c:48:dd:59:4b:5c:24:2c:18:31:df:8b:17:f5:9a:
                    e5:13:1d:06:4c:2e:68:d5:e9:fa:59:3f:b0:e7:26:
                    af:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8A:DB:FF:56:2B:37:0F:4E:5B:EA:54:D5:54:EF:63:AA:41:CD:26
            X509v3 Authority Key Identifier:
                keyid:C7:71:AD:E0:10:04:57:DC:61:EB:95:A7:1B:B4:E6:38:85:DC:54:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:8d:da:7f:80:d2:a9:31:04:82:c2:80:f9:29:09:bd:ab:f3:
         20:72:f9:33:c4:5c:b7:20:91:e7:68:60:53:3a:ec:72:ae:92:
         67:c5:d0:9c:b2:1c:b4:14:50:07:e0:c6:46:1a:72:5e:23:3d:
         f7:b8:8a:8f:cf:b6:6c:df:d8:52:3c:da:0e:aa:bc:82:18:36:
         4d:ec:a3:57:d7:32:4a:92:05:43:3d:3d:1d:cd:c7:e6:c0:27:
         f1:88:2d:72:d2:ba:66:b8:08:f1:2b:53:73:f2:19:20:a4:e2:
         b5:97:7a:19:4c:7f:90:a2:2e:51:39:a6:70:cb:fc:84:86:47:
         26:5f:f9:0b:32:c8:e4:f6:10:ad:82:9a:78:41:c1:3a:a8:0d:
         26:81:29:bb:28:3f:cf:0d:b8:6e:50:5d:a6:83:13:fa:87:1c:
         d9:ba:c2:36:5f:c8:48:40:88:e4:91:17:f2:56:68:55:3b:a6:
         6a:58:ef:ea:f4:34:32:29:a8:66:e8:90:cb:95:1f:ed:4f:36:
         7f:57:2b:7f:33:43:d7:5c:97:18:a8:8f:02:82:c3:c8:a6:65:
         d2:37:cd:df:e3:43:ce:a3:23:31:ed:69:c2:fe:73:5d:3a:62:
         18:38:5e:a8:39:5a:fa:9b:2d:43:db:d1:9b:2f:01:fc:56:9c:
         ba:eb:45:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:42 2026 by rpki-client