Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
File:                     FDC83C8199C76D091E2AD9BFB460926573605DAC.mft (raw, json)
Hash identifier:          NuwvA1GXNBTUQFFCwQXBj/Y5WSEUosdn7Yw5+Yo4sns=
Subject key identifier:   CB:62:0C:16:DB:A3:6D:FA:14:A2:59:76:CE:D9:6A:25:4A:CC:E9:60
Authority key identifier: FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC
Certificate issuer:       /CN=FDC83C8199C76D091E2AD9BFB460926573605DAC
Certificate serial:       051FA822FBBF3D45184F82DE9D8012BB90425AE5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 13:10:38 +0000
Manifest this update:     Sat 13 Jun 2026 13:05:38 +0000
Manifest next update:     Sun 14 Jun 2026 14:14:38 +0000
Files and hashes:         1: FDC83C8199C76D091E2AD9BFB460926573605DAC.crl (hash: kLXuYP6mS8N7WOddzXI0RQ/yjC9M6neIsTXmmpxjwfo=)
                          2: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: gJ5hm9cILEEKSm4l7xrROyvEaAPh9vqFVYGE5hwRgjc=)
                          3: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: Wv5QOv95KoK5JTFM1x127ZBoU6vSgAO7ost95PMM9yg=)
                          4: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: JADL0Usn7OFvGwpQCK4O1osTVNr3N2EptiwcYbNDB6U=)
                          5: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: HY83csogytT2w209Tl/I/aSdwdqfc1PIHPj/kf5OuyA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl
                          rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1f:a8:22:fb:bf:3d:45:18:4f:82:de:9d:80:12:bb:90:42:5a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDC83C8199C76D091E2AD9BFB460926573605DAC
        Validity
            Not Before: Jun 13 13:05:38 2026 GMT
            Not After : Jun 14 14:14:38 2026 GMT
        Subject: CN=CB620C16DBA36DFA14A25976CED96A254ACCE960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e5:d2:aa:37:3c:b5:6f:b9:b9:98:21:70:d6:
                    6e:6e:e6:de:3a:88:69:88:27:9a:3c:1b:17:31:fe:
                    fd:70:8f:c8:b5:b7:d8:25:e3:91:12:c8:d0:a4:fd:
                    a2:68:c6:47:83:e9:bd:bc:08:60:39:bd:5e:ff:3f:
                    47:ce:55:c5:5f:6b:0e:f4:8f:91:4b:e7:c7:f9:37:
                    f9:d1:6d:b9:9e:61:5c:47:ab:47:d0:18:1d:d2:62:
                    81:42:4f:e4:fc:df:f1:c2:bb:91:9a:24:61:3b:e9:
                    22:85:7b:35:b5:4e:f8:90:56:4e:9e:7d:72:f1:b3:
                    d6:70:ee:69:03:9a:92:0c:5c:20:a7:8a:5c:f6:eb:
                    07:05:69:d1:14:ba:e1:46:af:2b:fd:67:e3:51:e9:
                    90:ee:ff:f6:ee:19:08:e0:0e:3c:32:9b:49:ea:c2:
                    a0:c2:3c:eb:f3:d7:c2:c6:67:50:f7:c4:ff:d2:47:
                    2b:bb:05:c7:95:99:f3:ef:82:fd:c0:07:0b:49:00:
                    14:b6:f4:8c:7e:47:1c:5e:db:4b:53:9a:19:18:63:
                    8b:bb:c1:1f:1d:72:98:bb:c1:24:91:d2:04:0d:f8:
                    00:2f:bd:cd:83:aa:5e:df:07:c4:37:16:4a:d4:76:
                    1c:53:fc:2e:ae:04:12:97:28:82:cd:b4:cd:15:53:
                    b5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:62:0C:16:DB:A3:6D:FA:14:A2:59:76:CE:D9:6A:25:4A:CC:E9:60
            X509v3 Authority Key Identifier:
                keyid:FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5d:8d:a8:52:4f:fb:91:a0:86:24:85:fc:c7:fe:09:79:06:
         f9:40:df:0c:f2:3d:dc:fd:37:f3:f0:43:bb:59:f4:f0:43:17:
         09:01:71:56:c4:b0:d8:e3:bd:da:d9:cd:9c:d0:07:10:7d:1d:
         7e:36:09:4a:ca:74:8c:6b:5a:cb:8c:d6:7b:bb:04:11:a8:6e:
         2c:c6:bf:be:49:1f:dc:77:bd:bd:fa:3d:2a:12:cb:5b:28:7e:
         00:2a:af:05:e1:31:b6:45:69:33:66:d9:c2:c5:a5:11:c7:3f:
         92:75:56:fa:6e:03:a9:3a:34:b2:2c:6d:36:83:57:84:9c:33:
         89:56:90:84:7b:24:b3:d1:1f:87:32:36:22:80:99:88:97:80:
         bd:a6:61:2d:97:7c:d0:e8:2b:fb:0b:a5:b6:f6:42:fe:32:55:
         a8:21:ce:3e:9f:8c:91:49:ca:30:e2:e4:9f:f3:6e:25:06:f2:
         4d:7e:c0:3a:a1:78:fc:02:0a:58:89:36:cf:6e:fc:ec:73:82:
         e8:b8:0a:04:46:84:a6:da:a1:22:04:5f:7b:b0:cd:66:4a:09:
         5b:7a:a6:c5:91:55:4e:d2:a3:3a:09:8c:a8:53:6d:20:9c:11:
         9e:97:59:4d:69:cd:cb:80:e9:3a:59:19:21:8b:95:e9:1b:45:
         50:16:7a:80
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBR+oIvu/PUUYT4LenYASu5BCWuUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRDODNDODE5OUM3NkQwOTFFMkFEOUJGQjQ2MDkyNjU3
MzYwNURBQzAeFw0yNjA2MTMxMzA1MzhaFw0yNjA2MTQxNDE0MzhaMDMxMTAvBgNV
BAMTKENCNjIwQzE2REJBMzZERkExNEEyNTk3NkNFRDk2QTI1NEFDQ0U5NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX5dKqNzy1b7m5mCFw1m5u5t46
iGmIJ5o8Gxcx/v1wj8i1t9gl45ESyNCk/aJoxkeD6b28CGA5vV7/P0fOVcVfaw70
j5FL58f5N/nRbbmeYVxHq0fQGB3SYoFCT+T83/HCu5GaJGE76SKFezW1TviQVk6e
fXLxs9Zw7mkDmpIMXCCnilz26wcFadEUuuFGryv9Z+NR6ZDu//buGQjgDjwym0nq
wqDCPOvz18LGZ1D3xP/SRyu7BceVmfPvgv3ABwtJABS29Ix+Rxxe20tTmhkYY4u7
wR8dcpi7wSSR0gQN+AAvvc2Dql7fB8Q3FkrUdhxT/C6uBBKXKILNtM0VU7VdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUy2IMFtujbfoUoll2ztlqJUrM6WAwHwYDVR0j
BBgwFoAU/cg8gZnHbQkeKtm/tGCSZXNgXawwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTA1Zjc2OGItNDIxOC00YzVkLTg5M2EtMGZmNjk2NTI2NjM5LzAvRkRDODNDODE5
OUM3NkQwOTFFMkFEOUJGQjQ2MDkyNjU3MzYwNURBQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GREM4M0M4MTk5Qzc2RDA5MUUyQUQ5QkZCNDYwOTI2NTczNjA1
REFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5
M2EtMGZmNjk2NTI2NjM5LzAvRkRDODNDODE5OUM3NkQwOTFFMkFEOUJGQjQ2MDky
NjU3MzYwNURBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEldjahST/uRoIYkhfzH/gl5BvlA3wzyPdz9
N/PwQ7tZ9PBDFwkBcVbEsNjjvdrZzZzQBxB9HX42CUrKdIxrWsuM1nu7BBGobizG
v75JH9x3vb36PSoSy1sofgAqrwXhMbZFaTNm2cLFpRHHP5J1VvpuA6k6NLIsbTaD
V4ScM4lWkIR7JLPRH4cyNiKAmYiXgL2mYS2XfNDoK/sLpbb2Qv4yVaghzj6fjJFJ
yjDi5J/zbiUG8k1+wDqhePwCCliJNs9u/Oxzgui4CgRGhKbaoSIEX3uwzWZKCVt6
psWRVU7SozoJjKhTbSCcEZ6XWU1pzcuA6TpZGSGLlekbRVAWeoA=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:18:22 2026 by rpki-client