Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft
File:                     D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft (raw, json)
Hash identifier:          2OAc/79PbgHM9gPCTbVFIsESZB/AGqIkYgjcIxJ6I7E=
Subject key identifier:   53:FB:31:11:27:DC:3D:0C:8F:93:E0:B9:BC:99:8B:59:83:B2:ED:53
Authority key identifier: D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB
Certificate issuer:       /CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB
Certificate serial:       0946F673E268D4A89BD7CE5DFB0B0D31A44E1669
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 19:27:53 +0000
Manifest this update:     Sat 13 Jun 2026 19:22:53 +0000
Manifest next update:     Sun 14 Jun 2026 22:27:53 +0000
Files and hashes:         1: D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl (hash: 61SG5fT9ZmQ/CSe/OubHXCHYfs3R9TbKZenEpuUT5Tk=)
                          2: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: byftjSeCvMFNmeFpkuYeG9YZa2VCV2p6nFeWhRr4XHM=)
                          3: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: /Ank/NdhTyFolT1yr2gOxvp0mx0tj8KaBVOQP4gcAxk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl
                          rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 15:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:46:f6:73:e2:68:d4:a8:9b:d7:ce:5d:fb:0b:0d:31:a4:4e:16:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB
        Validity
            Not Before: Jun 13 19:22:53 2026 GMT
            Not After : Jun 14 22:27:53 2026 GMT
        Subject: CN=53FB311127DC3D0C8F93E0B9BC998B5983B2ED53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7d:42:8b:61:46:ee:ef:aa:19:f9:60:11:58:
                    f3:65:3f:40:44:62:00:03:f9:c7:7e:1f:27:99:f2:
                    58:40:7d:88:a9:2b:23:e7:e8:01:b3:d8:77:29:6a:
                    9f:b8:01:72:40:4d:5c:97:9a:15:46:fd:22:4f:26:
                    ca:53:e7:ee:8b:f1:a0:80:e7:f6:ed:20:f5:48:a0:
                    51:05:21:a3:a1:50:4b:24:b2:67:b5:81:7c:9a:63:
                    c4:f8:b7:2e:af:2d:ec:9b:ee:2c:e3:24:e5:9f:c3:
                    b2:85:ad:4e:78:e0:f8:47:1f:d4:45:e0:bf:f7:47:
                    39:29:18:59:50:3c:0c:71:c0:ba:c7:6a:24:f2:f5:
                    2b:72:34:4f:c6:13:06:d9:8a:63:a6:17:d1:89:21:
                    03:8f:e8:ef:4e:67:04:75:98:b8:a9:df:4f:77:b5:
                    cc:1e:09:98:63:76:8b:1d:20:b6:9e:69:64:a3:ba:
                    e6:5c:b5:76:57:b8:1c:a6:dc:0e:e2:f7:79:b9:9e:
                    23:76:4a:83:1e:9a:11:0a:4e:cc:5b:8e:f5:c0:11:
                    02:7d:0b:80:13:30:3b:90:cd:ac:8c:f2:ae:1e:e7:
                    aa:19:2d:34:25:5f:b0:b9:bb:1d:14:9c:c9:ca:98:
                    53:b3:95:c8:d7:2c:80:14:e4:2b:ae:0a:0a:d4:94:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FB:31:11:27:DC:3D:0C:8F:93:E0:B9:BC:99:8B:59:83:B2:ED:53
            X509v3 Authority Key Identifier:
                keyid:D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:fc:76:8b:9e:ef:40:dc:b4:8c:b5:eb:2b:ff:cb:5c:2c:28:
         e5:96:9f:ef:01:6d:6b:40:2c:d0:ff:52:31:6f:f1:28:0f:9d:
         49:bc:09:f9:be:d7:2c:20:86:db:e8:0f:14:5e:38:73:f4:88:
         f4:fd:34:fc:fb:c6:87:b7:06:4c:8b:13:c7:91:93:b1:7b:49:
         bf:4f:b6:d1:90:33:ac:05:fb:f4:23:b6:7f:ad:8a:c8:c4:a9:
         e7:05:bd:5e:23:0a:9c:ad:3a:31:7a:04:14:3c:da:73:4b:44:
         dd:4b:24:e4:b5:9e:9a:b2:c2:25:9f:37:6e:bc:ab:f0:c7:41:
         ea:ea:92:48:4b:fa:4d:25:a3:d8:10:73:01:78:f9:98:ee:34:
         d7:19:ba:32:e5:b6:25:94:8c:6b:a2:c8:64:e7:43:6f:76:2f:
         f2:45:47:77:b0:2f:16:8f:fe:96:95:13:a9:bd:94:3b:b5:69:
         01:f7:2f:df:c2:39:88:9b:4c:eb:85:2c:cf:83:e3:62:fb:e8:
         cf:6a:d5:ee:aa:f8:64:db:d5:4a:af:ed:03:9e:72:15:d4:77:
         e8:e4:9b:30:ec:00:64:06:98:b2:42:3d:5e:1c:b1:a7:43:ea:
         d9:6f:71:e8:85:9a:4a:78:f7:f7:a8:f4:06:15:54:c2:84:12:
         31:ab:ef:e4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCUb2c+Jo1Kib185d+wsNMaROFmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFFRkIy
MzE4NEZFQjAeFw0yNjA2MTMxOTIyNTNaFw0yNjA2MTQyMjI3NTNaMDMxMTAvBgNV
BAMTKDUzRkIzMTExMjdEQzNEMEM4RjkzRTBCOUJDOTk4QjU5ODNCMkVENTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKfUKLYUbu76oZ+WARWPNlP0BE
YgAD+cd+HyeZ8lhAfYipKyPn6AGz2Hcpap+4AXJATVyXmhVG/SJPJspT5+6L8aCA
5/btIPVIoFEFIaOhUEsksme1gXyaY8T4ty6vLeyb7izjJOWfw7KFrU544PhHH9RF
4L/3RzkpGFlQPAxxwLrHaiTy9StyNE/GEwbZimOmF9GJIQOP6O9OZwR1mLip3093
tcweCZhjdosdILaeaWSjuuZctXZXuBym3A7i93m5niN2SoMemhEKTsxbjvXAEQJ9
C4ATMDuQzayM8q4e56oZLTQlX7C5ux0UnMnKmFOzlcjXLIAU5CuuCgrUlF+xAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUU/sxESfcPQyPk+C5vJmLWYOy7VMwHwYDVR0j
BBgwFoAU036esvmOKc3xOGUzJmau+yMYT+swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTJlNWZmODEtYjA4Mi00MzM0LWFkMjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJG
OThFMjlDREYxMzg2NTMzMjY2NkFFRkIyMzE4NEZFQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9EMzdFOUVCMkY5OEUyOUNERjEzODY1MzMyNjY2QUVGQjIzMTg0
RkVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk
MjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFF
RkIyMzE4NEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG38doue70DctIy16yv/y1wsKOWWn+8BbWtA
LND/UjFv8SgPnUm8Cfm+1ywghtvoDxReOHP0iPT9NPz7xoe3BkyLE8eRk7F7Sb9P
ttGQM6wF+/Qjtn+tisjEqecFvV4jCpytOjF6BBQ82nNLRN1LJOS1npqywiWfN268
q/DHQerqkkhL+k0lo9gQcwF4+ZjuNNcZujLltiWUjGuiyGTnQ292L/JFR3ewLxaP
/paVE6m9lDu1aQH3L9/COYibTOuFLM+D42L76M9q1e6q+GTb1Uqv7QOechXUd+jk
mzDsAGQGmLJCPV4csadD6tlvceiFmkp49/eo9AYVVMKEEjGr7+Q=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:39:39 2026 by rpki-client