Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft
File:                     02A914400077F3E213C8972280DBD775A6B4C27C.mft (raw, json)
Hash identifier:          LwgoraKt3l1zwikG/nKpg8VTebB3Q90hgohY+2A42QA=
Subject key identifier:   AF:51:7E:9A:21:00:4B:98:FD:EE:E5:00:F6:AC:C0:E1:4F:09:24:4A
Authority key identifier: 02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C
Certificate issuer:       /CN=02A914400077F3E213C8972280DBD775A6B4C27C
Certificate serial:       25E36723C7A705CD53AB26B8F9CC8A54EBB0CE50
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 18:42:07 +0000
Manifest this update:     Sat 13 Jun 2026 18:37:07 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:07 +0000
Files and hashes:         1: 02A914400077F3E213C8972280DBD775A6B4C27C.crl (hash: lxnvjNUKTGwsOSpCWvxopKAH1oaBy5H7vuoCqxrBZ6s=)
                          2: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: GtvHkVY9/W43sI4HiI73HEw8h6eq1YXH6SXHhFSgbQc=)
                          3: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: 7K61pTbrZ/wXrVu+ND+CKuJN541gJOWkRBEe8DSD5VY=)
                          4: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: MqhWF/9kEJruTy9GHUvbvPqeSAr4kmVz23GSZ1AI124=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl
                          rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e3:67:23:c7:a7:05:cd:53:ab:26:b8:f9:cc:8a:54:eb:b0:ce:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A914400077F3E213C8972280DBD775A6B4C27C
        Validity
            Not Before: Jun 13 18:37:07 2026 GMT
            Not After : Jun 14 19:00:07 2026 GMT
        Subject: CN=AF517E9A21004B98FDEEE500F6ACC0E14F09244A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:25:a7:48:f6:3e:fc:97:43:4c:dd:cb:7d:c8:
                    07:1b:15:55:b3:c5:d2:d8:7c:00:43:88:43:f4:d4:
                    8c:15:a2:80:cd:33:b8:39:ab:f6:db:3f:bb:9d:5b:
                    f5:60:a7:1c:3f:94:5d:75:5c:5f:71:ed:01:c1:0b:
                    ea:b7:25:df:b8:e8:bd:32:b9:7c:4d:5a:87:59:02:
                    39:d8:16:a8:5e:7b:90:7a:26:56:c3:fa:9e:ff:5a:
                    f8:02:f9:e3:7c:88:3e:85:6f:36:a9:14:52:9b:bb:
                    e6:31:5f:32:2c:10:f2:a0:2f:83:25:11:bb:bd:a3:
                    f8:e1:c8:46:74:46:c7:f0:a5:11:06:e3:fe:a9:0d:
                    3f:c7:1b:2c:86:f8:67:c7:2b:7f:05:00:46:cf:b9:
                    c9:6e:77:b2:bb:8e:2b:0c:af:1a:d3:4c:20:c2:12:
                    d0:c0:d9:db:3e:4a:13:89:2d:da:e1:16:2a:86:b1:
                    bc:a0:7e:d6:a2:41:4e:14:5a:5d:54:c7:dd:a3:17:
                    25:45:52:c6:dd:3d:85:8d:d4:c8:85:1f:25:06:b3:
                    ae:d5:43:be:d5:62:91:bb:d9:1b:e3:22:47:36:d1:
                    22:dc:38:60:2b:39:1a:1b:86:24:6f:fa:12:c4:3f:
                    91:9c:a1:26:d1:92:b0:9e:c1:d1:7a:7f:49:1a:5e:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:51:7E:9A:21:00:4B:98:FD:EE:E5:00:F6:AC:C0:E1:4F:09:24:4A
            X509v3 Authority Key Identifier:
                keyid:02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:fc:19:60:c5:e9:7f:02:56:52:a6:a0:91:43:69:f0:29:9b:
         3a:78:dc:98:64:f0:7e:63:57:3f:c9:63:66:b4:1c:5c:70:80:
         cd:e7:8e:6a:08:e0:87:bb:c4:d4:5a:0b:0f:78:d1:ad:a3:0c:
         b1:11:8d:30:92:73:18:78:71:0c:06:b2:44:13:b6:a8:40:6d:
         4c:99:82:9a:e7:89:2c:e3:77:49:67:45:4e:0e:2a:52:aa:b0:
         92:59:ac:c4:0d:68:14:ea:77:21:49:b6:f6:51:02:bd:87:41:
         84:7a:83:d1:b7:6d:37:8c:4c:77:40:eb:bc:93:58:b3:c8:59:
         29:92:d1:af:fd:75:5d:93:92:7c:a9:53:bd:c7:7c:7c:ac:80:
         34:f3:a3:68:b3:63:c4:20:9d:15:a9:84:7f:6f:7f:0b:d4:d0:
         f5:2d:42:dd:0f:18:bc:7e:dc:7a:f9:0d:48:d4:dc:3e:16:d5:
         ca:a5:8e:66:3f:ac:d9:80:24:cc:0e:91:e6:c8:3a:5d:66:00:
         db:84:4e:bc:86:d8:d9:a2:fb:d4:0f:d6:ef:e4:88:7d:a5:86:
         ae:d7:a1:dd:ee:ba:28:8f:c8:27:82:a5:00:3e:99:1e:a4:d6:
         5f:cc:61:f4:d4:38:66:9c:9c:2b:da:d3:5e:2a:4c:b4:e0:37:
         47:b1:9e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:39:25 2026 by rpki-client