Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.mft
File:                     09235F29310425E354121090269C1EB6089EB0B2.mft (raw, json)
Hash identifier:          TH1f1YjgmcY+w2Qubf75hLZc7S0Ooo53tN/hRqmkias=
Subject key identifier:   BD:6C:E1:3C:C2:AB:CD:B7:17:4C:5C:9F:8F:07:19:92:99:BD:8A:0B
Authority key identifier: 09:23:5F:29:31:04:25:E3:54:12:10:90:26:9C:1E:B6:08:9E:B0:B2
Certificate issuer:       /CN=09235F29310425E354121090269C1EB6089EB0B2
Certificate serial:       05374BB9DB08A0B5DFE2A06006D5173513EA90DE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09235F29310425E354121090269C1EB6089EB0B2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.mft
Manifest number:          3F
Signing time:             Wed 17 Jun 2026 04:38:25 +0000
Manifest this update:     Wed 17 Jun 2026 04:33:25 +0000
Manifest next update:     Thu 18 Jun 2026 08:17:25 +0000
Files and hashes:         1: 3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (hash: 2INetKIyYbbWVRJzq04gwfCzimGA1viA/2dx8yz7FAA=)
                          2: 09235F29310425E354121090269C1EB6089EB0B2.crl (hash: /0bPRlyte8TPyEceZLOOVWC2Ac7OZ4wgq23zBY8BPsc=)
                          3: 3130332e3139302e312e302f32342d3234203d3e20313439383930.roa (hash: i3i9YlBMluNIH3LVCAsoGfBIszmnZLknI4mpG8oNRww=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.crl
                          rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09235F29310425E354121090269C1EB6089EB0B2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:37:4b:b9:db:08:a0:b5:df:e2:a0:60:06:d5:17:35:13:ea:90:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09235F29310425E354121090269C1EB6089EB0B2
        Validity
            Not Before: Jun 17 04:33:25 2026 GMT
            Not After : Jun 18 08:17:25 2026 GMT
        Subject: CN=BD6CE13CC2ABCDB7174C5C9F8F07199299BD8A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8f:f2:38:e7:57:59:63:37:b6:b9:c8:b4:aa:
                    18:26:e1:6e:df:7f:47:be:56:7e:1c:6c:b0:69:03:
                    c3:e6:6e:1c:4d:46:84:23:c2:76:50:cd:f1:a5:53:
                    0a:c5:e7:3b:2a:cb:ac:b8:07:32:9e:ff:3c:a6:05:
                    79:7a:6a:2c:65:64:f0:86:7c:ca:58:4e:28:19:7d:
                    bf:1b:c9:18:b6:a0:17:89:43:ed:7e:95:e9:7f:d0:
                    4e:15:75:b1:c0:e1:5c:e6:b7:10:c2:77:c4:be:aa:
                    25:fb:8a:71:ab:de:08:28:c3:b9:c5:df:ab:c1:fd:
                    42:5b:47:e4:c8:ef:c4:99:54:9d:b2:f4:38:8a:7a:
                    a8:9e:03:b3:94:32:db:6d:8a:52:28:cc:aa:6a:d8:
                    eb:02:54:89:ed:a4:01:f8:ea:e7:0d:60:37:57:96:
                    3c:da:27:33:bb:73:0f:c6:c1:1a:03:12:f4:3d:6d:
                    3c:02:24:8a:dc:dd:a2:34:75:39:d5:70:80:f6:5c:
                    b3:84:3b:1b:eb:99:a8:ef:5e:f6:75:45:57:bc:61:
                    c3:db:cc:df:86:c8:fd:71:36:9e:30:fa:f1:15:7b:
                    b8:e5:1d:cc:ea:55:3c:c4:78:5e:73:43:bf:a5:98:
                    fd:c7:8d:91:56:8a:33:b0:28:7d:5c:5a:03:8a:52:
                    68:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6C:E1:3C:C2:AB:CD:B7:17:4C:5C:9F:8F:07:19:92:99:BD:8A:0B
            X509v3 Authority Key Identifier:
                keyid:09:23:5F:29:31:04:25:E3:54:12:10:90:26:9C:1E:B6:08:9E:B0:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09235F29310425E354121090269C1EB6089EB0B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:30:4a:23:cd:24:0b:e2:07:b0:ca:61:19:bb:ef:c9:d7:c2:
         9e:12:43:48:d7:94:d4:54:8f:c3:09:6b:61:92:e4:f1:3a:ca:
         f6:35:7e:49:a5:f3:0f:84:54:3f:be:e4:85:ab:88:80:a1:e8:
         08:a1:3b:5c:0c:1c:02:52:e5:20:be:3c:28:38:96:09:ca:49:
         ae:b6:18:3c:e6:4b:1f:99:62:56:55:24:db:19:72:7c:8e:67:
         94:ef:25:15:0a:f0:22:15:20:0a:e0:4d:63:65:08:94:2f:4f:
         1b:6d:9f:91:86:89:31:17:99:0f:b8:2c:f7:0d:ec:14:7d:fb:
         dc:61:81:5e:34:24:3d:dd:61:a1:59:5e:ce:57:b6:d6:43:bc:
         ab:66:87:51:fd:ad:10:25:7a:8b:5c:a6:aa:e1:fc:64:e6:17:
         fb:e2:95:06:7d:fa:50:6e:ad:02:d3:e8:f8:bf:56:18:64:06:
         2e:d7:48:07:79:0d:72:73:b0:38:5c:8a:cd:34:5b:05:f5:5d:
         42:40:b5:34:fd:2b:d8:69:6c:37:c1:9b:23:1b:18:4d:93:9d:
         31:82:d7:2a:c2:af:8f:96:17:96:ff:13:97:98:72:e5:94:54:
         ef:af:0e:dd:6e:92:45:0f:ea:46:58:7d:68:36:6c:77:0e:82:
         08:af:94:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:07 2026 by rpki-client