Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft
File:                     D54419983140D3CB73E625681538225CB12E5424.mft (raw, json)
Hash identifier:          OIEN7pHhXijnmb1A/99+hfmdkz08DgWrKm5XSnUy80Q=
Subject key identifier:   52:5D:BF:0C:DF:96:21:22:5E:2E:42:2C:A1:98:EC:FA:90:93:C6:B8
Authority key identifier: D5:44:19:98:31:40:D3:CB:73:E6:25:68:15:38:22:5C:B1:2E:54:24
Certificate issuer:       /CN=D54419983140D3CB73E625681538225CB12E5424
Certificate serial:       20444184467234B6651733A65516C063D20A088B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D54419983140D3CB73E625681538225CB12E5424.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 09:30:22 +0000
Manifest this update:     Sat 13 Jun 2026 09:25:22 +0000
Manifest next update:     Sun 14 Jun 2026 12:08:22 +0000
Files and hashes:         1: 3135372e32302e3130302e302f32342d3234203d3e20313532343235.roa (hash: SzOCWedu7Qhh9QrHie1gNK2ZtR2GDQm9yZncMipwLrI=)
                          2: D54419983140D3CB73E625681538225CB12E5424.crl (hash: c0OLAB+QfIMhTMos9gqR2qZfgL691ZeLUmMAFBWl6+Y=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.crl
                          rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D54419983140D3CB73E625681538225CB12E5424.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:44:41:84:46:72:34:b6:65:17:33:a6:55:16:c0:63:d2:0a:08:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54419983140D3CB73E625681538225CB12E5424
        Validity
            Not Before: Jun 13 09:25:22 2026 GMT
            Not After : Jun 14 12:08:22 2026 GMT
        Subject: CN=525DBF0CDF9621225E2E422CA198ECFA9093C6B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:42:93:47:89:a6:e5:2d:44:2a:16:0f:e9:64:
                    c5:60:10:3a:03:19:83:f6:a2:ce:30:94:05:d6:a0:
                    fa:71:b5:e3:b0:c6:3f:05:9a:2f:ee:7c:7b:e7:81:
                    97:00:3f:fc:b5:2b:42:14:9d:15:ff:29:23:f4:cf:
                    f2:bb:dc:e0:3f:25:a7:4b:91:1e:3b:d6:cd:ef:91:
                    06:88:bb:45:a0:9f:bc:eb:53:71:18:e1:a6:b2:7b:
                    68:fb:e9:14:b3:51:7b:bd:7b:55:a4:c8:12:02:51:
                    37:25:4c:1e:a4:de:4c:31:b1:75:0f:90:38:a8:b4:
                    22:1d:86:5d:0f:56:1f:0a:53:bb:b8:32:50:6e:8a:
                    ae:4f:3b:5f:69:87:41:46:78:1a:b5:9a:e5:7e:c2:
                    8f:32:ef:87:25:69:bd:4e:83:96:1f:e3:84:02:29:
                    2f:54:9b:0b:20:a2:71:f9:5f:6e:22:76:56:5c:8d:
                    19:81:d5:32:25:c9:97:de:35:05:3c:e9:82:7b:79:
                    03:57:47:4a:93:77:4a:6d:7d:0f:ff:82:be:4c:06:
                    97:19:74:1a:8e:6e:38:9a:d1:6c:40:68:11:55:36:
                    fd:b1:1f:81:c1:d7:79:55:aa:cf:da:c0:40:38:d2:
                    51:5d:f3:02:0a:80:82:26:86:d6:c6:31:5d:bf:cb:
                    9a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5D:BF:0C:DF:96:21:22:5E:2E:42:2C:A1:98:EC:FA:90:93:C6:B8
            X509v3 Authority Key Identifier:
                keyid:D5:44:19:98:31:40:D3:CB:73:E6:25:68:15:38:22:5C:B1:2E:54:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D54419983140D3CB73E625681538225CB12E5424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:df:af:b1:0a:54:2f:76:52:cc:04:62:ee:c6:e9:d6:14:ce:
         a4:09:02:e2:2a:a7:64:1b:48:e3:d6:77:f5:26:48:70:eb:ce:
         10:58:18:ea:0b:d0:b8:cc:31:3c:78:0b:98:21:4b:19:d6:0b:
         6b:a8:0a:1f:e7:cf:2f:61:70:ce:22:60:3a:3b:18:66:c2:bd:
         96:94:6d:71:33:b1:72:ac:9f:28:9e:ff:65:33:83:16:25:8a:
         e7:d9:45:23:43:05:eb:59:f9:8d:47:c9:29:df:70:e1:23:2e:
         08:36:e4:71:0a:78:6d:d9:d8:4e:a0:af:20:98:ac:2e:04:86:
         65:06:e5:fb:df:86:35:e5:2d:5b:92:0e:55:5b:2a:a0:f7:4f:
         4e:85:1b:1e:94:e2:01:eb:ff:4f:89:16:98:96:2a:66:10:bf:
         bd:06:19:24:5e:e2:15:38:96:7d:83:8a:96:73:6d:00:62:77:
         db:61:33:62:a0:c7:de:c3:fc:ac:d6:1e:80:69:af:fe:57:5a:
         c5:d7:f6:f3:d0:67:9c:8b:65:5d:fd:b6:aa:ad:c1:37:53:60:
         d3:56:66:63:02:2f:4f:44:0f:78:2f:9c:83:4c:27:77:65:94:
         5f:1b:00:f0:ec:62:b4:ad:bb:97:54:38:52:b6:79:a0:91:06:
         86:8a:ea:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:29:39 2026 by rpki-client