Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft
File:                     5340DB769DA0690FFA8A696A6047EDC148F1991A.mft (raw, json)
Hash identifier:          25PBUtLlWCzEQn6RyNT7X5207a4y2o6h7sKsGhnUj40=
Subject key identifier:   26:41:B9:E3:11:67:15:9B:AA:F9:BD:DC:AC:5E:7F:99:C4:EE:98:32
Authority key identifier: 53:40:DB:76:9D:A0:69:0F:FA:8A:69:6A:60:47:ED:C1:48:F1:99:1A
Certificate issuer:       /CN=5340DB769DA0690FFA8A696A6047EDC148F1991A
Certificate serial:       17CB11C72000A19C6CAA2B5EAAD381D36BD2D614
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 06:20:31 +0000
Manifest this update:     Wed 17 Jun 2026 06:15:31 +0000
Manifest next update:     Thu 18 Jun 2026 07:31:31 +0000
Files and hashes:         1: 3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa (hash: ADXGlMGf5Kb+tXCSNEvEFMbQ1O+wDlMr9doBES2hSe0=)
                          2: 5340DB769DA0690FFA8A696A6047EDC148F1991A.crl (hash: iN+Ivp/bfLKk8/0SRefVn1Wm0s/JyeiDk9bN/nWQHLc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.crl
                          rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cb:11:c7:20:00:a1:9c:6c:aa:2b:5e:aa:d3:81:d3:6b:d2:d6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5340DB769DA0690FFA8A696A6047EDC148F1991A
        Validity
            Not Before: Jun 17 06:15:31 2026 GMT
            Not After : Jun 18 07:31:31 2026 GMT
        Subject: CN=2641B9E31167159BAAF9BDDCAC5E7F99C4EE9832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:85:90:d5:43:98:45:d7:ae:96:b3:05:18:8b:
                    59:bb:55:1e:a1:ab:4c:77:52:7f:1c:16:b7:c9:85:
                    62:fa:36:45:a1:2a:de:18:10:5c:02:7e:44:68:b5:
                    67:47:5b:23:93:bd:a2:d5:6f:c8:ea:cb:d8:5d:85:
                    d0:0e:45:74:67:ac:2d:80:39:70:f5:c1:01:12:ad:
                    b7:09:d4:1a:11:97:26:a9:92:ab:4d:7b:7a:e3:8a:
                    c6:22:d4:e7:30:90:6a:b8:b3:eb:39:93:66:25:b4:
                    04:dd:ec:07:aa:4a:52:7e:68:ac:48:b4:fd:27:21:
                    12:92:dd:46:7e:b8:96:8a:d4:e6:ba:76:b2:b5:75:
                    3c:6b:00:dc:66:7c:51:6c:4a:d1:ea:6c:d8:c6:91:
                    86:7b:bf:f8:37:45:08:25:25:88:9c:5e:fe:ce:b4:
                    af:74:e9:a1:1b:ab:7c:4f:69:85:07:5c:ed:70:60:
                    c8:41:23:4c:9f:30:d3:f4:c9:7d:da:56:b9:b6:a8:
                    8a:a5:1b:a4:1f:cc:08:5f:f2:ae:b2:79:24:32:07:
                    fc:e5:33:17:1b:5a:ab:c6:bb:c7:a4:18:9e:7b:6c:
                    1e:be:b9:56:7f:d3:ff:31:f8:0e:82:9e:d5:e7:f6:
                    10:76:2d:6f:af:1d:ae:12:ac:d9:d0:df:dd:a8:4f:
                    07:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:41:B9:E3:11:67:15:9B:AA:F9:BD:DC:AC:5E:7F:99:C4:EE:98:32
            X509v3 Authority Key Identifier:
                keyid:53:40:DB:76:9D:A0:69:0F:FA:8A:69:6A:60:47:ED:C1:48:F1:99:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:69:ff:62:5b:71:53:44:6f:ea:9b:0a:3d:bb:61:c0:90:23:
         6e:9c:18:cb:35:51:2a:9e:43:3e:ae:a8:49:cc:70:83:66:0c:
         f2:9c:1a:41:68:d5:dc:b1:bf:1a:4c:d9:48:5e:64:66:57:44:
         19:97:c7:f3:b1:90:01:b0:a7:e7:98:7b:18:2c:a6:ea:a7:c4:
         d3:21:13:d8:8a:30:0e:ad:a2:55:61:ff:65:b1:e5:f5:6f:43:
         0f:4e:51:fc:67:d2:10:db:2b:8e:2f:c3:89:3b:84:bc:58:fa:
         e0:8c:2c:33:f8:15:9f:c8:23:e3:49:32:69:dc:f8:e2:aa:a2:
         e0:b4:e1:1e:ab:d8:c8:03:41:18:18:fd:6c:15:f4:03:80:35:
         c8:c2:f3:92:cd:d1:67:87:b6:bb:4f:c4:98:74:cd:56:87:75:
         7b:af:bb:db:22:39:ac:fe:85:ce:6b:e2:f1:6b:67:98:69:09:
         f1:d0:83:35:00:64:3e:4c:e8:24:1a:cb:75:36:99:62:14:e8:
         e6:1b:03:9c:03:de:00:0f:ee:f6:f4:9c:aa:8c:c3:3e:54:8a:
         43:79:11:ec:75:5b:58:58:84:26:63:78:5c:f1:ec:31:f2:b2:
         08:f6:83:f5:ab:96:92:fe:46:87:c7:7b:89:9c:76:90:1e:a1:
         b3:15:46:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:44:04 2026 by rpki-client