Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
File:                     2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft (raw, json)
Hash identifier:          wABIRBuoLHcdcfhlnh+0tE1QUl7NndGE605o6frCQFY=
Subject key identifier:   82:53:E3:5D:12:45:80:5B:1D:E0:60:6C:2F:BE:5D:69:FB:66:53:D5
Authority key identifier: 2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A
Certificate issuer:       /CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A
Certificate serial:       5704E1F51E65A48189A51256C64B3793273D92F6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 04:28:14 +0000
Manifest this update:     Wed 17 Jun 2026 04:23:14 +0000
Manifest next update:     Thu 18 Jun 2026 05:45:14 +0000
Files and hashes:         1: 3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa (hash: GzkXDWcauMWYNDn5MyFD1nDjKkP9ZpScdykpa6iOEak=)
                          2: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl (hash: AyT+OFRAH4Z8Gaqlxj2oTMWKjeNkCM/27fTWwPJfEaQ=)
                          3: 3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa (hash: VdJ1ZIQnNrJcWKeLJSeBvVO0FNQ/sxBZNurd+uNh3ek=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl
                          rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:04:e1:f5:1e:65:a4:81:89:a5:12:56:c6:4b:37:93:27:3d:92:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A
        Validity
            Not Before: Jun 17 04:23:14 2026 GMT
            Not After : Jun 18 05:45:14 2026 GMT
        Subject: CN=8253E35D1245805B1DE0606C2FBE5D69FB6653D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c1:53:d0:51:fd:ca:af:82:24:40:f1:f0:53:
                    b0:31:a1:c8:78:91:02:a7:c5:f2:71:15:88:52:2a:
                    80:a9:58:3a:4c:f7:24:b4:17:c7:b1:bf:6e:fe:fa:
                    97:10:42:42:95:93:7e:99:f6:1c:98:80:ec:d8:6a:
                    5d:a4:8b:80:cf:1b:7b:93:0a:1d:a5:39:d4:30:ee:
                    23:1c:cb:48:7e:96:18:ad:c6:18:dc:73:57:6b:db:
                    ba:63:34:5f:ef:7f:28:fe:68:17:75:de:f8:ef:25:
                    20:ec:c6:1f:65:15:ba:58:d8:6c:e0:9f:a3:14:ec:
                    4b:62:dd:8b:b4:87:42:00:70:2a:e8:ba:94:94:6c:
                    12:6f:51:32:ae:08:22:16:53:35:a1:c4:86:eb:ae:
                    07:70:cd:2f:af:3e:ab:ec:eb:a4:55:76:a3:4c:cc:
                    2a:e4:b0:c0:81:ba:f7:74:5c:33:66:c5:31:28:e5:
                    5e:ef:38:37:95:41:07:2c:0e:3d:07:08:5b:bc:68:
                    be:99:08:f4:6a:8f:f7:95:ab:a3:0c:56:67:88:46:
                    06:b5:34:b9:20:64:9f:ae:08:a3:b3:8d:c3:c9:d6:
                    6f:7e:5e:b2:76:bd:89:5c:d3:93:51:89:2e:71:8b:
                    17:0c:b4:95:62:e7:71:87:0a:01:78:19:26:b3:83:
                    58:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:53:E3:5D:12:45:80:5B:1D:E0:60:6C:2F:BE:5D:69:FB:66:53:D5
            X509v3 Authority Key Identifier:
                keyid:2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:9e:4f:87:4a:e2:ac:f7:1e:7b:74:7d:f8:8e:bf:72:3a:97:
         44:70:90:ab:1e:d5:14:d2:95:1c:70:27:52:a9:f7:bd:0b:e7:
         63:56:31:c6:b5:80:c0:7f:09:dd:db:ac:8c:0c:42:93:c4:b4:
         24:d8:68:fd:83:25:d0:c7:cd:61:f5:fe:cf:51:3c:17:25:f4:
         3a:63:3d:a1:db:61:db:7e:8b:ea:c0:47:72:99:17:04:45:cf:
         4d:d6:ba:52:cc:27:f9:16:e8:d8:31:46:7e:af:f2:31:fe:0c:
         f7:cc:39:8e:31:2e:80:ab:71:13:48:f3:73:8a:cd:3c:2c:9a:
         60:f3:58:40:d3:ca:de:fa:48:2c:d1:89:e3:37:6f:c9:12:36:
         64:0e:3c:0d:1b:73:ce:f1:9f:a2:d6:23:bd:20:8b:8f:bd:81:
         46:13:49:5b:87:63:2d:ee:87:09:ac:05:fd:7a:70:37:65:c7:
         33:04:7a:9c:59:7c:41:d3:80:a8:65:8b:d3:54:18:fb:55:a2:
         0d:6f:b7:b8:e9:2f:18:73:9f:4b:dd:58:86:94:53:90:6a:e3:
         74:17:d3:e4:81:61:2e:b5:c7:22:d4:c3:bc:52:9e:9e:fa:09:
         29:01:6e:3d:a5:d9:68:1c:7c:e2:53:c9:9f:11:6c:ba:c3:0e:
         ee:6b:17:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:42:19 2026 by rpki-client