Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft
File:                     D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft (raw, json)
Hash identifier:          xUpWQ3ajuWi2v2Y/LNFEXWSLoBV3b1DNnKwGey/zmqc=
Subject key identifier:   DB:DC:80:B4:E9:7A:26:FF:75:FB:F3:06:72:CA:5C:2D:2E:77:1F:75
Authority key identifier: D4:B5:3A:6A:5B:EF:99:B5:CD:68:B1:46:74:4A:87:E1:63:2C:24:F8
Certificate issuer:       /CN=D4B53A6A5BEF99B5CD68B146744A87E1632C24F8
Certificate serial:       5F57E41298792677B021BAB92677E42DA6AC09B0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft
Manifest number:          3F
Signing time:             Wed 17 Jun 2026 05:29:31 +0000
Manifest this update:     Wed 17 Jun 2026 05:24:31 +0000
Manifest next update:     Thu 18 Jun 2026 07:52:31 +0000
Files and hashes:         1: D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl (hash: qIZOHkjwpX9YzsThzU3NFPDqZdFC61dVVPejLujUgQU=)
                          2: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: Tl47NYhV7p3ilyhNqNo+NuftHesBi3flI0jGsgT+BAM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl
                          rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:57:e4:12:98:79:26:77:b0:21:ba:b9:26:77:e4:2d:a6:ac:09:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4B53A6A5BEF99B5CD68B146744A87E1632C24F8
        Validity
            Not Before: Jun 17 05:24:31 2026 GMT
            Not After : Jun 18 07:52:31 2026 GMT
        Subject: CN=DBDC80B4E97A26FF75FBF30672CA5C2D2E771F75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:55:9c:b8:cb:82:80:10:d4:f4:c8:ac:9f:ba:
                    e8:b6:47:88:5a:59:95:27:87:e3:a9:b5:2b:e0:dc:
                    f7:c7:83:38:51:da:59:d8:a7:e5:47:26:1a:cc:26:
                    0f:31:89:72:df:63:b6:72:30:bd:f5:5d:e7:70:83:
                    20:9d:92:ee:7c:3f:2e:3a:26:84:07:70:f3:f6:a8:
                    72:91:bb:81:d1:53:c0:b0:c7:3e:fe:bb:55:9a:30:
                    be:ba:6f:96:c7:ec:53:e7:d2:de:f6:6d:64:d3:8a:
                    cf:8e:d6:6c:63:01:15:b8:2b:bc:08:a4:7f:4b:96:
                    e3:db:29:e9:0a:cb:a6:36:4c:f2:17:63:bd:94:bc:
                    c9:eb:db:73:4b:2c:e9:6c:05:1f:2c:22:d9:8f:1e:
                    a8:f0:ac:2e:2d:c2:0b:e4:44:35:d1:97:7d:ac:c6:
                    56:1f:0a:da:e3:a5:1f:f0:77:d7:ac:4b:85:d7:13:
                    8c:54:96:32:60:8b:bc:e6:bd:a1:b2:ca:7e:bd:24:
                    2f:6b:3f:cc:61:e7:8f:c7:4a:53:8d:b1:29:cf:de:
                    b3:f1:f0:0a:45:65:f2:ff:60:ae:0c:5c:b5:e2:f7:
                    b1:c9:d0:05:6d:44:6f:15:8f:2c:2b:25:83:f0:7f:
                    3f:63:b9:2e:5b:cd:cb:f6:6b:1c:a6:e4:48:86:25:
                    88:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DC:80:B4:E9:7A:26:FF:75:FB:F3:06:72:CA:5C:2D:2E:77:1F:75
            X509v3 Authority Key Identifier:
                keyid:D4:B5:3A:6A:5B:EF:99:B5:CD:68:B1:46:74:4A:87:E1:63:2C:24:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:7d:d3:b1:c7:de:f1:02:58:97:96:74:e1:0d:a2:0e:ff:8e:
         56:53:f3:ab:f7:81:6f:fa:89:f3:fa:b5:df:11:d6:35:02:87:
         ec:2e:f1:3f:c8:3d:ff:cd:33:24:ca:e1:e6:75:0b:b1:96:4b:
         ab:f8:d2:26:9b:09:6e:4a:60:57:b6:ce:60:72:0b:ee:de:48:
         a9:ac:b2:45:7d:0a:f5:24:74:71:c6:99:7a:ed:de:e3:c4:7b:
         a3:af:d6:67:92:c3:af:19:1f:ec:e6:d2:6e:72:51:a1:a4:3b:
         bc:ba:11:e1:0e:9f:79:c8:73:a5:85:70:bf:34:00:31:fb:20:
         21:68:1a:b7:cf:25:42:21:d5:e4:00:97:e1:aa:46:23:5f:09:
         63:d6:6e:ec:14:44:d4:9a:ad:7f:c6:44:c4:c8:1a:1c:f9:d9:
         a4:fd:90:b7:de:ef:1c:67:38:49:9e:6f:fc:db:37:fe:a0:9c:
         25:5b:95:0a:22:48:9c:93:f3:47:ac:27:ca:b8:13:54:60:40:
         c2:2c:6b:28:a7:2e:0f:56:69:94:af:fb:16:70:04:7b:38:64:
         08:9d:81:e4:8a:db:a1:e7:f4:f9:14:6e:87:d2:ba:93:20:ca:
         3d:a6:89:8c:3c:5b:17:3e:0a:5d:23:7a:74:8d:91:e0:13:fb:
         f6:44:5c:0e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUX1fkEph5JnewIbq5JnfkLaasCbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRCNTNBNkE1QkVGOTlCNUNENjhCMTQ2NzQ0QTg3RTE2
MzJDMjRGODAeFw0yNjA2MTcwNTI0MzFaFw0yNjA2MTgwNzUyMzFaMDMxMTAvBgNV
BAMTKERCREM4MEI0RTk3QTI2RkY3NUZCRjMwNjcyQ0E1QzJEMkU3NzFGNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyVZy4y4KAENT0yKyfuui2R4ha
WZUnh+OptSvg3PfHgzhR2lnYp+VHJhrMJg8xiXLfY7ZyML31XedwgyCdku58Py46
JoQHcPP2qHKRu4HRU8Cwxz7+u1WaML66b5bH7FPn0t72bWTTis+O1mxjARW4K7wI
pH9LluPbKekKy6Y2TPIXY72UvMnr23NLLOlsBR8sItmPHqjwrC4twgvkRDXRl32s
xlYfCtrjpR/wd9esS4XXE4xUljJgi7zmvaGyyn69JC9rP8xh54/HSlONsSnP3rPx
8ApFZfL/YK4MXLXi97HJ0AVtRG8VjywrJYPwfz9juS5bzcv2axym5EiGJYivAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU29yAtOl6Jv91+/MGcspcLS53H3UwHwYDVR0j
BBgwFoAU1LU6alvvmbXNaLFGdEqH4WMsJPgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWUxOTExYjktMWQyZi00YmI0LTlkNzUtOWFhM2MzNTEwMGU4LzAvRDRCNTNBNkE1
QkVGOTlCNUNENjhCMTQ2NzQ0QTg3RTE2MzJDMjRGOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ENEI1M0E2QTVCRUY5OUI1Q0Q2OEIxNDY3NDRBODdFMTYzMkMy
NEY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk
NzUtOWFhM2MzNTEwMGU4LzAvRDRCNTNBNkE1QkVGOTlCNUNENjhCMTQ2NzQ0QTg3
RTE2MzJDMjRGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABV907HH3vECWJeWdOENog7/jlZT86v3gW/6
ifP6td8R1jUCh+wu8T/IPf/NMyTK4eZ1C7GWS6v40iabCW5KYFe2zmByC+7eSKms
skV9CvUkdHHGmXrt3uPEe6Ov1meSw68ZH+zm0m5yUaGkO7y6EeEOn3nIc6WFcL80
ADH7ICFoGrfPJUIh1eQAl+GqRiNfCWPWbuwURNSarX/GRMTIGhz52aT9kLfe7xxn
OEmeb/zbN/6gnCVblQoiSJyT80esJ8q4E1RgQMIsayinLg9WaZSv+xZwBHs4ZAid
geSK26Hn9PkUbofSupMgyj2miYw8Wxc+Cl0jenSNkeAT+/ZEXA4=
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:16:16 2026 by rpki-client