Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
File:                     04D52083D82721F61634E6629E16C7C7A870B9F5.mft (raw, json)
Hash identifier:          71e2N8sb44h9gwf1LchBNKdfTQe+BCp77oOBChq+hnE=
Subject key identifier:   E4:70:91:48:5E:1B:31:2A:16:5A:EF:F2:53:5F:AD:13:20:9F:64:A6
Authority key identifier: 04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5
Certificate issuer:       /CN=04D52083D82721F61634E6629E16C7C7A870B9F5
Certificate serial:       7CF08109860420A23D315B26455CAB72DC983F17
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 08:43:31 +0000
Manifest this update:     Wed 17 Jun 2026 08:38:31 +0000
Manifest next update:     Thu 18 Jun 2026 09:30:31 +0000
Files and hashes:         1: 04D52083D82721F61634E6629E16C7C7A870B9F5.crl (hash: e4hf24O+55EW1DF06lq3JhoyoOTJSMiuV+vBBw85Uwc=)
                          2: 3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (hash: VKlwIPdpyMpqk0maSmWSiVv4EZTH1WpK0M+m3jBjjUU=)
                          3: 3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (hash: JXl9nF73Wg0ANBBDSP3R1eZt9u9/t+JbOCpzL0EVDI8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl
                          rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f0:81:09:86:04:20:a2:3d:31:5b:26:45:5c:ab:72:dc:98:3f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04D52083D82721F61634E6629E16C7C7A870B9F5
        Validity
            Not Before: Jun 17 08:38:31 2026 GMT
            Not After : Jun 18 09:30:31 2026 GMT
        Subject: CN=E47091485E1B312A165AEFF2535FAD13209F64A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:b3:b4:f6:18:44:1b:51:bf:99:b6:87:99:
                    7e:90:d2:d5:c2:3a:82:30:50:4a:ee:07:b4:f8:75:
                    b3:de:cd:c7:74:60:98:90:d8:d4:de:0f:14:79:0a:
                    4c:f3:34:39:49:15:32:c7:7e:b3:0e:98:9b:9a:4d:
                    66:7e:b8:34:37:73:4b:23:5b:b5:fb:7d:f4:ef:87:
                    27:e2:a9:3b:22:ae:64:c6:d3:7d:f8:b7:73:e2:6f:
                    8a:83:b9:c0:0b:51:2f:1d:fe:f4:7b:bf:cd:17:9b:
                    ba:21:7f:08:88:5d:41:51:8e:85:d3:7a:6e:11:53:
                    0a:89:45:a7:1d:1e:af:79:64:f0:52:d4:01:29:e2:
                    c5:25:60:58:0e:fc:ee:c7:75:36:54:cf:a6:58:2a:
                    75:c1:85:98:b1:b4:0e:e8:35:17:ee:48:77:e1:45:
                    b9:c5:97:3e:5d:74:07:02:a3:64:55:c0:5f:32:fd:
                    9c:9b:1f:d8:ed:4b:21:77:70:16:62:20:80:2e:a7:
                    f2:1b:79:fa:72:3e:26:f9:23:b5:56:82:82:ce:70:
                    76:d9:65:9e:73:97:a8:0f:99:27:fe:02:4f:bb:d3:
                    57:22:ee:19:60:29:7c:97:92:96:5f:ba:bd:ab:22:
                    d6:f5:c1:06:9b:a6:82:d1:fe:42:2e:48:b2:3b:41:
                    ef:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:70:91:48:5E:1B:31:2A:16:5A:EF:F2:53:5F:AD:13:20:9F:64:A6
            X509v3 Authority Key Identifier:
                keyid:04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:60:f2:2f:eb:39:3a:17:f2:9d:55:c3:67:4f:88:0c:02:2f:
         5c:0c:d7:89:f8:fd:6c:f5:b7:43:61:59:32:d3:72:8b:4c:ae:
         6c:78:7f:ac:9d:27:85:f1:c5:d5:ea:09:60:79:d5:9c:c3:59:
         60:c6:17:87:a1:36:72:52:1e:12:0d:15:04:90:2d:ad:c1:82:
         9a:a9:5e:67:9c:8b:0b:7d:65:6d:b9:62:55:83:f0:93:9f:3e:
         21:bd:e2:30:f9:31:29:17:8b:c7:42:36:35:91:59:9e:36:ed:
         09:94:70:14:6f:b1:2c:c6:a6:9f:79:68:d4:98:aa:d8:c7:82:
         92:11:e0:60:29:79:73:da:0a:36:9c:cd:77:f9:7f:30:3d:7e:
         bc:63:e8:3a:be:b8:a0:a7:ac:b8:3b:9b:63:90:d4:0b:0b:d8:
         96:3e:75:86:f9:b8:87:d6:78:41:c7:7d:ab:bc:5e:b8:b7:1f:
         83:c7:42:e5:fe:2b:02:3c:f1:b4:04:23:4e:d2:95:bc:f9:e2:
         b4:4f:fd:fd:c7:27:3b:c3:67:08:a3:21:4d:0e:22:f5:bf:02:
         c5:ec:45:3a:d6:de:d2:89:d5:16:e2:29:7a:9c:ac:40:b0:98:
         78:b3:c7:98:e5:22:f8:78:27:4e:6f:b0:6d:34:b0:cc:d4:71:
         93:d9:b5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:42:19 2026 by rpki-client