Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft
File:                     5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft (raw, json)
Hash identifier:          JHI1tEuNZ9xJo8Hxw5hG/ebWUETlSAJ99zlANHk73mc=
Subject key identifier:   CF:4A:FD:ED:DF:7E:FF:6C:48:73:69:24:35:99:44:30:AA:1D:CC:53
Authority key identifier: 5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10
Certificate issuer:       /CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10
Certificate serial:       5B5AFA989E8ACCC52DA61B2C8A8D6781B5682917
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft
Manifest number:          3A
Signing time:             Sat 13 Jun 2026 16:04:06 +0000
Manifest this update:     Sat 13 Jun 2026 15:59:06 +0000
Manifest next update:     Sun 14 Jun 2026 18:37:06 +0000
Files and hashes:         1: 5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl (hash: fXgDvLK83saSxumRzXk6HPpoe7RTN2/MdjGFLCXT82E=)
                          2: 3130332e3233352e37342e302f32342d3234203d3e20313431313230.roa (hash: bF7MXIfp5h8uckMq7JCvq4uvQ9qMJ5YCdRjxIwunYqI=)
                          3: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (hash: nEP4w2fSSO/JQDFjA5Ly4wgPOtkX8Po6PEn4YaYfsXM=)
                          4: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (hash: sW+l8TDeWzgFji1PeDbQ2pWWxA4Q2fxlWjumQ/6eJhY=)
                          5: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (hash: W77EgJV2LrTum+AXobDiJMY0VCB5QZlN1pW9AzTxaMA=)
                          6: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (hash: QFfNhq0siSwOs18xtBIQVVrABzIP0gTxhbpkKx5UaAs=)
                          7: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (hash: LT7RL4AshZZWaOQ5M4cXziGumEcUQNnqOVToVNyckMU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl
                          rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5a:fa:98:9e:8a:cc:c5:2d:a6:1b:2c:8a:8d:67:81:b5:68:29:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10
        Validity
            Not Before: Jun 13 15:59:06 2026 GMT
            Not After : Jun 14 18:37:06 2026 GMT
        Subject: CN=CF4AFDEDDF7EFF6C4873692435994430AA1DCC53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:49:4c:46:88:f6:93:04:50:24:10:65:b8:b2:
                    93:c3:b9:94:3d:28:f0:c8:09:e2:4d:bd:ba:9a:19:
                    af:37:88:a6:0c:4d:29:46:d5:f4:48:6f:10:89:2e:
                    7d:66:d2:c1:ce:2f:63:67:6a:2d:8f:dc:66:f8:75:
                    81:5d:ea:f8:e9:76:54:a9:11:a4:2b:4a:ac:69:fd:
                    70:69:02:b2:c3:d1:82:15:64:17:ac:01:4e:68:2a:
                    c4:e2:69:0d:ac:f3:cd:89:85:e8:b0:69:86:7e:e8:
                    67:29:e2:43:d0:0e:ef:c8:df:8f:c0:01:dd:ce:7d:
                    ad:11:ac:20:5f:74:38:0a:49:1f:c2:55:ba:bb:cb:
                    5e:72:90:73:6c:16:56:0c:17:23:f1:12:a3:61:98:
                    76:c4:7c:a3:82:23:bc:ab:e8:6a:3f:5d:45:20:62:
                    a9:b4:4a:75:07:f6:23:88:05:4b:da:21:f2:db:56:
                    40:6b:6c:9c:de:87:88:de:42:ca:87:d5:7d:50:45:
                    68:a3:c4:6c:4f:b6:6d:ae:98:c1:ed:35:ce:ce:98:
                    35:d0:69:24:87:bd:af:eb:1e:7d:38:fc:fc:fb:db:
                    70:29:98:bb:03:41:f4:29:55:09:19:1b:91:18:fe:
                    79:57:46:fd:55:de:dd:bf:0f:f9:70:07:6f:90:b6:
                    a2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4A:FD:ED:DF:7E:FF:6C:48:73:69:24:35:99:44:30:AA:1D:CC:53
            X509v3 Authority Key Identifier:
                keyid:5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:35:19:11:02:25:39:7a:70:45:5e:dd:70:78:81:4a:20:cf:
         f4:fb:5e:85:d2:43:41:29:0a:ef:0c:4f:15:d4:ea:a1:b8:8f:
         dd:36:5f:4e:85:7b:a4:51:97:20:40:18:cc:9b:ee:50:33:50:
         74:c2:5e:b5:42:51:96:f8:a4:04:6a:e8:91:f5:19:54:a0:3b:
         55:26:ab:68:bd:97:d7:4e:41:be:23:b0:5a:d4:06:d3:21:80:
         b1:15:b8:98:37:83:a8:c6:06:3d:83:b6:bf:de:1a:92:63:6b:
         a8:bf:9e:d6:d5:c2:f5:e5:af:50:7a:f9:a3:ad:5c:ef:97:d1:
         79:90:5c:6c:45:92:bb:99:aa:23:91:08:73:4d:81:be:d7:68:
         5f:bc:c7:cd:74:a6:1c:a3:56:f4:4a:31:da:f2:04:7a:42:32:
         32:15:5e:4c:65:f5:cc:88:1c:86:e1:cc:e6:7f:a3:fb:e5:7e:
         82:7f:ba:5e:e2:ff:b8:99:39:8e:1b:a3:6c:e5:e4:0b:13:46:
         c4:08:fd:c8:81:bf:09:81:e5:70:3b:98:91:46:f7:98:f7:3d:
         2c:18:67:e0:af:e3:07:5b:b1:ee:f9:5f:6e:ba:32:76:f6:e6:
         be:83:c8:48:31:eb:13:74:92:94:a0:b9:f3:0b:d8:fb:da:f9:
         ab:b8:1b:18
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUW1r6mJ6KzMUtphssio1ngbVoKRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxM0JGODRCOEQ5MUE4QTFBQzgwODYyMjdENTlGMURD
MUVBM0YxMDAeFw0yNjA2MTMxNTU5MDZaFw0yNjA2MTQxODM3MDZaMDMxMTAvBgNV
BAMTKENGNEFGREVEREY3RUZGNkM0ODczNjkyNDM1OTk0NDMwQUExRENDNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCASUxGiPaTBFAkEGW4spPDuZQ9
KPDICeJNvbqaGa83iKYMTSlG1fRIbxCJLn1m0sHOL2Nnai2P3Gb4dYFd6vjpdlSp
EaQrSqxp/XBpArLD0YIVZBesAU5oKsTiaQ2s882JheiwaYZ+6Gcp4kPQDu/I34/A
Ad3Ofa0RrCBfdDgKSR/CVbq7y15ykHNsFlYMFyPxEqNhmHbEfKOCI7yr6Go/XUUg
Yqm0SnUH9iOIBUvaIfLbVkBrbJzeh4jeQsqH1X1QRWijxGxPtm2umMHtNc7OmDXQ
aSSHva/rHn04/Pz723ApmLsDQfQpVQkZG5EY/nlXRv1V3t2/D/lwB2+QtqJJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUz0r97d9+/2xIc2kkNZlEMKodzFMwHwYDVR0j
BBgwFoAUXRO/hLjZGooayAhiJ9WfHcHqPxAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjFhNzdhZGQtYTQ5YS00YzhmLWE3MzUtZWY5NmMzM2FiMjlmLzAvNUQxM0JGODRC
OEQ5MUE4QTFBQzgwODYyMjdENTlGMURDMUVBM0YxMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81RDEzQkY4NEI4RDkxQThBMUFDODA4NjIyN0Q1OUYxREMxRUEz
RjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjFhNzdhZGQtYTQ5YS00YzhmLWE3
MzUtZWY5NmMzM2FiMjlmLzAvNUQxM0JGODRCOEQ5MUE4QTFBQzgwODYyMjdENTlG
MURDMUVBM0YxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMU1GRECJTl6cEVe3XB4gUogz/T7XoXSQ0Ep
Cu8MTxXU6qG4j902X06Fe6RRlyBAGMyb7lAzUHTCXrVCUZb4pARq6JH1GVSgO1Um
q2i9l9dOQb4jsFrUBtMhgLEVuJg3g6jGBj2Dtr/eGpJja6i/ntbVwvXlr1B6+aOt
XO+X0XmQXGxFkruZqiORCHNNgb7XaF+8x810phyjVvRKMdryBHpCMjIVXkxl9cyI
HIbhzOZ/o/vlfoJ/ul7i/7iZOY4bo2zl5AsTRsQI/ciBvwmB5XA7mJFG95j3PSwY
Z+Cv4wdbse75X266Mnb25r6DyEgx6xN0kpSgufML2Pva+au4Gxg=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:45:56 2026 by rpki-client