Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft
File:                     A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft (raw, json)
Hash identifier:          SXOAqBX/txjGicvyXEo8nf6q/1p/lcJKS+d+QuYkR1Q=
Subject key identifier:   37:16:F5:BB:6F:97:7D:6D:49:F6:58:B9:8E:44:4F:9E:93:1F:96:5C
Authority key identifier: A9:7A:99:54:B3:22:4F:18:7A:61:8E:F2:D3:6B:91:1D:BC:A4:E0:E7
Certificate issuer:       /CN=A97A9954B3224F187A618EF2D36B911DBCA4E0E7
Certificate serial:       106E9A03C5A62490A71713DDD2764BB50C1F4C33
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 07:52:17 +0000
Manifest this update:     Wed 17 Jun 2026 07:47:17 +0000
Manifest next update:     Thu 18 Jun 2026 09:19:17 +0000
Files and hashes:         1: A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl (hash: 79I3vAggAWaLexfsUzPdzCBGGsQ5Kcg4Ca9HEscPHvs=)
                          2: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: +bhA3UYPReYDsrbCyo3nY+2634L/BbsW+oTXhT99PgM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl
                          rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6e:9a:03:c5:a6:24:90:a7:17:13:dd:d2:76:4b:b5:0c:1f:4c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A97A9954B3224F187A618EF2D36B911DBCA4E0E7
        Validity
            Not Before: Jun 17 07:47:17 2026 GMT
            Not After : Jun 18 09:19:17 2026 GMT
        Subject: CN=3716F5BB6F977D6D49F658B98E444F9E931F965C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:22:4f:70:9c:5e:3d:12:8d:ec:f3:9a:22:cc:
                    81:a6:85:ef:de:a6:81:91:b8:0b:92:0e:6d:b7:36:
                    ed:3e:07:44:08:0b:af:87:f7:6a:c7:36:2f:0d:f8:
                    36:28:f6:47:bf:f2:bb:3a:38:dd:01:19:ed:37:5c:
                    29:2e:0c:22:cc:42:75:bb:52:1b:89:96:e6:26:4c:
                    63:f4:39:8c:d4:1f:e7:c2:e1:c6:0d:9d:25:8e:b5:
                    89:c0:20:88:a3:29:3f:5b:96:b4:04:14:39:44:ab:
                    da:88:db:1c:50:9c:37:62:e1:83:86:1e:2c:e0:49:
                    75:29:34:76:cc:6e:12:9e:72:c1:86:ae:50:e3:3c:
                    6a:c8:f4:7c:1b:37:19:d9:1a:f9:c5:6e:d8:31:c0:
                    0b:85:1c:ae:aa:f3:9f:88:7f:9b:f2:f4:75:bb:30:
                    9f:07:05:f1:f8:02:9d:d3:6e:02:4e:9e:83:30:e3:
                    0a:d6:8d:6e:5e:86:85:0b:d8:1b:93:e4:81:f5:63:
                    0c:d3:5e:76:4d:85:dd:59:10:32:95:c6:dd:a8:fe:
                    53:35:dc:28:c1:3d:db:ce:2b:cd:5a:c0:6c:53:5a:
                    c7:61:cf:50:cc:d1:09:5b:a1:8c:04:be:62:da:cc:
                    47:5c:82:0c:0b:cc:2b:e7:73:43:ae:de:b0:50:ab:
                    fe:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:16:F5:BB:6F:97:7D:6D:49:F6:58:B9:8E:44:4F:9E:93:1F:96:5C
            X509v3 Authority Key Identifier:
                keyid:A9:7A:99:54:B3:22:4F:18:7A:61:8E:F2:D3:6B:91:1D:BC:A4:E0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c3:81:ff:68:97:fe:39:86:da:f1:ce:18:e1:9e:26:b2:8a:
         f9:e7:95:26:c7:da:1a:21:15:75:f8:43:fc:12:b0:70:84:5b:
         bc:d1:84:e0:54:df:c4:4d:38:89:e4:7c:a2:1d:4a:fd:d5:dd:
         63:18:69:47:76:1e:9f:de:02:dc:e2:6f:77:28:12:c4:5a:be:
         f3:14:25:37:e0:78:94:53:ff:38:73:6e:59:bd:af:d3:01:47:
         54:72:a5:19:72:d1:06:a9:02:8c:b3:9c:bc:56:58:7a:50:0e:
         f1:7f:d9:d5:e8:7c:e1:ee:e8:2b:2b:d6:cd:dd:2b:6d:b9:13:
         5d:05:fe:ba:13:85:75:5e:9c:be:37:46:ea:50:ff:ef:3b:33:
         d3:f9:f1:82:02:07:4b:65:55:5b:38:03:5c:13:78:92:a6:7a:
         7e:55:c5:fb:5a:66:45:98:92:96:74:ad:73:fb:05:e8:60:d9:
         48:31:62:78:eb:af:05:6a:5b:b3:72:07:75:2f:01:58:7e:76:
         fe:ab:38:d5:10:50:db:4d:b6:b2:a1:a0:6b:e9:74:49:78:a9:
         34:92:17:2a:ac:ad:ba:1d:9e:dd:67:17:cf:33:cb:33:93:70:
         31:af:95:cb:8c:c6:e5:32:1c:ad:86:f9:79:87:de:09:2a:d7:
         21:58:c1:75
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEG6aA8WmJJCnFxPd0nZLtQwfTDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk3QTk5NTRCMzIyNEYxODdBNjE4RUYyRDM2QjkxMURC
Q0E0RTBFNzAeFw0yNjA2MTcwNzQ3MTdaFw0yNjA2MTgwOTE5MTdaMDMxMTAvBgNV
BAMTKDM3MTZGNUJCNkY5NzdENkQ0OUY2NThCOThFNDQ0RjlFOTMxRjk2NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjIk9wnF49Eo3s85oizIGmhe/e
poGRuAuSDm23Nu0+B0QIC6+H92rHNi8N+DYo9ke/8rs6ON0BGe03XCkuDCLMQnW7
UhuJluYmTGP0OYzUH+fC4cYNnSWOtYnAIIijKT9blrQEFDlEq9qI2xxQnDdi4YOG
HizgSXUpNHbMbhKecsGGrlDjPGrI9HwbNxnZGvnFbtgxwAuFHK6q85+If5vy9HW7
MJ8HBfH4Ap3TbgJOnoMw4wrWjW5ehoUL2BuT5IH1YwzTXnZNhd1ZEDKVxt2o/lM1
3CjBPdvOK81awGxTWsdhz1DM0QlboYwEvmLazEdcggwLzCvnc0Ou3rBQq/7RAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUNxb1u2+XfW1J9li5jkRPnpMfllwwHwYDVR0j
BBgwFoAUqXqZVLMiTxh6YY7y02uRHbyk4OcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjVhNzNkMDQtMjE0Zi00NmI4LTk3NDYtNjJjZGU4NTU4OGZhLzAvQTk3QTk5NTRC
MzIyNEYxODdBNjE4RUYyRDM2QjkxMURCQ0E0RTBFNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BOTdBOTk1NEIzMjI0RjE4N0E2MThFRjJEMzZCOTExREJDQTRF
MEU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjVhNzNkMDQtMjE0Zi00NmI4LTk3
NDYtNjJjZGU4NTU4OGZhLzAvQTk3QTk5NTRCMzIyNEYxODdBNjE4RUYyRDM2Qjkx
MURCQ0E0RTBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFzDgf9ol/45htrxzhjhniayivnnlSbH2hoh
FXX4Q/wSsHCEW7zRhOBU38RNOInkfKIdSv3V3WMYaUd2Hp/eAtzib3coEsRavvMU
JTfgeJRT/zhzblm9r9MBR1RypRly0QapAoyznLxWWHpQDvF/2dXofOHu6Csr1s3d
K225E10F/roThXVenL43RupQ/+87M9P58YICB0tlVVs4A1wTeJKmen5VxftaZkWY
kpZ0rXP7Behg2UgxYnjrrwVqW7NyB3UvAVh+dv6rONUQUNtNtrKhoGvpdEl4qTSS
Fyqsrbodnt1nF88zyzOTcDGvlcuMxuUyHK2G+XmH3gkq1yFYwXU=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:37 2026 by rpki-client