Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft
File:                     53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft (raw, json)
Hash identifier:          3JCtYWLmHMXRyAx0yHMCvnI/sseyyMBRF4+SII/Q0Zc=
Subject key identifier:   BF:A8:42:42:01:50:C7:A2:38:77:E5:9A:9D:F8:25:74:D6:8A:E9:55
Authority key identifier: 53:AB:7D:32:5B:35:CB:89:AC:FA:1B:63:C2:2B:EA:9E:19:33:5D:A1
Certificate issuer:       /CN=53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1
Certificate serial:       729E9C8995C50A229038E067C20FAAAF41267E0B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 09:20:07 +0000
Manifest this update:     Sat 13 Jun 2026 09:15:07 +0000
Manifest next update:     Sun 14 Jun 2026 13:12:07 +0000
Files and hashes:         1: 53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl (hash: qaqo4Gmh3cWiHl8iul50TuHeRhwqk+hVcGhnnmFsPhk=)
                          2: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: sGKE5Fi9WNAXy6MtGSBzO3fsWvU5EdeEKi1Fq0HGEPY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl
                          rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9e:9c:89:95:c5:0a:22:90:38:e0:67:c2:0f:aa:af:41:26:7e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1
        Validity
            Not Before: Jun 13 09:15:07 2026 GMT
            Not After : Jun 14 13:12:07 2026 GMT
        Subject: CN=BFA842420150C7A23877E59A9DF82574D68AE955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:80:96:df:bc:33:41:06:a9:ff:6c:13:dc:79:
                    43:90:60:77:14:f6:79:76:7e:1b:ed:5b:a4:4c:36:
                    50:ae:d1:b2:c6:28:e6:74:5d:05:5f:cd:f9:61:fa:
                    17:72:ec:62:00:7a:84:89:63:ec:42:a6:b7:70:31:
                    26:d0:e5:39:3c:89:ec:67:79:3b:96:4d:aa:ff:14:
                    cd:0e:4a:37:d8:b3:26:ac:ed:4f:cd:fc:de:1c:3a:
                    7c:26:be:54:a4:a8:69:72:25:72:81:f2:f0:88:47:
                    9a:aa:18:02:c8:2e:28:e9:22:91:20:b7:38:a4:40:
                    ec:2c:7e:93:58:8d:9a:4b:f5:67:43:5b:7c:7d:9e:
                    89:a9:00:60:86:b6:95:4e:4c:63:27:95:e4:19:db:
                    d2:d4:59:bf:3a:07:46:65:78:d3:43:a5:7d:6d:fa:
                    15:62:d9:d4:57:ad:66:27:cf:5c:4d:e9:6c:f0:c4:
                    a4:da:c2:4f:8b:ec:75:6e:00:7d:d0:9f:6a:80:5d:
                    13:80:80:f4:fa:6b:5c:33:a7:02:73:bb:75:e5:26:
                    a7:38:4b:33:23:bb:98:3e:f9:fb:b1:19:29:7f:62:
                    24:e4:51:81:63:d1:16:16:0c:c1:2f:75:b2:64:59:
                    9e:22:71:68:b2:d2:56:d9:86:58:58:63:73:b7:b3:
                    3b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A8:42:42:01:50:C7:A2:38:77:E5:9A:9D:F8:25:74:D6:8A:E9:55
            X509v3 Authority Key Identifier:
                keyid:53:AB:7D:32:5B:35:CB:89:AC:FA:1B:63:C2:2B:EA:9E:19:33:5D:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:97:ce:65:bf:49:22:f8:06:25:f1:01:19:71:43:07:c2:af:
         f1:1c:b0:eb:96:48:34:9b:de:f4:9d:84:bb:d8:f7:99:8c:ea:
         08:c7:6b:ce:f2:30:19:ba:e4:be:11:51:d0:16:51:b6:6b:50:
         c3:09:e7:1e:5d:1c:47:dc:cf:5f:da:75:98:9c:ff:d2:87:79:
         a8:7e:65:8a:2b:ad:55:32:6e:7f:e1:30:25:78:a1:e2:62:ee:
         3a:a3:6b:52:e1:bb:9b:59:2c:9b:1e:b6:a2:5e:e2:5e:22:d1:
         93:83:68:18:15:bc:fc:7a:b5:88:24:3a:9a:b0:e7:0d:af:d1:
         b0:35:c3:72:81:11:23:50:92:43:19:d3:7d:f5:8a:ad:06:32:
         6c:54:c9:7d:ce:dd:8f:10:2f:44:a4:8b:32:56:c9:75:bd:c7:
         42:2a:4c:01:0f:13:a9:60:27:46:a5:48:de:af:07:c2:da:e4:
         2d:9d:bc:1a:1c:6d:56:ac:7c:20:71:c4:3a:71:5f:f9:51:20:
         76:0f:60:3c:29:42:bd:cc:bf:46:6e:b1:8a:be:d9:c3:78:91:
         44:40:59:fc:4f:6a:97:12:74:60:f9:1e:92:9c:fc:d8:d8:6a:
         f9:d2:19:99:b0:eb:2e:d8:cf:fa:bc:df:28:d4:3e:f5:d3:b7:
         41:a5:40:e5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcp6ciZXFCiKQOOBnwg+qr0EmfgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNBQjdEMzI1QjM1Q0I4OUFDRkExQjYzQzIyQkVBOUUx
OTMzNURBMTAeFw0yNjA2MTMwOTE1MDdaFw0yNjA2MTQxMzEyMDdaMDMxMTAvBgNV
BAMTKEJGQTg0MjQyMDE1MEM3QTIzODc3RTU5QTlERjgyNTc0RDY4QUU5NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXgJbfvDNBBqn/bBPceUOQYHcU
9nl2fhvtW6RMNlCu0bLGKOZ0XQVfzflh+hdy7GIAeoSJY+xCprdwMSbQ5Tk8iexn
eTuWTar/FM0OSjfYsyas7U/N/N4cOnwmvlSkqGlyJXKB8vCIR5qqGALILijpIpEg
tzikQOwsfpNYjZpL9WdDW3x9nompAGCGtpVOTGMnleQZ29LUWb86B0ZleNNDpX1t
+hVi2dRXrWYnz1xN6WzwxKTawk+L7HVuAH3Qn2qAXROAgPT6a1wzpwJzu3XlJqc4
SzMju5g++fuxGSl/YiTkUYFj0RYWDMEvdbJkWZ4icWiy0lbZhlhYY3O3szshAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUv6hCQgFQx6I4d+WanfgldNaK6VUwHwYDVR0j
BBgwFoAUU6t9Mls1y4ms+htjwivqnhkzXaEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjY5ZmQ1YTEtNjAyNi00YmZhLWE2NzEtZjI3NzFhZmUwMDdjLzAvNTNBQjdEMzI1
QjM1Q0I4OUFDRkExQjYzQzIyQkVBOUUxOTMzNURBMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81M0FCN0QzMjVCMzVDQjg5QUNGQTFCNjNDMjJCRUE5RTE5MzM1
REExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2
NzEtZjI3NzFhZmUwMDdjLzAvNTNBQjdEMzI1QjM1Q0I4OUFDRkExQjYzQzIyQkVB
OUUxOTMzNURBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAiXzmW/SSL4BiXxARlxQwfCr/EcsOuWSDSb
3vSdhLvY95mM6gjHa87yMBm65L4RUdAWUbZrUMMJ5x5dHEfcz1/adZic/9KHeah+
ZYorrVUybn/hMCV4oeJi7jqja1Lhu5tZLJsetqJe4l4i0ZODaBgVvPx6tYgkOpqw
5w2v0bA1w3KBESNQkkMZ0331iq0GMmxUyX3O3Y8QL0SkizJWyXW9x0IqTAEPE6lg
J0alSN6vB8La5C2dvBocbVasfCBxxDpxX/lRIHYPYDwpQr3Mv0ZusYq+2cN4kURA
WfxPapcSdGD5HpKc/NjYavnSGZmw6y7Yz/q83yjUPvXTt0GlQOU=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:46:19 2026 by rpki-client