Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft
File:                     197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft (raw, json)
Hash identifier:          0F7/Sn5NCZ5mqCa5I0W96HkXeH3r9K5C1UU8i4GsvEo=
Subject key identifier:   8E:ED:3D:BC:33:0B:EB:DD:DC:5F:F6:8C:23:7B:BF:17:0A:4C:1B:F1
Authority key identifier: 19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC
Certificate issuer:       /CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC
Certificate serial:       6F363D4B46CA877A72A563C28B96CFD8DD143881
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft
Manifest number:          3B
Signing time:             Mon 15 Jun 2026 05:48:17 +0000
Manifest this update:     Mon 15 Jun 2026 05:43:17 +0000
Manifest next update:     Tue 16 Jun 2026 08:54:17 +0000
Files and hashes:         1: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (hash: kwtt7EpQUJbrXcbmgOuUcwcY1a5KWp+ZWsZn+k8BzXA=)
                          2: 197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl (hash: qYxLrAua+7PinZ6w3bFQpSHT+433y7cM6EkSPgDWTSM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl
                          rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Jun 2026 03:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:36:3d:4b:46:ca:87:7a:72:a5:63:c2:8b:96:cf:d8:dd:14:38:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC
        Validity
            Not Before: Jun 15 05:43:17 2026 GMT
            Not After : Jun 16 08:54:17 2026 GMT
        Subject: CN=8EED3DBC330BEBDDDC5FF68C237BBF170A4C1BF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d6:0b:91:3b:af:2f:a6:00:85:41:04:fc:d2:
                    05:35:4f:bd:ea:56:2b:5e:69:6b:ad:8e:a9:e2:0b:
                    44:87:b0:3f:32:72:cf:62:fb:f9:74:67:05:2d:43:
                    24:56:7d:00:23:98:19:7f:07:d8:b4:3d:b4:92:67:
                    05:d0:d6:2e:d1:9c:e4:b6:2b:44:3e:88:85:99:69:
                    db:a0:e3:f8:a3:ee:bc:be:fc:6a:d8:ae:ff:fd:e7:
                    dc:2e:c6:49:65:d6:e2:43:96:0c:08:ab:af:01:3c:
                    8a:9c:b3:19:88:7d:83:cb:0c:5c:1c:09:c4:55:4c:
                    34:47:a6:ce:32:fc:1c:e8:f4:9c:5c:ed:e2:81:fd:
                    05:e4:9d:47:cc:96:7f:ca:e0:e2:ef:75:24:ef:c9:
                    61:37:b4:a4:93:6b:93:84:cd:2f:53:7b:5e:99:c7:
                    79:09:fe:da:51:b7:d5:0f:b7:89:d9:42:71:19:f4:
                    3c:5a:dc:71:76:19:1a:ac:67:0d:1f:bd:55:a0:05:
                    9f:cc:76:97:be:4e:4e:01:e1:6b:a6:67:28:55:57:
                    82:99:3f:d9:0c:7a:3a:bf:80:ec:c9:e7:ec:33:1d:
                    1c:a4:9e:92:18:4c:a4:b9:20:3e:eb:b4:0c:ae:95:
                    2d:16:b4:c6:b1:c0:e9:63:ae:b0:2f:88:bb:06:2e:
                    07:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:ED:3D:BC:33:0B:EB:DD:DC:5F:F6:8C:23:7B:BF:17:0A:4C:1B:F1
            X509v3 Authority Key Identifier:
                keyid:19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e1:ab:45:00:e9:7e:d5:98:48:83:3e:b7:10:61:cf:86:41:
         d4:41:09:b1:1e:07:3c:20:7e:27:ef:fd:39:dc:7f:09:67:e3:
         10:a7:7b:01:23:2e:01:87:e0:0c:54:49:4e:44:cb:91:41:c1:
         8d:fb:6e:3d:de:65:01:34:f7:45:83:24:28:3f:c3:59:cd:a0:
         ab:88:ad:d2:f2:43:96:ef:f1:6a:20:1a:85:1e:33:27:08:d1:
         19:ff:8c:16:8a:71:b0:e6:25:0a:9b:32:09:22:8b:50:e1:d3:
         44:96:e4:6b:0d:23:f0:0c:16:f1:f5:d2:81:6c:e9:f9:c6:bf:
         98:0e:71:88:2e:4c:b0:31:be:09:27:12:a2:15:fa:68:72:22:
         12:d3:94:77:2f:3c:e2:c1:5d:cb:13:4c:5f:32:8f:1a:85:6f:
         fb:19:ae:f3:f2:ee:c4:b4:de:16:fc:c2:21:ae:c4:f3:0d:1e:
         29:74:f8:95:c7:eb:09:8c:63:43:f1:4b:f8:5a:f5:a7:04:8a:
         dc:ce:1c:f7:a7:06:18:28:e6:a6:58:47:17:31:8c:ad:69:68:
         3b:94:e8:fb:88:4b:64:30:c2:72:a6:31:a4:08:38:77:c4:c2:
         11:3d:fc:60:25:14:9f:39:73:59:7a:52:0e:50:d0:24:01:9c:
         22:5d:e4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 14:15:00 2026 by rpki-client