Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.mft
File:                     976FB6C4EC175847196F26D9D507157A16E77592.mft (raw, json)
Hash identifier:          IGOH5pgarvjIcSeECF8Uv7EsXKfiS9RTk3O52Y0lxxY=
Subject key identifier:   C3:D0:19:90:3E:3F:62:5D:1F:E6:A8:8B:9C:5D:CD:68:EC:F0:02:E6
Authority key identifier: 97:6F:B6:C4:EC:17:58:47:19:6F:26:D9:D5:07:15:7A:16:E7:75:92
Certificate issuer:       /CN=976FB6C4EC175847196F26D9D507157A16E77592
Certificate serial:       57EA9C9F85035B7432B1A24A2946BE760DB83D34
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/976FB6C4EC175847196F26D9D507157A16E77592.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.mft
Manifest number:          3D
Signing time:             Wed 17 Jun 2026 01:34:39 +0000
Manifest this update:     Wed 17 Jun 2026 01:29:39 +0000
Manifest next update:     Thu 18 Jun 2026 02:31:39 +0000
Files and hashes:         1: 976FB6C4EC175847196F26D9D507157A16E77592.crl (hash: 6173W3V7yj1Kwr13H7yIEMPWn4g/wqsUiqhT/XskeWs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.crl
                          rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/976FB6C4EC175847196F26D9D507157A16E77592.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 02:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ea:9c:9f:85:03:5b:74:32:b1:a2:4a:29:46:be:76:0d:b8:3d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=976FB6C4EC175847196F26D9D507157A16E77592
        Validity
            Not Before: Jun 17 01:29:39 2026 GMT
            Not After : Jun 18 02:31:39 2026 GMT
        Subject: CN=C3D019903E3F625D1FE6A88B9C5DCD68ECF002E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f6:51:b5:aa:56:67:5c:67:bc:f0:94:b5:2b:
                    77:6a:15:87:e8:1e:38:b7:8d:98:0d:29:f4:fd:bc:
                    21:dc:09:be:85:e4:e3:8d:05:9a:18:00:17:55:dd:
                    09:d7:0f:77:5f:a9:1a:e5:3e:bf:dd:4d:64:df:07:
                    68:da:ed:36:e7:15:3c:1f:46:3a:31:4e:be:d9:51:
                    cf:01:b9:f9:89:4c:4c:72:47:08:72:44:3f:f7:2f:
                    be:ff:43:b1:80:bc:a3:e7:18:6e:4b:27:dc:d4:ef:
                    55:02:54:5e:3f:c0:a2:ea:5d:c7:7c:8d:8f:52:e1:
                    9d:64:60:26:73:43:b2:68:fb:18:d0:93:a0:9d:23:
                    07:03:cd:17:a7:18:7d:20:93:97:9c:eb:bb:24:dc:
                    0f:2e:51:ca:fc:47:09:24:aa:e9:e1:ec:09:ab:33:
                    a3:c9:05:29:d0:27:7e:e5:ea:1a:4e:1e:36:65:ad:
                    9c:5b:bc:73:7f:d5:6e:37:51:15:a5:57:33:80:62:
                    d1:07:46:de:6c:55:34:4c:35:52:3d:9c:e9:0f:ba:
                    1d:90:0b:2c:ce:15:6e:b8:32:62:3f:b7:15:b3:d9:
                    12:cf:1d:29:ec:4c:07:f1:ca:2b:d2:05:2b:a5:c2:
                    63:18:ef:ad:da:f3:83:d2:ef:05:22:14:18:e7:82:
                    94:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D0:19:90:3E:3F:62:5D:1F:E6:A8:8B:9C:5D:CD:68:EC:F0:02:E6
            X509v3 Authority Key Identifier:
                keyid:97:6F:B6:C4:EC:17:58:47:19:6F:26:D9:D5:07:15:7A:16:E7:75:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/976FB6C4EC175847196F26D9D507157A16E77592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c9:d0:05:ec:cf:97:aa:a6:3d:5e:48:57:47:74:4d:bb:f0:
         da:11:2e:f0:eb:26:2d:50:01:e9:b5:f4:bb:c0:ad:94:69:25:
         d3:6e:fb:98:dd:b5:70:5d:54:51:c7:3b:6b:76:fe:c2:eb:07:
         b4:70:43:89:e0:86:03:ea:a9:fd:fb:84:f1:5c:db:2a:4d:5e:
         98:09:fe:8e:cc:f7:74:01:9e:76:7f:03:13:85:f0:d5:52:77:
         16:c1:56:33:a8:64:a8:1f:15:88:2c:aa:ff:e0:70:1d:35:4b:
         b0:06:c1:e8:20:ec:71:60:b9:28:c4:09:4f:c3:4e:b6:48:20:
         dd:5f:7b:4c:a2:ef:23:2c:26:59:bc:a4:be:65:4f:98:a6:12:
         d1:bc:1c:80:49:76:e8:ab:e4:39:dd:9e:03:6b:1f:52:62:6f:
         01:69:f3:45:4b:07:17:c3:28:e6:54:c6:30:90:9d:09:8e:28:
         16:b2:55:7a:ca:d1:1f:5c:5d:1d:08:54:65:0f:5c:80:19:35:
         ca:30:4f:63:b5:d2:b1:86:d7:43:e9:c2:7b:73:11:11:c7:55:
         3a:d8:76:fc:e4:85:15:92:7f:0a:c1:d8:56:62:3f:b8:61:ba:
         50:fa:1b:d9:74:d7:e3:86:53:63:7f:ed:ed:a5:7e:2b:2b:cb:
         c0:3b:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:14:11 2026 by rpki-client